How to use a domain escrow service to buy a domain safely?

Sajjad
Domain
26 Oct, 2026

To use a domain escrow service, agree the price and terms with the seller, open a transaction at a reputable escrow company by typing its address yourself, and pay your funds to the escrow service rather than the seller. The escrow company confirms your payment, the seller transfers the domain to your registrar account, and you verify that you fully control it. Only then do you approve the transaction, and the escrow service releases the money to the seller. Neither side has to trust the other, because the escrow company holds the funds until both have done their part.

Domain sales between strangers are risky. A buyer who pays first may never receive the domain, and a seller who transfers first may never get paid. Escrow solves that problem, but only if you use it correctly. This guide explains how domain escrow works, each step of a typical transaction, how to verify that a domain transfer has really completed, what fees to expect, and how to spot the fake escrow scams that target domain buyers.

What Is Domain Escrow?

Escrow is an arrangement where a neutral third party holds money on behalf of two people until agreed conditions are met. In a domain sale, the condition is simple: the buyer must receive control of the domain.

Domain escrow services specialise in this kind of transaction. They understand registrar pushes, auth codes and transfer timings, and they often have their own processes for checking that a domain has moved. Some domain marketplaces include escrow as part of their checkout, so if you buy through a marketplace's listing page, you may already be using an escrow-style process without opening a separate account.

Why You Shouldn't Skip Escrow

Paying a seller directly by bank transfer, cryptocurrency or a payment app leaves you with very little protection. Common problems include:

Non-delivery: The seller takes the money and disappears.
Seller isn't the owner: Someone impersonates the real registrant and sells a domain they don't control.
Clawback: The seller transfers the domain, then later claims it was stolen and asks the registrar to reverse it.
Partial delivery: The domain is pushed, but the seller keeps control of DNS or the old registrar account.

Escrow doesn't eliminate every risk, but it protects the core exchange of money for domain, and it creates a written record of the transaction if anything is disputed later.

Before You Open an Escrow Transaction

Agree the Terms in Writing

Before you involve the escrow service, agree these points by email or through the marketplace's messaging system:

Term	What to agree
Price	The exact amount and currency
Escrow fees	Who pays: buyer, seller, or split
Escrow service	Which company, agreed by both, ideally chosen by the buyer
Transfer method	Push within the same registrar, or inter-registrar transfer
Destination	Your registrar and account username, if it's a push
Inspection period	How long you have to verify the domain after delivery
Extras	Any included website content, social handles or related domains

Do Basic Due Diligence

Check that the person you're dealing with really controls the domain. One reliable way is to ask them to publish a random string you choose in a TXT record, the same technique used in verifying domain ownership with a TXT record:

dig +short example.com TXT

"v=spf1 include:_spf.example.net ~all"
"buyer-check=k8Fq2xL9vRt"

If your exact string appears, the seller controls the domain's DNS. That isn't quite the same as controlling the registrar account, but it's a strong signal that they're the real owner or acting for them.

Also check the domain's past before you commit money. Look at its archived content, blacklist status and backlinks, as described in how to check a domain's history.

Check the Domain's Current Status

A domain that was registered or transferred very recently may not be transferable to another registrar yet, and a domain in an expiry stage is a different conversation altogether. Check its status and dates with RDAP:

curl -sL https://rdap.org/domain/example.com \
  | jq '{status, events: [.events[] | {eventAction, eventDate}]}'

{
  "status": [
    "client transfer prohibited"
  ],
  "events": [
    { "eventAction": "registration", "eventDate": "2014-06-02T11:30:44Z" },
    { "eventAction": "expiration", "eventDate": "2027-06-02T11:30:44Z" },
    { "eventAction": "last changed", "eventDate": "2026-09-01T08:12:09Z" }
  ]
}

client transfer prohibited is normal: it's the registrar lock, which the seller will remove when they're ready to transfer. A registration or transfer within the last couple of months may mean an inter-registrar transfer is blocked for now, typically for 60 days, or 30 days under ICANN's updated Transfer Policy. A push within the same registrar may still be possible.

Step-by-Step: A Typical Escrow Transaction

The exact screens vary by provider, but almost every domain escrow follows the same sequence.

Step 1: Open the Transaction

Either party can usually start it. Go to the escrow service by typing its address into your browser or using a bookmark you created yourself. Don't click a link from the seller.

Enter:

The domain name
The agreed price and currency
Who pays the escrow fee
The other party's email address
The inspection period, often one to a few days

The escrow service then emails both parties to accept the terms.

Step 2: Both Parties Agree

Review the terms carefully. Check that the domain name is spelt correctly, especially if it's similar to other names or uses unusual characters. For names with non-ASCII characters, confirm the punycode form so you aren't buying a lookalike. See what an internationalized domain name is.

Step 3: Buyer Pays the Escrow Service

You send payment to the escrow company using one of its accepted methods. Large amounts are often paid by bank wire, while smaller sales may allow cards or other methods.

Before sending a wire, confirm the payment details from within your logged-in escrow account, not from an email. Changed bank details sent by email are a classic fraud technique.

The escrow service confirms when the funds have arrived and tells the seller to proceed.

Step 4: Seller Transfers the Domain

The seller only transfers once escrow confirms the money is secured. There are two common methods.

Push (same registrar): If buyer and seller use the same registrar, the seller moves the domain directly into your account. It's usually instant and the domain keeps its expiry date. You'll need to give the seller your account username or customer ID, never your password.

Inter-registrar transfer: If you use different registrars, the seller unlocks the domain and gives you the auth code, then you start a transfer at your registrar. This usually takes up to five days, and for most gTLDs it adds a year to the registration. For details, see how to transfer a domain to another registrar and what a domain auth code is.

Some escrow services offer to handle the domain themselves: the seller transfers it to the escrow company, which then transfers it to the buyer. This adds time but gives extra assurance for high-value sales.

Step 5: Buyer Verifies Control

This is the step that protects you, so don't rush it. Before you approve anything:

Check your registrar account: The domain should appear in your domain list, under your account, with your contact details.
Update the registrant contact: Make sure you're listed as the registrant, not the seller. See how to change the registrant contact details.
Check the registrar in public data: Confirm the registrar shown in RDAP matches yours.
Change the nameservers or DNS: Point the domain at your own DNS provider or make a test change to prove you can. See how to change nameservers.
Turn on the lock and two-factor authentication: Make sure nobody else can move it.

You can check the registrar and nameservers from the command line:

curl -sL https://rdap.org/domain/example.com \
  | jq -r '.entities[] | select(.roles | index("registrar")) | .vcardArray[1][] | select(.[0] == "fn") | .[3]'

dig +short example.com NS

Your Registrar, Inc.
ns1.your-dns-host.example.
ns2.your-dns-host.example.

If you're moving DNS to your own provider, how to point a domain to a new host walks through the records you'll need.

Step 6: Approve and Release the Funds

Once you're satisfied, approve the transaction in your escrow account. The escrow service then releases the money to the seller, minus any fees they've agreed to pay.

If something's wrong, for example the domain hasn't arrived or the seller still controls it, don't approve. Raise it with the escrow service within the inspection period. If you do nothing, some services may treat silence as acceptance once the inspection period ends, so check the rules.

Escrow Fees

Fees vary by provider, transaction size and payment method. Common patterns are:

A percentage of the sale price, often on a sliding scale that drops for larger amounts.
A minimum fee for small transactions.
Extra charges for certain payment methods, currency conversion, or the escrow company handling the domain transfer itself.

Who pays is negotiable. Splitting the fee 50/50 is common, but sellers sometimes cover it to close a deal, and marketplace checkouts usually build it into their commission.

How to Spot a Fake Escrow Scam

Fake escrow sites are one of the most common frauds in domain sales. They look professional, but the "escrow company" is the scammer. Watch for these warning signs:

The seller insists on a specific escrow service you've never heard of.
You're sent a link to the escrow site instead of finding it yourself.
The escrow site's domain is new. Real escrow companies have been around for years.
Payment goes to a personal account or a cryptocurrency wallet.
Urgency: "Another buyer is ready, pay within the hour."
Bank details arrive by email rather than inside the escrow account.

You can check how long an escrow website's domain has existed:

curl -sL https://rdap.org/domain/escrow-site.example \
  | jq -r '.events[] | select(.eventAction == "registration") | .eventDate'

2026-10-02T13:47:20Z

A registration date a few weeks ago is a serious red flag for a company that claims to hold large sums for strangers. A lookalike name of a well-known service, such as an extra word or a different extension, is another. Typosquatted escrow domains are common, so read what typosquatting is if you're not sure what to look for.

Tips for Sellers

Escrow protects sellers too. If you're selling a domain:

Wait for the escrow service to confirm funds before you push or release the auth code. A screenshot or email from the buyer isn't confirmation.
Log in to the escrow site directly to check the status rather than trusting emails.
Use the transfer method agreed in the terms, and keep records of the push or auth code request.
Remove your personal data from any services connected to the domain, such as email forwarding or verified accounts, before handing it over.
Don't reverse a transfer after payment is released. Clawbacks can get you banned from marketplaces and may be fraud.

When Escrow Might Not Be Necessary

For very low-value names bought through a large marketplace's own checkout, the marketplace already holds payment and handles the transfer, so a separate escrow isn't needed. For anything else, especially private sales arranged by email, escrow is the safest option, and the fee is small compared with the cost of losing the money or the domain.

FAQ: Domain Escrow

A same-registrar push can complete within a day once payment clears. An inter-registrar transfer usually adds up to five days, and bank wire payments can take a few business days to arrive. Allow about a week for most private sales.

It's whatever the buyer and seller agree. Splitting it equally is common, but either side can pay the full amount. Agree this before opening the transaction so the escrow terms match.

You don't approve the transaction, and you raise the issue with the escrow service. If the seller fails to deliver within the agreed time, the transaction can be cancelled and your funds returned, minus any non-refundable fees set out in the terms.

A push is faster and keeps the expiry date unchanged, but both parties need accounts at the same registrar. An inter-registrar transfer works between any registrars and usually adds a year, but it takes longer. Both are safe within escrow.

Use a well-known provider you've researched independently, type its address yourself, and check that its domain has a long registration history. Be very wary if a seller insists on an unfamiliar escrow service or sends you a link.

No. A push only needs your account username or customer ID at the registrar. Never share your password or two-factor codes with anyone.

Conclusion

Domain escrow lets two strangers swap money for a domain without either of them having to trust the other. The buyer pays the escrow service, the seller transfers the domain, the buyer verifies full control, and only then is the money released. Following those steps in order removes the biggest risks of a private domain sale.

The process is only as safe as the escrow company you choose, so pick a reputable one yourself, type its address directly, and check payment details inside your account. Take the inspection step seriously: confirm the domain is in your account, update the registrant details, move the DNS and lock it before you approve. Once you have, the domain is truly yours.