invincible

I see. I forgot, for a moment, transfers are electronic transfers now! I often still think it's all still paper based because many transfers I am involved with do included paper based contracts. So either they compromised your email account, or they had your Registrar change the email address. If, as we suspect, it was the latter then it's between you and they as to why they accepted the request. Fortunately Nominet will have a trail of every database transaction and every access to their systems, and they can instantly put things right. I suspect they'll provide your solicitor with everything required to build a prosecution as well.

grantw

As the admin email address is the key to everything Nominet, at the very least, need to start sending a notification to the existing admin email address whenever it's modified.

Grant

__________________
Domain Brokerage :: Bulk UK Whois

boogle

Agreed. Plus, registrars should not be allowed to change any details within Nominet. If I’d looked in my account a few days later I could have seen more than one domain disappear.

invincible

Registrar's have always been able to update email addresses, and many other fields. They're trusted by Nominet to do it. If you want to remove them the right to update records, then why not abolish all Registrar's all together and have everyone deal with the Registry directly? What would be the point of having them if they couldn't update records? Incidentally Registrants can deal with the Registry directly. However it costs about £80 + VAT to do it per domain name.

What happened is unfortunate. Fortunately you were able to resolve the issue very quickly. If you want more security, there are options open to you but they will cost you more money. Alternatively change to a Registrar who has better security in place and, perhaps, requires a copy of your passport, or will setup additional passwords with you in the same way as online banking, before they will make a change to a record.