A while, I bought a nice .co.uk from its original owner, and it was transferred to me through VI.net, which became Active24. This morning, I decided to move it to my normal registrar. I phoned Active24 and left a message. I received an email back saying to just tell them the new tag. I replied with the tag and moments later it was changed. I then pulled the domain into my registrar's account. No fax, no password, no identification requirements at all. The email which I gave in my phone message to Active24 was different to the one in the whois record for the domain. AFAIK, they had absolutely no way of knowing that the name was legitimately mine. Is this standard procedure?!?