When you purchase a domain name, you are not buying it outright the way you buy a car or a building. You are paying a registrar for an exclusive, renewable right to use that name for a fixed term, usually one to ten years, under a registration agreement. As long as you renew on time and follow the agreement, nobody else can register the name, and you control where it points. Stop renewing, and the right ends. That distinction between owning something and holding a renewable right to use it explains almost everything else about how domain names work, including how they are lost.
What You Actually Acquire When You Purchase a Domain Name
The word “purchase” appears on every registrar’s checkout page, but the transaction is a registration. You become the registrant (the person or organization recorded as the holder of the domain name), and your registrar records that fact with the registry (the organization that operates the master database for a top-level domain such as .com or .org). What you hold is a contract right: the right to keep the name for the term you paid for and to renew it before that term runs out.
The Three Parties Behind Every Registration
Three organizations sit behind every domain name. The registry operates the extension; Verisign, for example, runs .com and .net. The registrar is the retail company that sells registrations to the public and submits them to the registry; for generic extensions, registrars are accredited by ICANN (the Internet Corporation for Assigned Names and Numbers, the nonprofit that coordinates the domain name system). The registrant is you. Some companies that sell domains are resellers of an accredited registrar, which adds a fourth party to the chain and one more account that can matter in a dispute.
The scale is large. There were 386.9 million domain name registrations across all top-level domains at the end of 2025, including 161.0 million .com names, according to Verisign’s Domain Name Industry Brief for the fourth quarter of 2025. Every one of those is a time-limited registration, not a permanent title.
Is a Domain Name Property?
Courts in the United States have treated a registration as a form of property, even though it is created by contract. In Kremen v. Network Solutions (9th Cir. 2003, 337 F.3d 1024), the court held that a registrant has “an intangible property right in his domain name,” because the interest is capable of precise definition, capable of exclusive control, and carries a legitimate claim to exclusivity. The case arose from the theft of sex.com, and the court described the earlier award against the thief as $40 million in compensatory and $25 million in punitive damages, according to the Ninth Circuit’s published opinion.
That ruling matters when a name is stolen, because it allows a court to treat the theft as conversion of property. It does not change the practical rule, which is that the registration agreement and the renewal date govern your day-to-day rights. We explain the legal side in more depth in our guide to domain name ownership.
What the Purchase Price Pays For
The price of a new registration bundles several fees. The registry charges the registrar a wholesale fee for each year of registration. ICANN charges a registrar transaction fee of USD 0.20 per transaction-year, as set out in ICANN’s registrar fee approval request for fiscal year 2027. The registrar then adds its own margin, and that margin is where retail prices diverge.
Retail prices change often, so it is more useful to understand what drives them than to memorize a figure. First-year promotions are common, and the renewal price is frequently higher than the price you paid to register. Some registries assign “premium” pricing to short or dictionary-word names, and that higher rate can apply at renewal as well. Add-ons such as hosting, email and extended support are optional. Our guide to domain name registration cost walks through each component.
Buying a name that someone else already holds works differently. You pay the current holder to transfer the registration to you, and after that you pay renewals like any other registrant. Aftermarket prices vary widely; Sedo reported an average sale of $2,284 and a median of $577.22 for 2019, according to the InterNetX and Sedo Global Domain Report 2020. Those are dated figures, but the principle holds: the aftermarket price buys the transfer, not freedom from renewal fees.
What You Do Not Get
Purchasing a domain name gives you a narrow right, and buyers are often surprised by what it leaves out.
- A domain registration does not give you a trademark, and registering a name does not stop a competitor from using the same words elsewhere; trademark rights come from use and registration with an authority such as the USPTO.
- A registration does not protect you from a trademark owner who believes you registered the name in bad faith; that owner can file a complaint under the UDRP (Uniform Domain-Name Dispute-Resolution Policy) and ask a panel to transfer the name.
- A registration does not override the registrar’s terms of service, which allow it to suspend names used for abuse such as phishing or malware, or names registered with false contact details.
- A registration does not include a website or email; those require separate hosting and DNS (Domain Name System) settings that point the name to the right servers.
If the name is central to your brand, the domain registration and the trademark should be treated as two separate assets. We cover the second one in how to trademark a domain name.
How Long the Right Lasts and How It Ends
A registration runs for the term you pay for, from one to ten years. You can renew at any time before it expires, and most registrars offer automatic renewal. The right ends when the term runs out and is not renewed, and the process that follows is governed by ICANN policy for generic extensions.
Under the Expired Registration Recovery Policy, registrars must send two expiration notices, about one month and one week before expiration, and another within five days after expiration. DNS resolution must be interrupted for at least the last eight days the name is renewable, and registries must offer a 30-day Redemption Grace Period after deletion, according to ICANN’s Expired Registration Recovery Policy. After redemption comes a five-day pending delete, and then the name is released for anyone to register.
Released names do not sit idle. A 2016 measurement found that 10.1% of deleted .com domains were re-registered on the same day they were deleted, according to Lauinger and colleagues at USENIX Security 2017. That is the clearest illustration of what “a renewable right to use” means in practice: once the renewal is missed and the grace periods pass, the right belongs to whoever registers the name next. Our expired domain name recovery service exists for owners who learn this too late.
Who Is the Registrant Matters More Than Who Paid
The person whose name appears as registrant is the holder of the right, regardless of who paid the invoice. This is the single most common source of trouble we see. A web developer, marketing agency or employee registers the company’s domain name in a personal account, the relationship ends, and the business discovers that it does not control its own address.
Courts have recognized the problem. In DSPT International v. Nahum (9th Cir. 2010), the court affirmed a $152,000 jury verdict against a former employee who registered his employer’s domain and withheld it to extract disputed commissions, ruling that holding a domain name for ransom can be cybersquatting (registering or using a domain name in bad faith to profit from someone else’s trademark) under federal law, according to the Ninth Circuit’s opinion. Litigation is slow and expensive, though, and a few minutes of checking the registration record at the start would have prevented it. We describe how these disputes unfold in recovering a domain name held for ransom.
Mistakes That Turn a Purchase Into a Recovery Case
In the cases we handle, a domain name is rarely lost because of a dramatic hack alone. It is lost because of small decisions made at the time of purchase that nobody revisited.
Registering in Someone Else’s Account
The business pays, but the domain name sits in a developer’s or employee’s registrar account under that person’s name. When the relationship ends, the business has no login, no authority with the registrar and no clear record of its right. The fix is simple: the registrant field should name the organization, and the registrar account should belong to the organization.
Tying the Account to an Address That Will Disappear
Registrars send renewal notices, transfer approvals and password resets to the account email. If that address belongs to a former employee, or sits on the very domain that is about to expire, those messages go nowhere. A lapsed domain takes its own email with it, which means the warnings stop arriving at exactly the moment they matter.
Treating the Purchase as a One-Time Event
A domain name is a recurring obligation. Expired payment cards, disabled auto-renewal and a registrar change that nobody documented are routine causes of loss. Thieves also look for neglected accounts without multi-factor authentication, because an attacker who logs in can move the name to another registrar.
Protecting the Right You Purchased
Because what you purchased is a right tied to an account, protecting the domain means protecting the account. Turn on multi-factor authentication at the registrar. Keep the registrar lock (a status that prevents transfers until you remove it) enabled. Use auto-renewal with a current payment method, and renew valuable names for several years at a time. For names that carry real revenue, ask whether your registrar supports registry lock (a registry-level hold that blocks changes until the registrar verifies the request out of band), which stops an attacker who has stolen your password from changing the registration.
Finally, check the public registration record once a year. Confirm that the registrar, expiration date and status codes are what you expect, and that the registrant listed in your account is the organization rather than an individual. Each of those fields is part of the public record anyone can look up, so an error there is visible to an attacker as well as to you.
How DNAccess Helps
Purchasing a domain name is easy; keeping control of it for decades takes management. Our domain name management service consolidates scattered registrations into accounts your organization controls, corrects registrant records, and sets up locks, renewals and monitoring so that the renewable right you purchased does not lapse or walk out the door with a departing vendor. If a name has already been lost to expiration, a developer dispute or theft, contact us and we will review the registration history and the options for getting it back.