Namecheap Handed Over My Account to an Unverified Third Party Just Because They Asked
Namecheap Gave My Account to an Unverified Third Party Just Because They Asked
After 13 years as a Namecheap customer, I lost control of my account when a persistent club leader convinced support staff to transfer ownership without verification. Despite my immediate report of unauthorized access, Namecheap ignored standard security protocols and changed my password and email based solely on a phone call. This incident revealed a critical vulnerability where anyone can hijack an account by simply asking nicely, prompting me to move my most critical domains elsewhere.
I've already moved a dozen of my most critical domains out of Namecheap after seeing just how easy it is for a third party to completely take over a Namecheap account: just ask nicely.