
How to Use a Domain Escrow Service to Buy or Sell Safely?
Buying or selling a domain between two strangers on the internet has an obvious problem: someone has to go first. If the buyer pays first, the seller might never transfer the domain. If the seller transfers first, the buyer might never pay. A domain escrow service solves this by acting as a trusted middleman that holds the money until the domain has changed hands. This guide explains how domain escrow works step by step, from agreeing terms to releasing funds, what it typically costs, how the domain itself is moved, and how to avoid the fake escrow sites that scammers use to exploit the very trust escrow is supposed to create. If you are still at the negotiation stage, start with how to buy a domain name that's already taken.
What Is Domain Escrow?
Escrow is an arrangement in which a neutral third party holds funds on behalf of two parties until agreed conditions are met. In a domain sale, the conditions are simple: the seller must deliver the domain to the buyer, and the buyer must confirm they received it.
The escrow company's role is to:
- Verify the buyer's payment before the seller does anything.
- Hold the funds while the domain is transferred.
- Confirm the transfer with the buyer, and sometimes check it independently.
- Release the funds to the seller once the buyer accepts the domain.
- Handle disputes according to its terms if something goes wrong.
A reputable escrow company is licensed or regulated as an escrow or payments business in its jurisdiction. That regulation is what gives the "trusted" part of trusted third party its meaning.
Why Use Escrow for Domains?
Domain transactions are especially attractive to fraudsters because they are fast, remote, and often irreversible. Escrow protects both sides:
| Risk | Without escrow | With escrow |
|---|---|---|
| Buyer pays, seller never transfers | Buyer loses the money | Funds stay in escrow and are returned |
| Seller transfers, buyer never pays | Seller loses the domain | Seller only transfers after payment is verified |
| Buyer pays with a method that is later reversed | Seller loses both domain and money | Escrow verifies funds have cleared before transfer |
| Seller does not actually control the domain | Buyer pays for nothing | Transfer fails, funds are returned |
| Disagreement about what was delivered | No neutral party to decide | Escrow follows its dispute process |
For marketplace purchases with a buy-now price, the marketplace often provides an equivalent built-in escrow or transfer process. For private deals arranged by email, a broker, or a social platform, a standalone escrow service is the standard approach.
How Domain Escrow Works, Step by Step
The exact interface differs between providers, but the flow is broadly the same everywhere.
Step 1: Agree on the Terms
Before anyone opens a transaction, the buyer and seller should agree in writing on:
- The domain name, spelled exactly.
- The price and currency.
- Who pays the escrow fee, or how it is split.
- The transfer method: a push within the same registrar, or a transfer to another registrar.
- Any extras, such as website content, email accounts, social profiles, or trademarks.
- The inspection period, meaning how long the buyer has to confirm receipt.
Writing this down avoids the most common disputes later.
Step 2: Open the Transaction
One party, often the buyer, opens a transaction on the escrow company's website and enters the agreed terms. The other party receives an email invitation and must log in to review and accept the same terms. If anything does not match, do not accept it. Ask for the transaction to be corrected first.
Important: always go to the escrow site by typing its address yourself or using a bookmark. Do not click a link to an escrow site supplied by the other party. This single habit defeats most escrow scams, as explained below.
Step 3: The Buyer Pays the Escrow Company
The buyer sends payment to the escrow company, not to the seller. Common options are bank wire, card, or other methods the provider supports. The escrow company then verifies that the funds are secured.
Sellers should wait for this confirmation from the escrow company's own dashboard. An email from the buyer, or a screenshot, saying the payment has been sent is not confirmation.
Step 4: The Seller Transfers the Domain
Once the payment is secured, the escrow service tells the seller to transfer the domain. There are two main methods.
Push (change of registrant at the same registrar). If the buyer has an account at the same registrar, the seller moves the domain into it. This is usually fast, often minutes. It is also the method used by many marketplaces.
Inter-registrar transfer. If the buyer wants the domain at a different registrar, the seller:
- Removes the registrar lock.
- Updates or confirms contact details as required.
- Obtains the authorization code (EPP code) and shares it with the buyer, usually through the escrow platform's messaging.
The buyer then starts the transfer at their own registrar and pays for the transfer, which usually adds a year of registration. The process can take up to about five days for gTLDs. Detailed instructions are in how to transfer a domain to another registrar.
Two transfer restrictions catch people out:
- The 60-day lock. A domain that was registered or transferred between registrars in the last 60 days generally cannot be transferred to another registrar yet. A change of registrant may also trigger a 60-day lock unless the previous registrant opted out. In those cases, a push to an account at the same registrar is often the practical solution. See the 60-day domain transfer lock.
- Registry-specific rules for ccTLDs, which may require a different process or paperwork.
Step 5: The Buyer Confirms Receipt
When the domain arrives, the buyer should check it before accepting it in the escrow dashboard. Log in to your registrar and confirm the domain appears in your account, then check the public registration data:
whois example.com | grep -iE "registrar:|updated date|domain status"
Or with RDAP:
curl -sL https://rdap.org/domain/example.com \
| jq '{status, events: [.events[] | {action: .eventAction, date: .eventDate}]}'
Look for your registrar's name and a recent last changed or transfer event. Also confirm you can change the name servers or DNS records yourself. If the domain carries email or a website that is part of the deal, check those too.
Step 6: Funds Are Released to the Seller
After the buyer accepts the domain, or the inspection period ends without a complaint, the escrow company releases the funds to the seller, minus any fees the seller agreed to pay. The transaction is complete.
A Quick Verification Script for Buyers
If you buy domains regularly, a small script can confirm the essentials in one go. This Bash script prints the registrar, status, latest events, and current name servers for a domain:
#!/usr/bin/env bash
set -euo pipefail
DOMAIN="${1:?Usage: $0 domain}"
echo "== RDAP registration data for $DOMAIN =="
curl -sL "https://rdap.org/domain/$DOMAIN" | jq -r '
"Status: " + (.status | join(", ")),
"Registrar: " + ([.entities[]? | select(.roles | index("registrar"))
| .vcardArray[1][] | select(.[0]=="fn") | .[3]][0] // "unknown"),
(.events[] | "Event: \(.eventAction) at \(.eventDate)")
'
echo
echo "== Delegated name servers =="
dig +short NS "$DOMAIN"
Save it as check-domain.sh, make it executable with chmod +x check-domain.sh, and run ./check-domain.sh example.com. Compare the output before and after the transfer to see exactly what changed.
Before You Open a Transaction: Verify the Seller
Escrow protects the money, but it is still worth confirming that the seller actually controls the domain before anyone spends time on the transaction. A fair and simple test is to ask the seller to publish a unique value in DNS:
_sale-verify.example.com. 300 IN TXT "buyer-check-8d41c7"
Then check it:
dig +short TXT _sale-verify.example.com
If the expected value appears, the person you are dealing with controls the domain's DNS. This is the same principle used in verifying domain ownership with a TXT record. It does not prove they are the registrant, but it rules out people offering domains they have no connection to.
What Does Domain Escrow Cost?
Fees vary by provider, transaction size, and payment method, so always check the provider's current fee calculator. In general:
- Fees are usually a percentage of the transaction, often with a minimum fee, and the percentage tends to fall as the transaction value rises.
- Payment method matters. Card payments often cost more than bank transfers.
- Who pays is negotiable. Buyer pays, seller pays, or a 50/50 split are all common.
- Extras may cost more, such as the escrow company handling the domain transfer itself on your behalf, or currency conversion.
For small transactions, the minimum fee can be a significant share of the price. That is a reason to consider a reputable marketplace's built-in process for low-value names, not a reason to skip protection altogether.
How to Spot Fake Escrow Sites
Fake escrow is one of the most common domain scams. The pattern is usually the same: the "seller" insists on a particular escrow website, which looks professional but is controlled by the scammer. The buyer pays, the site shows a transaction in progress, and then both the site and the seller disappear.
Warning signs:
- The other party insists on a specific escrow service you have never heard of, and resists using a well-known one.
- You are sent a link to the escrow site instead of finding it yourself.
- The escrow site's domain was registered recently.
- Payment instructions point to a personal account, a cryptocurrency wallet, or a gift card.
- There is pressure to act fast, such as "another buyer is ready, pay today."
- The company cannot be found in the licensing or regulatory records it claims.
You can check how old an escrow website's domain is in seconds:
curl -sL https://rdap.org/domain/escrow-site-example.com \
| jq -r '.events[] | select(.eventAction=="registration") | .eventDate'
A genuine escrow company has usually operated under the same domain for years. A site registered a few weeks ago that claims a long history is a strong red flag. Also check that the address in your browser matches the real company's domain exactly; scammers often use lookalike domains. Lookalike domains can differ by a single character, or use letters from other alphabets that look identical.
Tips for Sellers
- Never transfer before the escrow company confirms payment in its own dashboard.
- Ignore payment screenshots and urgent emails claiming the money is on its way.
- Use the platform's messaging for sharing the authorization code, so there is a record.
- Remove your personal email and DNS records that belong to you, such as mail forwarding, before handing the domain over.
- Keep records of the agreement, transaction ID, and transfer confirmation.
Tips for Buyers
- Pay only the escrow company, through its official payment instructions shown in your account dashboard.
- Do not accept the domain until you have verified it in your registrar account and in RDAP or WHOIS.
- Secure the domain immediately: enable registrar lock, turn on auto-renewal, and protect the account with two-factor authentication. See how to secure your domain registrar account with 2FA.
- Update contact details so renewal notices reach you.
Domain Escrow FAQ
The buyer pays the escrow company rather than the seller. The money is only released after the buyer confirms the domain is in their control. If the seller never transfers the domain, the funds are returned according to the escrow terms.
The seller only transfers the domain after the escrow company has verified and secured the buyer's payment. This prevents the buyer from receiving the domain and then refusing to pay or reversing the payment.
It is negotiable. The buyer may pay, the seller may pay, or the fee may be split equally. Agree on this before opening the transaction so it matches what both parties expect.
It depends mostly on payment clearing and the transfer method. A push within the same registrar can be completed quickly once funds are secured, while an inter-registrar transfer can take up to about five days for gTLDs.
Yes. The usual solution is a push to an account at the same registrar, which is not blocked by the inter-registrar transfer lock. The buyer can transfer it to another registrar after the lock period ends.
Use a well-known provider, type its address yourself, check that its domain has been registered for years, and confirm it holds the licenses or registrations it claims. Be very wary of any escrow site suggested by the other party.
Many marketplaces handle payment and transfer with their own built-in protection, which works like escrow. For private deals arranged outside a marketplace, a standalone escrow service is strongly recommended.
Conclusion
A domain escrow service removes the trust problem from a domain sale. The buyer pays a neutral, regulated third party, the seller transfers the domain once payment is secured, the buyer verifies it, and only then are funds released. Agreeing on the price, fees, transfer method, and inspection period in writing before you start prevents most disputes, and knowing about the 60-day lock helps you choose between a push and a registrar transfer.
The biggest risk in escrow is not the process itself but fake escrow sites. Choose a well-established provider, navigate to it yourself, check its domain age and licensing, and never follow payment instructions that arrive outside the escrow dashboard. Combine that with independent verification in RDAP and your registrar account, and buying or selling a domain becomes routine.
Here are some useful references for going deeper on domain escrow and transfers:
- Escrow.com: What Is Escrow? — an overview of how online escrow transactions work.
- Escrow.com: Domain Name Escrow — the provider's explanation of escrow for domain sales.
- ICANN: Transfer Policy — the rules for changes of registrant and transfers between registrars, including the 60-day lock.
- RFC 5731: EPP Domain Name Mapping — defines the domain transfer command and the authorization information used in transfers.
- ICANN: Registration Data Lookup Tool — check a domain's registrar, status, and dates before and after a transfer.


