How to Recover Your Domain From a Web Design Agency in Singapore

It usually starts with a small task. You want to set up a new email provider, move to a new website developer or renew an SSL certificate, and then you find out you have no login to your own domain. The web design agency that built your site five years ago bought the domain “on your behalf”, and now they have stopped answering, want a release fee, or have quietly closed down.

The good news is that in most cases you can get it back. How you do it depends on one detail: whose name the domain is registered under. This guide explains how to check that, and walks through each recovery route available to a Singapore business, from a polite email to an SGNIC-backed dispute. It also covers what to do once the domain is back in your hands.

Step 1: Find Out Who Legally Owns the Domain

To recover a domain from a web design agency, start by working out who the registrant is. The registrant is the legal holder of the domain. It is not the same as who paid for it, who built the website, or who has the login. Everything else in this guide follows from that one record.

Run a WHOIS lookup on your domain:

• .sg and .com.sg domains are run by SGNIC (the Singapore Network Information Centre, under IMDA). Use the WHOIS search on the SGNIC website. It shows the registrar, the expiry date and the domain status. For organisations, it often shows the registrant name.
• .com, .net, .org and other generic domains follow ICANN rules. Use ICANN Lookup or your registrar’s WHOIS tool. Since GDPR, registrant names are often redacted, but the registrar name and expiry date are always shown.

Write down three things: the registrar (the company the domain is registered through, such as Vodien, Exabytes, GoDaddy or Namecheap), the expiry date, and the registrant name if you can see it. If the registrant is hidden, the registrar can confirm it for you once you prove you have a legitimate interest.

You will then be in one of three situations:

Scenario A: You Are the Registrant but Have No Login

This is the most common situation and the easiest one to fix. The agency set up the registrar account with its own email address, but correctly listed your company as the registrant. Legally, the domain is already yours.

Contact the registrar’s support team directly. Explain that you are the registrant and that the person managing the account is no longer working with you. Registrars handle these requests all the time. They will usually ask for:

• An ACRA BizFile business profile showing your company name and UEN, matching the registrant record
• Identification for the person making the request, plus proof that they are a director or authorised officer
• A letter of authorisation on company letterhead, signed by a director, asking for account access or for the domain to be moved to a new account in your name

Once you are in, you can either keep the domain at that registrar under your own account or transfer it to a registrar of your choice. Either way, change every contact email (registrant, administrative and technical) to a company-controlled address such as [email protected], not a personal Gmail and not the agency’s address.

Scenario B: The Agency Is the Registrant

This is where most of the frustration comes from. If the WHOIS shows the agency’s company name, or the name of its founder or a staff member, then in the eyes of the registry the agency holds the domain. Registrars cannot simply give it to you because you paid for it. They need either the registrant’s agreement or a formal decision.

That said, you are rarely without leverage. Work through these routes in order.

1. Ask the Agency for a Change of Registrant

Before anything adversarial, ask in writing. Many agencies registered the domain in their own name out of convenience, not malice, and will fix it if you make the request easy. Ask for one of two things:

• A change of registrant (sometimes called a “trade” or “ownership transfer”) at the current registrar, from the agency to your company. For .sg domains, the registrar submits the request and SGNIC typically emails the current registrant to approve it. The process can take several days.
• An account-to-account push into a registrar account you have opened in your company’s name, followed by a registrant change. This works when you want to stay with the same registrar.

For .sg domains, also make sure the new administrative contact is a real person at your company who can complete SGNIC’s identity verification (usually via Singpass) after the change. If verification is not done within the grace period, SGNIC can suspend the domain.

Here is a short request you can adapt:

Hi [Name],

We are moving our domain management in-house. Please change the registrant of [yourdomain.com.sg] from [Agency Pte Ltd] to [Your Company Pte Ltd] (UEN [number]), with [name, email] as the administrative contact. If it is easier, you can instead release the domain to our registrar account [account ID] or send us the transfer authorisation code.

Our records show we paid for the domain registration and renewals on invoices [numbers]. We would appreciate this being done by [date, 7 to 14 days out]. Please let us know if you need anything from us.

Thank you,
[Name], [Title], [Company]

Keep the tone neutral. If there is a separate billing dispute, keep it out of this email: the domain request should stand on its own. Our agency handover guide has a fuller version of this email that covers hosting, Google and Meta assets as well.

2. Build Your Evidence Pack

If the agency ignores you or refuses, everything from here depends on proving that you are the beneficial owner: the agency held the domain as your agent, for your business. Gather the following before you escalate:

• Payment proof: invoices from the agency that mention “domain registration” or “domain renewal”, plus bank or card statements showing you paid them.
• The contract or quotation: the web design proposal, statement of work or email thread where the agency agreed to “register the domain for you” or “set up your website”.
• Corporate identity: your ACRA BizFile profile showing that the company name matches the domain, and any trade mark registration with IPOS.
• Use history: proof the domain has always pointed to your business, such as archived snapshots of the site on the Wayback Machine, your business email history on the domain, and printed marketing materials that show the address.
• A timeline of your requests and the agency’s replies (or silence), with dates.

Without a written contract, these documents are how you show the deal. This is also why a clear marketing agency contract with an asset ownership clause is the best prevention.

3. Escalate to the Registrar

Send the evidence pack to the registrar’s compliance, legal or abuse team, not the general sales line. Explain that the domain was registered by your agent on your behalf, that the agency has refused or failed to complete a registrant change, and that you are asking for an investigation. Attach a signed letter of authorisation from a director.

Registrars cannot take sides in a contract dispute, and they will not hand over a domain on your word alone. But they will often contact the registrant, and a registrar asking questions is frequently enough to get an unresponsive agency to act. Many registrars also have their own procedure for cases where the registrant is unreachable or the registrant company no longer exists.

4. File a Formal Domain Dispute

If the agency actively refuses, the formal routes are:

• SDRP for .sg domains. The Singapore Domain Name Dispute Resolution Policy covers disputes over any .sg domain. Complaints go to the SDRP secretariat run by the Singapore Mediation Centre. Mediation is offered first. If either side declines or mediation fails, an administrative panel decides, and SGNIC implements a transfer or cancellation decision unless one of the parties goes to court. You must show that the domain is identical or confusingly similar to a name or mark you have rights in, that the agency has no rights or legitimate interests in it, and that it was registered or is being used in bad faith. Holding a client’s domain to extract a payment is the kind of conduct the bad-faith ground is designed for. SMC’s current schedule puts a single-panellist complaint for one to five domains at about S$3,000 including GST.
• UDRP for .com, .net, .org and other generic domains. ICANN’s Uniform Domain-Name Dispute-Resolution Policy is handled by providers such as WIPO. The test is similar, but under the UDRP the domain must have been registered and used in bad faith. That is harder to prove when the agency registered the domain in good faith years ago and only turned difficult later. Fees start at around US$1,500 for a single panellist at WIPO.
• Court or tribunal. Because the core issue is often contractual (you paid the agency to get a domain for you), a breach-of-contract or agency claim can be the cleaner path. For claims within its limits (S$20,000, or S$30,000 if both parties agree), the Small Claims Tribunals are a low-cost option. A lawyer’s letter citing your evidence pack often resolves things before you get that far.

Dispute policies have strict criteria and deadlines, so take legal advice before filing. If the domain is valuable, also consider whether paying a modest, documented release fee is cheaper than a S$3,000 dispute. That is a commercial decision, not an admission.

If Your Domain Is a .com: What Is Different

Many Singapore businesses own both yourbrand.sg or .com.sg and yourbrand.com, and agencies often registered both at the same time. The recovery steps above are the same for a .com domain, but the rules come from ICANN rather than SGNIC, and a few details change:

• No local eligibility rules. Anyone anywhere can hold a .com, so the registrant could be an overseas freelancer, the agency’s offshore parent company or a reseller account. There is no Singapore registry to approach, so you deal with the registrar and, if needed, ICANN.
• The registrant is usually hidden. WHOIS for .com is mostly redacted, so you may only see “Redacted for Privacy”. You can ask the registrar to disclose registrant data, but it will usually only do so for a legitimate legal reason. Your invoices and contract do most of the work here.
• Getting the transfer code. If you are the registrant, ICANN’s Transfer Policy requires the registrar to give you the transfer authorisation (EPP) code. If a registrar or reseller is stalling, you can file a complaint with ICANN Contractual Compliance.
• A harder dispute test. The UDRP needs bad-faith registration and bad-faith use. An agency that registered your .com in good faith and only later refused to release it may not meet that test, so a contractual claim is often the stronger route for .com.
• Possible transfer locks. After a change of registrant or a new registration, some registrars apply a temporary lock before the domain can move to another registrar. Check the timing before you plan a move.

In practice, recover the .sg first. It is usually the domain your customers and email depend on, and Singapore’s local rules give you more leverage. Then use the same evidence pack for the .com.

Scenario C: The Domain Has Expired or Changed Hands

Check the expiry date in WHOIS before you do anything else. If the agency has stopped paying renewals, the clock matters more than the dispute.

• Expiring within 60 days: ask the agency, in writing, to renew it or release it immediately, and contact the registrar to explain the situation. Some registrars will accept a renewal payment from a third party. Even if they do not, your written record helps later.
• Expired but not yet deleted: most registries have a grace and redemption window after expiry, and the registrant can still restore the domain during it. The length varies by extension and registrar. Escalate to the registrar urgently with your evidence pack.
• Already re-registered by someone else: if a domain investor or a competitor picked it up, a dispute policy (SDRP or UDRP) or a negotiated purchase are your only options. Domain “drop-catching” services watch expiring business domains closely, which is why this scenario is so painful.

While you sort out the ownership, protect your business: tell customers about any temporary email addresses, and if you are worried about phishing from the lapsed domain, warn your mailing list.

What If the Agency Has Shut Down?

Many small web design agencies in Singapore are one-person operations, and some simply disappear. Check the agency’s status on ACRA BizFile. If it has been struck off, it no longer exists as a legal entity and cannot sign anything, but its domain registrations do not disappear with it.

In this case, go straight to the registrar with your evidence pack and a copy of the ACRA record showing the strike-off. Explain that the registrant no longer exists and that the domain was held for your business. If the registrar cannot act, the SDRP or UDRP remains open to you, and an absent respondent usually makes the case simpler. If the domain was registered in a former employee’s personal name, try to contact that person directly, as they may be happy to sign a change of registrant.

After You Recover the Domain: Lock It Down

Getting the domain back is half the job. Make sure it never happens again:

• Register in your company’s name. The registrant should be your company, using your UEN. For .com.sg, the registrant must be an entity registered with ACRA or another recognised Singapore body.
• Use company-controlled emails for the registrant, administrative and technical contacts, ideally a shared mailbox that survives staff turnover.
• Turn on auto-renew with a company card, and renew for several years at a time if you can.
• Enable two-factor authentication on the registrar account and keep the recovery codes somewhere safe.
• Turn on registrar lock (transfer lock) so the domain cannot be moved without your approval.
• Take back DNS. If your DNS was in the agency’s Cloudflare or hosting account, export every record (MX, SPF, DKIM, DMARC, verification TXT records) and rebuild the zone in an account you own before you switch nameservers. Otherwise your email can break.
• Give agencies user access, not ownership. Future developers can be added as users on your registrar or DNS account and removed when the project ends.

Note that a recent change of registrant or registrar can trigger a temporary transfer lock on some generic domains under ICANN’s Transfer Policy. If you also plan to move registrars, check the rules first. ICANN has approved changes to this policy, so ask your registrar which rules apply today. If you would rather hand all of this off, our domain name services team handles registrant changes and registrar transfers for Singapore businesses, and we can move your site to hosting you own at the same time.

How to Avoid This When You Hire Your Next Web Design Agency

Almost every domain dispute we see could have been avoided at the start of the project. When you choose a web design agency, put these in writing:

• The domain, hosting account and any paid plugins or themes will be registered in the client’s name and paid for with the client’s card, with the agency added as a user.
• If the agency must register the domain for speed, it will transfer the registrant to the client within 14 days of launch.
• The agency will hand over all logins, files and DNS records within a set number of days of the contract ending, regardless of any billing dispute.
• Copyright in the website design and content is assigned to the client on full payment. Under Singapore’s Copyright Act 2021, the creator generally owns copyright in commissioned work unless the contract says otherwise.

An agency that resists these terms is waving one of the clearest marketing agency red flags. Reputable web design partners are happy for clients to own their assets, because it makes the relationship easier to start.

Frequently Asked Questions

Can I recover my domain if the web design agency registered it in its own name?

Yes, in most cases, but you need either the agency’s cooperation or a formal decision. Start with a written request for a change of registrant, then escalate to the registrar with proof that you paid for the domain and that it was bought for your business. If the agency refuses, the SDRP (for .sg) or UDRP (for .com and other generic domains) and contractual claims are the formal routes.

The agency wants a “release fee” for my domain. Do I have to pay?

Not necessarily. If your contract or invoices show that you paid for the domain, a fee to hand it over may itself be evidence of bad faith in a dispute. Separate any genuine unpaid invoices from the domain request, pay what you actually owe, and put the domain request in writing. Sometimes a small, documented fee is still cheaper than a dispute, but that is your commercial choice.

How long does a .sg change of registrant take?

If both parties cooperate, a .sg change of registrant is usually completed within a few days to about a week. The current registrant normally has to approve it, and the new administrative contact must then complete SGNIC’s identity verification. A registrar transfer for .sg is approved automatically after seven days if the losing registrar does not respond.

How much does an SDRP domain dispute cost in Singapore?

The Singapore Mediation Centre’s current fees for a single-panellist SDRP complaint covering one to five domains are about S$3,000 including GST, and higher for a three-member panel or more domains. Part of the fee is refundable if the case is withdrawn before a panel is appointed. Legal fees for preparing the complaint are extra.

What documents prove I own the domain?

The strongest documents are invoices that mention the domain registration, bank statements showing your payments, the web design contract or quotation, and your ACRA BizFile profile showing that your company name matches the domain. Trade mark registrations, archived copies of your website and business email history on the domain all add weight.

Can the registrar just give me my domain back?

Only if your company is already the registrant. In that case, the registrar can restore access once you prove your identity and authority. If the agency is the registrant, the registrar is bound by the registry’s rules and needs the registrant’s consent or a formal dispute decision. It cannot settle a contract dispute between you and the agency.

What happens to my email if I move the domain?

Moving the domain registration does not affect email by itself. Changing the DNS or nameservers can. Before switching nameservers, copy every MX, SPF, DKIM and DMARC record into the new DNS zone exactly, then switch and test sending and receiving straight away.

The agency is not replying at all. What should I do first?

Check the expiry date in WHOIS first, because a lapsing domain is the biggest risk. Then check the agency’s status on ACRA BizFile, send a dated written request by email (and by post to its registered address), and contact the registrar’s compliance team with your evidence pack. Keep a record of every attempt to reach the agency.

Is it illegal for an agency to hold my domain hostage?

It depends on your contract and the facts. Withholding an asset that you paid for and that was bought for you can be a breach of contract, and it can amount to bad faith under domain dispute policies. If someone accesses or changes your accounts without authorisation, that may also raise issues under the Computer Misuse Act. Get legal advice for your situation.

Should I register my domain myself next time?

Yes. Register the domain in your company’s name with a company email and card, then add your agency or developer as a user. It takes ten minutes and removes the single biggest risk in any web design project.