I talked to a customer who was able to convince Network Solutions to switch her domain back to her web host after someone had fraudently convinced Network Solutions to point it to another host provider. The party had done this with faxing in a request using her business name and so on.
I can't imagine this to be very common because NSI is often in of itself difficult to deal with.
Changing ownership is sometimes difficult to achieve. It depends on the Registrar. NSI seems to have the best rules to protect owners. The old and new owners must sign a document in the presence of a notary (who also signs). And an original of the document must be sent by snail mail. There are some registrars that request a copy of ID and/or letter head in addition to the 2 signatures, but since everything is transmitted through fax, the images are usually impossible to make out. More commonly though, I've seen registrars ask for the 2 signatures sent by fax, and nothing more. Especially if the company making the request is one of their partners or resellers.
If a registrar's rules are too tight, a person can easily transfer a domain name to a more convenient registrar. Only a handful of registrars send e-mail to request the owner or administrative contact to validate the transfer. Others, like NSI, send an e-mail after the transfer. And if the e-mail is no longer valid?
E-mail invalidity is the most common reason domain names are stolen. There are many ways to work around the rules and change contacts.
Make sure to update your e-mail, telephone number, and address regularily.
To prevent domain name stealing, make sure that your registrar uses the following procedures:
1)All registrar transfer requests must be validated by the owner or they will not go through.
2)Make sure that the owner address, telephone #, and e-mail are always up to date.
3)Make sure that all contacts' information is up to date.
4)Make sure that your registrar uses tough ownership transfer rules.
It's true that all contacts receive an email when a request is made. If the e-mail request is ignored which is what most folks do instead of replying with NO- and a fax is sent, then NSI will make the requested changes.
Scary, isn't it?
I haven't heard back from my friend, but I hope to get his domain, more for personal use than to sell it.
Maybe the rules are different because i'm working out of France, but I have had 3 cases in the last 4 months which were accepted without a notary's signature. And once without any copy of ID. But usually, they lose our faxes completely....