--- title: Tell HN: Namecheap gave my account to an unverified... description: A 13-year Namecheap customer discovered that Namecheap transferred full control of his account to an unverified third party after that person simply called... canonical: https://daily.dev/posts/tell-hn-namecheap-gave-my-account-to-an-unverified-third-party-iqwpw34bu twitter:card: summary_large_image twitter:site: @dailydotdev og:type: website og:site_name: daily.dev og:title: Tell HN: Namecheap gave my account to an unverified third party | daily.dev og:description: A 13-year Namecheap customer discovered that Namecheap transferred full control of his account to an unverified third party after that person simply called... og:url: https://daily.dev/posts/tell-hn-namecheap-gave-my-account-to-an-unverified-third-party-iqwpw34bu og:image: https://api.daily.dev/og/posts/iQwpW34BU.png og:image:alt: Tell HN: Namecheap gave my account to an unverified third party og:image:width: 1200 og:image:height: 630 og:locale: en --- > ## Documentation Index > Fetch the complete documentation index at: https://daily.dev/llms.txt > Use this file to discover all available pages before exploring further. # Tell HN: Namecheap gave my account to an unverified third party **[Hacker News](https://daily.dev/sources/hn)** · 2 min read · 0 upvotes · 0 comments ## Summary A 13-year Namecheap customer discovered that Namecheap transferred full control of his account to an unverified third party after that person simply called support and asked. Despite Namecheap having already called the legitimate account owner to verify a prior support ticket, they bypassed all verification when the third party called in, changing both the password and associated email address. The account owner had already flagged the unauthorized password reset attempt via a support ticket, yet Namecheap still handed over the account. The incident highlights a critical account security vulnerability at Namecheap where phone social engineering alone is sufficient to take over any account. ## Full article daily.dev links to this article rather than hosting it. Read it at the original source: ## Similar posts on daily.dev - [GoDaddy Gave a Domain to a Stranger Without Any Documentation](https://daily.dev/posts/godaddy-gave-a-domain-to-a-stranger-without-any-documentation-4ck0e48sq) · Hacker News · 1 upvotes · 0 comments - [Non-profit’s GoDaddy nightmare and the IT chaos that ensued](https://daily.dev/posts/non-profit-s-godaddy-nightmare-and-the-it-chaos-that-ensued-pwe15if9e) · The Register · 0 upvotes · 1 comments - [Gone \(Almost\) Phishin’](https://daily.dev/posts/gone-almost-phishin--9vs4tum5v) · Tech Lead Digest · 25 upvotes · 3 comments --- Tags: [#security](https://daily.dev/tags/security) [View this post on daily.dev](https://daily.dev/posts/tell-hn-namecheap-gave-my-account-to-an-unverified-third-party-iqwpw34bu) ```json {"@context":"https://schema.org","@graph":[{"@type":"Organization","@id":"https://daily.dev/#organization","name":"daily.dev","url":"https://daily.dev","logo":{"@type":"ImageObject","url":"https://daily.dev/apple-touch-icon.png","width":180,"height":180},"sameAs":["https://twitter.com/dailydotdev","https://github.com/dailydotdev","https://www.linkedin.com/company/daily-dev-ltd"]},{"@type":"WebSite","@id":"https://daily.dev/#website","url":"https://daily.dev","name":"daily.dev","publisher":{"@id":"https://daily.dev/#organization"},"potentialAction":{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https://daily.dev/search?q={search_term_string}"},"query-input":"required name=search_term_string"}}]} {"@context":"https://schema.org","@type":"TechArticle","headline":"Tell HN: Namecheap gave my account to an unverified third party","url":"https://daily.dev/posts/tell-hn-namecheap-gave-my-account-to-an-unverified-third-party-iqwpw34bu","mainEntityOfPage":{"@type":"WebPage","@id":"https://daily.dev/posts/tell-hn-namecheap-gave-my-account-to-an-unverified-third-party-iqwpw34bu"},"datePublished":"2026-07-23T22:02:45.735Z","dateModified":"2026-07-24T00:24:24.264Z","description":"A 13-year Namecheap customer discovered that Namecheap transferred full control of his account to an unverified third party after that person simply called...","image":"https://media.daily.dev/image/upload/s--OHB84bZF--/f_auto/v1722860399/public/Placeholder%2010","thumbnailUrl":"https://media.daily.dev/image/upload/s--OHB84bZF--/f_auto/v1722860399/public/Placeholder%2010","isAccessibleForFree":true,"articleSection":"Hacker News","inLanguage":"en","publisher":{"@type":"Organization","name":"daily.dev","url":"https://daily.dev","logo":{"@type":"ImageObject","url":"https://daily.dev/apple-touch-icon.png","width":180,"height":180}},"author":{"@type":"Organization","name":"Hacker News","logo":"https://media.daily.dev/image/upload/t_logo,f_auto/v1/logos/hn","url":"https://daily.dev/sources/hn"},"commentCount":0,"discussionUrl":"https://daily.dev/posts/tell-hn-namecheap-gave-my-account-to-an-unverified-third-party-iqwpw34bu","interactionStatistic":[{"@type":"InteractionCounter","interactionType":{"@type":"LikeAction"},"userInteractionCount":0},{"@type":"InteractionCounter","interactionType":{"@type":"CommentAction"},"userInteractionCount":0}],"keywords":"security","timeRequired":"PT2M"} {"@context":"https://schema.org","@type":"BreadcrumbList","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https://daily.dev"},{"@type":"ListItem","position":2,"name":"Hacker News","item":"https://daily.dev/sources/hn"},{"@type":"ListItem","position":3,"name":"Tell HN: Namecheap gave my account to an unverified third party"}]} ```