How domain transfers actually work.
Most "transfer guides" skip over what's actually happening. Here's the mechanism — and the predictable gotchas.
Domain transfers between registrars are governed by ICANN policy, not by the registrars themselves. The process is deliberately slow (5-7 days) and verification-heavy because the alternative — fast transfers — would make domain theft trivial. Here's exactly what happens, step by step.
The seven-step transfer mechanism
- Unlock the domain at the losing registrar. Transfer Lock (a registry-level flag) is on by default for most domains; until it's off, no transfer can start.
- Request the EPP code (also called Auth Code, Authorization Code, or Transfer Secret). The losing registrar generates a random 12-32 character string and emails it to the registrant's email address on file.
- Initiate the transfer at the gaining registrar by providing the domain name + EPP code. The gaining registrar validates the code against the registry.
- Registry sends the FOA (Form of Authorization) to the registrant email — a confirmation request asking "do you really want to transfer this domain to [new registrar]?"
- Registrant approves the FOA by clicking the link or replying with the confirmation phrase. (If ignored, the transfer auto-approves in 5 days.)
- Losing registrar has 5 days to NACK (explicitly reject) the transfer — typically used only if they detect fraud.
- Transfer completes. The domain shows up at the new registrar with its expiration date extended by exactly 1 year.
Total elapsed time: 5-7 days, dependent on how quickly the registrant approves the FOA.
What you need before starting
- Domain Transfer Lock disabled at the current registrar.
- Domain at least 60 days old (ICANN rule — newly registered or recently transferred domains have to wait).
- WHOIS Privacy disabled temporarily at some registrars (the FOA email needs to reach you).
- Access to the registrant email on file. If that email is dead (old work account, bankrupt company), you need to update WHOIS first — which takes another verification cycle.
- EPP / Auth code from the losing registrar.
- Valid payment method at the gaining registrar (transfers usually cost the same as a 1-year registration; some registrars offer free transfer-in promos).
Common gotchas (and how to avoid them)
Gotcha 1: The losing registrar lets the lock drop but won't email the EPP code. Some big registrars route the request to a support queue that takes 1-3 business days. Open the EPP request immediately when starting; do the lock-disable in parallel. Don't wait sequentially.
Gotcha 2: WHOIS privacy proxy intercepts the FOA email. If your registrant email is something like 1a2b3c@privacy-proxy.opensrs.com, the FOA can get filtered or rejected. Either disable privacy for the transfer week, or make sure your proxy forwards email reliably.
Gotcha 3: You're within 60 days of registration or last transfer. ICANN's 60-day lock can't be waived. Wait it out.
Gotcha 4: The losing registrar offers you a "we'll match the price" retention offer. Sometimes a great deal, sometimes a trap (they re-raise prices after year 2). Read the fine print on renewal pricing before accepting.
Gotcha 5: Your expiration date got reset oddly. ICANN policy: every transfer adds exactly 1 year to the existing expiration. If your domain expired Jan 1, 2026 and you transfer mid-October 2025, the new expiration is Jan 1, 2027 — not Oct 2026. You don't lose time.
What happens if a transfer fails
If the FOA isn't approved within 5 days, OR the losing registrar NACKs the transfer, the request expires. The domain stays at the original registrar. You can try again as soon as you fix whatever blocked it. ICANN doesn't penalize failed transfer attempts.
If the transfer was paid for, the gaining registrar refunds it.
Transferring TO Modusdom
We don't charge a transfer-in fee. Use our transfer form — enter the domain + EPP code + your registrant contact info, and we submit to OpenSRS. You'll get the FOA email from the losing registrar; click approve, wait 5-7 days, done.
Your expiration extends by 1 year automatically. WHOIS privacy is enabled free as soon as the transfer completes.