Recovering a Domain Held Hostage in Malaysia
You paid for the domain, but the agency registered it under their personal Gmail or company SSM. Here is how to legally compel release through MYNIC and ICANN dispute procedures.
How to Reclaim a .my or .com.my Domain from an Agency
Verify the WHOIS registrant record
Perform a lookup on whois.mynic.my. Identify whether the Registrant Organisation is listed under your company name, an individual director, or your agency's SSM entity. Take a full timestamped screenshot of this record.
Gather the legal proof packet
MYNIC requires undeniable proof of corporate identity and ownership: (1) Latest SSM Corporate Profile (Section 17/Form 9/24/49), (2) Director NRIC / Passport copy, (3) Official invoices showing payment for the domain registration, and (4) Bank statements demonstrating transaction flow.
Submit a Formal Registrant Change Request
If the outgoing vendor is uncooperative or unreachable, submit an administrative dispute directly to MYNIC Customer Care along with a signed indemnity letter on company letterhead explaining that the agent registered the domain on trust.
Update Administrative and Billing Contacts
Once MYNIC verifies your company documents, they will release the domain to your own certified MYNIC username and update all technical, billing, and administrative emails to your corporate domain.
Reclaiming International Domains via Registrar Policy
Identify the accredited ICANN registrar
On whois.icann.org, find the parent registrar (e.g. Tucows, Public Domain Registry, GoDaddy, Namecheap). Malaysian resellers often buy wholesale from US or Canadian registrars. Your dispute goes to the parent, not the local middleman.
File a WHOIS Inaccuracy Complaint
If the agency listed a fake email, their own home address, or fictitious corporate details, submit an ICANN WHOIS Inaccuracy Complaint. Registrars are legally obligated to investigate within 15 days under threat of domain suspension.
Demand the EPP / Auth Code via official channels
By ICANN Transfer Policy, registrars MUST provide an Auth-Code within 5 business days upon request by the legitimate beneficial owner. Agencies cannot legally hold an Auth-Code hostage for web development fees.
Domain Dispute FAQs
Can an agency legally demand a 'Domain Release Fee' in Malaysia?
No. Unless your contract explicitly specified that the agency owns the domain and leases it to you, domain names purchased on your behalf with company funds are held on trust. Demanding arbitrary 'release fees' of RM1,000–RM5,000 for a domain that costs RM80/year to renew is an unethical coercive tactic that registrars frown upon.
What happens to our business emails during a domain dispute?
As long as DNS servers are not altered, email flow through Google Workspace or Microsoft 365 continues normally. We strongly advise taking an immediate MX and TXT record backup so DNS can be quickly restored if a spiteful agency attempts to alter name servers.
Can JagaWeb manage the dispute process for us?
Yes. In our Essential System Review, we draft the exact formal letters for MYNIC, prepare the SSM evidence bundle, and communicate directly with registrar dispute desks to recover your digital property.
Need Us to Reclaim Your Domain?
We prepare the registrar evidence dossier, execute DNS preservation, and place your domain securely in your company's own MYNIC account.