What to Do When Your Web Designer Disappears
Phone calls going to voicemail, WhatsApp messages left on single ticks, and an unfinished or unmaintained website. Here is the exact 7-step technical and legal recovery procedure for Malaysian business owners.
Gather facts & stop repeated messaging
Messaging harder rarely works. Before sending ultimatum messages, locate every invoice, bank transfer receipt, and email thread you have ever received. Note down every email address and phone number used by the freelancer or agency.
Check your public WHOIS record
Look up your domain on whois.com or whois.mynic.my. Check two critical fields: Registrar (e.g., Exabytes, Shinjiru, GoDaddy) and Registrant Name. If your company name is the Registrant, you have direct legal standing to request access.
Bypass the WordPress login screen
If the designer held the only administrator account, trying to guess passwords will lock your IP. Instead, go directly to the hosting control panel (cPanel, Plesk, DirectAdmin, or AWS/Cloudflare). Access at the server level supersedes any CMS login.
Export the database and wp-content immediately
Once inside your hosting portal or phpMyAdmin, take a raw SQL export of the database and download a ZIP of your wp-content directory (or application codebase). Storing this backup on your local machine ensures you cannot lose your business data.
Reset the administrator password via MySQL
In phpMyAdmin, navigate to the wp_users table, locate the user row, select MD5 encryption for the user_pass field, enter a secure new password, and update the user_email to your corporate address. You can now log into your site.
Evaluate legal recourse in Malaysia (Small Claims)
For deposits or payments made to an unresponsive designer, Malaysia's Subordinate Courts Act provides a Small Claims procedure in the Magistrates Court (Mahkamah Majistret) for disputes up to RM5,000. It requires nominal filing fees and lawyers are barred from representing either party.
Rotate all credentials and transition to verified care
Revoke all SSH keys, rotate database passwords, change hosting master passwords, and enforce two-factor authentication. Hand infrastructure management over to a team that contracts in your company name with written ownership.
Courts for Money, Registrars for Access
Most Malaysian business owners assume a single legal letter will solve both money and website control. In practice, they are two completely separate workflows:
- For your deposit: File a Small Claim (Tuntutan Kecil) at your nearest Magistrates Court for sums up to RM5,000. Filing fees are under RM50, and lawyers cannot represent either party.
- For your website & domain: No court order will force a domain registrar or cloud host to hand over passwords faster than their own dispute and identity verification departments.
Frequently Asked Questions
What if the developer registered my domain in their personal name?
For .my domains, MYNIC provides an official Registrant Dispute Resolution Policy and administrative change process. By submitting your SSM business profile, corporate bank statements showing payments for the domain, and an affidavit, ownership can be re-assigned. For international domains (.com, .net), an ICANN registrar transfer dispute can be initiated.
Should I hire a lawyer if my developer ran away with my money?
If the disputed sum is RM5,000 or below, use Malaysia's Small Claims Court (Tuntutan Kecil) at your local Magistrates Court. It is designed for self-representation without expensive legal fees. For access recovery (domains and servers), going directly to hosting providers and domain registrars with SSM proofs is faster than waiting for court orders.
Can JagaWeb recover our site if we have no technical staff?
Yes. In our Essential System Review, our engineers handle all hosting and registrar communication on your behalf, extract full backups, sanitize unauthorized access, and place all eight control points under your company's own verified master accounts.
Need an Engineer to Take Over the Recovery?
We review what exists, take over server access cleanly, secure all eight control points in your name, and get your digital operations back on track.