Originally Posted by CurrentlySober

I'll just take a second to briefly share my godaddy experience, which I have shared before in the past.

I had about 40 names with them. Some were active billing pay sites. Some were active billing pay sites that I was running on behalf of other people. Some were personal mainstream stuff and some were semi valuable names... I had (So I thought) done everything I could do to make it secure.

Not sure if two factor identification was 'a thing' back then, but everything else I could have reasonable done, I did... Domains were registered in my Full Legal Name, connected to my main email account that I checked every day, multiple times, and my contact details such as address and phone numbers (Both Mobile and Landline) etc were fully up to date.

Some clown sends a written letter, to godaddy, purporting to be me, and says that I'm moving from LA (Where I was located at the time) across country to NYC (or similar) and that I can't remember my password to change my whois data.

Instead of them changing it for me, then getting in touch via a legit method, they sent a login / method to access the account to a total stranger !

I then started to get calls from people asking why their sites were down, or showing weird stuff etc, and I went to login and I couldn't ! Everything had been changed on me! It took me about 3 days to get things back to normal with multiple long phone calls to godaddy, and me having to absolutely jump through hoops sending them all sorts of 'evidence' that I was who I said I was, including certified copies of my identity etc etc...

However, they had happily let some utter random in, just cause they said that they were me, and moving - With no proof at all !

Absolute Nightmare ! Once all was back to normal I moved everything to namecheap, where everything (that's still left now, nearly 20 years later) has sat securely ever since...

Fuck Godaddy !