FAQ: escalate a registrar lock to secure a .uk domain

What does it mean to escalate a registrar lock to secure a .uk domain?

Escalating a registrar lock means moving beyond a routine support ticket to a formal, documented request – addressed to the registrar and, if the registrar fails to act, to Nominet directly – that places the domain in a locked state preventing outbound transfer, deletion, or name-server changes until the claim is resolved.

In the .uk zone, Nominet is the registry authority for .uk, .co.uk, .org.uk, .me.uk, and related second-level names. It sets the rules under which accredited registrars operate. If your registrar does not respond or refuses to lock the domain, Nominet has its own compliance channel through which a legitimate registrant – or a party with a documented right to the name – can request a hold directly at the registry level.

A registry-level hold is more powerful than a registrar lock. It binds every accredited registrar in the .uk namespace. The practical effect is that the domain cannot move, even if the bad actor attempts to transfer it to a different registrar. That distinction matters most when the compromise involved a registrar-account takeover: the attacker may already be trying a push to a second registrar to outrun the dispute.

Escalation is not the same as filing a DRS complaint. It is a protective measure. Think of it as placing an injunction hold while you decide which substantive route – DRS, a court application, or direct negotiation – is right for the facts.

How long does it take to escalate a registrar lock to secure a .uk domain?

A registrar lock request, if correctly framed and sent to the right compliance contact, can be acted on within one to two business days by a cooperative registrar; a Nominet compliance escalation typically takes a few business days to produce a registry-level hold, though Nominet does not publish a guaranteed response time for urgent cases.

Speed depends on the quality of the first contact. A vague email to general support achieves little. A structured written request – identifying the domain, the registrant history, the date of the unauthorized act, and the supporting evidence – reaches the person with authority to act. We routinely advise clients to send that request to the registrar's abuse or legal contact simultaneously with filing a Nominet complaint, so that both tracks run in parallel rather than in sequence.

If the domain is already with a different registrar following an unauthorized outbound transfer, timeline pressure increases. A Nominet compliance request can still reach the domain at the registry level, but any new registrar will also need to be notified. Courts can issue interim injunctive relief faster still, but that route carries legal costs and requires a without-notice application in the right jurisdiction. In our practice, the fastest protective outcomes in .uk theft matters come from a combined registrar escalation and Nominet compliance filing made on the same day the compromise is discovered.

What does it cost to escalate a registrar lock to secure a .uk domain at Nominet DRS?

The registrar escalation itself carries no official Nominet fee; it is a compliance request. If the matter proceeds to a DRS expert decision, Nominet's published fee for a full expert decision is GBP 750 + VAT; an appeal to a three-expert panel costs GBP 3,000 + VAT.

The DRS also includes a free mediation stage. Where a response is filed by the other side, the parties are automatically opted into that mediation before any expert is appointed. If the registrant defaults – which is common in theft and hijacking matters where the bad actor has no legitimate defense – Nominet issues a summary decision at a lower fee of GBP 200 + VAT.

Legal fees for preparing and filing the DRS complaint are separate from Nominet's official fees. They depend on the complexity of the evidence and whether the other side contests the matter. Those fees are fact-specific; we provide ranges at the outset rather than opaque quotes.

Court costs for an interim injunction or a full anticybersquatting claim are substantially higher and are charged on an hourly basis by local litigation counsel in the relevant jurisdiction. That route makes sense when the DRS remedy is insufficient – for example, when you also need damages, or when the bad actor is running a commercial operation off the hijacked domain and you need the income stopped, not just the transfer reversed.

What evidence is needed to escalate a registrar lock to secure a .uk domain?

The minimum evidence package for a registrar lock escalation is: proof of your identity as the original registrant or authorized account holder, a dated record of the unauthorized act (a transfer confirmation email, a WHOIS/RDDS change timestamp, or a registrar log), and a clear statement of the timeline showing you did not authorize the transfer.

That baseline gets you a lock. It does not, by itself, win a DRS complaint or a court application. For those, the evidence standard rises.

At the DRS level, Nominet applies the "abusive registration" test: the complainant must show rights in a name or mark and that the registration or use is abusive. Critically, the DRS reads this as "registered or used" abusively – a lower bar than the UDRP's cumulative "registered and used in bad faith." That difference can matter if the original registration was opportunistic but the current use is clearly harmful.

In a theft or account-compromise scenario, the evidence you assemble should include:

• Historical WHOIS/RDDS records showing your name, organization, and registrant email before the incident.
• Registrar account-access logs, where obtainable, showing the IP address and timestamp of the unauthorized login.
• Any phishing or social-engineering emails received in the days before the transfer.
• Screenshots of the current DNS configuration and any site the domain is now pointing at.
• Correspondence with the registrar showing your notification of the problem and any response (or non-response).
• Evidence of your own rights in the name – a UK trademark registration, a company registration, or documented prior use.

Evidence of account compromise is the most powerful single factor in a summary DRS proceeding. Panels have consistently treated unauthorized transfers as abusive where the record shows the registrant neither authorized the transfer nor received any benefit from the change.

Can I escalate a registrar lock to secure a .uk domain for more than one domain at once?

Yes. A single escalation letter or Nominet compliance filing can cover multiple .uk domains held by the same registrant, provided the underlying incident – typically an account compromise at the registrar – affected all of them simultaneously.

A single registrar-account takeover frequently results in the transfer or modification of every domain in the account. In that scenario, filing separate complaints for each domain wastes time and money. A consolidated escalation, identifying all affected domains, is more efficient and gives Nominet and the registrar a complete picture of the incident's scope.

The DRS itself allows multiple domains in a single complaint where the registrant – here, the bad actor who received the unauthorized transfer – is the same holder. That mirrors the UDRP rule on consolidation. If the domains were transferred to different registrant records (a common obfuscation tactic), separate complaints may be required, though a well-documented escalation to Nominet compliance can still produce registry-level holds across all affected names simultaneously.

In matters involving approximately a dozen domains swept from a single account in a spring 2025 incident, we coordinated a consolidated Nominet compliance filing and registrar escalation on day one, achieving a registry-level hold across all domains within three business days. The DRS complaint that followed covered all names in a single proceeding.

What are the possible outcomes when you escalate a registrar lock to secure a .uk domain?

The possible outcomes range from an immediate registry lock that preserves the status quo, through a DRS transfer order that returns the domain to the legitimate registrant, to a court order that can also award damages – but no procedure guarantees a specific result, which depends on the evidence and the facts of the particular case.

Working through the outcomes in order of intervention intensity:

Registry lock only. The domain is frozen. No transfer, deletion, or DNS change is possible. This is protective, not dispositive. It buys time to pursue the substantive remedy but does not itself return the domain to you.

DRS summary decision (undefended). Where the bad actor does not respond, Nominet issues a summary decision on the documents. If the evidence of abusive registration is clear, the outcome is a transfer order. The Nominet-published fee for a summary decision is GBP 200 + VAT and the process typically runs about eight to twelve weeks from filing to decision.

DRS full expert decision (defended). Where the other side contests the complaint, an expert is appointed. The decision applies the "abusive registration" standard. Remedy is transfer or cancellation. An appeal goes to a three-expert panel within 10 working days; the panel rarely admits new evidence. Fee: GBP 750 + VAT for the first decision, GBP 3,000 + VAT on appeal.

Court route. Where arbitration cannot reach – for example, where you also need monetary compensation for lost business, where the DRS remedy has been exhausted, or where the bad actor is operating commercially off the hijacked domain – a court application handled with local litigation counsel in the relevant jurisdiction can secure an interim injunction, a transfer order, and in appropriate cases, damages. This is the highest-cost and longest path, but it is the only one with a money remedy.

The DRS also recognizes Reverse Domain Name Hijacking. If a complaint is brought abusively against a legitimate registrant, the panel may make an RDNH finding. That is a reputational sanction, with no financial penalty, but it is part of the landscape for anyone defending an escalation they believe is itself improper.

When does a court route beat the Nominet DRS for a .uk domain dispute?

A court route is preferable to the DRS when you need a money remedy, when the bad actor is generating revenue off your domain and you want that income stopped immediately through an injunction, or when the DRS remedy of transfer or cancellation is insufficient to address the full scope of the harm.

The DRS is efficient and relatively low-cost. But its remedies are limited: transfer or cancellation, nothing more. No damages, no costs award, no injunction over ongoing conduct. That is fine for most hijacking cases where the goal is simply to get the domain back.

Where it falls short:

• The hijacker is running a commercial operation – pay-per-click advertising, a fraudulent e-commerce site, or an invoice-redirection scheme – and you are losing money every day.
• The domain has been used to send phishing emails in your name and you need a court order compelling the registrar and hosting provider to disclose account information.
• The DRS has already run and the bad actor is simply re-registering similar .uk names cyclically.
• The matter has a cross-border dimension – for example, the attacker is operating from outside the UK and you need a court order with extraterritorial reach.

In each of those situations, the right first call is to counsel who can assess both routes simultaneously, not sequentially. A court application for an interim injunction can run in parallel with a Nominet DRS complaint; the two are not mutually exclusive. The escalation lock is the starting point for either path.