Your Domain Is on clientHold: What It Actually Means and How to Get It Back

The status codes that mean your domain is off

Every domain has EPP status codes visible via whois yourdomain.com or any WHOIS lookup tool. The ones that mean trouble:

clientHold

Your registrar (Namecheap, GoDaddy, Njalla, etc.) set this. They are the ones who can remove it. Common causes: billing, WHOIS verification, TOS flag.

serverHold

The registry — the TLD operator like Verisign (.com/.net) or Identity Digital — set this. Usually a legal order, UDRP dispute, or registry-level suspension. Your registrar cannot unilaterally remove it.

pendingDelete / redemptionPeriod

The domain expired and is in the deletion pipeline. Redemption is recoverable but expensive (typically $80–$200). pendingDelete is ~5 days before it drops.

clientTransferProhibited

Normal — this is the transfer lock every domain has by default. Not a problem unless you want to move registrars.

inactive

No nameservers set. Domain is yours, just not configured. Not a hold.

The five reasons domains actually get put on hold

1. WHOIS verification email not answered (most common). ICANN requires verification within 15 days of registration, transfer, or contact-info change. The email goes to your WHOIS contact — if privacy protection forwards to a dead inbox, you never see it.
2. Billing / expired payment. Usually clears automatically once payment is resolved; some registrars take 24–72 hours after payment.
3. TOS / abuse flag. Phishing reports, trademark complaints, content flagged by the registrar. Njalla has been documented suspending domains citing TOS clauses — a 2024 TorrentFreak report covered hundreds of .tv domains simultaneously suspended, and BlackHatWorld threads document cases of five-domain bundles all suspended within days of registration, with support telling users recovery wasn't possible.
4. UDRP or court order. Trademark holders filed a Uniform Domain-Name Dispute-Resolution Policy complaint, or a court ordered the suspension. This is serverHold territory, not clientHold.
5. Registrar KYC escalation. Some registrars (Namecheap's Risk & Compliance is the documented case) periodically re-verify customers. Failure to provide requested documents — sometimes including bank statements — triggers account and domain lock.

The ICANN 15-day WHOIS rule

This is the rule that silently kills more domains than anything else. The process:

1. You register, transfer, or update contact info.
2. Registrar sends a verification email to your WHOIS contact email.
3. You have 15 days to click the link.
4. Miss it → registrar is required to suspend with clientHold.

The trap: WHOIS privacy protection forwards verification mail to a randomized address that forwards to your real email. If that forwarding chain breaks — typo on signup, old email that bounces, privacy provider changes systems — the verification email vanishes silently, and you find out when your site goes dark.

Fix: every 12 months, send yourself a test email to your WHOIS contact. If it doesn't arrive, update your contact info before the next renewal.

Step-by-step: getting the hold released

1. Run whois yourdomain.com and copy the exact status codes. You need these in the ticket.
2. Check the email on file. Log into the registrar, verify the contact email resolves, and search for recent mail from the registrar (including spam folder). Look for "verification," "WHOIS," "contact," "suspended," or the registrar's abuse address.
3. Open a ticket with the exact status code. Subject: "Request to release clientHold on [domain.com] — please advise reason and resolution steps." Do not argue, do not threaten chargeback — just ask for the reason and what they need from you.
4. Complete verification if that's the reason. Click the link, or ask them to re-send to a different email on file.
5. Provide requested documents within the stated window. Usually 3–7 days. Missing the deadline converts "suspended pending verification" into "terminated."
6. Request a written confirmation that the hold has been removed and the target time for DNS to start resolving again (can take 2–48 hours to propagate).

When and how to escalate to ICANN

For ICANN-accredited registrars on gTLDs (.com/.net/.org and most new gTLDs), you can file a compliance complaint at icann.org/compliance/complaint. It's free and registrars are contractually required to respond.

Valid reasons to escalate:

• Registrar refuses to tell you why the domain is on hold.
• Registrar refuses to release a hold after you've completed their requested verification.
• Registrar refuses to transfer a domain after the 60-day lock expires and you've provided a valid auth code.
• You suspect domain was suspended due to a manual WHOIS change you didn't make (possible account compromise).

ICANN compliance is not a fast process — expect 30–60 days — but it works. For ccTLDs (.uk, .de, .is, .io), ICANN has no authority; you escalate to the country-code registry directly.

Preventing it from happening again

• Use a durable contact email. Not the one that came with your domain (your domain's own email can vanish with the domain). Use a personal Gmail / Proton / whatever you've had for years.
• Test WHOIS mail forwarding annually. Most privacy services publish a forwarding address — send yourself a test.
• Keep registrar and host separate. A registrar suspension doesn't take your hosting with it. Cheaper, too — registrars tend to lose money on domains and upsell hosting; hosts lose money on support and upsell domains.
• Pick a registrar with a published appeal process. Our domain registration explicitly publishes the WHOIS verification flow, the holds we can and can't remove, and what happens when a TOS flag is disputed. You can read it before you commit.
• Enable two-factor auth on the registrar account. Domain theft via SIM-swap or password reuse is still the most damaging registrar event — not suspension.