Namecheap Locked My Account and Suspended My Domain: Recovery Playbook

What actually triggers a Namecheap account lock

Based on public NamePros threads, Trustpilot reviews, and Namecheap's own KB articles:

• Payment flagged by fraud detection. Card mismatches billing address, VPN country differs from card country, first-time customer with a large order.
• Chargeback (even resolved ones). A chargeback filed on any Namecheap account can flag future relationships.
• Content flag on a hosted site. Shared hosting customers whose sites are reported for phishing, spam, or TOS-violating content.
• WHOIS mismatches. Domains registered with contact info that doesn't match the account holder.
• Periodic re-verification. Some long-term customers have reported accounts locked for verification after 12+ months of uneventful use, often citing "incomplete contact details" as the trigger.

The documents Namecheap actually asks for

From public reports, common requests include:

• Government-issued photo ID (passport / driver's licence).
• Proof of address (utility bill, bank statement).
• Selfie holding the ID (in some cases).
• 3 months of bank statements — documented in multiple Trustpilot reviews for higher-value accounts.
• Business registration documents if account is in a business name.
• Proof of domain ownership rights (for trademark-adjacent domains).

The proportionality problem: a customer renewing a $12 domain has been asked for documents that a bank wouldn't require for a new account. This is a legitimate grievance, but the only responses that actually work are comply or exit.

Ticket template that actually gets a response

Subject: Verification documents for account [ID] — resubmission

Hello Risk & Compliance team,

I received your verification request on [date]. Attached:

• Government ID (passport / driver's licence).
• Proof of address dated within the last 90 days.
• [Any other specific document they requested — list each.]

Please confirm receipt and indicate the expected review timeline. I would also like to confirm that, once verification completes, standard domain transfer and account access will be restored.

Thank you.

Do not send unrequested documents. Do not include a grievance. Do not mention competitors. Keep the tone strictly procedural — this is a compliance team, not customer service.

Escalation that works

1. Wait 48 hours after document submission. Review takes time.
2. Public Twitter post tagging @Namecheap and @NamecheapCEO. Factual, no accusations: "Account locked [date], documents submitted [date], no response. Case #X." This works with surprising consistency.
3. Trustpilot review with case number. Namecheap responds to these publicly — gets the case escalated.
4. BBB complaint (US) or equivalent. Slow but moves some cases.
5. ICANN compliance complaint if your domain is affected and you believe the registrar is not following ICANN policy (e.g., refusing to provide auth code after lock is cleared).

Moving out safely once you're unlocked

Once unlocked, don't wait. Risk & Compliance flags don't disappear — they go dormant.

1. Wait through the 60-day transfer lock (if you recently registered or transferred in).
2. Unlock each domain and request the auth (EPP) code via the Namecheap dashboard.
3. Initiate transfer at the new registrar. Use a privacy-respecting registrar with a clear appeal process — our domain registration is designed for exactly this kind of migration.
4. Once transfer completes, update your hosting's nameservers if they pointed at Namecheap DNS.
5. Keep the Namecheap account active with zero domains for 12 months (don't close it during a dispute or it can complicate chargeback/refund recovery).