Alex is Sprintlaw's co-founder and principal lawyer. Alex previously worked at a top-tier firm as a lawyer specialising in technology and media contracts, and founded a digital agency which he sold in 2015.
If your website suddenly disappears, your emails stop working, or your customers start telling you “your domain goes to someone else now”, you may be dealing with a domain expiry and re-registration issue (often called a dropped domain).
For startups and small businesses, losing a domain name can be more than just an inconvenience. It can interrupt sales, damage trust, and even expose you to scams (like invoice fraud from lookalike email addresses).
The good news is that in many cases, you can recover a dropped domain - but the best approach depends on which stage the domain is in (which can vary by registrar and by domain extension), whether it has been re-registered, and what legal rights you have in the name.
This guide walks you through practical recovery steps (including what to do immediately), plus the legal angles to consider if someone else has picked up your domain after it expired. This information is general only and not legal advice.
What Is A Drop Domain (And How Does It Happen)?
A dropped domain is a domain name that has expired and then becomes available for the public to register again. If you don’t renew your domain in time, it can return to the market - and another person can potentially register it before you do.
This usually happens because of everyday operational issues, like:
- your renewal email goes to an old inbox (or gets filtered as spam)
- the credit card on file expires
- your domain is registered under a former employee or old web developer’s details
- you assume your hosting provider renews the domain, but the domain is actually with a separate registrar
- a business restructure happens and nobody “owns” the admin task of renewals
Why Dropped Domains Are Attractive To Others
Dropped domains can be attractive because they may:
- have existing website traffic and search engine history
- be similar to established brands (which can be used for confusion or “typo traffic”)
- be valuable for resale
- be used in phishing or impersonation scams (particularly if business email was previously attached)
If your business relies on email addresses tied to the domain (e.g. accounts@yourbusiness.com.au), the risk is even higher. Recovering the domain quickly can become a business-critical issue.
First Response: Confirm What’s Actually Happened To Your Domain
Before you assume the worst, you’ll want to confirm what’s happened. In practice, a “dropped domain” situation can be one of three scenarios:
- Expired but still recoverable (you can renew it through the current registrar)
- In a restoration window (you can still recover it, but there may be additional fees and steps)
- Fully deleted and re-registered by another party (you’ll need a different strategy)
Checklist: What To Check Immediately
- Is your website down? If yes, test whether it’s a DNS issue versus actual loss of the domain.
- Are your emails bouncing? That can happen even if the domain hasn’t fully dropped yet.
- Which registrar is the domain with? This is where renewals happen. Don’t confuse registrar with hosting provider.
- Who has access to the registrar account? If it’s an old staff member or contractor, you may have an access/control issue even if the domain hasn’t dropped.
If you’re also sorting out general business identity records (like ensuring your registration details are correct), it can help to confirm basics such as whether your ABN details are current using a process like checking if an ABN is active via how to check if an ABN is active.
Act Fast (Timing Matters)
The practical reality is: once a domain is deleted and then re-registered by someone else, the “easy” recovery options shrink quickly. If it’s still within a renewal or restoration window, you typically have the best chance of getting it back without a dispute.
Practical Steps To Recover A Dropped Domain (From Easiest To Hardest)
Here are the common recovery paths, in a logical order. Your situation might move you straight to Step 4 or 5 - but it’s worth ruling out the simpler options first.
1) Renew Or Restore Through Your Registrar (If You Still Can)
If the domain is expired but not yet deleted, you may be able to:
- log into the registrar account and renew it, or
- request a restoration (this may be called a redemption or reactivation process, depending on the provider and domain extension)
If you can access the registrar account, do this immediately. Even if the website is down, renewing the domain often stabilises control so you can restore DNS records and email routing.
2) Fix The Control Issue If The Domain Is In Someone Else’s Name
Sometimes the domain hasn’t dropped - but you can’t access it because it was registered by:
- a web developer or marketing agency
- a co-founder who has since left
- an employee using a personal email address
In that case, the immediate “reclaim” work is usually about proving business ownership and getting the registrar account handed over.
This is also where strong written agreements help. If you’ve engaged suppliers or contractors for digital work, a clear Service Agreement can set expectations about who owns and controls business-critical assets like domain names, admin logins, and website accounts.
3) Try To Register It Again If/When It Becomes Available
If your domain has already been deleted and is about to become available again, there may be a short window where it can be registered by the public.
Practically, this can be difficult because dropped domains are often snapped up quickly. But if the domain is not highly sought after, you may be able to register it again yourself.
4) Negotiate A Purchase If Someone Else Registered It
If the domain has already been deleted and re-registered, you can attempt to purchase it from the current registrant.
From a business perspective, this can sometimes be the fastest outcome - but it comes with risks:
- the price may be inflated
- the “seller” may not be the true controller of the domain (or may use a risky transfer process)
- you may inadvertently reward bad-faith behaviour
If you do negotiate, treat it as a formal transaction. Depending on the value and risk profile, you may want written terms that cover payment timing, transfer steps, and what happens if the transfer fails.
5) Use A Formal Dispute Process (If You Have Rights In The Name)
If the new registrant is using your expired domain in a way that targets your brand (or it was clearly registered because of your business), you may have a legal pathway to recover it.
For many domains, there are dispute mechanisms that can result in the domain being transferred back to you, particularly where:
- the domain is identical or confusingly similar to your trade mark or business name
- the registrant has no legitimate interest in the name
- the domain was registered or used in bad faith (e.g. to mislead customers)
The right process depends on the domain extension (for example, different rules can apply to .com.au/.au versus other extensions) and the provider’s policies. This is where the facts matter. A quick screenshot of how the domain is being used, copies of your marketing materials, and evidence of your prior use of the name can become important.
Legal Options If Someone Else Has Your Dropped Domain
When a domain is taken by someone else after expiry, the legal question usually becomes: do you have enforceable rights in the name, and is the new registrant’s use unlawful or misleading?
Not every dispute will justify legal action - but where your brand, revenue, or customer trust is at stake, it’s worth understanding the key legal levers.
Trade Marks: Often The Strongest Foundation
If your business name (or brand name) is registered as a trade mark, you may have a stronger position to challenge someone using an identical or confusingly similar domain name.
Trade marks aren’t just for “big brands”. For startups, registering early can be a practical way to protect the name you’re building value in, especially when domain names can change hands quickly.
If trade marks are part of your plan, register your trade mark can be a strategic step to help you protect brand assets beyond just domains and social handles.
Australian Consumer Law (ACL) And Misleading Conduct
If a third party uses your domain in a way that misleads customers (for example, a website that looks like yours, or a “support” page that captures customer data), that can raise issues under the Australian Consumer Law (ACL), including misleading or deceptive conduct.
Even without a registered trade mark, a misleading set-up can create serious risk - both for your customers and your business reputation.
Passing Off And Reputation-Based Claims
Where your business has built up reputation in a name (even if it’s not registered as a trade mark), you may still have options based on your established goodwill and branding. These claims can be complex, but they’re often relevant when someone is clearly trying to ride on your brand recognition.
Business Name Registration Is Helpful (But Not The Same As A Trade Mark)
Many business owners assume that registering a business name automatically gives them exclusive rights. In reality, business name registration helps identify who is operating under a name, but it does not necessarily stop others from using a similar name.
If you’re unsure how these pieces fit together, the practical distinction between business name vs company name is a good starting point for understanding what each registration does (and doesn’t) protect.
How To Protect Your Business After You Recover The Domain
Recovering a domain is only half the job. The next step is making sure you don’t end up back in the same situation - and reducing the damage if it happens again.
Lock Down Ownership And Access
From a governance point of view, you want the domain to be controlled by the business, not an individual. Practical steps include:
- register the domain using a business-controlled email address (not a personal Gmail account)
- ensure at least two trusted people have access (with a secure password manager)
- turn on multi-factor authentication (MFA) for the registrar account
- keep registrar contact details current (especially the registrant email)
Put Renewal Systems In Place
- enable auto-renew where possible
- set calendar reminders 60–90 days before renewal dates
- use a stable payment method and update it before it expires
- consider registering key domains for multiple years if the business can budget for it
Audit Your Brand Assets (Domains, Social Handles, Key Logins)
Domains are only one piece of your digital identity. A simple quarterly or biannual audit can help ensure your business controls:
- domain registrar logins
- DNS management
- hosting and website admin
- email services
- social media account ownership
- analytics and advertising accounts
If you’re growing quickly or taking on investors, aligning digital ownership with your legal structure can be important too. For example, where you have multiple founders, a Shareholders Agreement can help clarify decision-making and control over key business assets (including who can approve changes to domains, branding, and customer-facing platforms).
Update Your Website Legal Documents (Especially If You’ve Rebuilt Quickly)
After a domain loss incident, many businesses rush to rebuild landing pages, checkout flows, or customer support pages. That’s understandable - but it’s also when legal documents are often forgotten.
If you collect personal information through your site (even just an email capture form), having a clear Privacy Policy is a practical way to explain what you collect and how you handle it.
And if customers transact or rely on information on your website, Website Terms and Conditions can help set rules around use of your site, disclaimers, and limitation of liability (where appropriate).
Key Takeaways
- A dropped domain happens when your domain expires and becomes available for the public to register, which can disrupt your website, emails, and customer trust.
- Your best chance of recovery is usually early - if the domain is expired but still in a renewal or restoration window, act immediately through the registrar.
- If someone else has re-registered your expired domain, your options may include negotiating a purchase or using a formal dispute pathway (especially if you have trade mark rights or there’s misleading conduct).
- Trade marks can significantly strengthen your position when trying to reclaim a domain tied to your brand, particularly where someone has registered it in bad faith.
- Once recovered, reduce the risk of a repeat incident by tightening ownership/access controls, setting renewal systems, and documenting digital asset responsibilities in your contracts.
If you’d like help assessing your options to recover a dropped domain (or to protect your brand and digital assets going forward), you can reach us at 1800 730 617 or team@sprintlaw.com.au for a free, no-obligations chat.








