Beware: One Way Your Web Developer Might Be Scamming You
If your developer keeps your domain, hosting, and site in their own accounts, you don't own your business. You rent it. Here's how to spot it and fix it.
By Patrick Moore
The most common way business owners get burned by a developer is ownership. If your domain, hosting, and website live inside the developer's accounts instead of yours, you don't own your site — you rent it from the person who built it. To protect yourself, always register your domain and hosting in your own name and accounts, and hire developers to build and manage, never to hold the keys.
"Don't worry, I'll handle everything."
That sentence sounds like a gift when you're busy running a business. It's usually the most expensive thing a developer ever says to you. Because "I'll handle everything" often means the domain is in their registrar, the hosting is on their account, and the website lives behind a login only they have. You're paying for an asset you don't actually own.
If everything is in their account, you own nothing. You're renting your own business.
01The Scam: Holding Your Website and Domain Hostage
Here's the move. A developer offers to "take care of it all" for one tidy monthly fee. Convenient, right? Except the domain, the hosting, and the site all sit inside accounts you can't access. Your domain is your address on the internet. Your hosting is where the site lives. Your email often runs off that same domain. Control all three and you control the business. That's the leverage they're quietly holding.
Who actually holds the keys?
| A Developer Who Works FOR You | A Developer Who Owns You (Red Flags) |
|---|---|
| Domain registered in your name, your registrar account | Domain sits in their registrar account |
| Hosting account is yours; they have access | Hosting is bundled under their account |
| You hold full admin credentials to the site | They won't share admin logins |
| Ownership of all assets is in writing | Vague all-in-one fee, no breakdown |
| You can fire them and keep everything | Leave and you lose the domain, site, and email |
02Why This Is So Dangerous
This isn't a hypothetical. I've inherited sites from owners who were trapped exactly this way. The developer went quiet, or raised prices, or simply vanished, and the owner had no login to anything. When you lose the relationship, you can lose the domain you've spent years building reputation on, the website itself, and the business email tied to that domain. Rebuilding from scratch is expensive, slow, and sometimes you never get the original domain back.
What you can lose overnight
- Your domain — the address customers and Google already know
- Your website — design, content, and every page you've ranked
- Your business email — anything @yourcompany.com
- Your SEO history — years of authority tied to that domain
- Time and money rebuilding what you already paid for once
03Red Flags Your Developer Owns Your Domain
Most red flags show up the moment you ask a simple question: "Who owns the domain?" A straight-shooting developer answers instantly and shows you the account. A developer who's keeping leverage gets vague or defensive. Watch for these signs before you ever sign anything.
You don't have to take anyone's word for it — you can check who legally owns your domain in about thirty seconds. Run your domain through a WHOIS lookup tool like ICANN's official lookup (ICANN is the nonprofit that governs the world's domains). Look at the Registrant contact: if your developer's name or agency is listed there instead of yours, they legally own your domain — not you. While you're at it, confirm the registrar account and the DNS records are under your control too, because whoever holds those decides where your website and email actually point.
Red flags your assets aren't yours
- You don't have your own domain registrar login
- You have zero access to the hosting account
- They won't hand over admin credentials to the CMS
- The invoice is one vague monthly fee with no breakdown
- They get defensive when you ask who owns what
045 Steps to Secure Your Website and Domain Ownership
The fix is simple and it costs almost nothing. You own the accounts. They get access. That single arrangement removes all their leverage and keeps your business yours. Do this whether you're hiring someone new or auditing the person you already work with.
Own your assets in five steps
- 1
Register your domain yourself
Open your own account at a registrar like Cloudflare, Namecheap, or GoDaddy. The domain goes in YOUR name, paid with YOUR card.
- 2
Own the hosting account directly
Set up hosting under your own login. Add the developer as a user — don't let them bundle it under theirs.
- 3
Get full admin access to your CMS
You should have an owner-level login to WordPress, Webflow, or whatever runs the site. Not editor. Owner.
- 4
Put ownership in writing
A short contract stating you own all assets, accounts, and intellectual property. No ambiguity.
- 5
Keep your own backups
Download a copy of the site periodically. If the relationship ends, you can move fast.
Paying a developer to build and manage your site is smart. Paying one to own it is a mistake. Good developers expect this conversation and respect you for having it. The ones who push back are telling you exactly who they are. (Vetting one in the first place helps too — here's how to hire the right person.)
Hire developers to build and manage. Never to hold the keys.
One rule protects you: YOU own your domain and hosting accounts, always. Give developers access, never ownership — that way you can change who builds your site without losing the site, the domain, or your email.
FAQ
Frequently asked questions
- What does it mean to own your own website and domain?
- Owning your website means the domain is registered in your name and account, the hosting is under your login, and you hold owner-level admin access to the site. Your developer should have access to do their work, but the master accounts and credentials belong to you. If you can't log in to your registrar and hosting yourself, you don't truly own your site.
- How do I know if my web developer actually owns my domain instead of me?
- Try to log in to your domain registrar and hosting account directly. If you don't have your own login, or the developer says they'll "handle it" instead of giving you access, the assets are likely in their name. Ask point-blank who the registered owner of the domain is and request to see the account.
- Can a web developer hold my website hostage?
- Yes. If your domain, hosting, and site all live inside the developer's accounts, they can deny you access, raise prices, or disappear and leave you locked out. You could lose your domain, your website, and any email tied to that domain overnight. This is why you should always own the accounts yourself and give the developer access only.
- Should I let my developer register my domain for me?
- Only if it's registered in your name, in an account you control and can log into. The convenient version — where they register it under their own account and bill you monthly — leaves you renting your own address. It's safer to open your own registrar account and add them as a user.
- What should I do if my developer already controls everything?
- Ask them in writing to transfer the domain to your own registrar account and grant you owner-level access to hosting and the CMS. If they cooperate, document the transfer. If they stall or get defensive, that's a red flag — start the transfer process directly with the registrar and host, and keep your own backup of the site.
- What should be in a web development contract to protect ownership?
- The contract should clearly state that you own all assets, accounts, and intellectual property, including the domain, hosting, website files, and design. It should confirm you receive full admin credentials and that the developer is hired to build and manage, not to own. Spell out what happens to access if the relationship ends.
Your website shouldn't just look good. It should generate business.
Whether you need a better website, stronger SEO, or smarter marketing, I'll help you turn more visitors into leads, calls, and customers.