My GoDaddy account was stolen and the hacker had its combined email and pin code changed. I submitted the regain access form via changeupdate.com. In addition, I emailed [email protected] to explain myself clearly with sufficient documents.

However, the change team asked me to cancel the protected registration. I didn't do as they requested for the simple reason that once I cancel the protected registration, the hacker might transfer my domains away. Therefore, I replied back to ask the reason and restated that I just want to retrieve my GoDaddy account, instead of cancelling the protected registration. Since then on, I have't received any more responses from them.

I also contacted their customer office via online chat and phone, but there's nothing they can do for me due since I don't have the PIN code (it was modified by the hacker).

What should I do to retrieve my GoDaddy account?

  • 1
    There is something they can do- they just don't want to use their imagination and break procedure. Hire a lawyer. You paid money for a service that you are no longer receiving satisfactory support/response/performance for. The attorney can write a letter to their legal department and attorney to attorney, they can get this done for you and it should not cost you a dime in the end. Otherwise, one of my tricks is to call the CEO and ask for his/her help. That has always worked for me and few of them have become my friends. How can that be bad??
    – closetnoc
    Oct 5, 2015 at 20:41
  • 1
    GoDaddy, like most credible registrars, is very careful not to allow fraudulent access to domain accounts. Their first level support team will want to compare the registrant information against your government issued ID and business documentation. If you have private registration on the domain, they'll have to contact their Domains by Proxy department for confirmation. I do not think you can cancel that by the way unless you have access to your account, so that requirement is a bit odd sounding...
    – dan
    Oct 6, 2015 at 1:01
  • 2
    I would call their domain support department (in the U.S. if you can) and ask them to escalate it to a higher team. They should be able to confirm the pin and email change, and what IP address was used, along with other critical information to detect if that was done fraudulently. Something else that's odd is that you should have been sent an email to your email address on the account that it was being changed. I'd look for that and provide that to them as well, along with providing information like the credit card used to register the domain with.
    – dan
    Oct 6, 2015 at 1:06
  • 1
    Keep in mind that they're constantly under a barrage of attempts by unscrupulous parties trying to subvert domain names, so it may take some time for them to respond...and some persistence on your end. On the flip side, that demonstrates that it's not easy to pull off domain hijacking these days. In any case, even if it's transferred, they can get the domain back since that would violate ICANN's provisions, so don't fret - if you're the registrant and account holder, you wont' lose the domain.
    – dan
    Oct 6, 2015 at 1:10
  • 2
    They have all the purchase order history, as well as account update history for your account, so they should be able to authenticate you using that information. If you're still having trouble, comment back with an "incident" number and domain (I'll delete it after read), and try to help - I have a close working relationship with them.
    – dan
    Oct 7, 2015 at 3:29

1 Answer 1


You need to contact GoDaddy directly. Even though SecureServer is connected (and maybe even be them) you need to go directly to GoDaddy. Their phone number is on their website at the top as is a link that you can use to contact their chat support.

They should be able to see the account changes along with which IPs made those changes. From there, they can help you get the account back, ideally.

Not the answer you're looking for? Browse other questions tagged or ask your own question.