A Sydney accounting firm hired me last year for a website redesign. Routine project, mid-sized business, everything tracking nicely. About a week in, I asked for access to the domain registrar account so we could update DNS records for the new hosting. The firm's office manager checked her records and came back with bad news: nobody at the firm had the login. The original web designer set up the .com.au domain in 2014, and he hadn't returned an email in eleven years.

We pulled the WHOIS record. The registrant of the .com.au was the web designer's defunct sole trader business, not the accounting firm. The firm had been paying $40 a year in invoices that said "domain renewal" and assumed they owned it. They didn't. Legally, the web designer did.

This is more common than you'd think. The pattern is consistent: an early-stage business hires a web person, the web person registers the domain in their own name "to make it easier," and the business owner never thinks to check until they want to move agencies or change hosting and discover that what they thought was theirs isn't.

My position: every Australian business should check the registrant record on their .com.au today, not next year, because the cost of fixing it now is small and the cost of fixing it after the original registrant becomes uncontactable is somewhere between expensive and impossible.

What "ownership" of a .com.au actually means

auDA, the .au Domain Administration, is the regulator that operates the .au namespace. Under auDA's licensing rules, nobody "owns" a domain in the way you own property. What you have is a licence to use the domain for the registration period, and that licence is tied to a registrant — an identified Australian commercial entity.

For .com.au specifically, the registrant must be a commercial entity with an Australian connection — usually evidenced by an active Australian Business Number (ABN) or Australian Company Number (ACN). The ABN or ACN attached to the registration determines whose domain it actually is, legally and operationally.

If your web designer registered the domain under their ABN in 2014, that domain is licensed to their entity, not yours. It doesn't matter that you've been paying the renewal invoices. The registrar's records say someone else is the registrant.

The 2026 enforcement change

This used to be a sleepy area of compliance. Plenty of .com.au domains had been registered under ABNs that lapsed years earlier, or under sole trader entities that closed shop, and nothing happened. Renewals just went through.

From 20 May 2026, that changed. auDA now enforces ABN/ACN validity at renewal time. Within the 90-day renewal window, the registrar checks whether the ABN or ACN linked to the domain is still active. If it isn't, the renewal is blocked and the domain can be deleted.

What this means in practice: if your domain is registered under the web designer's defunct sole trader ABN, the renewal in the next 12 months could fail, and you could lose the domain entirely. The domain you've been operating your business on for a decade could become available for someone else to register.

This isn't theoretical. The change has been telegraphed for over a year. The first wave of domain deletions for non-compliant registrations is already happening. If you haven't checked, this is the year to check.

How to check who actually owns your domain

The fastest way: WHOIS lookup. auDA's WHOIS tool is free and returns the registrant entity, the registration date, the expiry date, and the registrar.

You're looking for two fields specifically:

Registrant — the entity name. This should be your business's legal name, ideally the trading entity that holds the ABN.
Eligibility ID — the ABN or ACN. This should be your business's ABN.

If both match your business, you own your domain. If either field shows a different entity — your web designer, an agency name you don't recognise, a defunct ABN — you have a problem.

Common patterns I've seen:

The agency owns it. The web agency registered the domain under their own entity. They might consider it a service, they might consider it an asset they could hold over you if you tried to leave. Either way, it's not yours.
A previous staff member owns it. Someone who was once an employee or contractor registered it personally and the registration was never transferred when they left.
A defunct entity owns it. The original registrant was the business's old name or a parent entity that no longer exists.
A subsidiary owns it. In larger businesses, a now-disbanded subsidiary holds the registration that the parent operates under.
You actually own it. Increasingly common as the regulatory environment has matured, but still not the default.

What to do if the registrant is wrong

The fix depends on who currently holds the registration.

If your current web agency holds it

Email them and request transfer. The transfer is a documented process — the registrant sends a transfer authorisation to the registrar, and the registrar updates the record. Most agencies will do this without complaint because they don't actually want the legal liability of owning a client's domain.

If the agency drags their feet or refuses, that's a meaningful signal about the agency relationship. Get the transfer documented in writing as a deliverable, with a date.

If a previous agency holds it and they're still trading

Same process, harder execution because the relationship is dormant. Send a formal request via email and certified post if necessary, citing the auDA rules requiring the registrant to be a related entity with an active ABN. Most former agencies will transfer when asked because they're not looking for a fight. Some will charge an administrative fee in the $200 to $500 range. Pay it; the alternative is worse.

If the registrant is uncontactable

This is the hard one. The original registrant is a defunct sole trader, the contact email bounces, the person can't be located. The auDA process for transferring a domain whose registrant is uncontactable is a domain dispute resolution process administered through the auDRP — the auDA Dispute Resolution Policy. It's not designed for this exact scenario but it can be invoked.

The realistic path:

Document the trail. Invoices showing you've paid for the domain. Email records showing the original registrant set it up on your behalf. Any contract or engagement letter from the original work.
File a transfer request with the current registrar, providing the documentation. Some registrars will action this under their own due diligence rules; some will require a legal process.
If the registrar won't action it, the formal auDRP complaint or a legal action under Australian contract law is the next step.

This costs $2,000 to $8,000 in legal and administrative fees if it goes to formal dispute, and takes 4 to 12 weeks. It's much cheaper to transfer the domain while the original registrant is still findable.

If the registrant ABN is defunct

If you discover your domain is registered under a defunct ABN — even your own business's defunct ABN from before a restructure — the fix is to update the registration to your current entity. This is done through the registrar with documentation supporting that the new entity is the legitimate successor.

The 2026 enforcement change makes this urgent. The next renewal will fail if the ABN isn't current.

Why the agency registers it in their own name in the first place

The legitimate version: small web designers who set up domains for clients sometimes find it administratively easier to put everything under their own account, where they can manage DNS records, hosting, and renewals without needing the client's login every time.

The illegitimate version: some agencies deliberately register domains in their own name as a soft lock-in mechanism. If the client tries to leave, the domain is an asset the agency controls, which makes transitioning to another provider painful.

Both motivations end at the same outcome — the client doesn't actually own their domain. The fix is the same regardless of motivation.

What to do as a structural fix

Once you've checked and either confirmed ownership or initiated a transfer, the structural fix to prevent this from happening to the next business or the next contractor:

Own the registrar account

Open a registrar account in your business's name. Reputable Australian registrars include VentraIP, Crazy Domains, and Synergy Wholesale. The account is in your business's name, you have the login, you're the legal account holder.

If you have agencies who need to manage DNS, give them delegated access, not the master login. They can update records; they can't transfer the domain.

Set up multiple administrative contacts

Domain registrar accounts usually allow multiple admin contacts. Set up at least two — typically the business owner and the operations lead — so a single staff change doesn't cut off access to the registrar account.

Pay the renewal annually, not through an agency

The renewal fee for a .com.au is in the $20 to $30 per year range with most registrars. Pay it directly from the business's account. This means the invoice trail shows the business as the entity maintaining the domain, which matters if any future dispute requires evidence of ownership.

If your agency is currently invoicing you "domain renewal" at $80 or $120 per year, that's a markup on the actual cost — and it's the kind of cost it makes sense to take in-house.

Document the domain as a business asset

The domain is a commercial asset of the business and should be documented as one in the business's records. The ABR shows your ABN. Your registrar account shows your domain. Your accountant should know that the business holds the domain. If the business is ever sold or restructured, the domain is part of the asset transfer.

The honest bottom line

The .com.au domain your business operates on is one of the few digital assets that has genuine commercial value beyond the website running on it. Customers know it. It ranks on Google. It's listed on business cards and signage and marketing materials. Losing it isn't a small problem.

The check takes five minutes. The fix, if needed, ranges from "free email to the agency" to "moderately expensive legal action" depending on how long it's been left. The 2026 enforcement change means leaving it indefinitely isn't an option — the next renewal that fails compliance could result in the domain being deleted.

Separately, while you're checking ownership: run a free audit on the site itself. The report covers the rendered performance, SEO, and accessibility — useful evidence if the agency that owns your domain has also been quietly letting the site itself drift. If the audit confirms what you already suspect, you're walking into the registrant conversation with two problems on the table instead of one.

How to Check You Actually Own Your .com.au (2026)