Unstoppable Domains โ€” Expired Auctions

Help - Locked Out Of GoDaddy Account, Bug In Recovery Process

SpaceshipSpaceship
Watch
Impact
52
Locked out of GoDaddy account. I'm abroad now and I often have to request 2FA messages multiple times as they randomly arrive with substantial delay, even 1 hour. I guess this caused the block of 2FA and now I'm locked out of my account.

The problem is there's a bug in the process to deactivate 2FA and recover the account. So, now I'm stuck.

I saw this happened before on namepros, but the bug prevents me to find a solution and according to the note customer support is not an option.

Can anybody help please? @James Iles @GoDaddy

Here's the steps:

1. Sign in - all good.

2. We're sorry, but this phone number cannot be used.

3. Try another verification method

4. Try another way

5. Available verification methods don't work?Fill out a form verifying your identity to disable 2-Step Verification

Note: Due to security reasons, customer support will be unable to assist via phone calls or email until verification is complete. We'll work diligently to respond as quick as possible. - Form of verification doesn't work, all 4 fields are filled, but Next button is not active (see screenshot).

6. Stuck.

gdbugreco.PNG
 
0
•••
The views expressed on this page by users and staff are their own, not those of NamePros.
AfternicAfternic
Update: ok, so it seems having two surnames caused the bug. Sent the request. Hope to get back the account quickly now.
 
1
•••
Did it get fixed?
 
0
•••
Fixed the issue after contacting support, but it took 3 days to get an answer from them.

Inefficient and complex process given the gravity of the problem.
 
0
•••
Hi all,

I've been locked out of my GoDaddy account for a week after a 2-factor authentication issue, and the process to get back in has become deeply troubling.

I've provided every possible document I have: a Canadian ID, my expired passport, a selfie, and my company incorporation documents. Despite this, their support team keeps changing the requirements and asking for documents I don't have, like tax licenses and business licenses. It feels like an intentional, escalating barrier to prevent me from accessing my domains.

The domains in this account are my company names, which I've spent over 14 years building and branding. I've heard similar stories of this happening to others.

Has anyone here experienced this type of "account recovery" stonewalling from GoDaddy, and is there any specific individual or department that can actually help resolve this?

Any advice would be greatly appreciated.
Thanks in advance
Or
 
2
•••
Hi all,

I've been locked out of my GoDaddy account for a week after a 2-factor authentication issue, and the process to get back in has become deeply troubling.

I've provided every possible document I have: a Canadian ID, my expired passport, a selfie, and my company incorporation documents. Despite this, their support team keeps changing the requirements and asking for documents I don't have, like tax licenses and business licenses. It feels like an intentional, escalating barrier to prevent me from accessing my domains.

The domains in this account are my company names, which I've spent over 14 years building and branding. I've heard similar stories of this happening to others.

Has anyone here experienced this type of "account recovery" stonewalling from GoDaddy, and is there any specific individual or department that can actually help resolve this?

Any advice would be greatly appreciated.
Thanks in advance
Or

Any progress after your review on Trustpilot?
https://www.trustpilot.com/users/68ca59537b741c68a297d7f7

We'll keep an eye on this, @GoDaddy
 
0
•••
Any progress after your review on Trustpilot?


We'll keep an eye on this, @GoDaddy
Hi Jannes,

Thanks for the quick response and goodwill.


Someone named Joe contacted me. I left full details, including full name, email, phone, and customer number, and I hope they get back to me. To be honest, you were the only one who got back to me so far.

If this does not happen, could you please refer me to someone with whom I can solve this problem?

Thanks in advance
Have a wonderful day
Or
 
1
•••
I'm just a forum member, but GD liaison (domain investment community manager) James Iles frequents here under GoDaddy username (hence the @ above).
 
Last edited:
0
•••
Two questions:
Is this his email: Jiles @ godaddy.com - ?

Do you think it would be polite and respectful to contact him by email and ask for his help with this matter?
 
0
•••
I've been locked out of my GoDaddy account for a week after a 2-factor authentication issue, and the process to get back in has become deeply troubling.

I appreciate that this is very frustrating but it is important to understand that any account recovery that bypasses second factor authentication is a very serious matter. GoDaddy start from the assumption that you are an attacker trying to compromise valuable domains (as is attempted day in day out) and they will only grant access after you have proven beyond any doubt that you are the original account owner.

The request for additional documents is not punitive, it is based on a further need to confirm your identity to prevent permanent harm. The time delay is important too, as it increases the likelihood of the true account owner finding out that their email has been compromised. GoDaddy's account recovery team will take their time in ensuring all documents are legitimate, cross-referencing information, verifying it, until they're absolutely satisfied you are you.

Unfortunately, security and convenience are in opposition: the cost of losing your domain permanently is far greater than the cost of losing access for a few weeks. If losing access for 3 weeks is a problem, losing access permanently is a disaster. Keep in mind that some companies will not even allow you to recover an account by verifying your identity, GoDaddy have a robust and reasonable policy.

And you should keep in mind that your frustrated posts will not make things any faster. A very common tactic of attackers is to try and create a sense of urgency, to bully customer support into making quick decisions that are likely to include mistakes (like skipping steps in the process). Although being frustrated is understandable, it could make the process take even more time.

You wouldn't believe the lengths that attackers go to in order to compromise accounts. Domains can be worth millions, control over a domain could grant access to highly secure systems. Forging passports, registering companies and even physical violence are all tactics that attackers use. Ultimately, it is our responsibility as users to be keep our accounts safe: use all of the security tools available to you, including recovery codes.
 
2
•••
Two questions:
Is this his email: Jiles @ godaddy.com - ?

Do you think it would be polite and respectful to contact him by email and ask for his help with this matter?

It wouldn't be impolite otherwise but now would be bad timing, see his latest post on X, handle jamesiles (I only just noticed it myself).
 
Last edited:
0
•••
I appreciate that this is very frustrating but it is important to understand that any account recovery that bypasses second factor authentication is a very serious matter. GoDaddy start from the assumption that you are an attacker trying to compromise valuable domains (as is attempted day in day out) and they will only grant access after you have proven beyond any doubt that you are the original account owner.

The request for additional documents is not punitive, it is based on a further need to confirm your identity to prevent permanent harm. The time delay is important too, as it increases the likelihood of the true account owner finding out that their email has been compromised. GoDaddy's account recovery team will take their time in ensuring all documents are legitimate, cross-referencing information, verifying it, until they're absolutely satisfied you are you.

Unfortunately, security and convenience are in opposition: the cost of losing your domain permanently is far greater than the cost of losing access for a few weeks. If losing access for 3 weeks is a problem, losing access permanently is a disaster. Keep in mind that some companies will not even allow you to recover an account by verifying your identity, GoDaddy have a robust and reasonable policy.

And you should keep in mind that your frustrated posts will not make things any faster. A very common tactic of attackers is to try and create a sense of urgency, to bully customer support into making quick decisions that are likely to include mistakes (like skipping steps in the process). Although being frustrated is understandable, it could make the process take even more time.

You wouldn't believe the lengths that attackers go to in order to compromise accounts. Domains can be worth millions, control over a domain could grant access to highly secure systems. Forging passports, registering companies and even physical violence are all tactics that attackers use. Ultimately, it is our responsibility as users to be keep our accounts safe: use all of the security tools available to you, including recovery codes.
Thank you for your response.

I am writing to express my significant concern and frustration regarding a recent experience with a domain renewal and account access. I've been a loyal customer for over 14 years, and this issue has caused me considerable professional and personal distress.

The situation began when my domain, which I have owned since 2008, was not renewed. Shortly after its expiration, a person I did not know contacted me via a personal email address and attempted to sell the domain back to me for a price far above its value. I was under the impression that I would have the right to renew the domain, as I have every year. Given that I operate a well-known website under a different extension, it seems someone was closely following this matter, likely aware of its potential value.

I immediately tried to regain access to my account. As a first step, I provided a passport photo, a government ID photo, and a selfie as requested. However, the verification demands escalated. I was asked for a company ID, a document that does not exist in the requested format. After providing an alternative, they then insisted it be in color, which was impossible to produce. The communication seemed to suggest that they did not believe I was the account holder, and they began asking for the details of the "other person" they believed was communicating with them.

Given that my account communications have always been through the email address on file, and my domains are tied to companies I have branded for over 14 years, it feels as though the company is creating deliberate and unnecessary obstacles to deny me access.

In an effort to resolve the situation, I offered to pay for a 10-year renewal in advance, participate in a video call, purchase additional services, and answer the security questions listed on the account. None of these offers were acknowledged or acted upon. The responses I received felt cold and impersonal, as if I were communicating with a bot rather than a human. The requests for already-provided documents or for non-existent individuals led me to a point of deep suspicion about the company's intent, a concern that seems to be shared by many others on Trustpilot.com.

My goal is simply to regain access to my account and the digital assets I have rightfully owned for years. I have been deprived of sleep and had my professional activity stalled due to the fear of losing complete control of my company's online presence. I am sure you can appreciate how frustrating it is to have my long-standing digital assets threatened.

I am hopeful that we can find a creative and common-sense solution to this matter. As a customer of over 14 years, I believe my history and the information I have provided should be sufficient to verify my identity and restore access to my account.
 
1
•••
It wouldn't be impolite otherwise but now would be bad timing, see his latest post on X, handle jamesiles (I only just noticed it myself).
Thanks so much for getting back to me and for the heads-up about the timing. I really appreciate it
 
0
•••
1
•••
Dynadot โ€” .com TransferDynadot โ€” .com Transfer
Appraise.net
Escrow.com
Spaceship
Rexus Domain
CryptoExchange.com
Domain Recover
CatchDoms
DomainEasy โ€” Zero Commission
DomDB
  • The sidebar remains visible by scrolling at a speed relative to the pageโ€™s height.
Back