Ask HN: Gandi is holding my domain hostage. What can I do?
42 ohgandihelpme 15 9/3/2025, 5:58:25 PM
The short version of the story is that I was on a two-year internet hiatus. During that time my Gandi account with a decade-old domain name got locked. I have been emailing back and fourth with their Abuse department for the better part of a week and they’re slow-walking me at best.
I had assurances from the CEO, who I reached via text, that if it wasn’t resolved today to text him back. He has now gone dark on me.
I used to love Gandi, but they’re holding my domain name hostage. This doesn’t sound awful until I mention that the nameservers were changed when the account got locked, so I have no access to the domain whatsoever. This isn’t just a domain I’ve done nothing with, but it has my entire life attached to it.
I know they went downhill since they were acquired, but I didn’t think it’d be this bad, obviously.
What can I do? Other than “learn a lesson with backup codes and transfer the domain name.”
It’s amazing they’re entertaining the idea of recovering it at all honestly.
You said “backup codes” so I’m going to guess what’s actually happened is you lost access to your second factor, your domain has expired and you’re unable to log in to your account to renew it. Does that accurately reflect the situation?
The domain didn’t expire—my partner was able to renew without having to login, not knowing that my account was “locked, please contact support”ed.
The CEO said it’s out of their hands and the abuse department would take care of it, but he seems to have now offered radio silence. I’m not sure what to do next short of sending a demand letter, or if that would get me anywhere with a FR-based entity, albeit they do have an office in San Francisco…
1. Auto-renew if configured and credit card is in good standing 2. Manual, you'll get email for renewal, you click, login and then renew
Something doesn't add up here.
Just tried it myself.
It also sounds like you’ve been in touch with support for a weekend and a few business days and it’s not resolved yet. But it also sounds like communication is ongoing.
In a subsequent message you say your Gmail was compromised and probably your Gandi too. Do you think it’s realistic or desirable for them to sort that in just a few days?
I’ve not loved the direction of the new Gandi but if it were me in your shoes I’d be shocked if it were resolved as quickly as you expect it to be. They have the unenviable task of sorting out your hacker from you from thousands of miles away. I don’t think it’s bad, neccesarily, that they need more than three business days to do it.
2. No details in your post so I’m convinced that you’re only telling the part of the story that paints you in a good light and Gandhi in a bad one.
3. Good luck