Most domains that get lost are not stolen. They simply expire.
A card on file gets replaced, the renewal emails go to an inbox nobody reads, and one morning the website is a parking page. I have watched this happen to founders, to agencies, and more than once to seasoned investors who own enough names that one slips through. I have also been on the other side, watching good names come up for auction because someone forgot about them.
The good news is that an expired domain is not gone on day one. There is a long, predictable timeline between the expiry date and the moment anyone in the world can register the name. The bad news is that the cheap, easy part of that timeline is short, and other people are watching it too.
This guide lays out exactly what happens when a domain expires, stage by stage: what it costs to get it back, who can take it, and how to make sure it never happens to a name you care about.
What happens when a domain expires? The full timeline
Here is the typical life cycle of an expired generic domain like a .com. Exact days vary by registrar and extension, so treat the ranges as a map, not a promise.
| Stage | Typical timing (after expiry) | Can you recover it? | Cost to recover | Who else can get it |
|---|---|---|---|---|
| Expired, renewal grace period | Day 0 to about day 45 (registrar sets it, can be zero) | Yes, from your registrar | Usually the normal renewal price, sometimes a late fee | Auction bidders, if your registrar auctions expiring names |
| Expired domain auction | Often runs inside the grace period | Yes, until the auction closes and the grace period ends | Normal renewal, if you act before it sells | The winning bidder |
| Redemption Grace Period | 30 days after the registrar deletes it | Yes, only through the same registrar | Renewal plus a restore fee, typically far more than a normal renewal | Nobody yet |
| Pending delete | About 5 days | No | Not possible | Nobody yet |
| Drop (released by the registry) | Roughly day 70 to 80 for a .com | Only if you win the race to re-register | Registration price, or a backorder fee | Anyone, and drop-catchers get there first |
ICANN publishes a diagram of this cycle, the life cycle of a typical gTLD domain name, and adds an important caveat: registrars can do things after expiry that the chart does not show. That caveat is where most of the confusion comes from, so the rest of this guide takes each stage in turn.
Before the expiry date: the warnings you should get
The process actually starts before the domain expires. ICANN's Expired Registration Recovery Policy requires registrars of generic extensions to warn the registrant at least twice: roughly one month before expiry and roughly one week before. If the name is not renewed, the registrar has to send at least one more notice within five days after it expires.
Those notices go to the email address on your registration. That is the weak point. If the contact email is an old employee's address, a personal account you abandoned, or an address on the very domain that is expiring, the warnings arrive and nobody sees them.
Investor's note: the single most common story I hear about a lost domain starts with "the renewal emails were going to" someone who had left. Before you read another word of this guide, log in to your registrar and check which email address your domains actually report to.
Stage 1: The renewal grace period
On the expiry date, the domain does not return to the registry. For .com and most generic extensions, the registry automatically renews the name on the registrar's behalf and gives the registrar a window of up to 45 days to either keep it or delete it for a refund. That registry window is why registrars can offer you a grace period at all.
What you get from your registrar inside that window is their choice. Some give you the full stretch. Some give far less. A few offer no grace at all on certain extensions. The typical grace period sits somewhere between 30 and 45 days for a .com, and during it:
- You can usually renew at the normal price. Some registrars add a late renewal fee. The policy requires registrars to publish whatever they charge.
- Your website and email stop working. The ERRP requires the registrar to interrupt DNS resolution for at least the last eight days the name is still renewable, and many do it on day one. Often the domain starts showing a parking page or a renewal notice instead of your site.
- You cannot transfer the name out easily. An expired domain generally has to be renewed before you move it. If you were planning to leave your registrar, renew first and move after. The mechanics of a clean move are in the complete domain transfer guide.
The moment your site goes dark is often the first time anyone notices. That is still the cheapest moment to fix it.
Stage 2: The expired domain auction
This is the stage most people do not know exists.
Many large registrars do not simply wait for your grace period to run out. They list expiring names in an expired-domain auction, usually in partnership with an aftermarket platform. Investors and end users browse those lists every day, place bids, and if the grace period ends without you renewing, the winner gets the domain moved into their account.
A few things matter here:
- You are still the owner until the grace period ends. Renewing inside the window usually cancels the auction, even if bids are already in.
- The sale can happen before redemption. If the auction sells, the name may never reach the Redemption Grace Period at all, which means the "30 days to restore" safety net you read about elsewhere may not apply to you.
- Bids are a signal. If a forgotten name attracts bids, it has value to someone. That is worth knowing before you decide to let it go.
For buyers, these auctions are one of the main places where previously registered names resurface. They are also where the risk sits: a name with a history you did not check can carry old backlinks, old spam, or an old reputation with email providers. If you are tempted to buy one for its search value, read buying a domain for SEO: aged domains, redirects and what actually works first.
Stage 3: The Redemption Grace Period
If nobody renews the name and the registrar deletes it, it enters the Redemption Grace Period (RGP). For generic extensions, ICANN requires registries to offer an RGP of 30 days, and ICANN's guidance on redeeming a domain confirms that your registrar must let you restore the name before that period ends.
During redemption:
- The name is back at the registry, but held. DNS is disabled, so nothing resolves, and transfers to another registrar are blocked.
- Only the original registrant can restore it, through the original registrar. You cannot shop around for a cheaper restore.
- It costs a lot more. You pay the renewal plus a restore fee, which is typically far more than a normal year's renewal. Registrars must publish that fee, so check it before you panic.
- Look it up in WHOIS. The registry must show that the name is in its Redemption Grace Period, so you can confirm exactly where a name stands.
This is the last point at which you can get your own domain back from the system. It is expensive, but it is a fraction of what it would cost to buy the name back from whoever catches it later.
Stage 4: Pending delete and the drop
After the 30-day RGP, the name moves to pending delete for about five days. Nobody can renew, restore or transfer it during that time. It is simply waiting to be released.
Then it drops. The registry deletes the name and it becomes available to register on a first-come, first-served basis.
In theory, anyone can register a dropped name. In practice, any domain with real value is taken within seconds by a drop-catching service. These services run large numbers of registrar connections and fire registration requests at the exact moment names are released. If more than one person has backordered the same name, it usually goes to a private auction among them.
So if you let a good domain drop and plan to "just re-register it", you are racing professional systems built for that one job. You will almost always lose.
Why "I'll just re-register it later" loses names
This is the most expensive misunderstanding in the whole process. Letting a name expire and planning to grab it back later fails for three reasons:
- The auction may sell it before it ever drops. Your name can go to a bidder while you are still waiting for it to become free.
- Drop-catchers see every drop. Anything short, readable or with traffic gets caught instantly.
- The price goes up the longer you wait. Normal renewal becomes a late fee, then a restore fee, then an aftermarket price set by whoever caught it.
If you get into that last situation, how to buy a domain name that's already taken covers the outreach and offer side. It is a far worse position than simply renewing on time.
Not every extension follows this timeline
Everything above describes generic extensions governed by ICANN policy, like .com, .net and .org. Country-code extensions set their own rules, and they can be very different: some delete names within days of expiry, some have no redemption period at all, and some charge heavy restore fees. Newer extensions often carry premium renewal prices as well.
| Extension type | Typical behaviour after expiry | What to do |
|---|---|---|
| Generic (.com, .net, .org) | Grace period, possible auction, 30-day RGP, pending delete | Renew before expiry; you have a safety net if you miss |
| Popular startup ccTLDs (.io, .ai, .co) | Rules set by each registry; windows can be shorter and restore fees different | Check your registrar's policy per extension; renew early |
| Many other country codes | Can delete quickly or skip redemption | Treat the expiry date as a hard deadline |
If your brand sits on a country-code extension, the only safe assumption is that you have no grace at all. It is also one more reason the total cost of a name matters as much as its purchase price; how much a premium domain really costs breaks down renewals by extension.
How to make sure your domain never expires
Three settings and one habit prevent nearly every lost domain I have ever heard about.
1. Turn on auto-renew
Auto-renew is the single most important setting. Turn it on for every domain you care about, not just the main one. Your brand's .com, the typo you bought to protect it, and the country versions you redirect all count.
2. Keep a working payment method on file
Auto-renew only works if the payment succeeds. Expired cards are the most common cause of accidental expiry. Add a backup payment method if your registrar allows it, and update your card the day a new one arrives.
3. Point your contact email somewhere that lasts
Use a shared address that several people can see, on a domain that is not the one you are protecting. The ICANN warning emails are only useful if they reach a human.
4. Renew for longer and check once a year
Renewing for several years at a time shrinks the number of chances to miss one. Put a yearly calendar reminder to review every domain you own: expiry date, auto-renew status, contact email and payment method. For names that are central to the business, ask your registrar about registry lock, which adds a manual verification step before the domain can be changed or moved.
| Protection | What it prevents | Effort |
|---|---|---|
| Auto-renew on every name | Forgetting to renew | One click per domain |
| Current card plus a backup | Failed auto-renew | Minutes, once a year |
| Shared, lasting contact email | Missed warning notices | One-time setup |
| Multi-year renewal | Fewer renewal events to miss | One payment |
| Annual domain review | Everything else | Fifteen minutes a year |
The buyer's angle: where expired domains resurface
For every owner who loses a name, there is a buyer who can pick it up. Expired inventory comes back to the market in a few places: registrar expired-domain auctions, backorder and drop-catch services, and eventually the aftermarket once an investor has caught it and relisted it.
Those routes can work, but they share three problems for a founder who simply needs a good name: you wait weeks for a specific name to cycle, you often end up in a bidding war, and the name arrives with whatever history the previous owner left behind.
The alternative is to skip the timeline entirely and buy a name that is available now, at a price you can see, with the checks already done. On 199.domains every listing is $199 or less, AI quality-vetted and owner-verified by DNS before it goes live, and the transfer starts within 72 hours with a full refund if it can't complete. A few names from the featured collection right now:
When you scan a grid like this, look for the same qualities that make an expired name worth catching: short, easy to say, easy to spell after hearing it once, and on an extension your customers already trust. If you prefer invented or compound names, the brandable collection works the same way.
The bottom line on expired domains
A domain that expires is not lost immediately. You usually get a grace period at the normal price, then a 30-day redemption window at a much higher price, and only after roughly 70 to 80 days does a .com drop back to the open market. But the cheap part of that window is the first few weeks, auctions can sell your name before it ever reaches redemption, and once it drops, automated systems are faster than you.
Turn on auto-renew, keep a working card on file, and send the warning emails somewhere a person will read them. That is all it takes to keep your own names.
And if you are on the buying side, you do not have to wait for someone else's mistake. Browse the newest arrivals: every name is $199 or less, vetted before it goes live, and ready to transfer now.
