Signs your web design agency scammed you: who keeps your domain, code, and access

You paid for a website. It looks good, it works, customers call. Then one day you want a small change — or you want to move to another agency — and you get the answer that turns your stomach: "The domain is on our account," "The code stays with us," "If you leave, you lose everything." At that moment you're not a client. You're a hostage.

The problem isn't that the agency is necessarily malicious. Often it's just convenience: they put everything on their own accounts because it was faster at launch. But the effect is the same — you don't own what you paid for. And the difference between a free client and a captive one shows up on the exact day you want to leave. Let's check yours today, while everything is calm.

The three keys you must hold yourself

A website has three "keys." Whoever holds them controls everything. You don't need to know code to check them — you just need to know whose name they're in.

• The domain (the name, e.g. your-company.com) — this is your most important digital property. A .ro domain is registered through ROTLD via a registrar. The registrar account must be in your name and your email, not the agency's.
• The hosting (where the site's files "live") — the hosting account and subscription must reach you. If they're on the agency's card and email, the day they stop paying, the site goes down.
• The code and content (files, texts, photos, database) — you paid for them, so you have the right to a full copy, anytime.

The simple rule: if you can't log into these three accounts yourself with your own email, you don't own them.

The signs you're already a "hostage"

Some things are normal at the start. Others are red flags. Here's what to look for:

• The domain is registered to the agency's email, not yours — you can check for free on rotld.ro (WHOIS) or at the registrar.
• You were never given a login. Every change must go through them.
• You're refused the domain's transfer code (authorization code) when you ask for it.
• The contract says the "platform" or the site "remains the property of the provider."
• The hosting is paid from their card and you have no access to the hosting panel.
• You're asked for a surprise fee, undefined in the contract, just to leave.

None of these is automatically illegal. But all of them together mean one thing: your departure is expensive and painful by design.

What to ask for, in writing, so you're never captive

You don't need a lawyer for the basic step. You need a clear email and four proofs. Ask for them now, even if you're happy — a fair agency hands them over without blinking.

1. The domain in your name. The registrar account should be under your details and email, as "registrant." Ask them to confirm and check it yourself in WHOIS.

2. Access to the hosting. A login to the hosting panel or, at minimum, the subscription moved to your email and payment.

3. A copy of the code and database. A complete archive (files + DB export), delivered once at launch and whenever you ask again.

4. The domain's transfer code, on request, with no hidden fees.

One sentence worth having in your contract: *"At the end of the collaboration, the domain, hosting, source code, and content remain entirely the property of the client, with full handover within a maximum of X days."*

How we work — and why it matters for you

At MPO Web Studio the rule is simple and non-negotiable: the domain goes in your name from day one. Not ours. You get access, you get a copy of the site, and if tomorrow you want to leave, you leave with everything you paid for — no "release" fee, no drama. We keep you through good work, not captivity.

That's also why our maintenance (from €29/month) is a service you stay with because it suits you, not because you're locked in. You can leave anytime, and we'll still work hard so you don't want to.

If you want to better understand what you're actually paying for when you order a site, we have a separate guide on how much a website costs and one on why you need a website — read them before you sign anything.

Conclusion: check today, not on the day of conflict

Ownership isn't negotiated at the breakup. It's set at the start. Ask today for the four proofs — domain in your name, access to hosting, a copy of the code, the transfer code on request. If your current agency dodges, you have your answer.

If you want an honest opinion on your current situation, or want to see what a properly built site looks like, we'll make you a free demo for your business. Message us on WhatsApp: wa.me/40750257140. No obligations, no pressure — just a clear conversation about what you own and what you should own.