Domain expiration is one of the few failures in online business that can end a project in an afternoon, and it usually happens to people who were not being careless. A card expires. A renewal notice goes to an inbox nobody reads anymore. The person who registered the domain left the company two years ago and the account is still in their name.
What follows is the timeline after a domain lapses, what a business loses at each stage, and the settings that make the whole scenario impossible.
The timeline after a domain expiration
The clock is longer than most people assume, and it is not generous forever.
For generic domains like .com and .org, ICANN rules require registrars to send renewal reminders roughly a month before and a week before the date, plus one after. Once the domain expires, many registrars offer an auto renew grace period of anywhere from 1 to 45 days, during which the original registrant can still renew. ICANN’s guidance for registrants is blunt about the risk in that window: depending on the registrar’s terms, the domain may already be available to third parties or headed for the registrar’s own auction.
After deletion comes the redemption grace period, 30 days during which the registry blocks transfers and the original holder can restore the name. Restoration carries a fee, often around a hundred dollars, well above a normal renewal. Then the name goes to pending delete for a few days, and then it drops and anyone can register it. That last moment is not a quiet one, because buyers are watching.
What actually gets lost
The website is the obvious casualty and rarely the expensive one. A site can be restored from backups in a day.
Email is worse. Once DNS stops resolving, every address on the domain stops receiving, and nobody sending to those addresses gets a useful bounce explaining why. Client mail, password resets, invoices, and two-factor codes all go into a hole. Businesses have lost accounts they could not recover because the reset email went to a domain they no longer controlled.
Search is the slow bleed. Every backlink built over years now points at whatever the new owner puts there, rankings go with it, and a rebuild on a fresh domain starts from nothing. For a site already dealing with a search traffic decline, losing the domain history on top of that is a different order of problem.
Then there is the impersonation risk. Someone else now owns an address customers trust, can publish under it, and can send mail from it.
Why expired domains get bought within minutes
Dropped domains are a market with professional buyers. Drop-catching services queue registration requests for the exact second a name becomes available, and names with real link histories rarely reach the open market at all.
The buyers want the history, which is the part worth understanding. Google’s spam policies name expired domain abuse specifically, defining it as buying an expired name and repurposing it mainly to manipulate rankings with content that offers users little. The examples in the policy are pointed: affiliate content on a former government site, casino content on a former school domain.
Two implications follow. If your domain drops, its history is exactly why someone else takes it. And if you are ever tempted to buy a dropped domain to inherit its authority, the practice is a named spam category rather than a clever shortcut. Buying an old domain for a real project that continues its subject matter is a different thing and stays fine.
Preventing domain expiration
- Turn on auto renew, then verify a real payment card is attached and current, since auto renew fails silently on an expired card
- Register the domain to a company email address and a role account, never a personal one belonging to whoever set it up
- Renew for multiple years on anything the business depends on, which removes the annual failure point entirely
- Enable two-step verification on the registrar account, and use registrar locking so the domain cannot be transferred or deleted without deliberately unlocking it, both of which the UK NCSC recommends in its domain management guidance
- Keep registrant contact details current, because expiry notices go to whatever address is on file
- Put the expiry date in a shared business calendar with a reminder 60 days out, independent of the registrar
- Check WHOIS once a year to confirm the registrant is still the company and the date is what you expect
None of that takes an afternoon. Skipping it is how a fifteen-year-old business ends up bidding at auction for its own name.
FAQ
How long after domain expiration can it be recovered?
Usually somewhere between 30 and 75 days in total, though it varies by registrar and TLD. The auto renew grace period comes first and allows a normal renewal, then the 30-day redemption grace period allows restoration at a higher fee. After pending delete, recovery is no longer possible and the name is open to anyone.
How much does it cost to restore a domain after it expires?
Renewing during the grace period costs the standard renewal price. Restoring from redemption typically runs 80 to 200 dollars depending on the registrar, because the registry charges a restore fee on top. Buying the name back from a third party after it drops costs whatever they decide it is worth, which for an established domain is usually far more.
Does a domain expiration hurt rankings permanently?
A brief lapse caught during the grace period generally causes a temporary drop that recovers once the site returns. A lapse long enough for the domain to change hands is permanent for the original owner, since the history stays with the domain and the new site inherits it, for better or worse.
