See, I have a domain that has Active Status and not Locked! Now can anyone do an unauthorised transfer of the domain without my consent? Like anyone from his registrar, apply for transfer of the domain to their name. If mine has active status, can he get my domain without asking to me? Or if he applies for transfer of ownership, I will get a accept/decline offer?
Don't think it can happen. You, the owner of the domain, have to physically go into your domain manager and agree to transfer the domain, which requires you to click an "Accept" button. Unless this other person has your username and password, there's no way for that transfer to be accepted. Without that, he won't get the proper transfer code to enter on his end. I just transferred 3 domains which I own, from one registrar to another, and it was difficult to do even when I was just transferring them to myself.
Yes, they can do that ... Normally, you will get accept / decline transfer notice via email ... but if you are not respond to that email (in 7 days IMO) .. then, the domain will be transfered-out to the new owner ... Please log in to your account now and LOCK your domain
^ What mirul has said is essentially true. Different registrars have different transfer procedure...but generally, the accept/deny transfer option is sent via e-mail to the administrative contact that is listed in WHOIS records. The process is set up as acceptance by default, so the transfer will only be denied if you take extra measures to do so. If you do nothing, the transfer will occur after 5-7 days usually. So yes, unlocked domain names can be transfered away by other parties even if they have no access to your domain account. It is especially possible if the person has access to your e-mail account. From your e-mail account they can access your authorization/authentication code for transfer AND divert/delete your warning e-mails. Is there a reason not to lock your name? First and foremost, lock the names. Secondly, ensure your administrative e-mail is secure. Third, try to log in and check activity regularly. . The accept/decline within your account user panel is usually just an extra measure with some registrars... and often if you accept from your user panel, it will speed up the transfer.