Namecheap Gave Account Access to Unverified Caller

A 13-year Namecheap customer reports that a third party gained full account access by simply calling support and claiming ownership of a domain. Namecheap changed the password and email without verifying identity, despite having previously called the account owner. The incident highlights a severe security flaw in Namecheap's account recovery process.