Namecheap Gave My Account to an Unverified Third Party Just Because They Asked

# Summary A Namecheap customer of 13 years lost control of his account when an unverified third party called customer support and convinced them to change the account password and email address without any verification, despite the account being registered under the original owner's name and address. Namecheap had previously called the legitimate account holder to verify a support ticket but failed to perform any verification when the third party requested access, exposing a significant security vulnerability.