The hardest version of switching IT providers is the one where you no longer trust the provider you're leaving, and they hold the keys to your domain, email, and admin accounts. It's a genuinely stressful position, but a solvable one, provided you approach it methodically rather than trying to force a clean break overnight.
Step 1: Map What They Actually Control
Before doing anything else, list out every system where your current provider holds access or ownership:
- Domain registration and DNS
- Microsoft 365 or Google Workspace global admin
- Firewall, router, and network device admin logins
- Backup platform access
- Software licences purchased through their reseller account
- Any remote monitoring or remote access tools installed on your machines
See our guide on who owns your IT documentation, accounts, domains, and licences for how to check each of these properly.
Step 2: Line Up a New Provider First
Don't give notice until you have somewhere to land. A new provider experienced in difficult handovers can start working on reclaiming access in parallel with onboarding, rather than you trying to manage a hostile transition alone. Confirm they've handled uncooperative handovers before - it's a genuinely different skill set from a standard onboarding.
Step 3: Put Every Request in Writing
Verbal requests are easy to ignore or forget. Send a formal written request listing exactly what you need transferred and a reasonable deadline - referencing your contract's data ownership and exit clauses if it has them. This creates a paper trail that matters if the situation escalates.
Step 4: Reclaim What You Can Independently
You don't need your current provider's cooperation for everything:
- Domain: registrars have a dispute process for registrants to reclaim a domain with proof of business ownership, even without the current registrant's cooperation
- Microsoft 365 tenant: Microsoft can assist directly if you can prove you're the legitimate business owner of the tenant and the current admin is unresponsive
- Banking and financial platforms: most allow you to reset access directly as the account holder, independent of your IT provider entirely
Step 5: Assume Nothing Is Secure Until Access Is Fully Rotated
Once you've regained control of an account, treat every credential associated with it as compromised and change it, including any linked recovery emails or phone numbers that may still route back to your outgoing provider. This applies even to accounts that were technically handed over cooperatively - it's standard practice any time access has been shared, not a signal of distrust in a specific case.
When to Get Formal About It
Most situations resolve with a clear written request and a defined deadline. If a provider is refusing outright, using account access as leverage in a billing dispute, or the business impact is serious, it's worth involving a solicitor - a formal letter from a lawyer often resolves what politeness alone hasn't.
Once You're Out
The final step is making sure this can't happen again: every domain, tenant, and licence should sit under accounts your business controls directly, with your new provider given administrative access rather than ownership. See our guide on switching managed IT providers without disruption for how a clean handover should work going forward.
Frequently Asked Questions
Can an IT provider legally refuse to hand over my domain or accounts?
Generally no, not indefinitely - the data and digital assets belong to your business regardless of who technically holds the login. That said, providers can slow-walk a handover, which is why it helps to raise the request formally in writing and involve a registrar or Microsoft directly if needed, rather than relying on goodwill alone.
How do I reclaim a domain registered under my provider's details?
Contact the domain registrar directly with proof your business is the legitimate operator - an ABN, business registration, or invoices showing you paid for the domain. Registrars have dispute processes for exactly this situation, though it's faster and cleaner if the provider cooperates.
What if I don't know all the systems my provider has access to?
This is common, and it's worth treating as its own project. Start by listing every system your business uses - email, accounting software, banking, cloud storage, line-of-business apps - and check admin access on each one, rather than assuming your provider will volunteer a complete list.
Should I involve a lawyer if my provider is being uncooperative?
For most small business situations, a firm written request referencing your contract's data ownership and exit clauses resolves it. Legal involvement is worth considering if the provider is refusing outright, holding data hostage over a billing dispute, or the business impact is serious enough to justify it.
We've handled uncooperative provider handovers before - reclaiming domains, tenants, and admin access without the drama.
Managed IT Services →Stuck with a provider that won't let go?
Call 0433 087 091 - we'll talk through your specific situation and what it'll take to get you clear of it, no obligation.
Get Confidential AdviceFor related reading, see our guides to who owns your IT documentation, accounts, and domains and switching managed IT providers without disruption.