Unstoppable Domains Humanity Checks: What to Know in 2026

The public sources available for this guide do not describe a humanity check that Unstoppable Domains uses to confirm that an account holder is a real person rather than a bot. Public reporting mentions the company's NFT-based domain product, its feature requests, a past change to.coin extensions and a phishing campaign that impersonated the brand, but none of them say the service runs a personhood test.

That gap matters. If you read a claim that Unstoppable Domains verifies humans, treat it as unconfirmed until you find it in the company's own help documentation or terms. Account requirements can change after an article is written, so check the official site before you rely on any verification step.

The rest of this guide explains what humanity checks are, how they differ from ordinary bot filters, and how to protect yourself when a site asks you to prove you are human.

A humanity check, often called proof of personhood or proof of humanity, is a method that tries to confirm that a live person stands behind an account and that the person holds only one such account. A plain CAPTCHA asks whether a visitor can solve a puzzle in a short session. A personhood system aims for something stronger: a link between one account and one human, so one person cannot create hundreds of accounts to farm rewards, buy up names in bulk or spam a service.

Services use these checks for several reasons. Bots can register accounts cheaply, and in systems with rewards, airdrops, voting or limited supply, automated accounts can crowd out real users. Domain registration can also attract speculation at scale. A humanity check is one tool among several, and it works alongside pricing, rate limits, fraud monitoring and account recovery rules.

A humanity check does not need to reveal who someone is by name. A well-designed system should confirm uniqueness and liveness, though designs differ on how much personal data they collect. Read the privacy terms for any specific system before you share information.

Several methods are used across the industry, and each has trade-offs.

• Puzzle or behavioral tests such as CAPTCHAs. They are quick and cheap, but automated tools can often pass them.
• Social vouching, where existing members attest that they know a person. This raises the cost of fake accounts but depends on the quality of the social network.
• Government or document checks, which tie an account to an identity document. These are strong on uniqueness but raise privacy and access concerns, and they can require KYC steps.
• Biometric uniqueness checks, which compare a physical trait against a registry. They can be strong, but they involve sensitive data and are controversial in some countries.
• Credentials from a trusted issuer, such as a verified account on another platform. Their strength depends entirely on the issuer.

A service can combine these methods. Before you take part, ask which method is used, what data is collected, where it is stored, how long it is kept and what happens if you lose access to your account.

The sources reviewed for this guide cover several points about Unstoppable Domains.

• The company describes its product as a digital identity layer built on NFT domains, according to a 2022 company profile.
• Its public feedback board lists requests in areas such as domain management and seller tools, AI features, bug reports and integrations, which points to an active product roadmap.
• In October 2022, the company disabled.coin extensions. This showed that a name's behavior depends on platform decisions as well as the blockchain record.
• A phishing email impersonating the brand has circulated, which is a reminder to verify every message you receive.
• A 2025 announcement with the 0G Foundation introduced a.ROBOT domain intended as an identity layer for machines and robotics projects.

None of these items confirms or rules out a humanity check. Read the current help center, terms and any sign-up flow yourself before you assume anything about how accounts are verified.

Unstoppable Domains sells blockchain-based names such as.crypto and.x that can point to a wallet address or a decentralized website. Domains of this kind are generally held as tokens in a wallet, so the owner controls them through that wallet's private keys or recovery method.

Reverse resolution is a feature that lets a wallet address display a chosen domain instead of a long string of characters. This helps when you want others to recognize your address, for example when receiving payments. The setup is usually done through the account settings or the wallet interface, and it is worth confirming the steps in the current documentation.

Ownership depends on several layers: the blockchain record, the smart contracts, the company's policies and any changes it makes to supported extensions. The.coin disablement shows that a platform decision can affect how a name works even when you hold it. Before buying a name, read the extension rules, renewal and fee terms, and what the company says about support if the service changes.

Verification requests are a common lure for scammers. Follow these steps before you click or sign anything.

1. Do not follow a link in an email or direct message that says you must verify you are human to keep your domain.
2. Type the company's address into your browser yourself, or open a bookmark you saved earlier.
3. Check the sender's domain carefully for small spelling changes or extra words.
4. Never enter your seed phrase or private key on any page. No legitimate verification needs them.
5. Read every transaction or signature request in your wallet before approving it. A signature can grant a site permission to move assets.
6. If you clicked a suspicious link, disconnect the site from your wallet, check your recent approvals and report the message through the company's official channels.

These steps are defensive. If you have already shared a seed phrase or approved a suspicious request, move remaining assets to a new wallet you set up yourself and seek help from the wallet provider as soon as possible.

If a service asks you to complete a verification step, first confirm that the request comes from the official site. Log in through a bookmark, look for the step in the account settings, and compare the wording with the company's published documentation. If the step is missing, that is a strong sign the message is not genuine.

If you lose access to a wallet that holds domains, recovery depends on the wallet and the way you set it up. Wallets such as OKX Wallet and Talisman each describe their own backup and recovery processes, including multi-chain support and browser access. Check the documentation for the wallet you use and keep your recovery phrase offline, in a secure place that only you control.

For account support, use the channels listed on the official site. Be wary of anyone who contacts you first offering help, asks you to install software or requests remote access to your device.

Bot resistance is a trade-off, not a free improvement. Stronger personhood checks can reduce spam and bulk registration, but they can also add friction for real users, exclude people who lack the required documents or devices, and create new data risks if personal information is stored badly.

There are also limits. No single check proves that every account belongs to a unique person, and determined actors can find ways around weaker systems. Checks can change over time as providers update their methods, so a system that looked strong last year may need review.

If you are deciding whether a platform's approach is right for you, ask a few plain questions: what is collected, who holds it, how long it is kept, how disputes are handled and whether you can use the service without handing over sensitive information. Compare the answers with the official documentation rather than with summaries from third parties.