Domain theft is the unauthorized transfer of a domain's ownership or registrar. Recovery usually starts with the losing registrar and, for gTLDs, can involve ICANN's Transfer Dispute Resolution Policy or legal action.