ENS names: what a .eth name proves and what it doesn’t
What an ENS name like alice.eth actually is, why a name is only a pointer that can change, how primary (reverse) names are verified, how look-alike names spoof readers, and what expiry means—ENS-spec literacy, not investment advice.
A short name such as alice.eth is much easier to read than a 42-character hex address, so it feels more trustworthy. That feeling is the risk. An ENS name is a label that points somewhere. It is not a guarantee about who controls the destination, and the destination can change. This page explains what a name proves, what it does not, and how to check one before you send.
How it works: registry, resolver, record
ERC-137 (created 2016-04-04) describes ENS as three layers. The registry records who owns each name and which resolver contract answers questions about it. The resolver returns records, such as the address the name points to. A registrar hands out names under a parent like .eth.
- Lookups happen live. Your wallet asks the registry for the resolver, then asks the resolver for the address, each time you type the name. Whoever controls the name can update the record, so
alice.ethtoday andalice.ethnext month may point to different addresses. - Empty is not a destination. ERC-137 tells clients to treat a zero-address result as “no record” and refuse to send there.
- Records can differ by chain. ENS’s primary-names docs note that a name can resolve to different addresses on different chains. The address shown for Ethereum mainnet is not automatically the one used on an L2.
Primary names: the reverse direction
Wallets and explorers sometimes show a name next to an address. That is a primary name, also called a reverse record. The owner of the address sets it, and anyone can claim any name in their reverse record. ENS’s docs say an app should only display a primary name after checking it forward: look up the name, and confirm it resolves back to the same address. If it does not, the label is meaningless.
Look-alike names and normalization
ENSIP-15 (created April 3, 2023) defines how names are normalized so the same-looking name maps to one canonical form. It describes spoofing tricks the standard has to handle: invisible zero-width characters, confusable characters from other scripts, and mixed-script names. It also says plainly that not every normalized name is visually unambiguous. Normalization lowers the risk. It does not mean any name you can read is the one you meant.
Names expire and change hands
ENS’s ETH Registrar docs explain that .eth names are registered for a period and must be renewed. After expiry there is a 90-day grace period. Then the name goes into a 21-day temporary premium auction, after which anyone can register it. Names are also transferable as NFTs. A name you saved a year ago may now belong to someone else.
How to verify before you send
- Get the name from the person, not a search result or a reply. The same rule applies as for address poisoning.
- Read the resolved address your wallet shows. Compare the first and last several characters with an address you already confirmed through another channel.
- Check the network. If you are sending on an L2 or another chain, confirm the name resolves for that chain. Background: networks and chain IDs.
- Be suspicious of near-matches. Extra characters, swapped letters, unusual scripts, or emoji variants all deserve a second look.
- Re-verify saved names after long gaps. Expiry and transfers mean the old owner may not be the current one.
- Use a small test send for first-time recipients. Then confirm with the recipient through a channel you already trust before sending more.
What we will not do
We will not tell you whether to register, buy, or sell any name, and we will not comment on name “values” or trading. We will not recommend specific wallets or name-lookup tools.
Related free docs
- Address poisoning and clipboard hygiene
- How to read a blockchain transaction
- Networks and chain IDs: verify before adding
- Common crypto scams to recognize
- Crypto glossary in plain English
Sources
- ERC-137: Ethereum Domain Name Service - Specification (created 2016-04-04; registry, resolvers, registrars; zero-address handling)
- Primary Names — ENS Docs (reverse records; forward-resolution check; per-chain addresses)
- ENSIP-15: Name Normalization — ENS Docs (created April 3, 2023; zero-width, confusable, and mixed-script spoofing)
- ETH Registrar — ENS Docs (expiry, 90-day grace period, 21-day premium auction, transferability)
Educational content only — not investment advice. This page explains how ENS names resolve as a literacy topic; it does not recommend any name, wallet, tool, network, or asset to buy, sell, or hold.