How to Assess an Unstoppable Domains Humanity Check

An Unstoppable Domains name can give you a readable Web3 identity, but the name itself does not prove you are a person rather than a bot. A domain can point to a wallet or be used as an identity label; it does not automatically verify who controls it or how that identity was created.

The distinction matters if an app asks you to complete a “humanity check” using a domain. Unstoppable Domains’ described offering covers digital domains, a marketplace, and on-chain-domain tools. That description does not establish a built-in, universal personhood check. Before proceeding, ask the app which separate verification method it uses and what evidence it accepts.

Use this rule of thumb:

• Domain: a readable name or identity handle.
• Wallet signature: evidence that someone can control a particular wallet at that moment.
• Humanity check: a process intended to assess whether an account represents a real, distinct person.

These are different claims. Do not treat one as proof of another unless the service explains how it connects them.

A domain helps people refer to an account without copying a long wallet address. Depending on the app and domain setup, it may be associated with crypto addresses or identity information. That can improve readability, but readability is not proof of personhood: a person, bot operator, or automated program could use a domain.

A service could use a domain as one signal in a broader check. For example, it might ask you to prove control by signing a message with the wallet connected to the domain. That would show control of the wallet, not necessarily that its owner is a unique human. A signature can also be requested by a malicious site, so it is important to understand exactly what you are signing.

Before you rely on a claim, look for clear answers to these questions:

1. What does the check actually verify: domain ownership, wallet control, identity, or uniqueness of a person?
2. Who operates the verification process?
3. What stops one person or organization from creating many accounts?
4. What information or action does the check require?

If the service only points to a domain or wallet, it has not explained how that distinguishes people from bots.

Treat “humanity check” as a claim to investigate, not as a technical standard. The phrase can refer to very different methods, from a basic sign-in challenge to checks involving identity documents, biometrics, or third-party credentials. Each has different privacy and reliability trade-offs.

Before connecting a domain or wallet, read the check’s explanation and look for:

• The verifier: a named organization responsible for making the decision.
• The evidence: what you must provide or prove, and what conclusion the check draws from it.
• Bot resistance: how the method limits automated sign-ups and repeated identities.
• Privacy terms: what data is collected, retained, shared, and deleted.
• Appeals: what you can do if a legitimate user is rejected.
• Costs: whether the check is free, paid, or bundled with another service.

If these details are missing, you cannot judge whether the check is effective or whether its privacy cost is acceptable. Do not assume that a domain purchase includes verification, or that a third-party app’s check is operated by Unstoppable Domains. Ask the app that presents the check to identify its provider and terms.

If a website asks you to use an Unstoppable Domains name to prove you are human, pause before approving anything. First, confirm that you are dealing with the app you intended to visit, not a lookalike page or unsolicited message. Then identify whether the app is asking only to display your domain, to connect a wallet, or to sign a transaction or message.

Use this sequence:

1. Read the prompt in full and check which account or domain it references.
2. Ask what the check verifies and which company runs it.
3. Review the privacy terms before submitting identity or biometric data.
4. Inspect any wallet request. A basic message signature is not the same as a transaction, but it can still reveal information or authorize a login.
5. Reject requests you do not understand, especially token approvals or transactions unrelated to verification.
6. Keep a record of the provider’s name and the terms you accepted.

A reputable flow should explain what happens next and provide a way to cancel. If the app cannot explain its request plainly, do not connect your wallet or submit sensitive data just to get past the prompt.

A humanity check can require more than a domain connection. Some services may ask for personal information or use identity and biometric methods. These can create lasting privacy risks: a data breach, unclear sharing practices, or collection beyond what is needed for the stated purpose. A blockchain transaction or public wallet association can also be difficult to reverse or conceal.

Before sharing anything sensitive, check whether the provider states:

• Which data is mandatory and which is optional.
• Whether documents, face images, or other biometric data are collected.
• Whether data is stored by the provider or a third party, and for how long.
• Whether the result can be verified without exposing your underlying identity.
• How to request deletion or challenge a decision.

Do not upload identity documents to a site merely because it displays an Unstoppable Domains name or logo. The domain is not proof that the site is authorized to collect your information. If you only need a readable identifier, consider whether connecting a wallet is necessary at all. Share the minimum information needed, and leave if the service’s data practices are vague or disproportionate to the task.

Buying a domain and completing a humanity check are separate decisions. A purchase may have its own price and terms, while an app’s verification process may be free, paid, or unavailable without a separate provider. Do not assume a domain includes an anti-bot feature, a personhood credential, or continuing verification.

Before paying for a domain, review the exact name and extension, the checkout total, and the terms that apply after purchase. Check whether any renewal, marketplace, or other charges apply rather than assuming the price is one-time. For a separate check, ask who charges you and whether payment buys a result, a subscription, or access to another service. Unstoppable Domains’ described domain offering does not establish a standard fee for a humanity check.

If your goal is to reduce bot sign-ups, compare the check’s stated method with the problem you need to solve. A domain may make an account easier to recognize, but that is different from preventing automated registrations or proving a unique human. If the service cannot explain the distinction, do not pay on the assumption that the name alone will stop bots.

The most common mistake is treating a Web3 identity label as a verified identity. A domain may be useful, but it can be copied into profiles, controlled by someone else, or linked to an account that has not passed any personhood check. A polished badge or “verified” label also needs context: find out who issued it, what it means, and whether it can be revoked.

Avoid these shortcuts:

• Assuming wallet control equals personhood. It proves control of a key, not the identity or number of people behind it.
• Signing without reading. Confirm whether a request is a message signature or a transaction, and never approve an unrelated token permission.
• Sharing excessive data. A domain connection should not be a reason to send documents or biometrics without clear terms.
• Trusting a badge without an issuer. Ask who verified the claim and what standard they applied.
• Paying for an implied promise. Verify the actual product and terms before buying a domain or verification service.

When the service’s explanation is incomplete, treat the check as unproven and use another way to assess the account.