We had been working with a consultant on a new web based business and allowed him control of our domain registrations. Unfortunately he was also changing router logins and passwords and would not record them or tell us what he had entered. For those and other reasons we cut all ties with him. He would not give us back control of our domain registrations and actually highjacked them. My take away is that no client should ever give complete control of their domain registration to a consultant. Technical access yes, but not administrative access.

I do understand that many clients don't understand and that is much easier for you as a knowledable party to keep them out of trouble however it makes it way too easy for an unscrupulous consultant to take advantage. Just my 2 cents.