What does an ENS lookup return?
The wallet, and whatever else the owner decided to publish next to it.
A measured run against vitalik.eth returned the address 0xd8dA6BF2…6045 in 337 milliseconds, along with the Twitter handle VitalikButerin, the GitHub handle vbuterin, the website vitalik.ca, an avatar and a PGP fingerprint.
That is the whole reason ENS matters for this kind of search. Everywhere else on a blockchain an address is a number; here the owner has voluntarily attached identifiers you can go and search, and the handles resolve across 71 platforms.
Running the address instead of the name returns the same record, so the lookup works in whichever direction you happen to be starting from. Most people arrive holding one or the other rather than choosing.
What are ENS text records?
Free-text fields attached to a name, set by whoever controls it.
The common ones are com.twitter, com.github, url, description, avatar and email. Wallets and marketplaces read them to display a profile, which is why people fill them in: the records are there to be shown.
Nothing verifies them. Setting com.twitter to a handle costs a transaction fee and proves only that the name's controller typed that string. Somebody can point their ENS name at a handle they do not own.
So treat a record as a claim rather than a confirmation. The way to close it is to check whether the handle points back, which real owners usually arrange because the point of setting the record was to be recognised.
What is a primary name and why does it matter?
It is the reverse record, and it is the stronger of the two directions.
Anybody can register a name and point it at any address, including one they do not control, so a forward resolution on its own proves nothing about the address's owner. Setting the reverse record requires a transaction from that address, which means the wallet holder signed for it.
Our result marks the primary name separately for that reason. A name that resolves to an address, where the address also names it back, has been claimed by somebody holding the keys.
This is the same distinction as a Bluesky custom domain handle: proof of control over a thing, rather than proof of who somebody is. Both are narrower than people read them as, and both are more reliable than a badge.
The name is a claim the owner made in public and signed with a wallet, which is a narrower thing than an identity and a more reliable one.
Does an ENS name identify a person?
No, and the gap is worth being precise about.
ENS records a name, an address and whatever text the owner set. There is no legal name field, no identity check and no registry behind it that verified anybody. A name reading johnsmith.eth tells you somebody registered that string.
What it does give you is a set of leads that were published on purpose. A Twitter handle from a text record, run through the profile lookup, produces a creation date and a bio, and that is where the actual verification happens.
The chain hands you the thread and nothing more. Everything after it happens on ordinary platforms, with the ordinary checks: when the account was made, what it has posted, whether the story it tells matches the dates.
How are ENS names used in scams?
Mostly by looking like somebody else's.
Names are first-come, so an impersonator registers a plausible variant of a known one and sets the text records to the real person's handles. Everything displays correctly in a wallet, because wallets show the records rather than verifying them.
Two checks catch it. Read the name character by character rather than at a glance, since the substitutions are deliberately subtle. Then check whether it is the primary name of the address, because an impersonator can set records on their own name but cannot make the real wallet name theirs back.
Registration date helps too. A name registered last month, presenting as somebody with years of public history, has answered the question before you read anything else on the record.
Is an ENS lookup legal?
Yes. ENS records are on a public chain, published deliberately by their owners so that software can display them.
The limits arrive at the same place as always. In the EU and the UK, an address linked to a named person is personal data and processing it needs a lawful basis, and an ENS record with a real handle in it makes exactly that link. In the United States, use in a credit or employment decision falls under the Fair Credit Reporting Act.
There is a practical warning as well. An ENS name ties a handle to a wallet whose entire transaction history is public and permanent, which is more exposure than most people realised they were choosing.
Common questions
How do I find out who owns an ENS domain?
Resolve it. The name returns the Ethereum address behind it plus whichever text records the owner published, commonly a Twitter handle, a GitHub handle, a website and a PGP fingerprint. A measured run against vitalik.eth returned all of those in 337 milliseconds.
Can you find an ENS name from an Ethereum address?
Yes. Resolution works in both directions, so an address returns the name and the same record set. That reverse direction is the more meaningful one, because setting it requires a transaction from the address itself rather than from whoever registered the name.
What are ENS text records?
Free-text fields attached to a name by whoever controls it, including com.twitter, com.github, url, description, avatar and email. Wallets and marketplaces read them to display a profile, which is why owners bother filling them in. Nothing verifies their contents, so each one is a claim made by the name's controller rather than a confirmed fact.
Is a Twitter handle in an ENS record trustworthy?
It is a claim, not a confirmation. Setting the record costs a transaction fee and proves only that the name's controller typed that string, so somebody can point their name at a handle they do not own. Check whether the handle points back before relying on it.
What is an ENS primary name?
The reverse record: the name an address publishes for itself. Anybody can register a name and point it at any address, but setting the reverse requires a transaction from that address, so the wallet holder signed for it. It is the stronger of the two directions by a wide margin.
Does an ENS name reveal someone's real identity?
No. ENS holds a name, an address and whatever text the owner set. There is no legal name field, no identity check and no registry that verified anybody. What it gives you is leads the owner published on purpose, which then get verified on ordinary platforms.
How do ENS scams work?
By impersonation. Names are first-come, so a scammer registers a plausible variant of a known one and sets the text records to the real person's handles, which wallets display without verifying. Read the name character by character and check whether the address names it back.
Is looking up an ENS record legal?
Yes. The records are on a public chain, published deliberately so software can display them. The limits are on use: an address linked to a named person is personal data under the GDPR, and an ENS record containing a real handle creates exactly that link.
