Unfortunately the Registry has not imlemented a 'Domain Transfer Lock' for domains under the .al zone. This is a very useful mechanism to prevent unauthorized domain transfers and to harden the security process we have disabled the automatic retrieval of the AUTH_Code. This should provide an extra security layer for your domains.