Estate agent with secure document folder and keys
Business Guide
June 2026

Estate Agent Document Requirements: Security Guide

Essential guide for UK property professionals on secure document collection.

FS
FileSeal Security Team
· 13 min read
1

Instant Red Flag Detection

Property fraud costs UK renters and buyers millions every year. Fake estate agents create convincing listings, collect identity documents from hopeful tenants, and disappear, leaving victims exposed to identity theft. Here’s how to spot them in seconds.

SCAM ALERT: Never Share If

Email Red Flags:

  • • Gmail, Yahoo, Hotmail addresses
  • • Poor spelling and grammar
  • • No company signature
  • • Urgent pressure tactics

Request Red Flags:

  • • Documents before property viewing
  • • Banking passwords requested
  • • Upfront payments demanded
  • • No physical office address

A legitimate estate agent will normally have a company email address (rather than a free Gmail/Hotmail account), a physical office you can visit, and registration with a recognised body such as Propertymark or The Property Ombudsman. Two of those missing is reason to slow down and verify; all three missing is reason to walk away.

2

Safe Document Sharing Timeline

Timing matters. Scammers push for documents early, before you’ve even seen the property. Legitimate agents follow a clear process with specific milestones before any document exchange happens.

ONLY Share Documents After:

Agent verification complete

Confirm their office address, company registration, and professional body membership

Property viewing completed

Never share documents before you’ve physically seen the property in person

You want to make an application

Only share when you’re genuinely interested and ready to commit

Use secure encrypted sharing

Never plain email attachments, use an encrypted upload link instead

Secure your practice

Secure Your Property Documents

AES-256 encrypted upload links. Documents auto-delete after download. No accounts needed.

Try FileSeal Free
3

What Legitimate Agents Actually Need

Understanding what a real estate agent needs, and when, helps you distinguish genuine requests from scam attempts. Here’s the standard document timeline for UK property transactions.

Standard document requirements by stage

Application stage
Photo ID, proof of address, employment reference
Referencing
Payslips (3 months), bank statements, employer details
Contract signing
Right-to-rent check (passport/visa), guarantor details if needed
Move-in
Deposit payment confirmation, standing order setup

If an agent asks for documents outside this timeline, particularly bank login details, full bank statements before viewing, or upfront fees before referencing, treat it as a red flag and verify their credentials before proceeding.

4

Know the Law: Fees and Deposits That Signal a Scam

The strongest scam-detection tool is knowing what an agent is legally allowed to charge. In England, the Tenant Fees Act 2019 banned most letting fees and capped the money an agent can ask for up front. A request that breaks these rules is not just a red flag, it is unlawful.

What an agent can legally ask for up front (England)

Holding deposit: capped at one week’s rent

Taken to reserve a property while referencing completes. It must be refunded or put towards the first rent or deposit, subject to limited exceptions.

Tenancy deposit: capped at five weeks’ rent

Where the annual rent is under £50,000. It rises to six weeks’ rent at or above £50,000, and must be protected in a government-approved deposit scheme.

Banned: admin, referencing and “holding” fees

Since 1 June 2019 these are prohibited in England. An agent demanding them, or any payment before you have viewed the property, is acting unlawfully.

The rules differ across the UK: Scotland and Wales run their own regimes (letting agent registration in Scotland, Rent Smart Wales in Wales), but the principle holds everywhere. If someone asks for money or sensitive documents before you have seen the property and agreed to apply, stop and verify before sending anything.

5

Verify a UK Agent in Two Minutes

UK letting agents are regulated, and that regulation gives you fast, free ways to confirm one is genuine before any document changes hands. Run these checks before you upload a single file.

The two-minute verification checklist

Redress scheme membership

Every letting agent in England must, by law, belong to The Property Ombudsman or the Property Redress Scheme. Ask which one, then confirm it on the scheme’s own member directory.

Client Money Protection

Agents handling client money in England must belong to a Client Money Protection scheme. A genuine agent can tell you theirs without hesitation.

Companies House and a real office

Look up the company, check it is active, and confirm the office address exists. A trading agent with no traceable company is a serious warning sign.

Professional body membership

Propertymark (ARLA) membership is voluntary but a good signal. Verify it on Propertymark’s directory rather than trusting a logo on a website.

Once you are satisfied the agent is genuine, share only what each stage actually requires and redact the rest. A right-to-rent check confirms your status from your passport or visa; it does not need your full bank statements. When you do send statements for referencing, black out account numbers and sort codes the agent has no need to see, and send everything through an encrypted link that deletes after download rather than as an email attachment.

6

Emergency Scam Response

If you’ve already shared documents with someone you now suspect is a scammer, act immediately. The first 24 hours are critical for limiting the damage.

If You Shared Documents with Scammers (Act immediately)

  1. 1. Stop all communication immediately, do not respond to further messages
  2. 2. Report to Action Fraud: 0300 123 2040
  3. 3. Alert your bank’s fraud department and request account monitoring
  4. 4. Monitor your credit report weekly for any new accounts opened in your name
  5. 5. Consider CIFAS protective registration to add extra checks to your credit file

Report the fake listing to the property platform where you found it (Rightmove, Zoopla, SpareRoom). These platforms have dedicated fraud teams and can remove listings and block the scammer’s account to protect other potential victims.

7

Frequently Asked Questions

What documents can a UK letting agent legitimately ask for?

At the application and referencing stage a legitimate agent typically needs photo ID, proof of address, recent payslips or proof of income, and a right-to-rent check (passport or visa) before a tenancy starts in England. They should not need your online banking login, and they have no reason to collect any of this before you have viewed the property and decided to apply.

How much deposit can a letting agent legally charge in England?

Under the Tenant Fees Act 2019, a holding deposit is capped at one week’s rent and the tenancy deposit is capped at five weeks’ rent where the annual rent is under £50,000 (six weeks’ rent at or above £50,000). Most other fees were banned in England from 1 June 2019. A demand for an admin fee, a referencing fee, or a deposit larger than these caps is both unlawful and a strong sign of a scam.

How do I check an estate or letting agent is genuine?

In England every letting agent must, by law, belong to a government-approved redress scheme (The Property Ombudsman or the Property Redress Scheme) and to a Client Money Protection scheme. Ask which schemes they belong to and verify the membership, look them up on Companies House, confirm a real office address, and check for Propertymark or ARLA membership. Rules differ in Scotland and Wales, which run their own agent registration schemes.

Is it safe to email a passport or bank statement to an estate agent?

Plain email is not a safe way to send identity documents. A copy sits in your sent folder, the agent’s inbox, and on mail servers indefinitely, where a single account compromise exposes it. Use an encrypted upload link that deletes the file after the agent has downloaded it, and redact anything the agent does not strictly need, such as full account numbers on a statement.

Stop Emailing Sensitive Documents

AES-256 encryption. Auto-delete after download. No client accounts needed. GDPR compliant.

FS
FileSeal Security Team

Written by the FileSeal security and compliance team. We specialise in document security, GDPR compliance, and data protection for UK professionals. Our guides are reviewed by industry practitioners and updated regularly.

🔒 Document Security Specialists🇬🇧 UK-based