The 1-Minute Rental Scam Detection Test
Rental scams in the UK cost tenants millions every year, and they are becoming more sophisticated. Fake listings on Facebook Marketplace, cloned Rightmove adverts, and WhatsApp-only landlords are all designed to harvest your identity documents before you realise the property doesn't exist. Before you share a single document, run this 1-minute check.
The signals that give a scam away are almost always the same. Any of the following should stop you immediately: the landlord communicates only via WhatsApp or a personal email address; documents are requested before you have viewed the property; the rent is 20% or more below the local market rate; you are pressured to pay a holding deposit immediately; or the landlord claims to be abroad and cannot arrange a viewing. These are not coincidences. Each one is a deliberate tactic to lower your guard.
What scammers are actually after when they ask for your documents:
- Bank statements. Your financial information, account numbers, and payment patterns.
- Passport photos. Everything needed to open accounts or apply for credit in your name.
- Deposit money. Cash paid upfront for a property that does not exist or is not available to let.
- Payslips. Your employer details and income, used to clone your employment identity.
- Proof of address. Combined with your other documents, enough to open utility accounts or financial services in your name.
According to Action Fraud, rental fraud reports increase by over 30% during peak moving season (June–September). The average victim loses £1,400 in fake deposits alone, but the long-term cost of identity theft from stolen documents can be far higher.
Legitimate Rental Document Process
Legitimate landlords and letting agents follow a predictable pattern. Understanding this process helps you spot when something is off. The golden rule: you should never be asked for sensitive documents before viewing a property in person.
The timeline always runs in the same order. First you view the property in person and verify the agent's identity and office address. Only after that do you express interest and receive a formal application form. Documents come next, provided through the agent's referencing provider such as OpenRent, Goodlord, or Rightmove referencing. Finally you sign the tenancy agreement and pay the deposit via the agent's official account, protected by a government-approved deposit scheme.
The platforms most likely to connect you with legitimate agents, where documents are only ever requested after a viewing:
- Rightmove and Zoopla. Established agents only, company verification required, documents requested only after a formal application.
- OpenRent. Built-in referencing with a secure document portal, no personal-inbox document requests.
- SpareRoom. User verification, no upfront documents required before you meet the landlord or housemates.
- Estate agent offices. Physical locations you can visit and verify; documents are always requested through a formal application process.
A legitimate agent will typically need: photo ID (passport or driving licence), three months of bank statements, an employment contract or recent payslips, and a previous landlord reference. Some may also ask for a guarantor if you are a student or new to the UK. All of these should be requested through their referencing provider, never via personal email or WhatsApp.
Secure Your Documents Today
AES-256 encrypted upload links. Documents auto-delete after download.
How to Share Documents Safely
Even when dealing with a legitimate letting agent, how you share your documents matters. Emailing your passport, bank statements, and payslips creates permanent, unencrypted copies on multiple servers: your email provider, their email provider, and any forwarded copies to referencing teams. None of those copies expire, and none of them are under your control once sent.
A few straightforward steps significantly reduce your exposure. Before sharing anything, watermark your documents with a note like “FOR [AGENT] RENTAL APPLICATION ONLY” so a copy lifted from their inbox cannot easily be reused elsewhere. Redact account numbers and transaction details from bank statements where the agent only needs to see your income pattern. Use an encrypted upload link rather than an email attachment so the document arrives without creating a permanent copy in your outbox or theirs.
After sharing, close the loop on the other side:
- Ask when documents will be deleted. A professional agent should have a clear data retention policy they can state without hesitation.
- Request written confirmation of secure disposal. Once your application is processed, whether successful or not, your documents should be deleted and the agent should confirm this.
- Monitor your credit report. Free statutory reports are available from Experian, Equifax, and TransUnion. Check for any application or account you do not recognise.
- Keep a record of what you shared and when. If a dispute arises later, knowing exactly which documents went to which agent on which date matters.
GDPR applies to your letting agent
Stop Emailing Sensitive Documents
AES-256 encryption. Auto-delete after download. No client accounts needed. GDPR compliant.
Written by the FileSeal security and compliance team. We specialise in document security, GDPR compliance, and data protection for UK professionals. Our guides are reviewed by industry practitioners and updated regularly.