Modern UK apartment building
Consumer Guide
March 2026

UK Rental Document Checklist: Protect Your Identity While Flat Hunting

Essential guide for UK renters on protecting your identity when sharing financial documents.

FS
FileSeal Security Team
· 6 min read
1

The 1-Minute Rental Scam Detection Test

Rental scams in the UK cost tenants millions every year, and they are becoming more sophisticated. Fake listings on Facebook Marketplace, cloned Rightmove adverts, and WhatsApp-only landlords are all designed to harvest your identity documents before you realise the property doesn't exist. Before you share a single document, run this 1-minute check.

If ANY of these apply, it's a rental scam:

Instant Scam Signals
  • • WhatsApp or personal email contact only
  • • Documents requested before viewing
  • • Price 20%+ below market rate
  • • Pressure to pay a holding deposit immediately
  • • Landlord is “abroad” and cannot do viewings
What Scammers Want
  • • Bank statements for financial info
  • • Passport photos for identity theft
  • • Deposit money for fake properties
  • • Payslips to clone your employment details
  • • Proof of address to open accounts in your name

According to Action Fraud, rental fraud reports increase by over 30% during peak moving season (June–September). The average victim loses £1,400 in fake deposits alone — but the long-term cost of identity theft from stolen documents can be far higher.

2

Legitimate Rental Document Process

Legitimate landlords and letting agents follow a predictable pattern. Understanding this process helps you spot when something is off. The golden rule: you should never be asked for sensitive documents before viewing a property in person.

The Legitimate Timeline

Step 1

View the property in person. Verify the agent's identity and office address.

Step 2

Express interest and receive a formal application form from the agent or landlord.

Step 3

Provide documents through the agent's secure portal or referencing provider (e.g. OpenRent, Goodlord, or Rightmove referencing).

Step 4

Sign tenancy agreement and pay deposit via the agent's official account (protected by a government-approved deposit scheme).

Safe Property Platforms: View First, Documents After

  • Rightmove/Zoopla: Established agents, company verification, documents requested only after viewing
  • OpenRent: Built-in referencing with a secure document portal
  • SpareRoom: User verification, no upfront documents required
  • Estate agent offices: Physical locations you can visit, documents after formal application

A legitimate agent will typically need: photo ID (passport or driving licence), three months of bank statements, an employment contract or recent payslips, and a previous landlord reference. Some may also ask for a guarantor if you are a student or new to the UK. All of these should be requested through their referencing provider — never via personal email or WhatsApp.

Secure your practice

Secure Your Documents Today

AES-256 encrypted upload links. Documents auto-delete after download.

Try FileSeal Free
3

How to Share Documents Safely

Even when dealing with a legitimate letting agent, how you share your documents matters. Emailing your passport, bank statements, and payslips creates permanent, unencrypted copies on multiple servers — your email provider, their email provider, and any forwarded copies to referencing teams.

Smart Document Protection for Renters

Before Sharing
  • • Watermark documents: “FOR [AGENT] RENTAL APPLICATION ONLY”
  • • Redact unnecessary details from bank statements
  • • Use encrypted upload links, not email attachments
  • • Verify the agent's identity independently
After Sharing
  • • Ask when documents will be deleted
  • • Request confirmation of secure disposal
  • • Monitor your credit report for unusual activity
  • • Keep a record of what you shared and when

Under GDPR, letting agents must only keep your documents for as long as necessary. Once your application is processed — whether successful or not — they should securely delete your sensitive documents. If they cannot tell you their data retention policy, that is a red flag.

Stop Emailing Sensitive Documents

AES-256 encryption. Auto-delete after download. No client accounts needed. GDPR compliant.

FS
FileSeal Security Team

Written by the FileSeal security and compliance team. We specialise in document security, GDPR compliance, and data protection for UK professionals. Our guides are reviewed by industry practitioners and updated regularly.

🔒 Document Security Specialists🇬🇧 UK-based