Unpaid rent scam: Cybercriminals now target tenants

After rental scams, a new form of scam has been affecting tenants in recent months: the unpaid rent scam . The modus operandi is simple, but unfortunately very effective.

The tenant receives an email that appears to come from their landlord or a real estate agency. They are informed of unpaid rent that, according to the letter, they must pay promptly . On the surface, the document, which refers to a "formal notice," does not appear to be at all suspicious. Within the letter, a new bank account number is provided with the sole explanation of a "recent change in bank details."

Some scammers go further, sending multiple messages alleging a "technical error" related to the landlord's account. As a result, the victim, worried about incurring penalties or eviction, unsuspectingly makes the transfer. Except, in reality, they've just sent their money to a cybercriminal's account.

Cybercriminals exploit victims' vulnerability

According to researchers at Proofpoint, a cybersecurity firm, this scam relies on a well-known tactic in phishing attacks: playing on the urgency of the situation.

“Email lures that alert users to unpaid and late rental payments are intended to create anxiety among the recipients of these campaigns so that they act quickly to avoid potential eviction and/or interest, penalties, and fees,” Proofpoint researchers explain, reports TF1 Info .

According to TF1 Info, a group identified under the code name TA2900 is believed to be behind this wave of scams. It has reportedly already used a dozen different IBAN numbers in more than 50 scam campaigns . The challenge for victims is that these bank accounts are frequently changed, making it particularly difficult to detect and block scammers.

To date, there is no evidence that the cybercriminals are operating from France, or even that they speak French. They are simply adapting their speech and appearance to blend in with the usual communication practices between tenants and landlords.

Like the telephone and tax sectors, real estate has become a prime target for cybercriminals. Scams involving fake sales, fictitious rentals, and fake real estate agents have already generated a lot of media attention. Unpaid rent scams have now been added to this list.

How to protect yourself?

Before making a payment, always verify the information through another channel. If in doubt, call your landlord or real estate agency . Do not click on any links in the email, and especially do not use any bank details provided in this type of message.

If you've already made the transfer, contact your bank immediately to report the fraud. In some cases, the transaction may still be blocked. It's also recommended that you file a complaint to help investigators catch the cybercriminals.