Skip to main content
ThreatScams & fraud

Fake rental property advance payment scam — beautiful below-market apartment + landlord overseas / deployed + wire first/last month + security deposit to hold unit + keys mailed after payment + property does not exist or belongs to someone else

fake-rental-property-advance-payment-scam

What this tier means

High-confidence threat indicator — phishing, impersonation, BEC, or scam pattern. Strong contributor to the trash decision.

How Gorganizer detects this

Rental property advance-fee fraud — one of the top categories of internet crime targeting renters, particularly those searching in competitive housing markets. Scammers list properties on Craigslist, Zillow, Trulia, Facebook Marketplace, or specialized rental sites — often using photos and descriptions stolen from legitimate listings. The "landlord" claims to be overseas (deployed military, missionary, working abroad, oil-rig worker) and unable to show the property in person. To hold the apartment or house, the victim is asked to wire first and last month's rent plus a security deposit before seeing the property. In some variants, a "holding deposit" is required just to schedule a viewing. After payment, the scammer disappears. Key facts: (1) A legitimate landlord never requires advance wire transfer payment before a viewing; (2) Overseas landlords who can't show property in person are an almost universal scam indicator — real landlords have property managers or estate agents for exactly this purpose; (3) Wiring money to a stranger before viewing a property is irreversible — unlike a bank transfer, wire fraud is extremely difficult to reverse; (4) Stolen photos are often identifiable via reverse image search. The FBI IC3 receives thousands of real estate and rental fraud complaints annually. FTC guidance: never wire money to a landlord or agent you haven't met, and always view a property in person before paying any deposit. UK law requires deposits to be held in a government-approved tenancy deposit protection scheme after move-in — not before.

False-positive guard

Every signal in Gorganizer feeds a multi-module score — never a sole verdict. This is a threat-tier signal — it adds a strong contribution to the trash score. The full pipeline still requires convergence across multiple modules + a margin over the safety floor before deletion happens, and Gmail's trash (30-day recovery) is always used — never permanent delete.

About the scoring engine

Gorganizer's scoring engine emits over 1,800 signals across six modules — headers, sender, subject, body, attachments, and structural metadata. Every email is scored by every module independently; the final verdict requires multiple modules to agree and the trash score to beat the safety floor by a margin.

Sacred safety guards — never delete starred emails, replies, calendar invites, receipts/invoices, or attachments — apply unconditionally regardless of any signal.

Ready to clean your inbox?

Gorganizer scans your Gmail with this signal and 1,800+ others, then cleans everything in one click. $4.99 one-time, no subscription.

Get started