Protecting email when contacting rental agents means using one alias per search or per agent for enquiries, switching to a real address before signing or paying, and verifying payment instructions off email rather than from the thread alone. The alias is stopped after the move. A tenancy agreement, a deposit payment and ongoing landlord correspondence use a real address controlled long term. The bank itself always keeps a permanent real dedicated address, never an alias, because recovery, statements and fraud alerts depend on it reaching the renter directly.
Enquiry mail and address exposure
A listing enquiry gives the recipient an address that can be kept, shared or sold on, and a rental search creates many such recipients in a short period. The enquiry needs a reply address for a viewing, a price or an application, not the address used for banking, work or long-term correspondence. When the same main address is used for every enquiry, every recipient holds the same identifier, and later mail from any of those sources arrives in the same inbox with no record of which enquiry produced it. One alias per search gives the whole search a single separate address, and one alias per agent gives each agent a different address, so mail arriving on a given alias identifies its source. Either version fails if the main address is also given out in the same search. Brave describes an email address as a durable, universal identifier that can be used to match a person across the web, including through server-side matching that browser tracker blocking cannot prevent.
Rental listing fraud
Rental listing fraud in guidance from the United States Federal Trade Commission takes two main forms. In the first, scammers copy pictures, descriptions or virtual tours from a real listing, replace the agent contact details with their own, and repost the listing on a new site, so a caller or email enquirer reaches the scammer rather than the real agent. In the second, scammers create listings for places that are not for rent or do not exist, offer surprisingly low rent, claim to be out of the country or give another excuse for not showing the property, and press the enquirer into a quick decision. SecurityHero describes the same two variants, and notes that cloned listings are often reposted 10 to 25 percent below comparable local rentals, with urgency used to prevent verification. The British Landlords Association describes copied adverts reposted with altered contact details and deposits demanded before viewings.
Since 2020, people had reported nearly 65,000 rental scams to the FTC, with about $65 million in reported losses, and in the 12 months ending June 2025 about half of those reporting a rental scam said it started with a fake advertisement on Facebook, according to the FTC analysis. Those figures count reports to the FTC, not all rental fraud. No jurisdiction-neutral count of enquiry addresses that end up on marketing lists was found in this research, and no volume figure for post-move marketing mail is stated here.
Verification before viewing
A renter searches online for the property address together with the name of the owner or rental company, and checks whether the same address appears under a different owner, a different price or as a property for sale rather than for rent. The agent or company is checked on its own website, rather than through contact details inside the listing, and the FTC guidance recommends searching for the owner or company name together with the words complaint, review or scam. A property is visited in person where possible, or by a friend or a known person, or checked through a video or virtual tour, while the FTC guidance notes that even a tour is not a guarantee that a property is real or available. Action Fraud advises renters not to send money upfront, and to confirm that the person and the property exist and that the person controls the property.
Deposit rules differ by nation and by country. GOV.UK states that a landlord or letting agent in England and Wales must put a tenancy deposit in a government-approved tenancy deposit scheme within 30 days of getting it, and must return the deposit within 10 days of both sides agreeing how much is returned. The England and Wales rules are the worked example in this article, not a universal rule, and a holding deposit paid before an agreement is signed is treated separately from a tenancy deposit.
Payment verification
A demand for payment only by wire transfer through Western Union or MoneyGram, by gift card or by cryptocurrency is a scam sign in the FTC guidance, because money sent by those methods is like cash and probably cannot be recovered once sent. Zillow gives the same warning: funds are not wired to a person not met in person. The risk applies even when a listing looks real, because an account can be compromised or an address spoofed to look close to a real one. Payment instructions are therefore verified through a contact route established before the payment request arrived, not through a number printed inside the payment email.
The Consumer Financial Protection Bureau states, for mortgage closings, that a buyer must never follow instructions contained in an email, and must verify the account name and number with trusted representatives in person or by using a phone number previously agreed. That guidance covers mortgage closings, not rental deposits, and is applied here as the same principle for rental payments. A related scam asks a renter to prove funds by money transfer before a viewing. A Citizens Advice report describes landlords who ask prospective tenants to transfer money to a trusted person, then send a copy of the receipt as proof of funds, after which the money is withdrawn and the property does not exist. Citizens Advice advises renters never to share a money transfer number or a receipt copy, and never to part with money before viewing a property in person.
Information shared in enquiries
Early enquiries need a name, a contact address and basic facts about the search, such as a move-in window or a household size. An early enquiry does not need a Social Security number, a credit score, a passport copy, a driving licence copy, pay slips or bank statements, and the FTC guidance states that, until a renter has agreed to rent a place, a landlord does not need a Social Security number, a credit score or other sensitive information, since most landlords pull a credit score themselves rather than asking the renter to obtain it. Documents belong in a later stage, through a verified route, so a request for identity or financial documents before a viewing, before the agent identity is confirmed, or through a personal email address with no verifiable link to the agency, is a reason to pause. A legitimate application stage asks for documents after the viewing.
StudentBuddy reports, attributing the figure to Action Fraud, that over 7 million pounds was lost to rental scams in the UK in 2023. That figure is reported second-hand in that guide and was not confirmed against a primary Action Fraud publication in the research for this article, so it is stated here as a reported figure, not as a verified primary total.
End of a search
After the move, a renter who used one alias per search stops that alias, and a renter who used one alias per agent stops each alias for an agent who was not chosen, while mail to other addresses is unaffected. The switch to a real address happens before signing, not after the move: a tenancy agreement, a deposit payment and ongoing landlord correspondence use a real address that the renter controls long term. The bank itself always keeps a permanent real dedicated address, never an alias, because recovery, statements and fraud alerts depend on it reaching the renter directly.
Reporting and recovery
A renter who suspects a fake listing reports the listing to the platform where it appeared, and reports the fraud to the relevant authority. In the United States, the FTC accepts reports at ReportFraud.ftc.gov. A renter who has already paid by card contacts the card issuer about a dispute, and a renter who has already wired money contacts the bank immediately about a wire recall, while recovery after a wire transfer is narrow and time-sensitive. A renter who sent identity documents to a suspicious address checks breach data, for example through Have I Been Pwned. An alias does not verify a listing, verify a payment or recover money; it only limits which address a sender holds.
Email aliases for rental searches
AliasFleet provides email aliases that forward to a destination inbox, with a separate alias for each service or contact and a control to disable an alias. In a rental search, that structure gives one alias for the search, or one alias per agent, with mail from each alias arriving in the same destination inbox and the main address not given to the agent. ExpressVPN describes a similar relay model, in which an alias tied to misuse can be disabled without changing the real address. AliasFleet does not verify rental listings or landlord identity, hold deposits or verify payment instructions, and it does not replace the real address used for signing, for payment or for banking. The bank itself always keeps a permanent real dedicated address, never an alias. The limit of an alias is address separation: mail to a stopped alias stops, and a listing that was false before an alias was used remains false after it.
Top comments (0)