There is a precise moment, in any housing search, when your guard drops. It isn't with the first message. It's at the fifteenth listing with no reply, the third rejected application, the day before the school year starts or the holidays begin. That's when a text arrives:
"Hello, following your enquiry: the studio is still available. I'm currently abroad for work, a viewing isn't possible this week but I can hold the flat for you. Just pay the first month's rent + deposit to secure the application. I'll email you the lease."
This message frightens no one. It makes no threats, mentions no blocked account, impersonates no bank. It does exactly the opposite: it relieves you. And that is precisely why it works better than most conventional smishing campaigns.
Why housing scams travel by text message
Listing platforms — Leboncoin, SeLoger, Airbnb, student housing networks — have all rolled out internal messaging systems, with automated detection and stored conversation histories. A fraudster who stays inside a platform's inbox leaves traces, gets reported, and sees their account suspended within days.
Hence a constant that holds for nearly every rental fraud: leaving the platform is the first step of the scam. The fraudster finds a pretext to get your phone number, then shifts the conversation to SMS or an encrypted messaging app.
The pretexts are always the same:
- "The site's messaging is glitching, send me your number."
- "I'm getting a lot of enquiries, it's simpler by text."
- "Send me your number, I'll call you to explain the arrangements."
Once off-platform, three things change at once. The platform can no longer see anything, can no longer warn you, and won't be able to compensate you. Your number enters an address book that may well be resold. And the conversation takes on a personal, almost friendly tone that disarms suspicion far faster than any form.
Cybermalveillance.gouv.fr classifies these cases as fraud and sets out a simple rule: as soon as someone insists on leaving the official channel, the red flag is already there — before money is even mentioned.
The four most common scenarios in 2026
1. The landlord "abroad"
This is the unshakeable classic. The owner is an expat, a missionary, a soldier, a humanitarian doctor — the profession varies, the story doesn't. He can't arrange a viewing, but he's willing to trust you. He asks for a transfer to "reserve" the place, promises to post the keys, sometimes via a bogus escrow service impersonating a letting agency or a shipping company.
The property often genuinely exists: the photos have been lifted from a real listing published elsewhere. A reverse image search is usually enough to find the original ad, with a different price and a different name.
2. The viewing "already done by others"
A more modern variant: you're sent a video tour, sometimes live, sometimes pre-recorded. The fraudster shows you a flat he really is standing in — because he booked it for two nights as a holiday rental. The video removes all doubt, and the transfer goes out.
3. The phantom summer sublet
In July and August, the scam shifts to holiday rentals. A listing too good for the season, an owner in a hurry, a request for a deposit by instant transfer or via a payment link sent by text. Victims only discover the problem when they arrive, often standing outside a building whose residents have never heard of them.
4. The fake "guarantor" and the fake application portal
Newer and nastier: after a credible exchange, you're sent an SMS link to a supposed rental application platform. You upload your ID, tax assessment, payslips and bank details. Not a single euro leaves immediately. What leaves is a complete identity file — ideal raw material for opening credit in your name or setting up a fake bank adviser scam a few weeks later.
This is the most underestimated scenario: the victim doesn't know she's a victim, because she hasn't lost anything straight away.
The most reliable signal: the payment method requested
You can be wrong about the substance of a listing. About the payment method, almost never. Fraudsters need money that is irreversible, available immediately, and beyond the reach of banks' recovery procedures.
| What you're asked for | Risk level | Why |
|---|---|---|
| Instant transfer to a foreign IBAN | Very high | Funds available in seconds, recall virtually impossible |
| Money transfer such as an international cash order | Very high | Cash withdrawal, no useful traceability |
| Prepaid cards, vouchers, cryptocurrencies | Very high | No recourse, immediate conversion |
| Payment link received by text | High | Page controlled by the fraudster, often brand impersonation |
| Banker's draft "to be sent in advance" | High | A pretext to obtain your full details |
| Standard SEPA transfer to a French IBAN after a signed lease and a real viewing | Normal | The usual framework for a rental |
Remember the formula: no deposit is ever paid before a viewing and a signed lease. In a standard tenancy, the security deposit is handed over on moving in, at signature, with an inventory of fixtures. Anything that comes before that is a fraudster's invention.
The other warning signs, in the order they appear
- The price. Rent 25 to 40% below the local market isn't a bargain, it's bait. Compare it with local rent observatories and the rent-cap ceilings in the cities concerned.
- The wording of the listing. Machine-translated phrasing, inconsistent punctuation, a mix of formal and informal address, random capitalisation. Generative AI has greatly improved these texts in 2026, but factual inconsistencies remain: floor area that changes between two messages, a floor number that shifts, a fluctuating number of rooms.
- Time pressure. "Three other people are interested", "I'm leaving tomorrow", "I'll hold the application until tonight." Urgency is fraud's universal tool.
- Refusal of any verifiable contact. No exact address, no landline, no verifiable agency name, calls always declined in favour of writing.
- The sender. A mobile number that changes between exchanges, an unexpected international prefix, or an alphanumeric sender ID mimicking a well-known brand when the thread is supposed to be personal.
The six-step verification method
It takes twenty minutes. It costs less than a lost deposit.
1. Reverse image search on every photo. If the same shots turn up on a listing in Lyon and another in Bordeaux, or on a foreign property site, the case is closed.
2. Address check. Compare the façade in the photos with satellite and street view imagery. Check that the number of floors, the balconies and the window frames match.
3. Landlord identity. For a private individual, ask for ID and proof of ownership or a property tax notice. For an agency, check the SIREN number on the business register and confirm the existence of the professional licence for property transactions or management, issued by the Chamber of Commerce and Industry. A real agency has a physical address, a landline and long-standing customer reviews.
4. A voice call is mandatory. A fraudster avoids the phone: it reveals the accent, the improvisation, the noise of a call centre. A legitimate landlord picks up.
5. A real viewing, or a trusted proxy. If you're far away, have someone you know view the place, or use a third-party viewing service offered by some agencies. If no one can go, don't sign.
6. A cold read of the lease before any payment. Check that the landlord's name, the IBAN account holder's name and the property address all match. A mismatch between these three elements is, on its own, reason enough to stop everything. A practical guide to residential tenancy agreements is a great help in spotting the far-fetched clauses that fake contracts copy so badly.
Safety rule: never pay for the chance to view, to "reserve", to "hold" or to "prioritise" an application. These services do not exist in French tenancy law.
Protecting the number you use to look for housing
A housing search means dozens of messages sent to strangers, often with a personal number written out in plain text. That number ends up in databases that circulate, and the resale fuels the smishing campaigns of the following months.
A few useful precautions:
- Publish as little as possible. Don't put your number in the body of a listing or in a public message: let the platform handle the introduction until the landlord's credibility is established.
- Compartmentalise. A second line dedicated to admin — via a prepaid SIM card or a secondary eSIM on a dual-SIM phone — lets you ring-fence everything related to the search, then shut it down once you've moved in.
- Never send documents without a watermark. On a copy of your ID card, add a note reading "copy intended solely for the rental of the property located at …, on [date]". The CNIL points out that a landlord may only require certain documents exhaustively listed by decree: no bank statements, no certificate of good account standing, no medical records.
- Scan properly. A portable document scanner avoids blurry photos being resent several times to several people, and lets you keep a single, well-archived copy.
- Save the evidence. Time-stamped screenshots of the listing, the texts, the emails and the bank details you were given. That's what you'll hand over with your complaint, and to your bank.
You've already paid: the window of the first few hours
Time is the only factor that counts.
- Call your bank immediately and ask for a "recall" of the transfer. On a standard SEPA transfer, a recall request within the following hours sometimes succeeds. On an instant transfer, the odds are slim but not zero: call anyway, and ask for the request to be logged in writing.
- Cancel your card if you passed on card details, and monitor the debits for several weeks.
- File a complaint, online or at a police station, with all the evidence and the recipient's IBAN. The national support service for cybercrime victims and the online pre-complaint schemes will help you prepare the file.
- Report the text to 33700, France's national service for reporting SMS spam and fraud: forward the message, then send the sender's number when prompted.
- Report the listing and the account on the original platform: this protects the next person and feeds into grouped reports.
- Report the fraudulent site on the Pharos platform if a payment link or a fake application portal was used.
If your identity documents have gone out, add two reflexes: monitor your credit file with your bank and the Banque de France, and file a complaint specifically for identity theft, which will help you if a loan appears in your name.
What these scams say about the market
It would be comforting to believe that this fraud only catches naive people. It doesn't, and the victims' profiles prove it: students on the move, families relocating for work, seasonal workers, people who have recently separated. The common thread isn't gullibility, it's time pressure in a strained market.
The fraudster isn't selling a home. He's selling a way out of uncertainty. That's why the only truly effective firebreak is procedural rather than psychological: set yourself a written rule in advance — no viewing, no lease, no payment — and stick to it even when you're exhausted, even when the listing looks perfect, especially when you have only eight days left.
A housing search notebook in which you record the name, number, address, price and contact date for each listing does more than keep things sorted: when two different "owners" use the same IBAN or the same turn of phrase, it jumps off the page.
And if doubt persists despite every check, there remains the simplest option, the one fraudsters dread most: send nothing, and move on to the next listing. A real landlord will understand. A fake one will vanish.
