Spotting a Fake Rental Listing Before Your Money Leaves

Read recital 14 of the European Union's short-term rental regulation and you find a sentence that quietly undoes the most repeated piece of holiday-let safety advice. The documentation a host submits when registering a property, it says, should be verified by the competent authorities "only after the issuance of the registration number." The number is issued first. The checking happens afterwards, if a competent authority gets round to it.

Regulation (EU) 2024/1028 has applied across the bloc since 20 May 2026, and it is why strings of digits now sit at the bottom of so many listings. It is genuinely useful infrastructure. It is not a badge of approval, and treating it as one is how careful people lose deposits.

What the number gives you is a handle. The regulation calls it "a unique identifier of a unit rented", says it should sit in "a public and easily accessible registry", and says it should contain no personal data. That is something you can look up without asking the person who wants your money. The value is entirely in the looking up. A number typed into a listing field is worth nothing on its own, because typing a number into a field is the easiest thing described anywhere in this article.

The registry tells you where to look

The scheme is also narrower than the headlines suggested. The regulation does not oblige every member state to invent a registration procedure. It obliges the states that require platforms to hand over rental data to run one, which means the answer to "does this country issue registration numbers" is genuinely different depending on the country.

Spain tried to build a national one and lost in court. Royal Decree 1312/2024 created the Registro Único de Arrendamientos alongside the Ventanilla Única Digital de Arrendamientos, and on 19 May 2026 the Tribunal Supremo, ruling on an appeal by the Generalitat Valenciana, annulled the register. The state, it held, had no competence to stack a national register on top of the ones the autonomous communities were already running, housing and tourism belonging to them under articles 148.1.3 and 148.1.18 of the constitution. Open the consolidated decree on the BOE today and articles 5, 8, 9 and 10 have been replaced by a bracketed Anulado, with a standing note that any other mention of the single register falls with them. The digital single window survived, and so did the duty on platforms to transmit data. The state number did not. What a Spanish listing should carry is the code from its region's tourism register: in Andalucía that is an RTA code shaped VFT/HU/00000, and the Junta publishes a free search, OPEN RTA, to check it in.

That is a court arriving at this article's argument by a different route. A registration scheme is plumbing. Plumbing can be rerouted, or ruled out of the state's hands entirely, without anybody's flat becoming more or less real.

Portugal did not need to build anything, because it already had the Registo Nacional de Alojamento Local, whose numbers take the form 12345/AL. That register is public and searchable at the national tourism registry, by number, by district, by municipality, by type of property. You can sit in a departure lounge and check whether the apartment you are about to pay for exists in the state's own records, under the name and in the place the listing claims.

That is the shape of every good check in this piece. Not "does the listing look convincing", which is a question about the fraudster's Photoshop skills. Instead: can anyone other than the person taking my money confirm this.

The photographs are usually real. They are just not theirs.

The United States Federal Trade Commission describes two shapes of rental fraud, and the first is the one that catches experienced renters. Scammers "copy the pictures, description, or virtual tour from a real online rental listing, replace the agent's contact information with their own, and then post the phony ads on a new site." Sometimes they keep the actual owner's name. The second shape is cruder: an invention, a place that is not for rent or does not exist, priced below the market to make you hurry.

Both defeat the instinct most people rely on, which is looking hard at the photographs. The photographs are frequently excellent because a professional took them for somebody else.

The counter is a reverse image search, and it takes under a minute. On a computer, go to google.com and click Search by image. From there you can upload a file, or paste an image address you have copied by right-clicking the photo on the listing page and choosing Copy Image Address. If you have already saved the picture, skip that control and drag the file straight onto the search box. In Chrome there is a shorter route: right-click the image and choose Search with Google Lens. Do it for three or four photographs from the listing, not one, and include the interior shots rather than only the view.

What you are hunting for is not "this image appears elsewhere". Professional property photography is syndicated across a dozen aggregators, so a scattering of hits on booking sites is normal and reassuring. The findings that matter are these. The same rooms appear under a different owner or agency name. The same rooms appear on a sales listing, because the flat is being sold, not let. The same rooms are a hotel. The same rooms are a furniture catalogue. Or the images are from a stock library, which is the least ambiguous answer you will ever get.

A negative result proves less than people assume. Photographs shot fresh for a fraudulent listing, or lifted from a private social media account, will not surface. Reverse image search removes suspects. It does not clear them.

Reviews are only as good as the gate in front of them

The useful question about a listing's reviews is not whether they are glowing. It is what a person had to do in order to write one.

On Booking.com the answer is documented: you can review a property "that you booked through our platform if you stayed there, or if you got to the property but didn't actually stay there." Airbnb's reviews policy is blunter still, defining a review as fake if it is "not based on a real reservation" and requiring that it be submitted by somebody who took part in that reservation.

The two do not police that rule the same way. Booking.com says it has "people and automated systems that specialize in detecting fake reviews submitted to our platform", and that it deletes what they find. Airbnb's policy describes something more reactive: reviews that violate it "may be removed", and a host or guest who believes one does can file a review dispute. So the weaker of the two gates is the one that waits to be told. The structural point survives either way: a booking had to occur before the words could be written.

A rental advertised in a classified listing, a social media group, or a standalone website has no such gate. Its testimonials cost nothing to produce. So forty warm reviews under a Facebook post are worth precisely what they cost to write, and they should not move you the way a platform review history does.

Where reviews do exist behind a real gate, read them for specificity rather than sentiment. Reviews that praise the neighbourhood, the weather and the beach while saying almost nothing about the flat itself are the pattern to distrust, because the beach is the part a writer can describe without having been inside. Look for the boring details. The shower pressure. The noise from the tram. The awkward step on the stairs. Fabricated praise is generic because inventing plausible specifics is work.

One correction to the folklore: a host with no history is not thereby a fraudster. Every legitimate listing has a first guest. What a thin history means is that you cannot outsource your judgment to strangers, so the remaining checks have to carry the weight themselves.

The moment the conversation tries to leave

The single most reliable signal is not in the listing at all. It is the request to move the transaction somewhere it cannot be audited.

Airbnb's own guidance sets out what its systems treat as suspicious, and the list is instructive: "wire or bank transfer requests, cashier's check, money order, and PDF or paper invoices." The invoice detail is the one worth memorising, because an official-looking PDF is exactly the artefact that makes a bank transfer feel legitimate. Airbnb collects the full cost of a reservation itself, with narrow exceptions for disclosed local taxes and certain fees that must already appear in the price breakdown at checkout. Anything else, including optional extras, is supposed to move through its Resolution Centre. A message arriving out of nowhere asking you to pay elsewhere is, in the platform's own framing, something to report.

The FTC is equally direct about method. If the demand is for crypto, or for gift cards, or for a wire sent via MoneyGram or Western Union, it is a scam, and "wiring money, sending gift cards, or paying by cryptocurrency is the same as sending cash". Once sent, it is gone. There is no arbiter and no reversal, which is the entire reason the request is being made.

The offered justification is almost always a discount for avoiding platform fees. That framing is worth inspecting, because the fee you are being invited to dodge is the price of the escrow and the dispute process. You are being asked to pay less for a service by giving up the service.

What your card can and cannot do afterwards

Recourse is not universal, and this is a place where advice written for one country gets repeated wrongly in another.

In the United Kingdom, section 75 of the Consumer Credit Act 1974 makes a card issuer jointly and severally liable with the supplier for misrepresentation or breach of contract, which is a stronger thing than a refund policy: you can pursue the lender directly. It applies to a single item with a cash price above £100 and not more than £30,000, and it applies only where the payment sits inside what the Act calls a debtor-creditor-supplier agreement. That last condition is where real cases get argued, because paying a party who is not the supplier complicates the chain. Certain running-account arrangements settled in full each period are carved out by subsection (3)(c), which is why charge cards behave differently from credit cards here.

There is no automatic equivalent in most other jurisdictions. Elsewhere you are typically relying on card scheme chargeback rules, which are contractual rules made by the networks rather than statutory rights, with their own deadlines and their own discretion. A debit card gives you less again in most places, and a bank transfer gives you close to nothing. The practical conclusion holds across all of them. The payment method chosen at the moment of booking determines what is possible weeks later, and it is the only decision in this process that cannot be revisited.

Five questions, one message

A property owner who exists can answer all of the following in a single reply, without stalling. A fraudster cannot answer them at all, or answers four and goes quiet on the fifth.

The exact street address, with the floor and the door. Vagueness here is the whole trick wearing privacy as a costume, because a precise address can be checked against a map, a registry, and the pictures.

The registration number and the name it is registered under, in jurisdictions that issue them. Then check it yourself, in the register that actually issued it, rather than accepting the number as an answer.

A live video call from inside the flat, now, showing the view from the window. Not a recorded tour, which can be anybody's. The distinguishing feature is liveness plus a request they could not have anticipated: ask them to open the balcony door, or point the camera at the building's entrance.

Who hands over the keys, and a phone number for that person. Real letting involves a named human with a working phone. So does real cleaning, and real key exchange.

Whether they will take payment through the platform. The answer to this one is the answer to all of them.

Ownership can often be checked without the owner's help. In England and Wales, His Majesty's Land Registry provides a property summary free of charge and a title register naming the proprietor for a small fee, and the FTC recommends the same move via city or county tax assessment records in the United States. Match the name against the person messaging you. A mismatch is not automatically fraud, since letting agents and family companies are ordinary, but it is a question that deserves a straight answer.

Fraud of this kind is not really a contest of visual inspection. It is a contest over where the transaction happens. Everything above reduces to noticing the point at which somebody tries to move the money out of reach of anyone who could later be asked about it, and declining to follow.

Sources

• Regulation (EU) 2024/1028 on data collection and sharing relating to short-term accommodation rental services - the registration number as "a unique identifier of a unit rented", the "public and easily accessible registry" requirement, verification only after issuance of the number, application from 20 May 2026, and the fact that registration procedures are required of member states that impose data-transmission duties on platforms
• Real Decreto 1312/2024, consolidated text - Spain's implementing decree, creating the Ventanilla Única Digital de Arrendamientos and the now-annulled Registro Único de Arrendamientos; the consolidated text marks articles 5, 8, 9, 10, article 12(b) and (c) and the second additional provision "(Anulado)" by judgment of the Tribunal Supremo of 19 May 2026 (Ref. BOE-A-2026-12300), with articles 1, 2(j), 6 and the first final provision annulled so far as they refer to the single register, and a standing note that any other mention of it falls too
• Tribunal Supremo annuls the single short-term rental register, CGPJ press office - judgment 620/2026 of 19 May 2026 on the Generalitat Valenciana's appeal, holding that the State lacked competence because housing and tourism fall to the autonomous communities under articles 148.1.3 and 148.1.18 of the Constitution, while the digital single window, the platform data-transmission duties and the statistical transmissions were upheld
• OPEN RTA, Registro de Turismo de Andalucía - the Junta de Andalucía's public search of registered tourist accommodation, and the RTA registration code in the form VFT/HU/00000 that must appear in a listing's advertising
• Pesquisa RNAL, Registo Nacional de Turismo - Portugal's public, free search of registered local accommodation, filterable by registration number, district, municipality and property type
• Rental Listing Scams, US Federal Trade Commission - the two shapes of rental fraud, hijacked listings and invented ones, below-market pricing as bait, the irreversibility of wire transfers, gift cards and cryptocurrency, and checking city or county tax assessment records for the owner's name
• Search with an image on Google, Google Search Help - the Search by image control, uploading a file, copying an image address with right-click and Copy Image Address, dragging an image file onto the search box, and right-clicking an image in Chrome to Search with Google Lens
• If a host asks you to pay outside Airbnb, Airbnb Help Centre - Airbnb collects the full reservation cost, the narrow exceptions for disclosed taxes and fees, the Resolution Centre, and the listed signs of fraud including wire transfers, cashier's cheques, money orders and PDF or paper invoices
• Airbnb's Reviews Policy - reviews are fake if not based on a real reservation and must come from someone who participated in it; reviews that violate the policy may be removed, and hosts or guests can file a review dispute
• How guest reviews work, Booking.com - only guests who booked through the platform and stayed, or arrived without staying, may review a property, plus the people and automated systems the company says it uses to detect and delete fake reviews
• Consumer Credit Act 1974, section 75 - joint and several liability of the card issuer with the supplier, the debtor-creditor-supplier condition, the £100 to £30,000 cash price range, and the subsection (3)(c) carve-out for certain running-account agreements
• Search for land and property information, GOV.UK - free property summary and paid title register naming the owner for property in England and Wales, with separate registers for Scotland and Northern Ireland