The listing was perfect. Slightly cheaper than everything else, which is why you moved fast. The “owner” was overseas, or the agent could only do a video walkthrough, but they’d hold it for you if you transferred the bond and two weeks’ rent today. You did. The keys were coming by courier. They never came. The number’s dead, the listing’s gone, and the real owner of the house has never heard of any of it.
Rental scams surge every time the market tightens. The money is recoverable more often than people think, but only if you move in the first hours and days. Here’s the order to do things in.
Your rights
- Your bank must try to recall the funds. Under the ePayments Code and the Banking Code of Practice, when you report a scam payment your bank must act promptly to request a recall from the receiving bank. The receiving bank must freeze the funds if they’re still there. Speed is everything: money moved by a scammer is often gone within hours.
- The receiving account holder is liable. Whoever’s name is on the account that received your money either is the scammer or is a “money mule” who let their account be used. Either way, you have a civil claim against that person for money had and received. Banks won’t give you the name voluntarily, but a tribunal or court can order it, and police can obtain it.
- If a real agent or a real person is involved (a subletter who took a deposit and then rented to someone else, an “agent” who’s actually a person you can identify), it’s a straightforward Letter of Demand and tribunal claim under the tenancy law or the ACL.
- Legitimate bonds go to the government. In every state, a bond must be lodged with the bond authority (New South Wales Rental Bonds Online, RTBA in Victoria, RTA in Queensland, Bonds Online in Western Australia, CBS in South Australia). A “landlord” who wants bond paid into a personal account is a red flag you can quote when the bank asks whether you took reasonable care.
- Bank obligations under scrutiny. AFCA can review whether your bank did enough (for example, ignoring a payee name mismatch, or failing to act on your report quickly). Compensation is possible where the bank fell short.
What to do right now
- Call your bank’s fraud line now, not tomorrow. Say the words “scam payment, please request an urgent recall”. Get a reference number and the name of the person you spoke to. Ask them to confirm in writing that a recall was requested and when.
- Report to ReportCyber (cyber.gov.au) and Scamwatch. ReportCyber generates a police reference and the report goes to your state police. Scamwatch feeds the ACCC and the banks’ intelligence sharing. Both take ten minutes.
- Screenshot everything before it disappears. The listing, the URL, the messages, the “lease”, the ID they sent, the BSB and account number, the payment confirmation. Report the listing to the platform (realestate.com.au, Domain, Facebook Marketplace, Gumtree) and ask them to preserve the poster’s details for police.
- Write to the receiving bank yourself. Find the bank from the BSB and email its fraud team: “Funds of $[amount] were sent to BSB [X] account [Y] on [date] as the result of a scam. I request that the account be frozen and the funds held pending recall.” They may not reply, but it creates a record.
- Send a Letter of Demand once you have a name. Police, the platform, or a tribunal subpoena will often surface the account holder. A formal letter to that person demanding repayment within 14 days, before a tribunal claim, is often enough, particularly with mules who are frightened of the police involvement.
- Complain to AFCA if the bank was slow or unhelpful. Free, and banks have paid out where they failed to act on a scam report promptly.
Ready to put it in writing?
Answer 3 quick questions to check you have the details your document needs, and see your next step.
1. Who is this about?
2. How much is at stake?
3. Do you have it in writing?
Your result is ready. Want a copy by email? (optional)
If the “landlord” was real but the deal wasn’t
Some rental deposit disputes aren’t scams in the criminal sense: a genuine owner or head tenant took a holding deposit, then rented to someone else, or an agent took a “holding fee” and won’t return it. In those cases the law is on your side. In New South Wales, a holding fee can’t exceed one week’s rent and must be refunded if the landlord decides not to proceed (Residential Tenancies Act 2010). Queensland’s Residential Tenancies and Rooming Accommodation Act 2008 and Victoria’s Residential Tenancies Act 1997 have similar rules. A Letter of Demand followed by a tribunal application gets it back.
Who to complain to
Your bank first, then AFCA if it fails you. ReportCyber and Scamwatch. Your state police. The listing platform. For a real landlord or agent who kept a deposit, your state fair trading body and the tenancy tribunal (NCAT, VCAT, QCAT, etc.). IDCARE (free) if you sent identity documents to the scammer.
Start your claim — $97
Claim Done drafts your Scam Recovery Letter in about 5 minutes for $97. Tell us what happened — we handle the legal language.
You approve it before anything is sent.
What happens when you put it in writing — properly
Same problem. What a prepared case looks like.
Getting it drafted
Can I have a Scam Recovery Letter drafted for me instead of writing it myself?
Yes. Claim Done (claimdone.com.au) drafts a Scam Recovery Letter from the answers you give about your situation for a flat $97 AUD. You read and confirm the draft, then the final PDF is emailed to you. Start at claimdone.com.au/begin/?service=scam-recovery. Claim Done is not a law firm and does not give legal advice.
How much does a Scam Recovery Letter cost, and how long does it take?
$97 AUD flat, shown before you pay, with no subscription. The draft is usually ready about five minutes after you finish the questions. It covers every Australian state and territory.
Do I need a lawyer to send a Scam Recovery Letter in Australia?
No. There is no legal requirement to use a solicitor to write or send a Scam Recovery Letter; many people send their own. Claim Done drafts it for you and you approve it before it is sent.