Skip to content
Log in

How to avoid rental scams

Updated on 28 September 2026

Most people who list a room are honest. Scams do exist, though, especially in university cities at the end of the summer, when rooms are scarce and people are in a hurry. They almost always follow the same script: here are the signs to recognise it and what to do.

1. Don't pay anything before you've seen the room in person and signed

This rule alone stops almost every scam. No deposit "to hold the room", no down payment, no "booking fee", no first month in advance: first you see the room in person, then you sign the contract, and only then do you pay.

  • The security deposit is paid when you sign, against a receipt, and it normally doesn't exceed three months' rent.
  • A video call is only good for a first impression: a scammer can show you on video a flat that isn't theirs. No money until the room has been seen in person, by you or by someone you trust who goes for you, and until the contract is signed.
  • Anyone telling you that without a deposit the room will go to someone else is rushing you, and that is exactly the sign not to ignore.

2. Be wary of landlords "abroad" and of pressure to hurry

The most common script: the owner lives abroad (for work, a mission, a relocation), can't show you the flat and offers to post you the keys after a bank transfer. Nobody who really rents out a room sends the keys by post or by courier.

Other signs:

  • a price far below others in the same area: it's the most common bait;
  • lots of interested people and a decision to make "by tonight";
  • photos that look too good, like a catalogue: check them with a reverse image search (for example Google Lens), and if they show up in other listings, maybe in other cities or under other names, walk away;
  • vague answers about the address, bills and contract, and a lot of insistence on payment.

3. Ask for the contract, and make sure it's registered

Before paying, ask to read the contract calmly. Check that the name of the person signing matches their ID, and ask on what basis they're renting the room to you: owner, tenant subletting (in that case ask to see their own contract) or agency.

In Italy a rental contract longer than 30 days must be registered with the Agenzia delle Entrate (the tax agency) within 30 days of signing: ask for the registration receipt. A registered contract protects you, and you also need it for the rent tax deduction for university students living away from home and for many scholarships. Be wary of anyone suggesting you skip the contract "to save money".

4. Traceable payments only

Pay by bank transfer to the person who signs the contract, and keep receipts and transfer confirmations.

Never pay with:

  • top-ups of prepaid cards (for example PostePay);
  • Western Union, MoneyGram or similar money transfer services;
  • gift cards, Paysafecard or cryptocurrencies;
  • PayPal "friends and family", which gives the payer no protection at all.

Anyone asking for one of these methods usually wants a payment that can't be traced or disputed.

5. Stay in the site chat and use "Report"

Write and reply from the UnTetto chat: if something goes wrong the conversation stays there and you can report it. Be wary of anyone who insists on moving straight to WhatsApp, Telegram or email, or who sends you links to outside sites to "book" or "pay".

Never give anyone a code you receive by text message or email: that's how accounts get stolen, WhatsApp included.

When a message talks about paying money in advance, a reminder appears under it: it's not an accusation, just a nudge to stop for a moment. If something doesn't feel right:

  • in the conversation, tap the three dots at the top and choose Report a problem (from there you can also block the person);
  • on the listing page, once you're logged in, you'll find Report a problem at the bottom of the box about the person who posted it.

Reports are confidential: the person reported doesn't know who sent them.

6. What the badges say (and what they don't)

UnTetto doesn't ask for ID documents and doesn't check who you are. The badges next to a lister's name say one precise thing: that the person controls a certain email address.

  • Student (with the name of the university, or "University student"): they received a code at a university email address.
  • Work email verified: they received a code at a company or organisation address, not at a free webmail such as Gmail.
  • Certified email (PEC): they received a code at a PEC, the Italian certified email.
  • Trusted: it comes from reviews left by people who have already dealt with them, not from a check of ours.

A badge makes a profile more credible, but it doesn't guarantee that the listing is real or that the person is who they say they are. Before it goes online every listing goes through an automatic check and, when needed, a person, but no check replaces the rules above. The details are in the Terms of service.

If you've already paid

  • Contact your bank straight away and ask them to recall the transfer: it isn't always possible, but the sooner you ask, the better the chances.
  • Keep everything: the listing, the conversation, receipts, phone numbers.
  • Report it to the Polizia Postale (the Italian police's online crime unit), online too: https://www.commissariatodips.it
  • Report the listing and the conversation on UnTetto, so we can stop them before they target someone else.