Tenant wire fraud, fake lease agreements, and vendor impersonation are targeting property management offices daily. The attacks work because staff are busy and the emails look exactly right.
Attackers intercept or spoof move-in wire instructions, redirecting security deposits and first-month rent. One Phoenix property management firm lost $213,000 in a single week before catching the scam.
Fake "lease renewal requires your signature" DocuSign emails harvest staff portal credentials. Once inside, attackers pull tenant SSNs, banking info, and background check data.
Fraudsters pose as known HVAC, plumbing, or landscaping vendors and submit updated ACH details before a large job. Payment lands in an attacker-controlled account.
Most states now require landlords and property managers to protect tenant personal data under consumer privacy statutes (California CCPA, Virginia CDPA, and others). A breach of tenant SSNs, banking details, or lease applications can trigger state AG investigations and class-action exposure. Training is your first line of defense.
Take our free Phishing IQ Quiz to benchmark your team's awareness in 5 minutes — or book a 15-minute consult with one of our instructors.