Tenant wire fraud, fake lease agreements, and vendor impersonation are targeting property management offices daily. The attacks work because staff are busy and the emails look exactly right.
Wire fraud tabletop — closing day attack scenarios
Attackers intercept or spoof move-in wire instructions, redirecting security deposits and first-month rent. One Phoenix property management firm lost $213,000 in a single week before catching the scam.
Fake "lease renewal requires your signature" DocuSign emails harvest staff portal credentials. Once inside, attackers pull tenant SSNs, banking info, and background check data.
Fraudsters pose as known HVAC, plumbing, or landscaping vendors and submit updated ACH details before a large job. Payment lands in an attacker-controlled account.
Most states now require landlords and property managers to protect tenant personal data under consumer privacy statutes (California CCPA, Virginia CDPA, and others). A breach of tenant SSNs, banking details, or lease applications can trigger state AG investigations and class-action exposure. Training is your first line of defense.
Answer a few questions and we'll send you a personalized review of your team's top security gaps — plus the exact steps to fix them.
No spam. Unsubscribe anytime. Unsubscribe
Book a 15-minute session with one of our instructors — tailored to Built for Property Management. Most teams are fully trained within 5–7 days of booking.