A paid deposit does not mean the deal is real
Deposit fraud targets landlords because payment feels like commitment. Scammers use fake cheques, stolen identities, and social engineering to get keys before the deposit clears. A deposit received is not a safe deal until the payment is verified, identity confirmed, and a stamped agreement is in place.
PDRM-recorded rental scam cases rose from 184 in 2023 to 922 in 2025 — an increase of over 400% — with losses of about RM2.5 million reported to CCID/Bernama, and recovery of funds at under 0.5% in successful fraud cases. Landlords are not only victims when they are the ones scammed; they can also be drawn into losing units, security, and legal standing when they hand over keys before verifying the deposit properly.
The decision every landlord faces is whether to accept a deposit and release keys through an informal process or to hold to a verification sequence that protects both sides. The informal route feels faster. The structured route is safer.
Scam-deposit vs legitimate deposit: how each works
A legitimate deposit is paid by a named, verified tenant into a traceable account, tied to a written agreement, before keys change hands. A scam deposit skips identity check, cleared-payment confirmation, or stamped agreement — and pressures the landlord to act before the gap shows.
| Factor | Legitimate deposit path | Scam-deposit pattern |
|---|---|---|
| Payer identity | Matches the tenant named in the agreement | Vague, cannot be verified, or uses a third-party name |
| Payment channel | Direct transfer into a stated, traceable account | Cash drop, third-party transfer, or e-wallet under a different name |
| Cheque status | Presented and cleared before keys released | Cheque presented but clearing not confirmed before key handover |
| Agreement timing | Signed and stamped before or at key handover | No TA, or only a chat-based "receipt" |
| Timeline pressure | Normal negotiation pace | Urgent: "I need the keys today" or "someone else is coming tomorrow" |
| Post-payment contact | Tenant stays reachable | Contact disappears or changes after money moves |
| Screening done | Credit and identity check passed | No screening; landlord only met the person once or online |
Malaysia has no statutory residential rent-deposit cap; deposits are governed by the tenancy agreement, and a landlord's right to retain is limited to proven loss under general contract law (Contracts Act 1950 s.74; no current Residential Tenancy Act in force). There is also no dedicated residential tenancy tribunal — disputes go through the civil courts.
When each path wins
Use the full verification sequence — identity check, cleared payment confirmation, stamped tenancy agreement — before releasing keys, even when the deposit has been paid. The deposit clears your account faster than it clears the risk.
A landlord who rushes past verification because the deposit is paid is in the same position as one who did not check at all. The scam exploit is exactly the landlord's reluctance to appear distrustful of someone who has "already paid." That is the social pressure point.
When verification is complete — the tenant's identity is confirmed, the payment has cleared (not just shown as received), the tenancy agreement is signed, and the stamping is scheduled — the deposit serves its legitimate function: a financial commitment the tenant stands behind.
When verification is skipped or shortened, a landlord faces three realistic loss scenarios:
- Bounced-cheque deposit. Keys handed over the day the cheque is presented; the cheque bounces within two to five business days. The tenant occupies the unit with no cleared funds on record.
- Stolen-identity deposit. A scammer uses a borrowed or fraudulent IC and employment letter; the deposit transfer comes from an account that cannot be connected to the applicant later.
- Agent-collecting-without-authority. An unauthorised person collects the deposit claiming to be an agent, disappears, and neither the landlord nor the real owner ever receives the funds.
Cost and risk breakdown
The financial loss in a deposit scam is rarely limited to the deposit itself. Unlocking it typically requires court action, and the real costs accumulate in unpaid rent, legal fees, a vacant unit during proceedings, and the time cost of the landlord.
| Risk item | Typical exposure | Reduces with |
|---|---|---|
| Bounced deposit cheque | Full deposit amount at risk while pursuing civil claim | Bank confirmation of cleared funds before key handover |
| Stolen-identity application | Legal, time, and vacancy cost even if deposit clears | Consented Experian-backed credit and identity screening |
| Unauthorised agent | Deposit lost; may need court to determine liability | Verify agent authority via BOVAEP/LPPEH before accepting deposits from an agent |
| Unit occupied with no cleared payment | Rent arrears compound; lawful recovery route required | No key release until payment clears and TA is signed |
| Dispute without a stamped TA | Weaker evidence position in court | Always stamp the TA; the landlord's evidence starts there |
A verified rental default can be reported to a licensed credit reporting agency only where the tenant has given consent in the tenancy agreement; publishing or broadcasting a tenant's details is not lawful (Credit Reporting Agencies Act 2010, consent basis).
The SPEEDHOME landlord path
On SPEEDHOME, the deposit and screening sequence runs inside the platform: the tenant goes through Experian-backed credit screening at sign-up, the payment is collected into a company account, and the tenancy agreement is generated before keys are confirmed. The landlord does not need to manage the verification sequence manually.
79% of landlords in a 2023 SPEEDHOME/INVOKE survey said they want proper tenant vetting on a rental platform. The reason is not paranoia — it is that informal channels expose landlords to the exact scam patterns above, and the platform's sequence closes the gaps.
On SPEEDHOME's managed platform, the average time from a tenant's first rental default to recovery action is about 31 days (SPEEDHOME internal operator data). That figure exists because the screening, payment, and documentation baseline is already in place when problems arise — the landlord does not start from zero.
Zero Deposit is a managed rental-risk system, not a financial guarantee product. It replaces the upfront cash deposit; in the rare case of severe end-of-tenancy damage the recoverable amount can be limited, so it is not a blanket guarantee. Not every unit qualifies. It is a separate question from deposit fraud risk during the intake process.
For landlords who have already experienced a default and want to understand lawful reporting options, see the guide on tenant default reporting and what you can do lawfully. For the tenant-side scam picture, see rental scam Malaysia 2026. For a full screening workflow, see how to screen tenants in Malaysia.
Explore a managed landlord listing at SPEEDHOME for landlords.
FAQ
Is a paid deposit proof that a rental deal is safe?
No. A paid deposit only proves that money was transferred. The deposit scam works because landlords treat payment as proof of commitment. Verify the payer identity, confirm the payment has cleared (not just received), and sign a proper agreement before releasing keys.
Can a landlord keep a deposit if the cheque bounces?
A landlord can claim the deposit as a proven loss, but the route is a civil claim — the Magistrates' Court for amounts up to RM5,000 (small-claims, no lawyer needed), or the Magistrates' Court up to RM100,000 for larger amounts. There is no dedicated tenancy tribunal in Malaysia. Recovery depends on locating the payer, which is harder when identity was not verified at intake.
What is the lawful way to receive a rental deposit in Malaysia?
Collect the deposit from the named tenant, into a clearly stated account, with a written receipt, tied to a signed tenancy agreement that specifies the amount, the purpose, and the conditions for return or retention. Release keys only after the payment has cleared, not when it is shown as received.
Can I report a tenant who paid a fraudulent deposit?
If a deposit fraud is confirmed, make a police report. For a verified rental default where the tenant has given consent in the tenancy agreement, you may report to a licensed credit reporting agency under the Credit Reporting Agencies Act 2010. Publishing or broadcasting the tenant's details is not lawful.
Does SPEEDHOME protect landlords from deposit scams?
SPEEDHOME's structure — consented screening, company-account payment, and platform-generated agreement — closes the main gaps that deposit scams exploit. It is not a guarantee against all risk, and Zero Deposit is a managed rental-risk system, not a financial guarantee product. What the platform provides is a verifiable intake sequence rather than an informal one.
What if an agent collected the deposit and I never received it?
Verify the agent's authority immediately via the BOVAEP/LPPEH public register before taking further action. If the agent was genuinely authorised, the liability question turns on the agency agreement. If the agent was not authorised, this is a separate fraud matter for a police report and civil recovery action.