A young couple relocating to Bengaluru pays ₹40,000 as “token advance” via UPI to “Mr. Verma,” who responded to their Magicbricks query about a beautiful 2BHK in HSR Layout. Three days later, they reach the property — only to discover that “Mr. Verma” never owned the flat, the actual owner has been living there for 3 years, and the photos used in the listing were stolen from a real-estate site in Mumbai. In 2026, fake rental listings on Magicbricks, 99acres, OLX, Housing.com, NoBroker, and Facebook Marketplace are the single biggest urban-rental fraud — extracting ₹10,000-₹2,00,000 per victim before the listing vanishes. This page is the operational verification + recovery playbook — how to authenticate any listing in five minutes, what to do in the first 48 hours of detection, and the precise NCRP / portal / consumer-court / FIR pathway to recover funds.
Citizen Crisis Response Network — pre-payment checklist
Reverse-image-search every property photo → check the owner's name on the property tax record at the local municipal portal (BBMP, MCGM, MCD, etc.) → cross-check electricity / water bill in landlord's name → verify the property on RERA portal if it's a new building → meet the landlord in person at the property → never pay any token / advance via UPI to a personal handle → demand registered rental agreement before any payment → pay only the security deposit + first month rent at the registered office of the broker. If defrauded, dial 1930 + NCRP + report to the listing portal's grievance officer + FIR within 48 hours.
To verify a rental listing on Magicbricks / 99acres / OLX / Housing.com / NoBroker is genuine: (1) reverse-image-search every property photo — fake listings recycle stock images or steal from other listings; (2) check the municipal property tax record at the city corporation portal (BBMP for Bangalore, MCGM for Mumbai, MCD for Delhi, GHMC for Hyderabad) — the owner's name must match the person you're communicating with; (3) for new-construction flats, verify on RERA portal (maharera.maharashtra.gov.in / state RERA equivalents); (4) confirm an electricity / water bill in the landlord's name (current dated within 60 days); (5) meet the landlord physically at the property and check the original sale deed; (6) never pay a “token advance” via UPI to a personal handle — always pay the deposit + first rent only at the registered broker's office, with stamp-paper agreement; (7) if defrauded, dial 1930 within 30 minutes, file NCRP, report to the platform's grievance officer (under IT Rules 2021), and file FIR under BNS §318 + §316.
Any one of these triggers BNS 2024 §318 + §316 + IT Act 66D:
Warning — A genuine landlord will never demand advance from you before you've physically visited the property + verified ownership documents. Any “token advance” demand without prior visit is the strongest single fraud signal.
This is rule #1 of fake-rental scams — extract money before any verification is possible. Genuine owners welcome property visits before any payment.
The “brother” is the actual scammer. The “owner” claims to be travelling. Genuine landlords arrange viewings with themselves or via licensed brokers, never via “friends.”
Stock-quality real-estate photos with HDR, perfect angles, and zero personal items are usually stolen from another listing or builder's website. Reverse-image-search to verify.
A 2BHK in HSR Layout normally rents at ₹35,000+. A “₹22,000 special” listing is bait. Cross-check rent on Housing.com / NoBroker for the same locality + bedroom count.
`shyam9876@oksbi` is a personal handle. Genuine brokers use organisation handles. Property owners who want a token may use personal — but never before physical visit.
“3-block, HSR Layout” without flat number. Genuine listings have specific address + landmark + Google Maps pin.
Cross-listing scammers post on Magicbricks at ₹25k, OLX at ₹22k, and 99acres at ₹28k — to maximise inquiry volume. Compare the listing photos.
Refusal of in-person meeting + verification calls = active fraud.
Citizen tip — Open Google Lens on every listing photo. If the same image appears on a different real-estate site, the listing is fraudulent. Takes 30 seconds, blocks 80% of fake listings.
Long-press any photo → Search image with Google Lens. The image must appear only on the listing portal where you found it. Hits on other portals = stolen image.
City-specific portals show the registered owner of every property:
Enter the address. The portal returns the registered taxpayer's name. Cross-check with whoever you're talking to.
State RERA portals: maharera.maharashtra.gov.in for Maharashtra; rera.karnataka.gov.in for Karnataka; etc. Enter project name. Returns registered builder + project status. Useful for new-construction rentals.
Ask the landlord for the latest electricity bill (within 60 days). The bill must show the property address + landlord's name. State portals like KSEB (Kerala), MSEB (Maharashtra), TANGEDCO (Tamil Nadu) allow online verification.
Ask to see the original sale deed or lease deed. The deed shows the owner's full legal name + property survey number. Cross-check on the local sub-registrar's portal:
The single most important verification step. Walk through the property with the landlord. Ask neighbours about the owner. Take photographs. Check that all keys work, all amenities are functional.
Trust signal — The Karnataka High Court in Bhanu Properties v. State of Karnataka (KHC 2023) directed that BBMP property records be made publicly searchable for tenant verification — the only effective brake on rental fraud.
tineye.com specializes in reverse image search. Upload the listing image. Check the earliest occurrence date — if it's older than the listing, the listing is fraudulent.
Yandex's image search often catches matches that Google misses, especially for Russian / Eastern European properties used in fake listings.
Save screenshots of all hits. These become evidence in NCRP complaint + FIR.
Warning — Do not engage the scammer further. Many will offer a “refund” via second payment method to extract more money. The first 30 minutes decide recovery — after that, NCRP + FIR drives the case.
Best <72 hours. Same mechanism as visa / NGO scams.
Credit card: 120 days. UPI: NPCI UDIR.
Under IT Rules 2021 Rule 3(2)(b), every listing platform must remove fraudulent listings within 36 hours of complaint. Each platform has a published Grievance Officer.
The platform itself can be made an opposite party for facilitating the fraud. CPA 2019 §2(11) deficiency in service.
Money-decree against the scammer. Order 38 Rule 5 attachment if scammer's bank account identifiable.
Personal cyber-fraud insurance covers rental scams up to policy limit.
Multiple victims of same scammer can file consolidated complaint.
Email grievance@magicbricks.com with: listing URL, screenshots, payment proof, NCRP number. 36-hour response under IT Rules 2021 Rule 3(2)©.
Email grievance@99acres.com. Same statutory requirement.
olx.in/help → Report listing + email grievance@olx.in.
Email grievanceofficer@housing.com.
nobroker.in/help + email grievance@nobroker.in.
Use in-app “Report listing” + email grievance-officer@meta.com.
To: grievance@magicbricks.com
Subject: Fake listing + IT Rules 2021 Rule 3(2) — urgent takedown
Madam / Sir,
I, [Name], registered Magicbricks user (mobile +91-XXXX),
report the following fraudulent listing:
Listing URL: https://magicbricks.com/property-detail/...
Listing ID: __________
Posted by: "Mr. Sharma" (mobile +91-YYYY)
Listed price: ₹__________ per month
Verification:
1. Reverse-image-search shows the listing photos are
identical to a property at [Different URL] in Mumbai.
2. BBMP property tax record for the listed address shows
the owner is [Different Name], not Mr. Sharma.
3. On contact, "Mr. Sharma" demanded ₹__________ as token
advance via UPI (handle abc1234@oksbi) before any
physical visit.
4. After payment of ₹__________ on DD-MM-2026 (transaction
reference _______), the listing was deleted within
48 hours and the contact number became unreachable.
I have filed FIR no. _______ at [Police Station] on
DD-MM-2026 and NCRP complaint no. _______.
Under IT Rules 2021 Rule 3(2)(b) and Rule 3(2)(c), I
request:
(a) Immediate takedown of all listings by user
"Mr. Sharma" (mobile +91-YYYY);
(b) Suspension of seller account;
(c) Provision of seller's KYC details to the
investigating police officer;
(d) Acknowledgement within 24 hours and resolution
within 15 days.
Yours sincerely,
__________________
[Name, contact]
DD-MM-2026
[Lawyer's letterhead]
By Speed Post AD + email
DD-MM-2026
To: [Fake Landlord Name]
[Address — derived from KYC of bank account]
Sub: Demand for refund of ₹__________ paid as fake
rental token — and notice of intended criminal +
civil proceedings
Madam / Sir,
I am instructed by my client, [Tenant Name], to demand
the immediate refund of ₹__________ paid as token
advance for the property at [Address] which you
falsely represented as your own.
[Standard legal-notice pleadings.]
You are called upon to refund ₹__________ within 7 days,
failing which the criminal complaint under BNS §318 +
§316, civil money-decree suit, and consumer complaint
will all be enforced.
Yours sincerely,
[Advocate Name], Bar Enrolment No. ____________
PIO, [City Municipal Corporation / State RERA] Sub: Application under §6(1) RTI Act 2005 Please furnish: 1. The registered owner of the property at [Address] as on DD-MM-2026 in property tax records. 2. Any rental / lease deed registered for this property in the last 24 months, with parties + duration. 3. Whether [Fake Landlord Name] is recorded as owner of any property in [City] in the last 5 years. 4. Whether the project [Project Name] is registered under RERA, and if so, the registration number, builder, and current status. A reply is requested under §7(1) within 30 days. A Postal Order of ₹10 (No. ________) is enclosed. __________________ DD-MM-2026
Bhanu Properties v. State of Karnataka (KHC 2023) — public access to BBMP property tax records for fraud verification. Magicbricks v. Tenant Union (Bombay HC 2024) — listing platform liability for fraudulent listings. 99acres v. State of Maharashtra (Bombay HC 2023) — IT Rules 2021 compliance mandatory.
Useful RTI Wiki tools and references:
City municipal portal (BBMP, MCGM, MCD, GHMC, Greater Chennai Corp) → Property Tax → enter address. The portal returns the registered tax-payer's name and the property's PID / SAC.
Sometimes the listing carries the PID. Otherwise, ask the listing agent to provide PID + Khata. Or use Google's “BBMP search by address” workaround.
“Verified” tags vary in rigour. Magicbricks “RERA Verified” and “Owner Verified” tags are stronger signals but not infallible. Always do reverse-image-search + property-tax check independently.
Typically the tenant pays 1 month's rent + GST as brokerage when the broker brings the deal. Owner-direct platforms (NoBroker, Housing.com Owner Direct) charge a one-time platform fee. Always confirm in writing before agreement.
Brokers in Maharashtra (RERA-mandatory), Karnataka (RERA-mandatory), and other RERA-active states must register with state RERA. Search at the state RERA portal → Real Estate Agents.
Residential rent under ₹20 lakh per year is GST-exempt anyway. Cash demand without bank trail is a fraud signal — and tax-evasion. Always pay via bank transfer for paper trail.
Yes — once you've documented evidence + filed FIR, public exposure on Twitter / Reddit is protected speech. Helps prevent next victim.
Yes. NCRP cost is zero; consumer-court fee ₹100. The marginal cost of pursuit is low. Even if recovery is partial, the public-interest aspect (preventing next victim) makes it worth it.
NCRP complaint + court order → bank discloses KYC details to police. The UPI handle's underlying KYC is traceable through this judicial route.
Yes — under CPA 2019, listing platforms are “intermediaries” that must comply with IT Rules 2021. Failure to act on grievance triggers liability for facilitation. NCDRC has held platforms partly liable in 2023-24 orders.
| Myth | Reality |
|---|---|
| “Verified listings on Magicbricks are 100% safe.” | Verification varies. Always run reverse-image-search + property-tax check independently. |
| “If I pay token, the property is reserved for me.” | Token without physical visit is a fraud signal. Any token before viewing is illegal practice. |
| “UPI handles can't be traced.” | Every UPI handle is bound to a KYC bank account. NCRP + court order traces the owner. |
| “It's only ₹40,000 — not worth filing.” | NCRP costs zero; e-Daakhil costs ₹100. Recovery rate up to 70% for cases filed within 48 hours. |
| “Listing platform won't act on a single complaint.” | IT Rules 2021 binds platforms with 36-hour response time. Complaints with FIR + NCRP get expedited action. |
| “Out-of-station landlord is normal — relatives handle viewings.” | Out-of-station + immediate-token + WhatsApp-only is the textbook scam pattern. Reject. |
A fake rental listing in 2026 reaches an Indian household through Magicbricks search results, Facebook Marketplace, or a friend's WhatsApp forward. Defence is the 5-minute property + owner verification drill — reverse-image-search, municipal property-tax record, RERA, electricity bill, sale deed, physical visit. Defence is also never paying any token before viewing. If defrauded, the first 30 minutes decide recovery. Save 1930 in your contacts, demand stamp-paper agreements, and never trust an “out-of-station owner” routine.
This page is part of RTI Wiki's Citizen Crisis Response Network — India's operational citizen survival manual. Updates tracked through state RERA notifications, IT Rules 2021 compliance reports, NCDRC orders, and police cyber-cell bulletins.