Fake Rental Listing Scam: Magicbricks, 99acres, OLX

Last reviewed: 1 September 2026.

An illustrative case (not a named person): a young couple relocating to Bengaluru pays ₹40,000 as “token advance” via UPI to a “landlord” who responded to their Magicbricks query about a beautiful 2BHK in HSR Layout. Three days later, they reach the property — only to discover that he never owned the flat, the actual owner has been living there for 3 years, and the photos used in the listing were stolen from a real-estate site in Mumbai. In 2026, fake rental listings on Magicbricks, 99acres, OLX, Housing.com, NoBroker, and Facebook Marketplace are the single biggest urban-rental fraud — extracting ₹10,000-₹2,00,000 per victim before the listing vanishes. This page is the operational verification + recovery playbook — how to authenticate any listing in five minutes, what to do in the first 48 hours of detection, and the precise NCRP / portal / consumer-court / FIR pathway to recover funds.

Citizen Crisis Response Network — pre-payment checklist
Reverse-image-search every property photo → check the owner's name on the property tax record at the local municipal portal (BBMP, MCGM, MCD, etc.) → cross-check electricity / water bill in landlord's name → verify the property on RERA portal if it's a new building → meet the landlord in person at the property → never pay any token / advance via UPI to a personal handle → demand registered rental agreement before any payment → pay only the security deposit + first month rent at the registered office of the broker. If defrauded, dial 1930 + NCRP + report to the listing portal's grievance officer + FIR within 48 hours.

To verify a rental listing on Magicbricks / 99acres / OLX / Housing.com / NoBroker is genuine: (1) reverse-image-search every property photo — fake listings recycle stock images or steal from other listings; (2) check the municipal property tax record at the city corporation portal (BBMP for Bangalore, MCGM for Mumbai, MCD for Delhi, GHMC for Hyderabad) — the owner's name must match the person you're communicating with; (3) for new-construction flats, verify on RERA portal (maharera.maharashtra.gov.in / state RERA equivalents); (4) confirm an electricity / water bill in the landlord's name (current dated within 60 days); (5) meet the landlord physically at the property and check the original sale deed; (6) never pay a “token advance” via UPI to a personal handle — always pay the deposit + first rent only at the registered broker's office, with stamp-paper agreement; (7) if defrauded, dial 1930 within 30 minutes, file NCRP, report to the platform's grievance officer (under IT Rules 2021), and file FIR under BNS §318(4) + §319.

• What counts as a fake rental listing scam
• The eight rental-fraud red flags
• The 5-minute property + owner verification drill
• Reverse image search — your first weapon
• If you have already paid — the first 48 hours
• Recovery pathway — money back + listing takedown
• Reporting the listing platform — IT Rules 2021
• Sample legal-notice + portal grievance complaint
• Filing an RTI to municipal corporation / RERA
• FAQ
• Myth vs reality

Any one of these triggers BNS, 2023 §318(4) + §319 + IT Act 66D:

• Listed photos are stolen from another property (reverse-image-search hit on a different listing).
• “Owner” is unreachable in person — only by WhatsApp / Telegram / DM.
• Demands token / advance by UPI to a personal handle before any property visit.
• Property visit refused “till advance is paid” or “since I'm out of station.”
• Same property advertised on multiple portals at different rents (cross-listed).
• Listing disappears within 48 hours of advance payment.
• Fake registered email ending in `gmail.com` instead of an organisation domain (legitimate brokers use brokerage's domain).
• Owner refuses physical agreement on stamp paper, insisting on “WhatsApp acknowledgement.”

Warning — A genuine landlord will never demand advance from you before you've physically visited the property + verified ownership documents. Any “token advance” demand without prior visit is the strongest single fraud signal.

This is rule #1 of fake-rental scams — extract money before any verification is possible. Genuine owners welcome property visits before any payment.

The “brother” is the actual scammer. The “owner” claims to be travelling. Genuine landlords arrange viewings with themselves or via licensed brokers, never via “friends.”

Stock-quality real-estate photos with HDR, perfect angles, and zero personal items are usually stolen from another listing or builder's website. Reverse-image-search to verify.

A 2BHK in HSR Layout normally rents at ₹35,000+. A “₹22,000 special” listing is bait. Cross-check rent on Housing.com / NoBroker for the same locality + bedroom count.

`shyam9876@oksbi` is a personal handle. Genuine brokers use organisation handles. Property owners who want a token may use personal — but never before physical visit.

“3-block, HSR Layout” without flat number. Genuine listings have specific address + landmark + Google Maps pin.

Cross-listing scammers post on Magicbricks at ₹25k, OLX at ₹22k, and 99acres at ₹28k — to maximise inquiry volume. Compare the listing photos.

Refusal of in-person meeting + verification calls = active fraud.

Citizen tip — Open Google Lens on every listing photo. If the same image appears on a different real-estate site, the listing is fraudulent. Takes 30 seconds and catches most fake listings.

Long-press any photo → Search image with Google Lens. The image must appear only on the listing portal where you found it. Hits on other portals = stolen image.

City-specific portals show the registered owner of every property:

• Bangalore — BBMP at bbmp.gov.in → Property Tax
• Mumbai — MCGM at mcgm.gov.in → Property Tax
• Delhi — MCD at mcdonline.nic.in
• Hyderabad — GHMC at ghmc.gov.in
• Chennai — Greater Chennai Corp at chennaicorporation.gov.in

Enter the address. The portal returns the registered taxpayer's name. Cross-check with whoever you're talking to.

State RERA portals: maharera.maharashtra.gov.in for Maharashtra; rera.karnataka.gov.in for Karnataka; etc. Enter project name. Returns registered builder + project status. Useful for new-construction rentals.

Ask the landlord for the latest electricity bill (within 60 days). The bill must show the property address + landlord's name. State portals like KSEB (Kerala), MSEB (Maharashtra), TANGEDCO (Tamil Nadu) allow online verification.

Ask to see the original sale deed or lease deed. The deed shows the owner's full legal name + property survey number. Cross-check on the local sub-registrar's portal:

• Maharashtra — igrmaharashtra.gov.in
• Karnataka — kaverionline.karnataka.gov.in
• Andhra Pradesh / Telangana — igrs.ap.gov.in / igrs.telangana.gov.in
• Tamil Nadu — tnreginet.gov.in

The single most important verification step. Walk through the property with the landlord. Ask neighbours about the owner. Take photographs. Check that all keys work, all amenities are functional.

Trust signal — BBMP property-tax records (and their equivalents in most city corporations) are publicly searchable, so you can independently confirm the registered owner's name without any court order. This check is the single most effective brake on rental fraud.

1. Long-press the listing image → “Search image with Google Lens.”
2. Browse results. If the same image appears on multiple property listings or stock-photo sites, the listing is fraudulent.

tineye.com specializes in reverse image search. Upload the listing image. Check the earliest occurrence date — if it's older than the listing, the listing is fraudulent.

Yandex's image search often catches matches that Google misses, especially for Russian / Eastern European properties used in fake listings.

• Same image on builder website (developer's stock images).
• Same image on Pinterest / interior-design sites.
• Same image on competing rental listings.
• Same image on multi-broker websites.

Save screenshots of all hits. These become evidence in NCRP complaint + FIR.

• Dial 1930 with UPI / NEFT reference + landlord details.
• Disable UPI in bank app.
• Reduce per-transaction limit.
• Take screenshots: listing, payment, all WhatsApp messages, landlord's profile.

• File on cybercrime.gov.in → Online Financial Fraud.
• Report listing on the portal: each platform has a “Report listing” feature.
• Email portal grievance officer (Magicbricks, 99acres, OLX, Housing.com, NoBroker have published officers under IT Rules 2021).

• Police FIR at home police station.
• BNS §318(4) + §319 + IT Act §66D charges.
• Bank chargeback if credit card.
• NPCI dispute if UPI.

• Legal notice to landlord (if traceable).
• Consumer-court complaint via e-Jagriti.
• Public exposure on social media tagging the platform.

Warning — Do not engage the scammer further. Many will offer a “refund” via second payment method to extract more money. The first 30 minutes decide recovery — after that, NCRP + FIR drives the case.

Best <72 hours. Same mechanism as visa / NGO scams.

Credit card: chargeback within the issuer's dispute window (typically up to 120 days). UPI: raise a transaction dispute through your bank under NPCI's dispute-resolution process.

Under the IT Rules 2021, every platform must publish a Grievance Officer who acknowledges complaints within 24 hours and disposes of them within 15 days; a platform must also remove or disable content within 36 hours of a court order or government notification.

The platform itself can be made an opposite party for facilitating the fraud. CPA 2019 §2(11) deficiency in service.

Money-decree against the scammer. Order 38 Rule 5 attachment if scammer's bank account identifiable.

Personal cyber-fraud insurance covers rental scams up to policy limit.

Multiple victims of same scammer can file consolidated complaint.

Write to the Grievance Officer (contact published on magicbricks.com, as the IT Rules 2021 require) with: listing URL, screenshots, payment proof, NCRP number. The officer must acknowledge within 24 hours and act within 15 days.

Use the Grievance Officer contact published on 99acres.com. Same statutory requirement.

olx.in/help → Report listing + the Grievance Officer contact published on the site.

Use the Grievance Officer contact published on housing.com.

nobroker.in/help + the Grievance Officer contact published on the site.

Use in-app “Report listing” + the Grievance Officer contact published in Meta's India policy pages.

1. Immediate listing takedown.
2. Suspension of seller account.
3. Provision of seller KYC details under court order if FIR is filed.
4. Cooperation with police investigation.

• Cyber Crime Cell — file complaint about platform's IT Rules breach.
• Grievance Appellate Committee — gac.gov.in (appeal if the platform's Grievance Officer does not resolve).
• NCRP systemic complaint.
• CCPA for misleading advertising / facilitation.

To: [Grievance Officer — email published on the platform's website]
Subject: Fake listing + IT Rules 2021 grievance — urgent takedown

Madam / Sir,

I, [Name], registered Magicbricks user (mobile +91-XXXX),
report the following fraudulent listing:

Listing URL: https://magicbricks.com/property-detail/...
Listing ID: __________
Posted by: "Mr. Sharma" (mobile +91-YYYY)
Listed price: ₹__________ per month

Verification:
1. Reverse-image-search shows the listing photos are
   identical to a property at [Different URL] in Mumbai.
2. BBMP property tax record for the listed address shows
   the owner is [Different Name], not Mr. Sharma.
3. On contact, "Mr. Sharma" demanded ₹__________ as token
   advance via UPI (handle abc1234@oksbi) before any
   physical visit.
4. After payment of ₹__________ on DD-MM-2026 (transaction
   reference _______), the listing was deleted within
   48 hours and the contact number became unreachable.

I have filed FIR no. _______ at [Police Station] on
DD-MM-2026 and NCRP complaint no. _______.

Under the IT Rules 2021 grievance-redressal
obligations, I request:
  (a) Immediate takedown of all listings by user
      "Mr. Sharma" (mobile +91-YYYY);
  (b) Suspension of seller account;
  (c) Provision of seller's KYC details to the
      investigating police officer;
  (d) Acknowledgement within 24 hours and resolution
      within 15 days.

Yours sincerely,
__________________
[Name, contact]
DD-MM-2026

[Lawyer's letterhead]
By Speed Post AD + email
DD-MM-2026

To: [Fake Landlord Name]
[Address — derived from KYC of bank account]

Sub: Demand for refund of ₹__________ paid as fake
        rental token — and notice of intended criminal +
        civil proceedings

Madam / Sir,

I am instructed by my client, [Tenant Name], to demand
the immediate refund of ₹__________ paid as token
advance for the property at [Address] which you
falsely represented as your own.

[Standard legal-notice pleadings.]

You are called upon to refund ₹__________ within 7 days,
failing which the criminal complaint under BNS §318(4) +
§319, civil money-decree suit, and consumer complaint
will all be enforced.

Yours sincerely,
[Advocate Name], Bar Enrolment No. ____________

PIO, [City Municipal Corporation / State RERA]

Sub: Application under §6(1) RTI Act 2005

Please furnish:

1. The registered owner of the property at [Address]
   as on DD-MM-2026 in property tax records.

2. Any rental / lease deed registered for this property
   in the last 24 months, with parties + duration.

3. Whether [Fake Landlord Name] is recorded as owner
   of any property in [City] in the last 5 years.

4. Whether the project [Project Name] is registered
   under RERA, and if so, the registration number,
   builder, and current status.

A reply is requested under §7(1) within 30 days.

A Postal Order of ₹10 (No. ________) is enclosed.

__________________
DD-MM-2026

IT Act 2000 §79 + IT Rules 2021 — an intermediary that fails its due-diligence and grievance-redressal duties loses safe-harbour protection. The IT Rules 2021 also require every platform's Grievance Officer to acknowledge complaints within 24 hours and dispose of them within 15 days, and removal of content within 36 hours of a court order or government notification. BNS 2023 §318(4)/§319 + IT Act §66D — the operative charges against a fake landlord.

• NCRP — cybercrime.gov.in · 1930
• TAFCOP — tafcop.sancharsaathi.gov.in
• NCH — consumerhelpline.gov.in · 1915
• DCDRC / e-Jagriti — e-jagriti.gov.in
• MCA21 — mca.gov.in
• State property-tax portals — BBMP, MCGM, MCD, GHMC, etc.
• State RERA portals
• Grievance Appellate Committee — gac.gov.in
• IT Rules 2021 — Grievance Officer: 24-hour acknowledgement, 15-day disposal; removal within 36 hours of court order / government notice
• BNS, 2023 — §318, §319

Useful RTI Wiki tools and references:

• RTI Assistant
• PIO Reply Checker
• Hostel & PG deposit recovery
• Airbnb / homestay fraud
• Fake immigration consultancy
• RTI Act 2005 — complete guide
• The RTI Playbook

City municipal portal (BBMP, MCGM, MCD, GHMC, Greater Chennai Corp) → Property Tax → enter address. The portal returns the registered tax-payer's name and the property's PID / SAC.

Sometimes the listing carries the PID. Otherwise, ask the listing agent to provide PID + Khata. Or use Google's “BBMP search by address” workaround.

“Verified” tags vary in rigour. Magicbricks “RERA Verified” and “Owner Verified” tags are stronger signals but not infallible. Always do reverse-image-search + property-tax check independently.

Typically the tenant pays 1 month's rent + GST as brokerage when the broker brings the deal. Owner-direct platforms (NoBroker, Housing.com Owner Direct) charge a one-time platform fee. Always confirm in writing before agreement.

Brokers in Maharashtra (RERA-mandatory), Karnataka (RERA-mandatory), and other RERA-active states must register with state RERA. Search at the state RERA portal → Real Estate Agents.

Residential rent for use as a residence is GST-exempt anyway. Cash demand without bank trail is a fraud signal — and tax-evasion. Always pay via bank transfer for paper trail.

Yes — once you've documented evidence + filed FIR, public exposure on Twitter / Reddit is protected speech. Helps prevent next victim.

Yes. NCRP cost is zero; consumer-court filing fee is nil for claims up to ₹5 lakh. The marginal cost of pursuit is low. Even if recovery is partial, the public-interest aspect (preventing next victim) makes it worth it.

NCRP complaint + court order → bank discloses KYC details to police. The UPI handle's underlying KYC is traceable through this judicial route.

Yes — under CPA 2019, listing platforms are “intermediaries” that must comply with IT Rules 2021. Failure to act on grievance triggers liability for facilitation. Consumer commissions can proceed against a platform for deficiency in service where it ignores a documented grievance.