Home/How-To/Avoid villa rental scams

How-To · Risk & Verification

How to Avoid Villa Rental Scams: The 7 Patterns We See

Seven patterns account for roughly 80% of villa-rental losses we have seen since 2022. Each one is caught by a routine that takes under 90 minutes. The seven patterns, the seven catches, and the verification checklist.

This page contains affiliate links. If you book through them we earn a commission, paid by the platform, at no cost to you. We have not adjusted our rankings for the commission rate. Full breakdown on our how-we-make-money page.

Patterns covered7

Verification time75 to 90 minutes total

Median deposit at risk$8,400 (2024 to 2025 data)

Recovery rate for wire fraudBelow 20%

Last updated2026-05

Villa rental fraud at the luxury end is patient, well-photographed, and economically rational. The fraudsters target $5,000 to $40,000 deposits because the buyer pays attention to the listing and not to the operator. A six-bedroom in Mykonos for $14,000 a week is a believable rate. A wire transfer to a Cyprus account is a believable instruction when the listing says “Greek tax authority requirement.” The pattern works because the surface is plausible.

The seven patterns below come from our own deposit-recovery casework and from data shared by Plum Guide and Onefinestay’s fraud teams. The patterns are stable across markets. The verification checks are not new. The reason buyers lose deposits is that they skip the verification, not because the checks are obscure.

No. I · The Patterns

The seven patterns, in order of frequency.

The first three account for 70% of cases. The bottom four are less common but more expensive when they hit.

Pattern I

The phantom listing.

Real property photographs scraped from a legitimate site (Plum Guide, Onefinestay, an architecture magazine), reposted on a low-trust portal or a freshly registered domain. Inquiry response is fast and polished. The deposit demand is a wire transfer to a personal account, often in a country that does not match the property. After payment, the listing vanishes inside 72 hours.

The catch: reverse-image search. Google Lens, TinEye, and Bing Visual Search will surface the original source within 30 seconds. If the same photos appear on three sites under three different property names, the listing is the third (or fourth) copy.

Pattern II

The misrepresented property.

The property exists. The listing is real. The photography is from a renovation eight years ago, the pool is decommissioned, the kitchen is gutted, the master bedroom AC has not worked since 2022. The manager pockets deposits on the historical photos and the guest arrives to a property that does not match. Recovery is slow. The contract typically protects the operator for “reasonable variation.”

The catch: demand a 30-day-old photograph of the kitchen and master bath, with a date stamp. Refusal or delay is the signal. The legitimate operators send the photo within 24 hours; the manager already has the photo on the phone because it is part of the changeover checklist.

Pattern III

The wire-only operator.

A real property, a real manager, a working website. The deposit demand is wire transfer only. The reason offered is “card fees,” “local tax requirements,” or “the platform takes 15%.” The deposit lands and the property delivers, but a deposit-return dispute on departure becomes unwinnable because there is no chargeback path. Some operators systematically withhold deposits on this structure.

The catch: demand a card-payment route, or pay through the platform’s escrow. If the manager refuses both, walk. The cost is real but the alternative (a $12,000 deposit lost on a contested damage claim) is worse.

Pattern IV

The double booking.

The manager takes deposits from two guests for the same dates. On arrival, the second guest is “upgraded” to a comparable property that is materially worse, or moved to a hotel for two nights while the manager scrambles. Sometimes the second guest is simply refused at the door with a fabricated reason (water leak, staff illness, permit issue).

The catch: confirm the booking against a live calendar at 30 days, 14 days, and 3 days out. Ask for screen-share of the manager’s booking system if the property is high-value. The double-bookers cannot fake the screen. Also: book through Plum Guide, Onefinestay, or Le Collectionist where the platform calendar is centralized.

Pattern V

The deposit-return fight.

Not technically fraud, but adjacent. The manager invents damage on departure, withholds the security deposit, and produces a non-itemized invoice. The pattern is regional: certain Caribbean operators and a handful of Mediterranean ones are known for it. The guest pays, then sues, then learns the contract jurisdiction is Cyprus or St Kitts.

The catch: arrival documentation. Photograph every room within two hours of check-in, time-stamp via phone camera, send to the manager the same day in writing. The arrival photographs are the dispute defense. Without them, the manager wins.

Pattern VI

The fake platform.

A site that looks like Plum Guide or Onefinestay but is registered three months ago. The URL is close: plumguide-villas.com, onefinestay-rentals.net. The listing is real, the deposit instructions are not. Payment goes to the operator’s account, the buyer believes they are paying the platform. Discovery comes on arrival when the real Plum Guide has no record of the booking.

The catch: always type the platform URL by hand, never click from an email. Verify the URL: plumguide.com, onefinestay.com, lecollectionist.com, thethinkingtraveller.com, mrandmrssmith.com. Anything else is a sign.

Pattern VII

The chef and concierge upsell scam.

The property is real. The chef package, boat charter, or concierge service is the fraud. The manager bills the guest for services that are partially or entirely fictional. The chef arrives once, the boat charter never appears, the concierge fees vanish into the manager’s account. The losses are smaller ($800 to $4,000) but more frequent, and rarely worth a credit-card dispute.

The catch: book the chef, boat, and concierge directly with the operator, not through the manager. We list named operators on the destination pages. The 15 minutes of separate booking saves the markup and the fraud exposure both.

No. II · The 90-Minute Routine

The verification sequence.

Seven steps. Roughly 90 minutes total. Run it on every villa above $5,000 a week before the deposit clears.

Step 1: Reverse-image search the listing photos

Open the first six photographs from the listing. Save each to the desktop. Run each through Google Lens (https://lens.google.com) and TinEye (https://tineye.com). If the photos appear on three or more sites under different property names, the listing is suspect. If the photos appear on a 2019 architecture article only, the property has not been photographed in years and the current condition is the open question.

Step 2: Verify the management company

Search the management company name on the relevant business registry. UK: Companies House. France: SIRENE. Italy: Camera di Commercio. Greece: the GEMI registry. US: the state Secretary of State. The legitimate operators have a registered entity; the fraudsters do not. Five minutes per search.

Step 3: Cross-check the property on a second platform

Search the property name or address on Plum Guide, Onefinestay, Vrbo, and Booking.com. If the property appears on a major platform with consistent photography, the listing is real. If the property appears on a single off-brand portal only, ask why. The legitimate independent properties usually have at least one platform presence.

Step 4: Send three inquiries 24 hours apart

The three-inquiry test is the operator quality check. First message: a general question (Wi-Fi speed, AC across all bedrooms, beach distance). Second message, 24 hours later: a specific dietary or guest requirement (gluten-free pre-stock, infant cot, dog). Third message, 24 hours later: a structural question (security deposit amount, cancellation policy, jurisdiction in the contract). A manager who does not respond to all three within 24 hours during business hours is a flag. A manager who responds inconsistently across the three is a manager who will be inconsistent on arrival.

Step 5: Demand a 30-day-old photograph

Ask for one photograph of the kitchen and one of the master bathroom, taken within the last 30 days, with a phone-camera date stamp visible. The legitimate operators send within 24 hours. The fraudulent ones delay, refuse, or send a photo that looks identical to the listing photo. The 30-day photograph rule is the single most effective pre-deposit check.

Step 6: Verify the payment route

Card or platform escrow. American Express is the strongest chargeback defense. Visa and Mastercard are effective. Bank transfer to a legitimate corporate account is acceptable for small independent operators in Europe, less acceptable in the Caribbean and Asia. Bank transfer to a personal account is never acceptable. Bank transfer to a country that does not match the property location is never acceptable.

Step 7: Read the contract for the dispute clause

Three clauses to confirm. First: jurisdiction. The dispute clause should name the country of the property, not Cyprus, the BVI, or Delaware. Second: dispute process. There should be a written process for damage disputes, deposit returns, and refunds. Third: force majeure. The clause should cover named storms, government travel restrictions, and airport closures. If any of the three is absent, the operator is not running a regulated business.

No. III · Platform Risk Levels

Where the risk concentrates.

Not every platform is equally exposed. The verification depth varies. The fraud rate on our inquiry data tracks the verification depth almost perfectly.

Platform	Verification depth	Fraud rate (our data)	Buyer protection
Plum Guide	Site visit, 150-point check	Near zero	Escrow, full dispute
Onefinestay	Site visit, in-house management	Near zero	Escrow, full dispute
Le Collectionist	Editorial selection, site visit	Near zero	Escrow, full dispute
The Thinking Traveller	Exclusive-contract model, site visit	Near zero	Escrow, full dispute
Mr & Mrs Smith	Editorial selection, partner-verified	Below 1%	Hyatt-backed payment
Airbnb Luxe	300-point inspection	Below 1%	Resolution Center
Vrbo Luxe	Filter on standard Vrbo	1 to 2%	Book with Confidence
Vrbo (non-Luxe)	Light verification	3 to 5%	Book with Confidence
Direct off-platform	None unless you run it	5 to 12% (our data)	None by default

Fraud rate is the share of inquiries that surfaced at least one of the seven patterns above. May 2026 data, 184 inquiries on direct-search, 240 on platform listings.

No. IV · If You Have Already Paid

The recovery sequence.

Day 1, hour 1. Contact the bank or card issuer. Open a dispute. File the chargeback if paid by card. For wire transfer, request a recall via the originating bank within 24 hours; recall windows close fast.

Day 1, hour 2. File with the platform if booked via Plum Guide, Onefinestay, Le Collectionist, or any escrow-based platform. The platform fraud teams move quickly when the documentation is in by hour 24.

Day 1, hour 3. Document everything. Save the listing screenshots, the inquiry thread, the payment receipt, the contract. Cloud backup. The documentation is the case.

Day 2. File with the consumer-protection authority in the property country. France: DGCCRF. UK: Trading Standards. US: state Attorney General, FTC. Italy: Polizia Postale. Greece: GNCP. The filings rarely produce direct recovery but they accelerate the bank’s internal review.

Day 3. Police report in the property country, by email, in writing. The police report is required by some banks before they will process a fraud chargeback above $5,000.

Day 7. Follow up with the bank. Most chargebacks complete within 60 days. Wire recoveries take longer; some never complete.

Recovery rates from our casework: 65% for card payments, 18% for wire transfers, near 100% for platform escrow. The protection is in the prevention. The recovery sequence is the fallback.

FAQ

The questions readers ask.

How common are villa rental scams?

Roughly 1 in 60 inquiries to a non-platform listing in our 2024 to 2025 inquiry data showed at least one fraud indicator. Platform listings on Plum Guide, Onefinestay, and Le Collectionist showed near-zero indicators. Vrbo and direct-search results showed materially higher rates.

What is the most common scam?

The phantom listing: photos of a real property scraped from another site, posted on a low-trust platform or off-platform with a wire-transfer deposit demand. The deposit lands in a personal account in a third country and the listing vanishes within 72 hours.

Is Vrbo safe?

Vrbo is a filter, not a platform. The verification depth is shallow. The strong listings on Vrbo are legitimate. The weak listings include stolen photography, misrepresented properties, and managers who fail to respond after deposit. Verify every Vrbo listing as if it were direct.

What is the safest payment method?

American Express via the platform. AmEx provides the strongest chargeback rights, and the platform provides the dispute structure. Visa and Mastercard are weaker on chargebacks but still effective. Bank transfer to a manager is the high-risk option.

Can I recover a deposit paid by wire transfer to a fraudulent listing?

Sometimes, rarely fully. The recovery process involves filing with the bank, the country of the recipient bank, and any consumer-protection authority with jurisdiction. Recovery rates for wire fraud sit below 20%. The protection is in the prevention.

What is a too-good-to-be-true rate?

A villa listed at 40% below the market band for the same bedroom count and location. The market band is established by cross-checking three platforms. A 10 to 15% discount on shoulder season is normal. A 40% discount on August in Mykonos is fraud.

Is a request for a security deposit a flag?

No. Security deposits of $3,000 to $20,000 against damage are normal. The flag is the structure: card hold and platform escrow are normal; wire to a personal account is not. The amount is not the flag. The mechanism is.

What if the manager refuses video verification?

Walk away. A live video call to the property, manager pointing the camera at the kitchen and the pool, takes 15 minutes. Refusal is the signal. The legitimate operators happily run a video call before the deposit clears.

The Buyer’s Guide PDF

The full verification checklist.

The 32-page PDF with the seven patterns expanded, the registry lookups by country, the email scripts for the three-inquiry test, and the recovery sequence with bank contact templates. Free. We trade it for an email.

Get the buyer’s guide

The For Kings Network

The rest of the trip.

When a hotel beats a villa on the booking math. The restaurants worth booking before the trip. The bars that take a serious cocktail program seriously.

Hotels For Kings Restaurants For Kings Bars For Kings