Rental Income Schemes

Criminals artificially generate rental income from properties by injecting illicit funds disguised as legitimate rent payments. This scheme commonly involves falsified tenancy agreements, shell companies, or complicit property managers to channel illegal cash into property-based revenue streams. In many cases, offenders may deposit “fictitious” rent into accounts or provide tenants with illicit money to cover multiple months’ rent in advance, commingling those illegal funds with genuine rental proceeds. One reported example showed a supposed landlord receiving unusually large deposits—surpassing normal market rates—coupled with structured withdrawals, further indicating money laundering activity. By merging these illicit inflows with authentic rental revenue, criminals obscure the origin of the funds and make them appear to be ordinary real estate income.

[
Code
T0010.004
]
[
Name
Rental Income Schemes
]
[
Version
1.0
]
[]
[]
[
Risk
Customer Risk, Product Risk
]
[
Created
2025-02-12
]
[
Modified
2025-04-02
]

Real Estate Rental Scheme

Tactics

ML.TA0009
|
|

By channeling illicit funds into rental accounts and labeling them as legitimate rent payments, criminals effectively complete the laundering process, making illegal proceeds appear as ordinary property income. This steady, credible revenue stream becomes indistinguishable from lawful earnings, fulfilling the final stage of money laundering.

Risks

RS0001
|
Customer Risk
|

Shell or front companies and nominee ownership structures are used to conceal the true controllers of funds and property assets. Falsified or opaque beneficial ownership arrangements allow criminals to mask their involvement and bypass effective customer due diligence when introducing illicit funds as rental income.

RS0002
|
Product Risk
|

This technique exploits the inherent difficulties in verifying real estate rental income. Criminals introduce illicit funds as purported rent—often at inflated amounts or via falsified tenancy agreements—making it challenging for institutions to distinguish genuine property income from laundered proceeds. By commingling criminal earnings with legitimate rental flows, the real estate vulnerability is directly leveraged.

Indicators

IND01889
|

Bank accounts receiving rental income deposits that include unusually high volumes of cash, far exceeding typical market rental rates for the property type and location.

IND01891
|

Rental payments deposited on an irregular schedule that deviates from standard lease cycles, such as multiple deposits within a short period rather than a monthly pattern.

IND01893
|

Tenancy agreements containing inconsistencies or missing key elements, indicating fabricated or manipulated documentation to justify irregular rental deposits.

IND01895
|

Ownership of rental properties through companies with minimal operational activity or undisclosed beneficial owners, obscuring actual control.

IND01897
|

Rapid movement or layering of funds immediately following the deposit of rental income, including quick transfers to unrelated or offshore accounts.

IND01899
|

Declared rental amounts that significantly diverge from local market rates and occupancy data, indicating inflated or fabricated income figures.

IND01901
|

Property managers or intermediaries processing rental transactions across multiple unrelated properties or jurisdictions with patterns of high-volume or irregular flows indicating potential commingling of illicit funds.

IND01902
|

Rental income deposits linked to properties with no verifiable evidence of actual occupancy or legitimate tenant activity.

IND01904
|

Large upfront rental payments covering multiple months from individuals or entities with no verified legitimate source of funds.

Data Sources

  • Provides official financial statements, tax returns, and other filings indicating declared rental income.
  • Allows comparison of reported rental revenue with actual deposit data or property ownership records to expose inconsistencies or evidence of laundering.
  • Captures deposit amounts, timestamps, frequencies, and counterparties for rental payment transactions.
  • Enables detection of suspicious patterns, such as multiple large cash deposits exceeding market rates or clustered within a short period.
  • Facilitates identification of layering or commingling of illicit funds following the initial deposit.
  • Contains verified identities, beneficial ownership details, and source-of-funds information for landlords and tenants.
  • Facilitates the identification of falsified tenancy agreements or financed rent from illegitimate sources, ensuring that parties to rental transactions are genuine.
  • Contains property ownership information, transaction history, and valuations.
  • Enables cross-checking declared rental income against actual property specifics and occupancy records to detect inflated or fictitious rents.
  • Supports identification of properties with no legitimate tenant activity.
  • Provides official details of legal entities, including shareholders, directors, and beneficial owners.
  • Assists in uncovering shell companies or obscured beneficial ownership structures used to conceal laundering through rental income.

Mitigations

For high-risk real estate accounts receiving irregular or high-volume rent deposits, require documentation confirming valid lease terms, verify occupant identities, and corroborate the source of substantial or upfront payments. Cross-check the lease details with the property's actual characteristics and local rent norms to uncover fabricated agreements or inflated income.

Obtain and authenticate key rental information during onboarding, including lease agreements, property ownership records, and tenant details. Cross-check the stated monthly rent against local market benchmarks and ensure that the customer’s financial profile supports any declared rental income streams.

Implement tailored monitoring rules to identify rent deposits that deviate significantly from typical market rates or payment cycles. This includes unusually large lump sums labeled as rent, multiple advanced payments posted within short periods, or immediate layering transfers after deposits. Compare declared rental amounts with area benchmarks and flag anomalous patterns for further investigation.

Evaluate and regularly review real estate agencies or property management firms handling rental income accounts. Verify their AML procedures, licensing status, and business legitimacy to prevent collusion or lax oversight that could enable illicit funds to flow under the guise of rent.

Set specific thresholds for rent-related cash deposits, requiring additional review and timely regulatory reporting when the amounts significantly exceed normal local rental ranges or appear structured to avoid detection. Track patterns of repeated cash payments labeled as rent that do not align with standard monthly cycles.

Provide specialized instruction on detecting red flags in rental accounts, such as exaggerated monthly rents, repeated advance payments from unverified sources, and inconsistent tenancy documents. Emphasize scrutinizing tenant profiles and lease veracity so staff can promptly escalate anomalies for compliance review.

Segment and assign elevated risk scores to clients involved in rental income activities based on property location, customary rent rates, and the volume of rental properties managed. Apply heightened scrutiny or additional controls when patterns in rental deposits deviate from expected profiles, ensuring early detection of potential manipulation.

Validate claimed rent amounts, property ownership, and occupancy through public real estate records, online listings, or third-party databases. Confirm real market rental values and legitimate tenant activity to expose shell structures or contrived property arrangements that obscure the true origin of funds.

Routinely reassess rental income customers by verifying updated lease documentation, reconfirming occupant data, and analyzing new rent flows for anomalies or sharp increases. Investigate abrupt shifts in rent patterns or tenant arrangements that could indicate concealed illicit funding sources.

Instruments

  • Offenders deposit the purported rental payments into bank accounts connected to real estate operations, commingling illicit funds with legitimate revenues.
  • Structured deposits and withdrawals are employed to avoid detection while creating the impression of stable monthly rents, hindering source-of-funds traceability.
IN0013
|
|
  • Criminals use property holdings, often under shell companies or nominee ownership, to create fictitious or inflated leases and record illicit funds as rent.
  • By injecting illegal cash as supposed rental income, they intertwine unlawful proceeds with legitimate property revenues, making it appear as ordinary real estate earnings.
IN0051
|
|
  • Criminals provide physical currency to tenants or deposit it themselves as alleged rent, directly introducing illicit funds into the property's income flow.
  • The inherent anonymity of cash transactions conceals the true source of funds, facilitating the seamless integration of criminal proceeds.

Service & Products

  • Complicit or negligent property managers can falsify tenancy agreements, process inflated rent payments, and commingle illicit funds with genuine rental proceeds.
  • By overseeing rent collection and tenant records, they provide a veneer of legitimacy, allowing criminals to introduce illegal cash into the property’s income stream undetected.
  • Illicit funds disguised as rent are deposited into business accounts associated with real estate operations, mixing illegal proceeds with any legitimate rental inflows.
  • Criminals may then perform structured withdrawals, transfers, or layering transactions to further conceal the unlawful source of funds.
  • Criminals can exploit real estate agencies or brokers to establish or legitimize rental agreements concealing illicit funds as rent.
  • They may artificially inflate monthly rental amounts or fabricate tenancy arrangements, making the property appear to generate legitimate leasing income while masking the true origin of the funds.
  • Criminals establish shell companies through these services, listing them as property owners or landlords to hide beneficial ownership.
  • Fictitious rental income is then funneled through these corporate entities, complicating AML inquiries into the actual source of the funds.

Actors

AT0008
|
|

Banks are unwittingly exploited when:

  • Illicit rent payments are deposited into business or personal accounts tied to real estate operations.
  • Funds are layered or withdrawn in structured transactions under the guise of legitimate rental income, challenging institutional monitoring efforts.

Real estate professionals, including complicit property managers, enable rental income schemes by:

  • Overlooking or facilitating falsified tenancy agreements and inflated rent payments.
  • Managing tenant records that merge legitimate and illicit rent inflows, obscuring the funds’ true origin from financial institutions.

Criminals rely on trust and company service providers to:

  • Create and administer shell or corporate structures listed as property owners.
  • Obscure beneficial ownership and funnel illicit proceeds disguised as rental income, complicating financial institutions' investigations into the funds' source.

Illicit operators orchestrate the scheme by:

  • Injecting criminal proceeds disguised as legitimate rent into property income streams.
  • Falsifying or manipulating tenancy agreements to justify abnormally high or irregular rent deposits.

These actions commingle criminal proceeds with genuine property revenue, complicating detection by financial institutions.

Shell or front companies function as nominal property owners or landlords to:

  • Receive purported rental income that is actually illicit funds introduced by criminals.
  • Conceal beneficial ownership, hindering financial institutions' ability to identify the true controllers of the funds.

References

  1. APG (Asia/Pacific Group on Money Laundering). (2016). APG yearly typologies report 2016: Methods and trends of money laundering and terrorism financing. APG Secretariat. https://apgml.org/methods-and-trends/documents/default.aspx?pcPage=1

  2. Financial Action Task Force (FATF) & Organisation for Economic Co-operation and Development (OECD). (2023). Misuse of citizenship and residency by investment programmes - A joint FATF/OECD report. FATF/OECD. https://doi.org/10.1787/ae7ce5fb-en

  3. AUSTRAC (Australian Transaction Reports and Analysis Centre). (2015). Money laundering through real estate. Commonwealth of Australia. http://www.austrac.gov.au