Vacation rental scams

What it is

A vacation rental scam takes money for a stay the seller cannot or will not deliver. It comes in three forms in the cases documented here. In the first, a listing is simply false: a house that is under construction, owned by someone else, or invented, advertised on an ordinary rental website. In the second, a real listing is copied: a victim who answers an ad on a legitimate rental site is redirected to a spoofed website that imitates it, and pays there. In the third, the host is real but the booking is not: the same property is sold several times and the guests who bid least are cancelled. The FTC describes the first two directly, saying scammers “hijack real rental listings and advertise them as their own” or make up listings for places that are not really for rent or do not exist.

The money is taken months before the trip, so the fraud usually surfaces only at a cancellation deadline or when the guest stands at the door. That timing, more than any technical trick, is what makes it work.

How it actually works

1. A listing appears for a home the seller does not control

   The advertisement sits on a mainstream rental website or classified site. In the Finger Lakes case, a house under significant construction and a second house owned by someone who had never given permission were both advertised as available vacation rentals.

2. The listing is dressed to look ordinary

   In Kentucky, a paid platform generated fake ads and spoofed websites that mimicked legitimate listing pages. In the California case, fake host names and, in some cases, other people’s identities were used to post listings and fabricated positive reviews.

3. The conversation or the payment moves somewhere else

   Victims who answered ads on legitimate rental sites were redirected to the spoofed sites, where people posing as owners or managers asked for payment by bank wire, gift card, cryptocurrency or similar methods.

   Where it could have stopped

   The FTC advises searching online for the rental’s address together with the owner’s name, checking that the property is also listed on the rental company’s own website, and never paying anyone who insists on a wire transfer, gift card, cryptocurrency or payment app. A request to leave the booking site’s own payment system, or a second listing of the same address under a different name, is the moment to walk away.

4. A convincing invoice or a reassuring promise arrives

   Users of the Kentucky platform sent invoices generated through it. In the New York case the customer was told the deposit would be held in an escrow account, which did not exist.

5. The payment is collected and the operator is told

   The Kentucky platform notified its users when a victim submitted payment, and many victims were encouraged to pay in cryptocurrency. In the New York case, deposits were taken by wire transfer or online card payment.

6. The trip draws near and the excuses begin

   In the California case, overbooked guests were told of a plumbing problem or some other unforeseen issue and then cancelled, talked into cancelling, or moved to a different property. The FTC describes the hijacked-listing version as guests arriving to find other people booked into the same property.

7. Refunds are refused and the listing returns under a new name

   Henry T. Dean III refused refunds even to customers who spotted the problem in advance. The California pair deleted negatively reviewed listings and re-listed them with new identifiers, and used fake host accounts to keep listing after one platform banned them in 2015.

Why it works

The money moves long before the evidence does. A stay is paid for weeks or months ahead, so by the time a guest learns the house is not available, the deposit has been spent and the cancellation window has often closed.

The setting is trusted. The New York listings ran on rental websites including Homeaway.com, the California listings on Airbnb and Vrbo, and in the Kentucky case the pages imitated legitimate listing sites. People are not suspicious of an interface they have used before.

Scarcity and price push people to move fast. The FTC lists pressure to decide quickly and premium properties offered at unusually low prices among the signs of a scam, and a popular holiday area with few homes available gives that pressure something to push against.

Reviews can be manufactured. The California pair posted fabricated positive reviews through fake host accounts, and posted bogus negative reviews about guests who complained. A good rating is not proof of an honest host.

Specialisation lowers the bar for entry. The Kentucky platform supplied the ads, the lookalike websites, the invoices and the payment alerts, so a user needed only to attract victims. That is how one service came to admit at least 14,000 victims over 99 months.

Where it comes from

The cases on this page are US prosecutions, but the people behind them differ. The two California and New York defendants operated domestically, one through a business with nearly 100 properties and one with two advertised houses. The Kentucky case involves a Romanian national who ran a software service from January 2016 to September 2023, with Romanian police assisting the US Secret Service. A co-defendant was described as pending extradition when the sentence was announced.

Enforcement is slow and mostly concerns operators, not individual listings. The Kentucky indictment was returned in September 2023 and the sentence announced in July 2026; the California charges came in December 2023 and January 2024 and the first sentence in August 2026. The Finger Lakes scheme ran from September 2014 to October 2016 and was sentenced in December 2018. A guest who loses a deposit this week is unlikely to see it come back through a prosecution.

Real cases

Red flags

• The rent is far below comparable homes in the same area, or a premium property is offered cheaply, which the FTC lists as a sign of a scam.
• You are asked to pay by wire transfer, gift card, cryptocurrency or a payment app, or to move off the booking site’s own payment system.
• Other ads for the same address appear under a different owner or rental company name.
• The property is not listed on the rental company’s own website, or you were redirected from one site to another to pay.
• You are pressed to decide quickly, or told a deposit is “fully refundable” and held in an escrow you cannot see.
• A confirmed booking is cancelled or swapped close to the date, particularly with an excuse about repairs or plumbing, and the host has done it before according to other reviews.

If it’s happening to you

If you have paid for a rental you now doubt, act before the trip date and keep everything in writing.

1. Contact the company you paid through straight away. The FTC says a credit card gives the best protection; wire transfers, gift cards and cryptocurrency are almost impossible to recover once sent.
2. Report the listing to the platform it appeared on, and keep every message, invoice, listing page and payment confirmation.
3. Check the address independently. Search for the address and the owner’s name, and call the rental company or resort named in the listing.
4. Report it to the FTC at ReportFraud.ftc.gov and to your state attorney general, as the FTC advises. In the Kentucky case the US Secret Service asked victims to submit details through the Justice Department’s case page.
5. If you were the guest who was cancelled or moved at the last minute, keep the original booking confirmation and the host’s stated reason, since a pattern across several guests is what prosecutors relied on in the California case.
6. Book a replacement through a payment method you can dispute, and do not send further money to the first seller for a “re-booking.”

Where the money goes

In the cases on this page the money moved through ordinary channels, with one notable exception.

Straight to the seller’s accounts. In the New York case the deposits arrived by wire transfer or online card payment, and the Justice Department put the losses of more than 20 victims at approximately $137,272.46. In the California case, the payouts came from the booking platforms themselves, which the indictment alleged exceeded $7 million from Airbnb and $1.5 million from Vrbo.

Through cryptocurrency addresses. In the Kentucky case many victims were encouraged to pay in cryptocurrency, and for a period the platform helped create cryptocurrency addresses managed through Coinbase accounts registered under false identities. Dumitru was sentenced for conspiracy to commit money laundering.

How the loss range was derived. The typical-loss range shown for this scheme runs from $137,272, the New York case’s total reported losses, to $1.5 million, the California case’s figure at sentencing. Only those two cases give a dollar figure, so it is an estimate from a small sample; the Kentucky case admits at least 14,000 victims but states no total. The first year shown, 2014, is when the earliest case here began.

Restitution is partial and slow. Henry T. Dean III was ordered to pay $120,000 against $137,272.46 of reported losses, and the restitution hearing for the California case had not been scheduled when the first sentence was reported.

By the numbers

No published dataset breaks this scheme out as its own category yet, so there is no chart to show. The data page explains which agency categories exist and why some schemes are invisible in official statistics.