One Toronto developer screened more than 175 lease offers over six months and found over half of them fraudulent.

Menkes Developments reported invalid ID cards, fake credit reports, manipulated employment letters and pay stubs, and false landlord references where the applicant named a friend rather than the owner. The sample was one company, one luxury downtown segment, roughly 175 applications. It is not a national rate for a fourplex in Lethbridge.

It is still the clearest published Canadian signal available, and the techniques described are the ones circulating everywhere.

Here is what to verify and how.

The reference check carrying the most weight

Call the previous landlord, not only the current one.

Current landlords have an incentive to give a glowing reference for a tenant they want gone. Previous landlords have no stake left and tell you the truth.

Ask the previous landlord first. Then ask the current one the same questions and listen for the gap.

Landlord reference questions worth asking

Six questions, in this order, asked identically of every applicant.

• Please confirm the address and the dates of the tenancy — open with verification rather than opinion. A hesitant answer here tells you a lot.
• What was the rent, and was it paid on time — specifics. The amount they name should match the application.
• Did you serve a notice at any point, or apply to the tribunal — direct, factual, and answerable yes or no.
• What condition was the unit left in — or, for a current tenancy, what condition is it in now.
• How did they handle maintenance and communication — the single best predictor of what your next two years look like.
• Would you rent to them again — the closing question. Hesitation is the answer.

Write the responses down as you go. A reference you remember is a reference you cannot produce later.

Verifying the reference is real

The friend-posing-as-landlord technique is common enough for Menkes to name it specifically.

• Check who owns the property on title — land registry or municipal assessment records show the registered owner. If the reference's name does not appear and they do not explain the relationship, the reference is worthless.
• Call a listed number where one exists — for a property management company, find the main line yourself rather than dialling the number on the application.
• Listen for the register — a real landlord answers with dates, dollar amounts and specifics. A friend answers with adjectives.

Verifying employment

This step defeats most reference fraud, and almost nobody does it correctly.

• Call the employer on a publicly listed main line, from the company website, a provincial corporate registry, or a business directory — never the number written on the application. Ask to be transferred to HR or payroll.
• Confirm the employer exists before you call — provincial corporate registry, a real website, a real address, a CRA business number where you have one.
• Ask three things only: is this person currently employed, what is their position, how long have they been there. Many employers will not confirm salary, and you do not need them to, because the pay stub and the bank deposits do the job.

The number on the application ringing directly to a friend is the entire mechanism of employment reference fraud. Bypassing it collapses the scheme.

Checking documents

Never accept an applicant-supplied credit report. Pull it yourself through a registered service. Forged bureau PDFs were specifically named in the Menkes findings and are trivially produced.

Check PDF metadata — open the document properties and look at the creating application, the author and the dates. A bank statement authored in Canva or a generic PDF writer rather than a bank's document system is a flag. Treat this as a prompt, not proof — legitimate documents get re-saved by scanners and email clients all the time. Metadata tells you where to look harder, not what the answer is.

Cross-reference pay stubs against deposits. Deposits should land on the employer's stated pay cycle, in amounts matching the net pay on the stub, from a payer name matching the employer. Mismatched cadence, or clean round-number deposits, is the tell.

Balance this against your privacy obligations. Asking for full bank statements is hard to justify. Asking the applicant to confirm two specific deposits, or to provide a bank-generated letter confirming direct deposit, is proportionate and gets you the same signal.

Watch the arithmetic, then stop relying on it — the old advice was to check the year-to-date figures reconciled. Current pay stub generators produce arithmetically consistent documents. The test no longer catches anything.

What fraud looks like in 2026

The techniques circulating now:

• AI-generated pay stubs and bank statements with internally consistent numbers
• Genuine documents with figures edited, which are harder to spot than fabricated ones
• Fabricated employer references reachable only at a supplied mobile number
• Fake credit report PDFs presented as Equifax or TransUnion output
• Synthetic identities pairing a real Social Insurance Number with a fabricated name and history
• Prior-landlord references given by friends

Notice what defeats most of them: contacting a third party through a channel the applicant did not supply. The single principle covers employment, landlord references and document verification.

Searching tribunal decisions

Tribunal decisions are public. Searching CanLII, the Ontario LTB order catalogue or your provincial equivalent for an applicant's name is not unlawful.

Three cautions before you do.

• Name the purpose in your consent clause — collecting personal information from public-record searches is still collection. If your form did not say you would do it, you did not get consent for it.
• Appearing in a decision is not evidence of a bad tenant — tenants appear as applicants asserting repair, maintenance and harassment rights. Filtering on tribunal appearance penalizes people for exercising legal rights and creates reprisal and human rights exposure.
• Do not build or buy a list — compiling or subscribing to a database of tenant records for screening likely amounts to consumer reporting, which triggers provincial registration requirements. A federal privacy investigation into a property management company's bad tenant list found exactly this. Searching one name yourself is defensible. A blacklist is not.

The verification sequence

For a normal application, in order, stopping when something fails:

• Pull the credit report yourself through a registered service
• Call the previous landlord, then the current one
• Verify the employer exists, then call the main line
• Check the pay stub against deposit confirmation
• Confirm the previous landlord owns the property on title

Twenty-five minutes for a complete file. Set it against the cost of a single bad tenancy, which in most provinces means months of lost rent plus a hearing.

When something does not check out

• Ask, do not assume — documents get re-saved, employers restructure, people change jobs mid-application. Give the applicant a chance to explain.
• Ask for one alternative verification, not five — a bank-generated letter, or a call to a different contact at the employer.
• Decline politely and consistently if the explanation does not hold — record the reason in one line the day you decide. Do not tell one applicant a story and record another.
• Never accuse — you do not know what happened, and you gain nothing from being right out loud.

LuxOasisOS keeps reference notes, verification steps and screening reports on the applicant record, so the file explains itself later without depending on what anyone remembers.