A friend lost a month's rent to a London rental scam recently. The police told them, politely, that they would not be investigating. That wasn't a failure of their specific case. It was the national policy. It's worth understanding why before you waste your energy in the wrong place.

Here's what happened. They found a room online. Decent photos, fair price for the area, friendly listing. They messaged. The reply came back warm and quick. Voice notes were exchanged. The landlord sent a driving licence and a utility bill, both addressed to the property. They answered questions about bills, the neighbours, the commute. Nothing felt off.

Then, near the end, a small twist. Could my friend pay an extra month upfront? Someone else was about to take the room and willing to pay full whack, but the landlord preferred them. The extra month would lock it in. It was framed as a favour, not a demand. They paid.

A meeting was scheduled to collect keys. The landlord didn't show. There had been a death in the family. Apologies. Another meeting was scheduled. Didn't show again. Then the messages slowed, then stopped.

They called the police. The police took the report and gently said they would not be investigating.

The part most victims don't realise

This scam is not improvised. The polite tone, the plausible ID documents, the extra month justified by a competing tenant, the bereavement, the second silent appointment: this is a script.

The BBC ran an investigation in October 2025 that named multiple London victims who heard the exact same death in the family excuse from the exact same operator. Academic research has analysed the persuasion techniques. Action Fraud has a dedicated rental scam page. The Home Office launched a public campaign in March 2025 because the numbers wouldn't stop climbing.

Action Fraud logged around 5,000 rental scam reports in 2024 and £9 million in losses. Those figures count only the small fraction of victims who report. Roughly three quarters of reported victims were between 18 and 39. London is the biggest hotspot.

If you fell for this, you fell for something built by people who do it professionally, often as part of organised operations the City of London Police confirmed in January 2026 it was actively investigating. That knowledge doesn't recover the money. But it should land before the self-blame does.

Why the police won't help

This is the bit that feels like an injustice. It isn't, exactly. It's a policy decision that's been documented and criticised for years.

Action Fraud is not an investigative body. It's a reporting front door. Your report goes to the National Fraud Intelligence Bureau, which scores cases algorithmically and passes a small fraction to local forces. The Public Accounts Committee found in March 2023 that less than 1% of cases reported to Action Fraud result in a charge. Of the 800,000+ frauds reported in 2020 to 2021, only about 7% were even disseminated for investigation. HMICFRS found one force filing 96% of those disseminated cases with no further action.

The Victims' Commissioner summed it up: a reporting victim has roughly a 1 in 30 chance of investigation and a 1 in 200 chance of any sanction. Detective Superintendent Oliver Little of City of London Police said openly in 2025 that it isn't realistic to respond to fraud by locking people up.

The UK's strategy quietly shifted years ago. Fraud isn't being prosecuted. It's being absorbed by banks and platforms. That sounds bleak, and in some ways it is. But it has one practical consequence that most victims don't know.

You have stronger rights against your bank than against the scammer

Since 7 October 2024, the Payment Systems Regulator's mandatory reimbursement rules require UK banks to refund victims of authorised push payment fraud. That covers most rental scam transfers. Up to £85,000 per claim, paid within 5 business days, claim window of 13 months from the last payment. The bank can only refuse if it can prove gross negligence, which is a high legal bar.

99.8% of cases fall under the cap. This is the actual recovery route.

The order of operations, if it's just happened to you:

• Call your bank's fraud line today, or dial 159, a free hotline that routes safely to most UK banks. Lodge an APP fraud reimbursement claim. Cite the PSR rules effective 7 October 2024 if the first agent doesn't know them.
• Report to Action Fraud at reportfraud.police.uk or 0300 123 2040. You need a crime reference number for the bank claim. Don't expect anything else from this step.
• Apply for CIFAS Protective Registration if you sent ID documents. £30 for two years, flags your identity across most UK banks and lenders for extra checks. Pull free credit reports from Experian, Equifax and TransUnion.
• If any of the money went on a credit card, file a Section 75 Consumer Credit Act claim with the card issuer. For debit cards, request a chargeback within 120 days.
• If the bank stalls or refuses past 5 business days, demand a final response letter and escalate free to the Financial Ombudsman Service on 0800 023 4567.
• Report the listing on whatever platform hosted it, so it gets removed before the next person finds it.

One warning. In the weeks after a scam, victims often get contacted by "asset recovery" specialists offering to get the money back for an upfront fee. That's the second wave. The Ombudsman is free, your bank's fraud team is free, Victim Support on 0808 16 89 111 is free.

The AI part

The reason these scams scaled so fast is partly technical. Cifas's Fraudscape 2025 report named AI-driven identity fraud as the most prevalent fraud type in the UK last year, with fake documents now making up 30% of all reported cases. A Polish security researcher demonstrated in 2025 that ChatGPT's image generation could produce a convincing fake passport in five minutes, good enough to pass many automated checks. The driving licence and utility bill my friend received were almost certainly generated this way. A year ago this would have required Photoshop skills and a few hours. Today it requires a prompt.

That changes the calculus for every renter. The old advice, ask for ID and verify the address, still matters, but it's no longer sufficient on its own. The only reliable check left is meeting the person at the property, ideally with a neighbour or letting agent who can confirm they actually live there. Anything before that point, no matter how plausible the documents look, has to be treated as unverified.

What next?

The UK has effectively decided not to investigate individual frauds. It has, in return, pushed the cost of fraud onto banks. The result is a system where the police feel useless, because they are, and the bank is the actual lever, even though no one tells you that at the point of reporting.

If you've just been scammed, the most useful thing anyone can say is this. Stop trying to make the police care. They can't, and the reform timelines are years out. Go to your bank, today, and use a law that's been on the books for just over a year and that most victims and even some bank staff still don't know exists.