It might seem like a straightforward task, but sending the wrong bank details to a landlord or tenant — or having those details intercepted or tampered with — could cost your agency thousands of pounds. That’s why sending bank details securely is essential for every lettings professional.
Email is still the most common way agents communicate with tenants, landlords, and contractors. But sharing sensitive information like bank account details via email carries significant risks. Cybercriminals increasingly target these systems to steal data, carry out phishing scams or even alter payment instructions. So it's essential that everyone in your team understands how to handle this type of information securely — not just IT managers or senior staff.
Here are some clear, practical tips that everyone in a lettings office can follow to reduce the risks when sharing bank details.
These risks apply to every inbox — whether you’re the owner, office manager or a junior negotiator — so take precautions every time.
Before you send any bank details, stop and think about what could go wrong:
Typing bank details into the body of an email is the least secure option. To avoid unnecessary risks, focus on sending bank details securely using one of these safer alternatives:
Many letting agents use WhatsApp daily — often on personal mobiles, company devices, or even shared office phones.
The good news is that WhatsApp is end-to-end encrypted, meaning messages can only be read by you and the recipient. That makes it far more secure than email for sending sensitive details — if you're sending them to a verified contact.
However, there are still important points to consider:
In short: WhatsApp can be a secure option, but only if it’s used properly — and with proper internal controls in place.
Before sending anything, triple-check the tenant’s name, email address or mobile number, and what they’ve requested. If you’re not 100% sure, verify it by calling them or speaking to a colleague. A small mistake can send sensitive data to the wrong person.
If you’re working from a café, train, or anywhere with public Wi-Fi, avoid sending bank details unless you're connected via a VPN (Virtual Private Network), which adds a layer of encryption.
Hackers often exploit old versions of software. Make sure your computer, phone, browser and email software are up to date with the latest security patches.
Every email account used for business should have 2FA switched on. This means even if someone steals your password, they can’t access your account without your phone or second verification step.
Create a short guide for your team that outlines how to share bank details safely. Everyone — from junior staff to managers — should know:
Run through examples at team meetings and remind staff regularly. Security works best when everyone plays a part.
mail isn’t naturally secure, but with a few simple steps, it can be made much safer. Whether you’re a branch manager or just starting out in lettings, understanding the importance of sending bank details securely will help protect your agency and your tenants.
When in doubt, pause and double-check, and if there’s a safer alternative to email, use it.
* * *