Rental deposit scam evidence to preserve in first 48 hours
By Advocate Panchanand Shaw, Bar Council of West Bengal · Published 2 Nov 2026 · Digital evidence
In a rental deposit scam, the first 48 hours decide whether you recover money. Preserve bank statements, UPI logs, screenshots of the fake listing, chat records and call details. Report to 1930 and cybercrime.gov.in immediately. File an FIR under BNS 2023 sections 318 and 316. Electronic evidence is admissible under BSA 2023 section 63 if preserved with a certificate.
In a rental deposit scam, the evidence you preserve in the first 48 hours often decides whether the police can trace the money and whether a court can convict the scammer. You should immediately save bank statements, UPI transaction logs, screenshots of the fake listing, chat messages, call records, and the rental agreement. Report to 1930 and cybercrime.gov.in without delay. File an FIR under BNS 2023 sections 318 and 316. Electronic evidence is admissible under BSA 2023 section 63, but only if it is preserved properly and supported by a certificate.
Most victims lose cases because they delete chats, change phones, or wait for the scammer to respond. The first two days are critical because banks can freeze funds, platforms can preserve server logs, and the scammer may not yet have closed the account. This article sets out a practical 48-hour evidence plan, the legal provisions that make each item admissible, and the mistakes that destroy a good case.
What the law says
The Bharatiya Sakshya Adhiniyam 2023 section 63 governs electronic evidence. It requires the person producing electronic evidence to give a certificate identifying the electronic record, describing the manner of its production, and confirming that it was produced from a computer or device during a period when it was operating properly. The certificate must be signed by the person in charge of the device or by an expert. Without this certificate, a court may refuse to admit a screenshot or a chat export.
The BNS 2023 provides the substantive offences. Section 318 punishes cheating, section 316 punishes criminal breach of trust, section 336 punishes forgery, and section 351 punishes criminal intimidation. A rental deposit scam typically involves section 318 and section 316. If the scammer created a fake listing or used a stolen identity, the IT Act 2000 sections 66C and 66D apply. Section 66 is a residual computer offence. Sections 67 and 67B are not usually relevant to rental scams but may apply if the fraud involved obscene material or child sexual abuse material.
The BNSS 2023 governs procedure. Section 173 requires the police to register an FIR. Section 175(3) allows a magistrate to order investigation if the police refuse. Section 35 deals with arrest and bail. Section 187 allows attachment of property. Section 480 provides for victim compensation. Section 482 covers appeals. Section 528 deals with victim compensation schemes. The RBI directions on unauthorised electronic transactions impose timelines on banks and limit customer liability when reporting is prompt. These directions are useful when you ask the bank to freeze the recipient account or to process a chargeback.
Evidence that is not preserved is evidence that does not exist. The first 48 hours are not a grace period; they are the deadline.
First 48 hours: step-by-step evidence plan
- Hour 0-2: Stop all contact and secure your accounts. Do not call the scammer again. Change your bank passwords and UPI PIN if you suspect credential theft. Take screenshots of the fake listing, the chat thread, and the payment confirmation. Save the listing URL and the scammer's phone number.
- Hour 2-4: Call 1930 and file on cybercrime.gov.in. Provide the transaction IDs, the recipient account number, the UPI handle, and the amount. Upload your screenshots. Note the acknowledgement number. This starts the freeze process.
- Hour 4-8: Write to both banks. Send an email to your bank and the recipient bank's nodal officer. Attach the transaction proof and the cybercrime complaint. Request a freeze under the RBI directions. Keep the delivery receipt.
- Hour 8-24: File the FIR. Visit the police station with a printed copy of the online complaint, ID proof, address proof, and all evidence. Ask for a copy of the FIR. The police must register it under BNSS 2023 section 173 for a cognizable offence.
- Hour 24-48: Create a BSA 2023 section 63 certificate. If you are producing screenshots or chat exports in court, prepare a certificate. It should identify the device, the record, and the manner of production. A lawyer or an expert can help. Keep the original device safe.
- Hour 24-48: Report the listing to the property portal. Most portals have a fraud reporting option. Report the fake listing so it is removed and other tenants are warned. Save the portal's response.
- Hour 48: Send a legal notice. A lawyer can send a demand notice to the landlord or agent. This creates a record and may lead to settlement. It also preserves your civil claim.
Evidence types and where to get them
| Evidence | Where to get it | Why it matters |
|---|---|---|
| Bank statement | Net banking or bank branch | Shows the debit and the recipient account |
| UPI transaction log | UPI app or bank | Shows the UPI handle and reference number |
| Fake listing screenshot | Property portal or browser | Shows the false representation |
| Chat messages | WhatsApp, email, SMS | Shows the inducement and the demand |
| Call records | Mobile operator | Shows contact with the scammer |
| Rental agreement | Your files or the landlord | Shows the deposit amount and identity |
| Cybercrime acknowledgement | cybercrime.gov.in | Shows timely reporting |
| FIR copy | Police station | Shows the criminal case is registered |
How to prepare a BSA 2023 section 63 certificate
A BSA 2023 section 63 certificate is a written statement that accompanies electronic evidence. It should identify the electronic record, such as a screenshot file or a chat export. It should describe how the record was produced, for example by taking a screenshot on a specific phone on a specific date. It should state that the device was operating properly at the time. It should be signed by the person who produced the record. If the record is produced from a server or a cloud account, the certificate should identify the account and the person responsible.
You should prepare the certificate as soon as possible. Do not wait until the trial. Keep a copy of the certificate with the evidence. If the original device is lost or damaged, the certificate and the saved copy become more important. A lawyer can draft the certificate in the proper format. An expert can also provide a certificate if the evidence was extracted using forensic tools. The court may ask for additional details, so keep a log of when and how each item was preserved.
Chain of custody for digital evidence
Chain of custody means the record of who handled the evidence and when. For digital evidence, the chain starts when you take the screenshot or export the chat. You should note the date, time, device, and the person who captured it. If you send the evidence to the police, keep a copy of the acknowledgment. If the police seize your phone, ask for a receipt. If an expert examines the device, keep the expert's report. A broken chain of custody allows the defence to argue that the evidence was altered or planted.
In rental deposit scams, the chain is usually short. The victim captures screenshots and sends them to the police. The bank provides statements. The property portal provides listing records. The police can request server logs from the portal and the bank. If the case goes to trial, the prosecution must prove that the evidence is authentic. Your records help. Keep the original files, not just printouts. Keep the metadata if possible. Do not edit the files. If you must crop an image, keep the original uncropped version too.
What decides the outcome
Evidence quality decides most rental deposit cases. A clear bank statement with a matching UPI reference is stronger than a verbal claim. A screenshot that shows the listing URL and the date is stronger than a cropped image. A chat thread that shows the scammer demanding the deposit and then disappearing is stronger than a summary written after the fact. Courts also look at whether the evidence was preserved without alteration. If you edited a screenshot or deleted part of a chat, the defence can attack its authenticity.
The BSA 2023 section 63 certificate is a procedural requirement, but it also affects credibility. A certificate that identifies the device and the manner of production shows that the evidence is authentic. The RBI directions affect the bank's liability. If you reported within the specified period, the bank may have to refund or freeze the amount. The speed of your report also affects whether the money can be traced. If the scammer withdrew the funds before the freeze, recovery becomes harder. Finally, the jurisdiction and the cooperation of the recipient bank matter. A bank in another state may take longer to respond.
Common mistakes
- Deleting chat threads. Once deleted, the inducement and the scammer's admission are lost. Export the chat or take screenshots first.
- Taking cropped screenshots. A cropped screenshot may not show the URL, the date, or the sender's number. Capture the full screen with the address bar and timestamp.
- Waiting for the scammer to reply. The scammer may delete the listing and close the account. Report immediately.
- Not writing to the bank. A phone call is not enough. Banks need a written complaint to start a freeze or chargeback.
- Using the same device for banking after a suspected hack. If your device is compromised, change passwords from a different device and run a security scan.
- Not preparing a BSA 2023 section 63 certificate. Without it, the court may reject your electronic evidence.
- Paying a recovery agent. Never pay an upfront fee to someone who promises to recover your deposit. This is a second scam.
Keep a written timeline of everything you did. Note when you discovered the scam, when you called 1930, when you emailed the banks, and when you filed the FIR. This timeline helps the police and the court follow the sequence of events. It also rebuts any suggestion that you delayed deliberately. Store the timeline in a separate file and back it up. If you later find new evidence, add it to the timeline with the date and source.
When to involve a lawyer
You should consult a lawyer if the police refuse to register your FIR, if the amount is large, if the scammer is outside your state or outside India, if you need to prepare a BSA 2023 section 63 certificate, or if you want to pursue civil recovery. A lawyer can draft the complaint, send the legal notice, file the magistrate complaint under BNSS 2023 section 175(3), and represent you in the civil suit. For urgent help in Kolkata and West Bengal, contact a cyber crime lawyer in Kolkata. For more guides on evidence and procedure, see our blog and our contact page.
Need help with a cyber crime matter?
Tell me what happened and I will tell you what to file, where, and by when. First conversation is free.
Call +91-9007000603 WhatsAppFrequently asked questions
What evidence should I preserve first in a rental deposit scam?
Preserve bank statements and UPI transaction logs first. They prove the payment and identify the recipient account. Then save screenshots of the fake listing with the URL and timestamp, chat messages with the scammer, call records, and the rental agreement. Do not delete anything. Report to 1930 and cybercrime.gov.in within 48 hours.
Why is the first 48 hours important in a rental deposit scam?
Banks can freeze the recipient account only if you report quickly. Property portals may preserve server logs for a limited time. The scammer may delete the listing and close the account after two days. Early reporting also strengthens your bank complaint under the RBI directions on unauthorised transactions and improves the chance of recovery.
What is a BSA 2023 section 63 certificate?
It is a written certificate required when you produce electronic evidence in court. It identifies the electronic record, describes how it was produced, and confirms the device was operating properly. It must be signed by the person responsible. Without it, the court may refuse to admit screenshots or chat exports. Prepare it as soon as possible and keep a copy.
Can I use WhatsApp screenshots as evidence in India?
Yes. Screenshots of WhatsApp chats are electronic evidence under BSA 2023 section 63. You should capture the full screen with the contact name, phone number, date and time. Keep the original phone and do not delete the chat. A certificate is required when producing the evidence in court. An expert may be needed if the authenticity is disputed.
What should I do if the scammer deletes the listing?
Report to the property portal immediately and ask them to preserve server logs. Take screenshots of the listing before it disappears if you still have the page open. Use the Wayback Machine or browser cache if available. File your cybercrime complaint and FIR without delay. The portal's records can be requested by the police during investigation.
How do I prove I paid the rental deposit?
Use your bank statement and the UPI transaction log. They show the amount, date, and recipient. Keep the payment confirmation screen and any receipt from the landlord or agent. If you paid in cash, ask for a written receipt. If you have a rental agreement, it supports the payment. A bank statement is the strongest single document.
What if the police do not preserve my evidence properly?
You should keep your own copies and prepare a BSA 2023 section 63 certificate. If the police lose or damage the evidence, you can file a complaint with the Superintendent of Police. You can also ask the magistrate to direct proper investigation under BNSS 2023 section 175(3). A lawyer can help you document the chain of custody.
Information for general guidance only and not legal advice. Provisions cited follow the Information Technology Act 2000, the Bharatiya Nyaya Sanhita 2023 and the Bharatiya Nagarik Suraksha Sanhita 2023.
Related articles
Cyber crime lawyer in your city · Bank account freeze help · Contact