Are We Real?
Before money changes hands, before keys, before a lease, before a single document is uploaded — both sides must prove they are who they claim to be.
The Question Nobody Asks Out Loud
Every rental transaction in this country should begin with three words. Almost none of them do.
Are we real?
It sounds almost childish written down. It is the most expensive question in Canadian renting, and the reason it goes unasked is that both sides are slightly embarrassed to raise it.
The landlord doesn't ask properly because it feels insulting to demand proof from someone sitting in front of you, being pleasant. The applicant doesn't ask at all because she is competing for the unit, and interrogating the person deciding her housing feels like a good way to lose it.
So both of them skip it. And the entire relationship — thousands of dollars, a legal obligation, a set of keys to a building where other people sleep — is built on an assumption neither party ever tested.
Split the question in two and you can see how ordinary it is.
What the tenant needs to know
- Is this landlord, owner or manager a real person or legitimate business?
- Are they actually authorized to lease this unit?
- Does the listing correspond to a real, available property?
- Is the request for money or documents coming after legitimacy is established, or before?
What the landlord needs to know
- Is this applicant the real person behind these documents?
- Is the identification genuine, and does it belong to the person presenting it?
- Is the person signing the lease the same person who was screened?
- Is the verification stored, timestamped and reviewable later?
Two lists. Eight questions. Together they take about fifteen minutes to answer properly, and the answers protect a transaction worth tens of thousands of dollars.
"The rental market does not fail only when bad people appear. It fails when the system cannot distinguish a real person from a fabricated one before money, access, or legal obligation begins."
Jimmy Ng · IDEAL FrameworkReal Case: Kitchener, Revisited
I introduced this case in Chapter 2 as evidence that the market is structurally broken. Now I want to return to it as an operational failure, because it is the clearest illustration of the first pillar I have found in Canada.
Thirty-five victims, about $40,000, one listing
Police in Waterloo Region identified at least thirty-five people as victims of a single online rental scam, with losses totalling roughly forty thousand dollars.
People arrived expecting to move in and discovered the unit was not available. Some had signed agreements. Some had already paid first and last month's rent. Many were newcomers or students trying to secure housing quickly in a difficult market.
Now look at the sequence of events, because that is where the lesson sits. In every one of those thirty-five cases, the order was the same:
1. A convincing listing.
2. A responsive, professional-sounding contact.
3. Pressure to secure the unit before someone else did.
4. Money and personal documents transferred.
5. Verification — attempted only afterwards, when something felt wrong.
Step five belongs at step one. That is the entire crime, and the entire remedy.
Here is the rule that comes out of that case, and it is the first hard rule in this book. I have written it as an absolute because it must be one — a rule with exceptions is a rule fraudsters will find.
No verified identity → no sensitive documents, no deposit, no keys, no lease. No exception.
Read it in both directions. As a landlord, it means you do not accept an applicant's file until you know who they are. As a person renting out a property, it also means you should expect to be verified — and be ready to make that easy, because the good applicants are the ones who ask.
Why Now: The Synthetic Identity Problem
Identity fraud is not new. What is new is that the identity itself no longer has to belong to anyone.
That third number deserves a moment. In one year, the synthetic share of fraud losses jumped by nearly half.
A synthetic identity is a person assembled rather than stolen. Take a real but unused social insurance number, attach a plausible invented name, a real address, a constructed employment history, and a small amount of genuine credit activity built up patiently over months. The result is a person who has a footprint, a file, and a credit history — and who has never existed.
This defeats the traditional landlord check completely. Call the references: they answer, because they are part of it. Check the credit file: it exists, and it looks fine, because it was cultivated deliberately. Look at the identification: it is well made. Meet the person: they are perfectly pleasant, because they are a real human being wearing a constructed identity.
There is nothing in that process for your instinct to catch. There is no tell.
You cannot detect a synthetic identity by being careful. You detect it by checking against a source that the person constructing it does not control.
That sentence is the whole of Pillar One, and it is why the model in Section 4.5 is built in layers rather than as a single check. Every individual layer can be defeated. The layers together cannot be, because they are anchored to different sources — a government record, a live human face, a land title, a timestamp — and no fraudster controls all four.
The Four Ways Identity Fails
Across years of case reading, identity failure takes four repeating shapes. The cities and names change. The breakdown does not.
1 · The ghost landlord
Someone advertises a unit they do not own or control.
A tenant sends money or personal documents to a complete stranger. This is Kitchener, and it is the most common form of rental fraud in Canada.
2 · The fabricated tenant identity
A real-looking application is backed by altered, borrowed or entirely synthetic identity evidence.
The landlord makes a binding legal and financial decision based on false input — and then discovers that the person named on the lease cannot be found or pursued.
3 · The signing mismatch
The person who signs is not clearly the same person who was screened.
This one is quiet and very common. You screen a well-qualified applicant; someone else moves in. The lease becomes far harder to enforce, and at a hearing you cannot establish that the person you approved is the person who agreed to the terms.
4 · The authority gap
The person communicating is real, but cannot prove they are authorized to lease the property.
A relative "handling it" for an owner. A former manager whose contract ended. A co-owner acting without the others. Trust is misplaced before the first step is even valid — and the resulting lease may not bind anybody.
Note that failures three and four involve no fake identification at all. Every person involved is real. This is why "check their ID" is not the same as identity verification, and why the model has four layers instead of one.
And the cost of these failures is not only the deposit. It is privacy exposure, delayed move-ins, unsafe access to a building, a weak position at a tribunal, damaged relationships, and a large amount of unpaid labour spent cleaning up something that should never have entered the process.
The IDEAL 4-Layer Identity Model
Good verification is layered. One document check is no longer sufficient. A durable process answers four different questions, and each one closes a failure from the previous section.
Identity Proofing
The document and record validation layer. Not "does this licence look right," but whether the credential itself validates — security features present, data internally consistent, checked against the issuing standard rather than against your impression of it.
Liveness & Match
This closes the gap between a genuine document and the person holding it. Liveness detection confirms you are dealing with a living human being in real time rather than a photograph, a screen recording, or a generated video. The match confirms that human is the one on the document.
Authority Proof
The layer almost everyone skips, and the one that closes failure four. A real person is not automatically an authorized landlord, owner, manager or signer. Identity and authority are two separate proofs, and confusing them is how the ghost landlord operates — some of them use their own real identification.
Recorded Verification Event
The layer that turns three good checks into a defensible file. A verification you performed but cannot demonstrate is, at a hearing, indistinguishable from one you never performed. This layer costs nothing and is skipped constantly.
The difference between the four layers and what most landlords currently do is the difference between looking secure and being secure. Our industry has an abundance of visual checks and almost no recorded verification events.
If you cannot show the proof, you do not have the step.
Mutual Verification: Both Directions, Every Time
Now the part of this pillar that most landlords resist, and the part I consider most important.
Verification is usually imagined as something tenants endure and landlords perform. That framing is far too narrow for today's risk environment — and if you hold it, you are leaving money on the table.
Consider what happens when you make yourself easy to verify.
- You convert cautious good applicants. The renter who asks whether you really own the building is, statistically, one of the more careful people in your applicant pool. Careful people pay rent on time. Right now they are quietly disqualifying themselves from your unit because you seemed evasive.
- You shorten your vacancy. A remote or newcomer applicant who can confirm you are legitimate will commit far faster. In a 3.1 percent vacancy market, this is a direct financial gain.
- You cost fraudsters their disguise. A ghost landlord cannot survive a market where every renter routinely asks for ownership confirmation, because that is the one thing they cannot produce. Every landlord who normalizes the question makes the whole market harder to defraud.
- You start the relationship correctly. A tenancy that begins with both parties proving themselves has a different character than one that begins with one party interrogating the other.
Practically, being verifiable takes about two minutes to prepare and can be reused for every applicant:
- Be ready to state your legal name as it appears on the land title, and invite the applicant to confirm it against the registry themselves.
- If you use a company or a manager, be ready to explain the relationship and show the authority — a management agreement, or a corporate record naming you.
- Meet at the property, or arrange a live video walkthrough from inside it — not a slideshow of photographs.
- Never ask for a deposit before the applicant has had a genuine opportunity to confirm who you are.
A system that verifies only one side will still fail. Each party should be able to confirm the other is real before risk moves forward.
Technology at the Kitchen Table
Liveness detection — how a computer knows you are alive
This is the technology that sounds most like science fiction and is, in practice, the easiest one in this book to use. If you have unlocked a phone with your face or opened a bank account from your couch, you have already used it.
What is it, in one sentence? A check that confirms a real, living person is present in front of the camera right now — not a photograph, a video recording, a mask, or a generated face.
Why does it exist? Because face matching alone was defeated the moment everyone had a photo online. If a system only asks "does this face match the ID," a fraudster holds up a printed photo of the real person and passes. Liveness closes that hole by requiring evidence of a living human — subtle motion, blood-flow colour changes in the skin, depth, or a response to an instruction given at random so it cannot be pre-recorded.
What does it replace? Glancing at a driver's licence across a counter and comparing it to the face in front of you. That check has one thing going for it and one fatal weakness: you are confirming a live person, but you have no way to know the document is genuine or theirs. Liveness combined with document validation confirms both at once.
What does it cost? Typically a few dollars per verification through a consumer identity service, sometimes bundled into tenant screening you already pay for. It takes the applicant about a minute on their own phone, with no app to install in most cases. Against a $2,200 deposit or a failed tenancy, this is the cheapest insurance in the book.
The point most landlords miss: this technology is more convenient than what it replaces, not less. It works at eleven at night, it works from another country, and it works without either of you driving anywhere. Verification and convenience are not opposites — that is exactly the assumption that has kept renting stuck.
Doing This Without a Budget
Everything above can be run on a paid stack or on nearly nothing. Here is the honest comparison.
The Low-Cost Path
- Meet in person or by live video from inside the unit
- View original documents, not photocopies or screenshots
- Confirm the name matches across two independent pieces of government identification
- Run a land title search on any previous-landlord address given
- Record a dated line in a notebook or document: who, how, when, result
- Verify every adult occupant, not just the lead applicant
The Scaled Path
- Digital identity verification with document validation and liveness
- Authority proof stored per property, not per conversation
- Verification events logged automatically with timestamp and method
- One written standard applied identically by every staff member
- Downstream steps gated — no document upload or deposit until the gate clears
- Verified identity handed directly into the tenant file as its first record
The left-hand column costs almost nothing and closes most of the gap. Do not let the absence of a budget become a reason to skip the pillar — the sequence matters more than the tooling.
One caution on privacy
Strong verification does not mean collecting everything you can. It means collecting only what the step needs, at the moment it is needed, for a stated purpose.
You do not need a copy of an applicant's passport sitting in your email for the next six years. You need to have verified it, and to hold a record that you did. Those are very different things, and the second one carries a fraction of the risk — because a file full of unnecessary identity documents makes you a target too.
Good practice is purpose-limited, sequenced, recorded, access-controlled and explainable. And identity checks must never become a polite cover for arbitrary exclusion: the same standard, applied to every applicant, or it is not a standard.
Verification is not surveillance. The goal is not a harsher market. It is a more trustworthy one.
Chapter Four Checklist
- Verify before value moves. No deposit, no key, no door code, no signed lease, no sensitive documents until the identity gate is cleared. Treat this as absolute.
- Verify both the person and their authority. Do not stop at "this is a real person." Ask whether they are authorized to act in this transaction — and be ready to answer the same about yourself.
- Run Layer 1: validate the credential itself, not your impression of it. Two independent pieces of government identification at minimum.
- Run Layer 2: confirm a live person is present and matches the credential. In person, or by liveness check for remote applicants.
- Run Layer 3: confirm authority. Land title for ownership; management agreement or corporate record for anyone acting on an owner's behalf. On the applicant side, verify every adult who will be bound by the lease.
- Run Layer 4: store the event. One dated line recording who was checked, how, when, and the outcome. This is free and it is the layer most often skipped.
- Make yourself easy to verify. Prepare your ownership confirmation once and offer it before you are asked. The applicants who ask are the ones you want.
- Use one standard across every applicant and every staff member. If one person verifies one way and another improvises, you have no process — and you have created a fairness problem.
- Collect only what the step requires. Verify documents rather than warehousing copies of them. Delete what you no longer need.
- Hand the verified identity into the file as its first trusted record. That handoff is where Chapter 5 begins.
Identify is not a checkbox. It is the operational decision that determines whether everything after it is safe enough to continue.
Most markets do this backwards. They collect documents first, ask questions later, and only begin verifying when something already feels wrong. That is not a system. That is delayed reaction.
Think about the hospital again. Nobody at an intake desk feels awkward asking your name and date of birth. Nobody experiences it as an accusation. It is simply the first thing that happens, because everything else — the chart, the diagnosis, the medication — becomes dangerous if it is attached to the wrong person.
Renting deserves the same ordinary dignity. Not suspicion. Not interrogation. Just a first step that both people expect, that takes fifteen minutes, and that leaves a record.
And I want to name what I think is the real obstacle, because it is not cost and it is not technology. It is embarrassment. Landlords feel rude asking. Tenants feel powerless asking. So an entire market skips the one step that would protect both of them, out of politeness.
The fix is to make it routine. When the question is asked of everyone, every time, in the same way, it stops being personal and becomes what it always should have been — the intake desk. Not a judgement about the person in front of you. Just the start of a file that can be trusted.
Once that gate is real, the file can become real too. Which is exactly where we go next.