Sales and deposits
Verify a buyer, seller or authorised contact before accepting changed deposit, disbursement or settlement instructions.
Real estate & property management
Deposit day is the wrong time to trust an email alone.
Criminals mimic agency emails and calls when buyers are expecting urgent instructions. Verify the person behind a payment change—across sales, property management and rentals.
One brand, several attack surfaces
Protect more than the sale.
An agency’s trusted name can be abused to redirect a purchase deposit, issue a fake bond request or persuade a property manager to change an owner’s account. A consistent verification trigger helps staff step outside the compromised channel.
Property management
Check owners before changing disbursement accounts, approving urgent payments or discussing a tenancy and its financial details.
Rentals and bonds
Give staff a separate identity check when a supposed landlord, tenant or agency contact requests bond or rent payment changes.
Fits around agency systems
Verify from the details already on screen.
Highlight a phone number in any browser-based agency platform, portal or email client. Right-click to send a one-time SMS code; the person reads it back on the call.
The browser extension is CRM-agnostic. It adds a separate check without claiming a direct integration or asking the agency to replace its property system.
Use the known record
Send the code to contact details already held on the file, not the new number supplied in the instruction being verified.
Beyond the portal
Secure the phone call, not just the platform.
Securexchange and PEXA Key protect details inside their platforms. Vericode complements that protection by checking the caller or correspondent when an instruction arrives outside the portal—by phone, ordinary email or another browser workflow. No partnership or endorsement is implied.
Audit trail
Each authorised-contact check creates a timestamped, hash-chained record: requester, masked target, method and outcome. Compliance-authorised users can export it as PDF or CSV.
Recognisable sender
SMS travels through Australian carriers MobileMessage or ClickSend using the ACMA-registered sender ID VERICODE.
Residency, with one exception
Customer and verification data—recipient details, messages and verification records—is hosted in Australia. Staff sign-in is handled by our identity provider, WorkOS, in the United States.
Industry guidance
The risk is recognised across property transactions.
ACSC property BEC alert
The ACSC warns that criminals compromise property transaction emails and substitute payment instructions.
Read sourceAgency impersonation scams
Smart Property Investment reports a surge in scams where criminals mimic real estate agency emails.
Read sourceREIQ cyber-crime guidance
REIQ’s public guidance describes cyber-crime risks for agencies and the need for practical safeguards.
Read sourceAUSTRAC real estate fact sheet
AUSTRAC’s Tranche 2 fact sheet sets out AML/CTF obligations applying to relevant real estate services from 1 July 2026.
Read sourceBefore money or information moves
Make verification part of every high-risk agency workflow.
Define the triggers for sales, trust money, owner disbursements, rentals and bonds, then give staff a clear escalation path when a check does not succeed.