Security & Anti-Fraud Guidelines

    Effective Date: March 2026

    How to stay safe and recognize fraud on CHflat.

    1. Our Commitment to Your Security

    At CHflat, your security is our highest priority. Because our "Inverted Market" model relies on transparent digital tenant dossiers (your "Living ID") that you share selectively, we have eliminated many of the classic scams found on traditional listing portals. However, cybercriminals constantly adapt. These guidelines are designed to help both tenants and landlords recognize fraudulent behavior, protect their personal data, and ensure that every transaction on CHflat is safe and legitimate. CHflat supports landlords with matching and structured information. CHflat makes no automated decision about which applicant gets a flat. Matching only assesses the fit between search preferences and a flat; personal characteristics such as nationality, residence status or debt enforcement status are not used to prioritise applicants.

    2. The CHflat "Golden Rules" of Security

    To stay safe on our platform, always adhere to these fundamental rules:

    • Never Bypass the Vault: CHflat's secure document vault is designed to protect your data. If a landlord demands you email your Debt Extract, ID copy, or salary slip to their private email before an official viewing, decline and report them immediately.
    • Never Pay Before Viewing: In Switzerland, it is strictly illegal to charge a fee simply to view an apartment. Never transfer money, pay a "reservation fee," or send a deposit before you have personally viewed the property and signed a legally binding lease agreement.
    • Keep Communication On-Platform: Fraudsters will often try to move the conversation to WhatsApp, Telegram, or private email to avoid our security filters. Always keep initial communications within the CHflat ecosystem.

    3. Recognizing Classic Real Estate Scams

    Even within secure ecosystems, you must remain vigilant against social engineering. Be highly suspicious of the following scenarios:

    • The "Landlord Abroad" Scam: A property manager claims they are abroad and cannot show the apartment. They promise to send keys via courier but require a deposit first. The apartment does not exist. Never send money for keys.
    • Phishing and Fake Login Pages: You receive an urgent email claiming your CHflat profile will be deleted unless you verify your details. The link leads to a fake website. CHflat will never ask for your password via email, SMS, or phone. Always check the URL starts with https://www.chflat.ch.

    4. Protecting Your User Account

    Your CHflat account holds the keys to your digital real estate identity. Treat it like a bank account:

    • Passwordless Login: CHflat uses 6-digit one-time email codes or Google/Apple sign-in. Never share a login code – CHflat will never ask you for it.
    • Access Logging: Opening a full dossier or protected document is logged – both for administrators (who may access data where needed for support, security, abuse prevention, troubleshooting or legal obligations) and for landlords/agencies you have granted access. You can see these in the Privacy Center under "Access". Audit logs are kept 2 years, access logs 1 year.
    • Hosting & AI: The primary database and file storage are in Stockholm, Sweden (AWS eu-north-1); some AI, email, network and authentication services may process data outside Switzerland/EEA. Uploaded document files are never sent to AI models, and the AI alert filter only runs with your consent.
    • Beware of Public Wi-Fi: Avoid uploading sensitive financial documents while connected to unsecured public networks.
    • Monitor Your Dashboard: Landlords should regularly check their active dashboard to ensure no unauthorized invitations have been sent.

    5. How to Report Suspicious Activity

    If a listing seems too good to be true, if a landlord asks for money upfront, or if a tenant profile appears to be using stolen documents, you must act immediately. Your reports help us keep the CHflat ecosystem clean and secure for everyone.

    • Contact the Security Team: Forward suspicious emails, chat screenshots, or links to info@chflat.ch.
    • In Case of Financial Loss: Contact your bank immediately to attempt a reversal, and file a formal report with the Swiss Federal Office for Cybersecurity (BACS) and your local cantonal police. CHflat will fully cooperate with law enforcement investigations.

    For security questions or to report fraud, please contact info@chflat.ch.