Tenants and landlords who receive an email stamped Nexity do not always check the sender’s address before taking action. The campaigns of fake emails targeting real estate players have intensified since 2024, with messages imitating due date notices, charge adjustments, or requests for bank detail updates. This article compares the characteristics of a legitimate Nexity email with those of documented phishing attempts, to enable quick identification.
Fraudulent domains identified imitating Nexity
Most anti-phishing guides provide generic advice. The Nexity case offers a rare advantage: a precise list of fraudulent domains, regularly updated, that allows for the verification of a suspicious email in just a few seconds.
| Fraudulent Domain | Legitimate Domain |
|---|---|
| nexity-groupe.com | @nexity.fr |
| nexity-groupe.net | @mynexity.fr |
| nexity-groupe.fr | |
| nexity-epargne.fr | |
| groupe-nexity.com | |
| nexity-concession.fr | |
| nexity-ehpad.fr | |
| nexity-parking.fr | |
| nexity-finance.com | |
| nexity-immo.fr |
The left column groups the domains identified as fraudulent by Mon Projet Immo. The right column reminds us of the only two domains used by Nexity for its communications with individuals. Any email whose address does not end with @nexity.fr or @mynexity.fr should be treated as suspicious.
A revealing detail: scammers systematically add a reassuring keyword to the domain name (group, finance, savings, real estate). This strategy aims to create an impression of legitimacy for the tenant or landlord in a hurry.
A detailed guide on Nexity emails on Mon Projet Immo lists these domains and explains the steps to follow for each type of message received.
Anatomy of a fake rent or charge adjustment email
Fake due notices sent in the name of Nexity no longer resemble the crude phishing attempts of a few years ago. Recent campaigns adopt the group’s graphic charter, include plausible file references, and mention amounts consistent with rent in France.
Elements systematically falsified in these campaigns
- The payment IBAN is altered: the email requests a transfer to an account that does not correspond to the one usually used for the rental contract
- The sender’s address uses one of the fraudulent domains listed above, sometimes masked behind a misleading display name like “Nexity Management Service”
- The message creates a sense of urgency by mentioning a regularization within 48 hours, a risk of penalty, or a suspension of access to the personal space
- The embedded links redirect to a cloned site that requests login credentials and bank details
The common point of these emails: they all request immediate financial action. A real estate manager never asks for a change of bank details via a simple email.
Three-step verification before any payment
When an email mentions a rent amount, a charge adjustment, or a change of IBAN, three verifications are necessary before taking any action.
Compare the sender’s address with the two legitimate domains (@nexity.fr, @mynexity.fr). Log in directly to the MyNexity personal space by typing the address into the browser, without clicking on the link in the email. Contact the manager through the usual channels (phone number displayed on the rental contract, physical agency) to confirm the request.
Any change of payment details must be verified via the MyNexity personal space, never solely based on an email. This rule, reiterated by Nexity, is sufficient to block the majority of attempts.
Specific warning signs for real estate phishing in France
Email scams in the real estate sector exploit mechanisms specific to the tenant-landlord relationship. Scammers target specific moments in the rental contract: moving into the property, annual regularization, exit inventory.
An email requesting payment outside the usual schedule of the contract is the most reliable sign of a fraudulent attempt. Tenants who pay each month on a fixed date more easily spot a delayed due notice. In contrast, those who receive an annual charge adjustment, which is by nature irregular, are more vulnerable.
Another signal: errors in legal mentions or the absence of a verifiable SIRET number. A legitimate email from a housing manager in France includes complete contact details, verifiable on official directories.
What to do if a tenant or landlord clicked or paid
Acting quickly makes a difference. A fraudulent transfer can sometimes be recalled if the bank is notified within hours.
- Immediately contact the bank to attempt a recall of funds and block any new transfer to the suspicious IBAN
- Change the password for the MyNexity space and the email account used for login without delay
- Report the fraudulent email on the Cybermalveillance.gouv.fr platform, which lists active phishing campaigns in France
- File a complaint online via the THESEE platform of the Ministry of the Interior, dedicated to internet scams
The time between payment and bank reporting determines the chances of recovery. The quicker the report, the higher the probability of blocking the transfer.
Tenants who have shared their credentials should also check that no changes to their bank account have been made without their knowledge in their personal space. Unauthorized access can divert future rent payments before the landlord even notices.
The proliferation of fraudulent domains imitating Nexity shows that these campaigns are organized and recurring. The only reliable verification remains the sender’s domain, cross-referenced with the official channels of the rental contract. Keeping the list of fraudulent domains handy, in a favorite or a shared document with the occupants of the property, transforms an abstract threat into a concrete reflex.