How to Screen Tenant Income & Identity POPIA‑Compliantly

At Rawson Property Group, we help South African landlords verify income and identity securely and lawfully. POPIA-the Protection of Personal Information Act-has been fully enforceable since 1 July 2021 and applies to every person, landlord, and letting agent handling tenant data. POPIA compliance is mandatory when collecting tenant data, and ignoring it is no longer optional.

This guide walks you through a practical, step‑by‑step screening process that combines:

• Home Affairs id verification
• Employment verification and recent payslips
• Bank account verification and affordability checks
• Credit checks from a registered credit bureau
• Rental history and previous landlord references

All done with written consent. Rawson follows both POPIA (the personal information act) and FICA requirements when screening tenants for rental properties nationwide.

Why Proper Income & Identity Verification Matters for Landlords

Around 30% of South African tenants are in arrears at any given time, and rental fraud is escalating. TPN data shows the national average for tenants paying monthly rent on time sits at roughly 70%, while no-payment tenants rose to about 6.15% in recent quarters. Choosing the wrong tenant is expensive. Why tenant screening matters goes far beyond confirming a salary figure-it means assessing financial reliability across identity, affordability, credit history, and payment behaviour.

The consequences of weak vetting are severe:

• Evictions in South Africa can take 3–6 months
• Legal fees and eviction costs often land between R15,000 and R50,000
• Property damage, lost rent, and prolonged vacancies compound losses further

Up to 40% of tenant applications may contain fraudulent documents-fake payslips, edited bank statements, or fabricated employer details. Tenant screening can prevent losses of R15,000 to R50,000 by catching these problems before a lease is signed. Screening income and identity correctly from day one protects rental income and supports stable tenancies, which is why handling late or missed rent payments becomes far less likely with proper upfront checks.

Legal Framework: POPIA, FICA & the Personal Information Act Principles

POPIA was assented to on 19 November 2013, with key sections commencing 1 July 2020 and the grace period ending 30 June 2021. It is South Africa's data protection law governing how landlords and agents collect information, store, and share tenant data. Estate agents like Rawson are Schedule 1 "accountable institutions" under FICA and must perform customer due diligence on both landlords and tenants. FICA compliance requires identity verification for all rental agreements, and FICA mandates record keeping for at least five years.

POPIA's core conditions applicable to tenant screening include:

• Purpose specification – a clear, documented reason for collecting ID numbers, bank account details, income data, and address history
• Minimality – limit data collection to what is strictly necessary for verification
• Consent – explicit, informed consent before processing
• Security safeguards – encrypted storage, access controls, protection against breaches
• Data subject participation – tenants can access and correct their personal data

Penalties for non-compliance with POPIA can reach ZAR 10 million, with criminal liability in serious cases. FICA compliance penalties can also reach up to ZAR 10 million. Estate agents must comply with FICA as accountable institutions, making POPIA regulations a core business requirement rather than optional.

Step‑by‑Step Tenant Income & Identity Verification (POPIA‑Compliant)

Rawson follows a structured, repeatable screening process for every applicant across its franchises. The entire process runs in this order: application form and consent, Home Affairs ID verification, credit check, employment verification, bank account verification, rental history and references, affordability calculation, and final risk review. At each step, only information necessary for that purpose should be collected. All checks must be documented and securely stored for at least five years to satisfy FICA.

1. Obtain Written Consent & Provide a POPIA Privacy Notice

Before any credit check, ID verification, or employment verification, the tenant must sign consent forms and receive a clear privacy notice. To comply with POPIA during tenant vetting, you must obtain explicit consent. Written consent is mandatory before running credit reports as per the National Credit Act.

The Rawson rental application form contains explicit consent for credit bureau checks, employment confirmation, bank account verification, Home Affairs checks, and contacting a previous landlord. The privacy notice specifies what data is collected, why, how long it is kept, and with whom it will be shared. Digital signatures or email‑based consent are acceptable if properly recorded. Transparency requires informing applicants about the need for their documents under POPIA. No checks should be done secretly-obtain written consent first, always.

2. ID Verification Against Home Affairs Records

Confirming a tenant's identity is the foundation of FICA and POPIA‑aligned screening. The process involves collecting a certified copy of the South African ID or passport, cross‑checking details with the application form, and running an electronic Home Affairs verification. For foreign nationals, passport verification and valid visa documentation are equally essential.

Home Affairs checks can reveal deceased IDs, incorrect dates of birth, and mismatched photos-all serious red flags. To stay compliant, limit who has access to the ID number, avoid unnecessary copying, and never send documents via unsecured channels. If identity cannot be reliably verified, Rawson agents should decline the application or request clarification immediately.

3. Credit Check & Credit History Review via Registered Credit Bureau

Only registered South African credit bureaus-TransUnion, Experian, XDS, or TPN-may provide consumer credit reports used for tenant screening. Rawson typically pulls a full credit report including payment history, judgments, defaults, and credit score once consent is on file.

Multiple recent defaults, civil judgments, or unpaid rental listings are important red flags. Credit bureau data must be used alongside other checks, not in isolation. Tenants must be informed if they are rejected based on credit information, and records of consent and the report must be kept. Distinguish clearly between credit history from a credit bureau and other checks like bank account or employment verification.

4. Employment Verification & Income Confirmation

Income verification is crucial to confirm that a tenant's stated income is real and stable. Rawson agents request the latest three months' payslips, an employment confirmation letter on company letterhead, and employer contact details for direct verification. The agent should call or email the employer to confirm position, start date, and the tenant's gross monthly income.

A tenant's gross monthly income should be at least three times the rent. Common fraud patterns include fake company domains, HR contacts that redirect to the tenant, and altered or fake payslips. These are red flags warranting further checks. Employer details and correspondence must be stored securely and only used for the purpose of employment verification under POPIA compliance rules.

5. Bank Account Verification & Affordability Cross‑Check

Bank account verification serves two purposes: confirming the bank account belongs to the applicant and testing whether verified income flows match payslips. Landlords or Rawson agents should obtain at least three months' stamped bank statements from the tenant's primary account. Banks should only provide the most recent 3 to 6 months of bank statements for verification.

The standard affordability rule: monthly rent should ideally be 25–30% of gross monthly income. For example, a tenant earning R24,000 should pay no more than roughly R7,200 in rent. Unexplained large cash deposits, inconsistent salary dates, or multiple returned debit orders should be treated as risk indicators.

6. Rental History, References & Red Flags

Rental history is often the strongest predictor of future behaviour. Rawson agents contact at least the previous landlord or managing agency, asking about payment punctuality, property condition, and any disputes or notices of breach. Where available, rental behaviour indicators from platforms like TPN supplement personal references.

Red flags include frequent moves with short lease terms, unexplained evictions, inconsistent landlord contact details, or landlords unwilling to comment. Landlord reference notes are personal data under POPIA and must be stored responsibly. For more on vetting tenants thoroughly, Rawson has detailed guidance available.

Typical Red Flags in Income & Identity Verification

No single red flag automatically means rejection, but patterns of risk must be taken seriously. Here is what to watch for when screening tenants:

Anonymised example: A tenant declared income of R25,000 per month and supplied payslips as proof. Bank statements showed salary deposits of only R15,000. The credit report revealed two recent civil judgments, and a previous landlord confirmed multiple late payments. Combined, these red flags led to a declined application-saving the landlord from months of non payment and eviction costs estimated at R40,000–R60,000. To avoid rental scams, landlords should never rely on a single document.

POPIA‑Compliant Data Handling Throughout the Screening Journey

The personal information act (POPIA) obligations apply every time you store ID documents, bank statements, or credit reports. Data minimisation means you only collect fields necessary to assess financial reliability-no collecting family members' ID copies unless they are co-tenants or sureties. Biometric data processing requires explicit consent under POPIA regulations.

Secure storage practices include encrypted storage, role‑based access controls, and avoiding sending documents over unsecured email or messaging apps. Tenants have POPIA rights to access their personal data, request corrections, and know which third‑party services were used. Documents must be stored securely according to POPIA regulations, and data must be deleted or destroyed when no longer required. Rejected applicants must have their data deleted immediately to avoid unnecessary retention. The information regulator can investigate complaints, so maintaining audit trails is essential.

How Rawson Property Group Helps Landlords Screen Tenants Responsibly

Rawson Property Group is a national, full‑service real estate agency with established tenant screening policies aligned with POPIA and FICA. Rawson agents manage the full screening flow-from application and consent through id verification, credit checks, employment and income verification, rental history checks, and final affordability assessment. Tenant screening includes ID verification and employment checks as standard across all franchise offices.

Landlords must comply with FICA and POPIA regulations during screening, and Rawson's systems minimise data exposure through centralised storage, standardised consent forms, and restricted access to sensitive documents. The benefits for landlords are clear: reduced risk of non-payment and property damage, fewer admin headaches, a clear documentation trail if disputes arise, and support from a professional franchise network. Understanding your rights and responsibilities as a landlord starts with proper screening.

Ready to protect your rental income? Contact your nearest Rawson Property Group office to discuss POPIA‑compliant tenant screening for your current or upcoming property rentals.