I've been around for 10 years. I've seen (I thought) pretty much every scam in the book. Well, here's a new one - I'm out $36,000 for a long-term rental.

Cliffs:

- Wife finds apartment for 6-month rental on Air BnB, contacts host, sends pictures back and forth etc. Agrees on price and terms.
- Host (with 4 positive feedback rating) "books" apartment stay on Air BnB which we believe generates an e-mail from Air BnB. We are trying to play within the rules here - not get a deal.
- We receive an e-mail from "automated@airbnb.com" that of course is in every way identical to a normal e-mail one would receive from Air BnB. No sign of phishing, even looking at it after the fact.
- E-Mail includes wiring instructions to an account held with Barclays PLC in the U.K with Air BnB in the Account Name (as well as some other text)
- Another e-mail a few days later from another "express@airbnb.com" address which is also, in theory, a legitimate air BnB e-mail sends us a receipt, says payment arrived. Gives us a confirmation/reservation code.
- We believe these accounts are legitimate Air BnB e-mail addresses that were somehow accessed by scammer - not some knock-off e-mail scam that we should have picked up on.
- We realize that the "host" never actually did anything through Air BnB and in fact just sent us wiring instructions to their personal account (bearing the name Air BnB in the U.K) and nothing was every actually done through Air BnB, even though we had every intention of doing so and thought they were holding the funds until we arrived at the apartment.
- Air BnB claims we did this "off-site" to avoid the fee and they are not legally liable.
- Barclays Bank clearly negligent in KYC regulations - this scam has been going on for at least 2 years involving that bank specifically. Somebody had to present ID etc. with a corporation (and reason why it had to have the name "Air BnB" - a recognized international brand - in the account name. So they need to know whose account it was at the very least, and should have asked why the hell it was being opened as if it was an Air BnB account.

http://www.scambook.com/report/view/181558/AirBNB-Leader-For-Welcoming-Fraud-Scams-Complaint-181558-for-$10,070.00

We have lawyers on the case etc re: both Barclays clear negligence and Air BnB's potential culpability here (which is less likely, legally).

However, one question is: we sent Air BnB (legitimately) a copy of my passport. We also, in the midst of being scammed, sent the "host" this document as well as my address in order to do a contract*

*Wife did this, I didn't think much of it as I was busy.

This seems to allow them to do just about anything/open any accounts etc. What common sense steps (cancel passport?) etc. should I take given that my ID seems to be compromised? Or is it not that big of a deal to have a color copy of that document? I assume it is, but this all happened yesterday...

Anyone with advice, especially pertaining to the last point, would be great.

Everyone else BE CAREFUL and DO NOT FALL FOR THIS.