drivo
Guides7 min read

Preventing rental fraud: checking the licence at the counter

How a small rental agency checks driving licence and identity at the counter, reads the warning signs and prevents vehicle misappropriation.

You do not prevent rental fraud by instinct. You prevent it with three checks that belong together at the counter: the authenticity of the driving licence judged by its security features, the match between its data and a second official photo ID, and a means of payment that is issued in the driver's name and can be traced. If any one of those three checks is missing, the handover is as open as an unlocked door.

Someone who intends to misappropriate, move on or resell a vehicle rarely fails because of the rental contract. They fail at a counter that runs the same procedure for every customer, notes the discrepancies and, in case of doubt, does not hand over the keys. That is what this article is about: a procedure that takes a few minutes, does not annoy your regulars, and still recognises the patterns used against small and mid-sized operators.

Viktigt att veta
  • Always two documents: the original driving licence plus a second official photo ID, with the data compared against each other.
  • Do not just look at documents, feel them and tilt them: optically variable elements, laser engraving, card edges, typography.
  • Driver, contract holder and means of payment must all name the same person.
  • The same procedure for every customer protects better than suspicion in individual cases.
  • Collect and keep only what the rental contract needs, with fixed deletion deadlines.

Step 1: actually check the driving licence

In Germany the EU card-format driving licence is produced by the federal printing office, the Bundesdruckerei, and layers several security features on top of each other. Forgeries rarely fail on the photograph; they fail on depth. What is merely printed does not move, and what should be embossed feels smooth. So take the card in your hand, tilt it towards the light and run a finger across the surface.

  • Optically variable elements: when the card is tilted, motifs and lettering must appear and disappear again, not merely glint.
  • Tactile features: laser engraving and relief can be felt with a fingertip; a completely smooth card is a warning sign.
  • Typography: even characters, clean edges, no frayed or pixelated letters, microprinting still legible under a magnifier.
  • Card construction: air bubbles, separating layers, frayed edges or a photograph inserted after the fact.
  • Data logic: date of issue, categories and validity must fit the person's age and the driving experience they claim.
  • Issuing authority: the driving licence authority named on the card, the Fahrerlaubnisbehörde, must exist and match the stated place of residence.

There are official references for comparing a document against a genuine specimen. The Council of the European Union maintains a public register of authentic identity and travel documents in which the German licence specimens and the documents of the other member states are described with their security features. Practical guidance for businesses is also published by the crime prevention service of the German federal and state police. What you cannot look up yourself is whether a driving entitlement is actually valid: the central driving licence register held by the federal motor transport authority, the Kraftfahrt-Bundesamt in Flensburg, is not open to rental operators. You check the document, not the register.

Licences issued abroad

Cards from the European Union and the European Economic Area are recognised in Germany without further formality. Documents from a third country remain valid only for a limited period once the holder moves their residence to Germany, and must then be exchanged, so ask about habitual residence rather than only about the address printed on the document. An international driving permit is not a driving entitlement in its own right but a translation, and it is valid only together with the national original. The binding rules are set out in the German driving licence regulation, the Fahrerlaubnis-Verordnung; for an individual case the competent licensing authority gives the answer, depending on the town the licence desk at the citizens' office or at the district administration. Never treat these rules as permanently fixed; when in doubt, ask that authority.

Step 2: bring identity and payment together

A forged licence on its own gets nobody off the yard. The vehicle only leaves once the payment goes through as well, and that is where the more effective check sits: three names must match, the one on the licence, the one on the ID and the one on the means of payment.

  • Take the deposit as a credit card pre-authorisation on a card issued in the driver's name; prepaid cards and third-party cards are a reason to look more closely.
  • With online prepayment, wait for the confirmation from the customer's bank, not just the payment notice in your own system.
  • Call back on a number you researched yourself, for example the switchboard of the employer named, not the number written on a slip of paper.
  • Order a credit reference from a commercial credit agency only with a sound legal basis, a documented purpose and notice to the customer.
  • Fill in a handover report with photographs, mileage, fuel level and signature; that same report later supports a criminal complaint.

Warning signs and the matching countermeasures

An isolated oddity is harmless. The dangerous thing is the cluster: last-minute booking, high-value vehicle, cash payment, time pressure. The table below maps the patterns German rental operators report again and again to the countermeasure that fits at the counter.

Warning signPossible patternCountermeasure at the counter
Cash payment for a high-value vehicleNo traceable payment trailTake the deposit only by credit card pre-authorisation in the driver's name
Booking made at very short notice, immediate pick-upNo time window for checksTake the time to check, and move the handover to the next working day if needed
Vehicle category does not fit the stated reasonTargeted selection with resale in mindAsk about the intended use and destination and record them in the contract
A third party pays, someone else drivesA front person at the counterContract holder, driver and means of payment must name the same person
The address in the document differs from every other detail givenFalse identity or accommodation addressRequire a second document and call back on a number you researched yourself
Marked haste, pressure, attempts to distractDiverting attention from the document checkRun the procedure unchanged and hand over no keys if in doubt
Extensions only by message, the vehicle never seen againStalling before a misappropriationExtend only after proof of location or the vehicle being presented in person

None of these signals justifies accusing a customer. They justify one thing only: that you do not cut the procedure short, not even on a busy Friday afternoon.

Documentation and data protection: what is allowed

Inspecting the licence and the ID is lawful and necessary for the rental contract; copying them without limit is not. In Germany, reproducing the national identity card requires the holder's agreement under the identity card act, and the General Data Protection Regulation additionally demands data minimisation, a clear purpose and deletion as soon as that purpose is met. An operator who collects scans without governing the practice has traded a fraud risk for a data protection risk.

  • Record what the contract needs: name, date of birth, address, licence number, categories and validity.
  • Full copies only with a documented purpose, a sound legal basis and consent where consent is required.
  • Fixed deletion deadlines instead of folders that keep growing, in the booking and accounting systems as well.
  • Limit access to customer documents to the people who need it for their work.
  • Describe the check in your record of processing activities; if in doubt, the data protection supervisory authority of your federal state decides.

When a vehicle does not come back

  1. 1Set a short, clear deadline for return in writing, through the channel agreed in the contract.
  2. 2Evaluate location data only within the scope you described transparently to the customer beforehand.
  3. 3File a criminal complaint with the responsible police station, in many federal states also through the state police's online station; ask for the written confirmation of the complaint.
  4. 4Bundle the paperwork immediately: rental contract, the document data you were permitted to record, handover report, payment records, correspondence.
  5. 5Inform the insurer without delay and observe the deadlines in the policy; whether the case is recorded as theft or as misappropriation can decide cover.
  6. 6Vehicle papers and the spare key stay in the office as a matter of principle, never in the vehicle.

That order sounds bureaucratic, but it decides whether a case moves quickly or sits still. The cleaner the counter's documentation, the faster the police can work and the less the insurer argues.

Checking without slowing the handover down

A procedure that takes too long is no longer followed after two weeks. So the check belongs on one card kept where the handover happens: 4 points for the document, 2 points for the payment, 1 signature. Train everyone who hands over keys, not only the owner. For high-value vehicles the four-eyes principle is worth it. And clear rules in your rental terms, for instance minimum age, minimum time holding the licence and accepted means of payment, spare you the argument in the individual case.

Operators who rent out online can move part of the screening earlier. On a marketplace such as DRIVO, enquiries arrive through verified profiles with reviews, bookings and the calendar sit in a back-office with fleet management, and payouts run automatically through Stripe. Listing the vehicles costs nothing: no listing fee, no monthly fee, commission only on completed bookings, so an empty week costs the business nothing. What no marketplace will do for you is the document check at the handover. That stays your job, and your most effective protection.

Which documents may a rental operator require?

The valid driving licence in the original, a second official photo document to compare the personal details, and a means of payment issued in the driver's name. Inspecting them is lawful for the rental contract; what is limited is not the looking but the storing.

May I copy or scan the licence and the ID?

You may record the data the contract needs. In Germany, reproducing the identity card requires the agreement of the person concerned under the identity card act, and the General Data Protection Regulation requires purpose limitation, minimisation and deletion. Put the retention periods and access rights in writing, and ask the data protection supervisory authority of your federal state if in doubt.

Can I check for myself whether a driving entitlement is valid?

No. The central driving licence register at the Kraftfahrt-Bundesamt is not open to rental operators. You check the document and its security features; where there is a concrete suspicion, turn to the police or to the competent licensing authority.

What should I do if I suspect a forgery during the handover?

No confrontation and no keys. Break off the process matter-of-factly, write down your observations and notify the police. Your right to decline to enter into the contract covers you.

May I refuse a rental without giving a reason?

In principle yes, because freedom of contract applies. The refusal must not be tied to a characteristic protected by the German equal treatment act, though. The safest approach is objective criteria that are set out in your rental terms and applied to everyone.

Is cash payment at the counter forbidden?

It is not forbidden. You may, however, state in your rental terms that the deposit is only taken as a credit card pre-authorisation in the driver's name. That leaves a payment trail that can be followed, and that is exactly where most attempts fall apart.