< Blogs & Guides

Security deposit compliance lawsuits: What multifamily operators must know in 2025

Security deposit refunds may seem like a back-office detail, but they’ve become one of the most common sources of litigation in multifamily housing. Operators large and small are facing lawsuits, fines, and regulatory actions for something as simple as a missed deadline, a missing receipt, or an incomplete refund letter.

Recent lawsuits show the risk is real

In 2024, three major class actions underscored how costly refund mistakes can be:

  • Essex Property Trust was sued over alleged unlawful deductions and “junk fees” at more than 150 California properties.
  • MG Properties agreed to a nearly $10 million settlement with 60,000 tenants in California after being accused of charging improper move-out fees.
  • Greystar was hit in Florida with a class action claiming it illegally withheld deposits in violation of state law.

These aren’t small operators. They’re some of the largest, most sophisticated companies in the industry — which shows how fragmented, complex, and risky deposit compliance really is.

Why deposit compliance is a growing legal target

High turnover among property managers, shifting rules, and jurisdictional differences all create risk. Plaintiffs’ attorneys know deposit law is low-hanging fruit: deadlines are strict, statutory damages are clear, and the burden of proof often falls on the operator, not the resident.

Even if funds are eventually returned, penalties, treble damages, and reputational harm can still apply.

State snapshots: a patchwork of rules

Every state — and often major cities — has its own statutes. Here are a few examples:

Jurisdiction Timing & requirement examples
Massachusetts Separate interest-bearing account; receipt required; sworn itemized deduction statement at move-out.
Florida Refund within 15 days if no deductions; 30 days with Notice of Intent (certified mail or e-approval).
Colorado (2026) Deposit capped at 1 month’s rent; 6-month installment option; pre-move-out inspections required.
Illinois / Chicago Chicago requires annual interest, receipts for deductions, double damages; Illinois requires itemized deductions within 30 days.
California Refund within 21 days; itemized deductions $125+ require receipts and photos (AB-2801).

Roost Tip: Lawsuits often center on over charging and documentation gaps. Photos, receipts, and itemized statements aren’t just compliance—they’re protection.

Proof of deductions: the growing burden

It’s not just about timing. Many states and cities now require proof:

  • California: Receipts or invoices for deductions $125+, plus move-in/move-out/repair photos.
  • Washington: Itemized statements and supporting documentation.
  • Chicago: Receipts and invoices for all deductions.
  • Florida: Certified Notice of Intent with detailed deductions.
  • Portland, OR: Final condition report with photos.

Even where not required, attaching photos has become best practice to reduce disputes and defend against claims.

Interest requirements add complexity

Tracking interest is another compliance trap. Rules vary:

  • Annual payouts or credits: Massachusetts, Illinois/Chicago, New York City, Washington D.C., San Francisco.
  • Move-out or end-of-tenancy payouts: Minnesota, New Jersey.
  • Hybrid: Pennsylvania (beginning year two), Florida (annual if held in interest-bearing account).

Operators must manage accrual, disbursement, and 1099 reporting — across jurisdictions with different rules. Manual tracking often falls short.

Unclaimed property: the hidden liability

As much as 10–20% of refund checks go uncashed. States expect those funds to be reported and remitted under unclaimed property laws. Deadlines vary—typically one, three, or five years.

Most states also mandate due diligence notices (often certified mail) to former residents before funds are escheated.

Penalties for missing filings:

  • Nevada: 18% interest + $200/day fines (capped at $5,000).
  • California: 12% annual interest on unreported amounts.
  • Other states: $200/day plus lump-sum fines of $1,000–$25,000.

Failure to comply has led to multi-million-dollar settlements—even for Fortune 500 companies. Multifamily operators are not immune as states ramp up audits.

Beyond fines: resident experience and reputation

Refunds are the last mile of the leasing cycle—and often overlooked. Residents notice when refunds are late, deductions feel unfair, or documentation is missing.

Deposit disputes are among the top drivers of negative online reviews. And once a review mentions “deposit scam” or “illegal fees,” it spreads fast. The result: higher vacancy, rising acquisition costs, and reputational damage far beyond the cost of a fine.

Compliance isn’t just a legal issue. It’s a resident satisfaction issue.

Why manual processes fail

Manual workflows leave too much to chance:

  • Staff turnover creates compliance knowledge gaps.
  • Paper and spreadsheets lead to lost files and late statements.
    Multi-state portfolios mean rules vary widely.
  • Changing laws make it difficult to stay current.

Even small misses—like a late letter or missing attachment—create unnecessary risk and erode resident trust.

Smart automation: a safer way forward

Roost was built to take the compliance burden off your team:

  • Automated deadline tracking so refunds never go out late.
  • Smart alerts for at-risk refunds, missing documentation, or attachment requirements.
  • Proof support with itemized statements, invoices, and inspection photos.
  • Interest calculation tools by state and jurisdiction.
  • Unclaimed property workflows that flag uncashed refunds and automate escheat reporting.
  • Deposit flexibility—keep holding deposits or have Roost manage them.

Our workflows also reduce back-office burden. Banking integrations, streamlined reporting, and smart notifications mean less manual work and better resident communication.

The result? Faster refunds, stronger compliance, fewer disputes.

Final thoughts on security deposit compliance

Security deposit compliance is no longer a box-checking exercise. It’s a strategic risk area that impacts legal exposure, resident trust, and operational efficiency. The lawsuits of 2024 prove that even industry leaders aren’t immune.

The path forward is smarter processes. Centralization, automation, and proactive team support reduce errors, simplify reporting, and strengthen resident relationships. Done right, compliance doesn’t just protect you from fines—it builds trust where it matters most.