Criminals Want Your MLS Access. Don’t Give It to Them

Criminals want your NorthstarMLS password.  

We know this because they’ve called asking for it. 

They are posing as you, hoping for access to your client information, financial data, properties, listing capabilities and more. While NorthstarMLS’ multifactor authentication process (MFA) is one of the many processes we use to combat these attempts, you also play a critical role in protecting your MLS account by protecting your password and login credentials. 

Yet the temptation to share it is there. A nefarious player attempting to take over your MLS account may not be the first thing on your mind when you needed help updating a listing.  

You knew someone who could make the updates easily but didn’t have access to NorthstarMLS. “I could just give them my log-in credentials just for this one time,” you thought.  

You also weren’t thinking about it when you wanted this cool new feature a third-party vendor was offering.  

They say they need log-in credentials. You think, “What could it hurt to just give them my password to get the data?” 

Again, this isn’t a warning about “what could happen” if someone else attempts to take over your MLS account. This is about what IS happening. The fraudsters are here, and they are actively trying to obtain passwords and gain access to MLS.  

Providing Access to Vendors

There have been other cases where a third-party vendor has proposed products that agents may be interested in. Upon the agent agreeing, they ask for the agents’ credentials to the MLS so they can start pulling the data.  

Now you may be thinking to yourself, “Why can’t I share my password with that vendor? I pay dues and own that data.” The truth is, your broker owns the data, and there is a process agents and vendors must go through to get broker and MLS approval before accessing the data in this way.  

Providing Access to Assistants

What if you need an assistant, and they need a password to access the MLS?  

For a first step, check with your broker to get approval to have an assistant that can work on your behalf. If they approve, they will contact your local association to request access to the MLS for the assistant. Once the assistant has the log-in credentials, they may now access the MLS and get to work.  

Other Situations Requiring Log-in Credentials

For other situations requiring your log-in credentials, always check with your broker or NorthstarMLS first. Do NOT ever give out your password or log-in credentials to anyone, including colleagues, assistants, customers, friends and family. In addition to putting your data and access, this is also a finable offense and a breach of MLS policy.  

NorthstarMLS’ MFA adds a level of security to your account, but you need to stay vigilant too. Don’t risk disrupting your business productivity or give clients a reason to worry about their data. Be diligent in protecting your information, your client information and the data the MLS provides.  

Should you have a concern or a question about best practices, reach out to our Help Desk at help@northstarmls.com or our Rules and Regulations department at rules@northstarmls.com.