Security Deposits Under Local Consumer Law: What You May and May Not Withhold

A deposit is not a penalty you keep. It is money you hold, and the burden of explaining is yours.

Last updated: September 29, 2026

A deposit feels simple to collect and complicated the moment you want to keep part of it. Two different acts are hiding under one word. Holding money and keeping money are not the same thing, and the switch between them is where hosts get into trouble. This article covers the three tests a deduction has to pass, how to write one that survives a challenge, and the return deadline you have to meet.

Key Takeaways

• Holding and keeping are different acts. A deposit is held for a purpose; turning it into your own money requires a reason that stands up.
• The burden of explaining is yours. You don't just have to be right about the damage; you have to be able to show why.
• Three tests decide a deduction. Agreement in advance, a real documented cost, and evidence a neutral party would accept.
• Write the deduction like evidence. Dates, amounts, photos and a plain explanation, not an accusation.
• Return the balance in the window the rules set. Late returns turn a fair deduction into a complaint about your process.

Holding money and keeping money are different acts

When a guest pays a deposit, the money isn't yours yet. It's held against a possibility, and the possibility either happens or it doesn't. That framing sounds like pedantry until the moment you decide you're entitled to part of it, and the whole dynamic changes.

Keeping part of a deposit isn't a fee you charge. It's a claim you make, and a claim needs support. The guest paid for a stay, not for your judgement, so the question isn't whether the damage annoyed you. It's whether you can show the amount matches something real, that the guest had fair warning, and that a reasonable person looking at your evidence would agree.

So treat the deposit as somebody else's money sitting in your keeping. You don't spend it as income, cover a slow month with it, or decide to keep any of it until you've done the work of documenting why. That habit has to start early, because retrofitting documentation after a dispute is close to impossible.

The rules that govern all of this are local, and they're not uniform. What a deposit may cover, whether you may hold one at all, how long you can keep it and how quickly you must return the balance differ between countries and, in some places, between cities. Consumer protection law and the platform's own booking terms both apply, and neither is a standard you can assume from memory. Check the current consumer protection rules where you operate.

The three tests a deduction has to pass

Rather than deciding case by case whether something feels fair, run every potential deduction through the same three tests. If it fails any of them, don't take the money.

The first test is agreement in advance. Was the guest told, before booking, that this kind of cost could be deducted, and roughly on what basis? A house rule that mentions damage or extra cleaning, a booking term, a message that sets it out: anything the guest could have read and agreed to counts. A cost they had no way to anticipate usually fails here, however real the damage is.

The second test is a real, documented cost. Not an estimate, not a round number chosen for convenience, but a cost you can point to. A repair invoice, a replacement receipt, a quote from someone who does the work, or a cost you can show you paid. The amount should match the evidence rather than the strength of your feelings about the stay.

The third test is evidence a neutral party would accept. If someone with no stake in the booking looked at your photos, dates and description, would they reach the same conclusion you did? A single blurry photo taken a week later doesn't carry the weight of dated photos taken at checkout, before the next guest arrived. This is the test that catches overreach.

Run all three in order, and be honest when one fails. A deduction that fails test one is a pricing problem, not a damage claim. One that fails test two is a number you invented. One that fails test three is a claim you can't carry.

Writing the deduction so it survives a challenge

If a deduction passes the three tests, the next risk isn't the facts. It's the way you present them. A fair deduction explained badly can look like an unfair one, and the guest only has your message to go on.

Lead with the facts, not the frustration. Say what happened, when you found it, what it cost and what you're deducting. Keep it to a short list anyone could follow: the item, the date, the evidence and the amount. Drop everything else, especially commentary about the guest's behaviour. The moment a deduction reads as a punishment for a bad stay, you've handed the guest a reason to dispute all of it.

Support each line with something checkable. Dated photos of the damage, taken before the unit was turned over for the next guest. A receipt or invoice for the repair or replacement. A note of when you found it and who found it. If a cleaner or co-host documented it, their note carries more weight than your summary of it. The person who saw it first is a better witness than the person who decided to charge for it.

Keep the evidence in one place, and keep it contained. A damage file shouldn't double as a copy of the guest's personal data or get shared around in a group chat. Store the photos, invoices and notes where access is limited to the people who need them, and share only what the deduction requires. That's how localsbnb.com handles booking data, with credentials held locally, guest details masked by default, and access granted by area.

Then send it the way the rules expect. Some routes require the deduction to run through the platform rather than directly with the guest, and the booking terms will tell you which applies. Follow that route rather than a shortcut, and keep your own copy of what you sent and when.

Returning the balance inside the window the rules set

The part hosts underestimate most is the end, not the beginning. Returning the balance on time is as much a legal duty as not over-deducting, and it's the step most likely to cause a complaint, because it's the last thing a guest is waiting for.

Find out what the deadline is before you hold a deposit, because it changes by place. Some rules set a period for returning the balance; others set one for telling the guest what you're deducting. They're not always the same clock, and the deadline may run from checkout rather than from your inspection. Treat any figure you've heard as unverified and check the current rules where you operate.

Build the return into your turnover routine so it doesn't depend on memory. A fixed point after checkout, when you either return the full deposit or issue a documented deduction, beats any reminder. If the inspection isn't done by then, return the balance and keep any claim separate and documented, because holding money while you decide is exactly the gap the rules exist to close.

Keep the payment trail clean too. Return the balance to the same method it came from, note the date, and keep the record beside the booking. If you issued a deduction, the same file that justified it also explains the smaller return. One record, both halves.

Word on this is tightening too. Romania's tax authority is reported to start assessing undeclared short-term rental income next year, drawing on data exchanged between member states, according to local media. In Vietnam, Decree 339/2026/ND-CP is in force, and reports say apartments in residential buildings used for non-residential purposes face penalties, though the figures haven't been confirmed by an official notice. Across the European Union, short-term rental data-sharing rules have applied since 20 May 2026, requiring platforms to verify a registration number before a listing goes live. None of that changes your deposit rules, or lets you hold money longer than the rules allow.

FAQ

Can I keep part of a deposit for extra cleaning?

Only if the cleaning cost passes the same three tests as any other deduction: the guest was warned in advance, the cost is real and documented, and a neutral person looking at your evidence would accept it. "It needed more cleaning than usual" isn't a documented cost on its own.

How long do I have to return a deposit?

That's set locally, and it varies, so there's no single answer to rely on. Some places set one period for returning the balance and another for explaining a deduction, and the clock may start at checkout. Check the current rules where you operate and the booking terms of the platform you used.

What if the guest disputes the deduction?

Stay with the documented record rather than the argument. Point to the dates, the evidence and the basis for the amount, and follow the platform's process if the deduction runs through a booking. A clear, dated file settles most disputes before they grow.

Do I need to hold a deposit at all?

Not always, and it's a fair question to ask before you set one up. Deposits bring duties as well as protection, and the return deadline is the one hosts forget. If your bookings rarely produce damage, a damage clause in your booking terms can cover the same ground with less paperwork.

The whole subject shrinks to one idea: a deposit is money you hold for a purpose, and keeping any of it is a claim you have to support. Pass the three tests, write the deduction plainly, and return the balance inside the window the rules set. Because that evidence usually lives alongside booking data, localsbnb.com keeps credentials local and guest details masked, so the record you keep to justify a deduction doesn't become a second source of exposure.

---

This article is general guidance for hosts and isn't legal advice. What a deposit may cover, how long it may be held and how quickly a balance must be returned are set by local consumer protection law and by each platform's current booking terms, which differ by place and change over time; check the current requirements where you operate and the terms of the platform you use.