MaPrimeRénov' renovation aid scam in France 2026: how fake auditors steal government subsidies

Why MaPrimeRénov' is such a juicy target

Three things make this subsidy a magnet for fraud. First, the amounts are big. A modest insulation job draws €4,000. A heat pump install runs €5,000 to €10,000. A full energy renovation can clear €15,000 or even €20,000 for low-income households. That is a real payday compared to most phishing operations where the average loss sits in the low hundreds.

Second, the program is genuinely complex. There is ANAH on one side, France Connect for identity, a separate certified-installer registry called RGE, the maprimerenov.gouv.fr portal for filing, plus regional add-ons through local energy advisors. Most homeowners give up trying to understand it and welcome anyone who says "I will handle the paperwork for you." That handoff is exactly where the scam opens.

Third, the French government is pushing renovation hard. TV ads, radio spots, mailbox flyers from the prefecture, and even SMS from official numbers about energy audits. When a stranger calls and uses the same vocabulary, it does not feel out of place. The official noise is the camouflage.

The 3 active scam variants in 2026

Variant 1: The fake auditor at your door

Someone rings the bell holding a tablet, wearing a fluorescent vest, sometimes a fake lanyard with "ANAH" or "France Rénov'" printed on it. The pitch is smooth: "Bonjour, nous passons dans le quartier pour les audits énergétiques gratuits financés par l'État dans le cadre de MaPrimeRénov'. Avez-vous deux minutes?" They walk through the house, take photos of your boiler and windows, then sit at your kitchen table and open a "registration form" on the tablet.

The form needs your France Connect credentials to "open your file." That is the entire point of the visit. Everything else, the photos, the boiler inspection, the friendly chat about your heating bill, is theatre. Once they have your login, they leave with a vague "we will send the audit report by email." Two days later they file a real MaPrimeRénov' claim in your name for fictitious insulation work, point the payment to a bank account they control, and the subsidy lands before you ever notice.

Real ANAH inspectors do not show up uninvited. The program does not run door-to-door surveys. Anyone canvassing your street is selling you something, and what they are selling is usually fraud.

Variant 2: The cold-call scam

The phone rings from what looks like a Paris landline or a regional number. The voice is polite, slightly bureaucratic, sometimes obviously reading from a script. The opener varies but always includes the brand name early: "Bonjour Madame, je vous appelle de la part de France Rénov'. Votre logement est éligible à MaPrimeRénov' jusqu'à €15.000. Nous vous accompagnons gratuitement pour monter votre dossier."

The hook is "free." Free advice, free audit, free file preparation. Then comes the pivot to data: full name, address, income bracket, household size, year the home was built, current heating system. Twenty minutes in they say "pour finaliser votre dossier nous avons besoin de votre identifiant France Connect, je vais vous envoyer un lien sécurisé par SMS." The SMS lands. The link goes to a clone of franceconnect.gouv.fr with a slightly off domain. You type your impots.gouv.fr password, sometimes also your Ameli login, and the call ends with "vous recevrez la confirmation sous 48 heures."

You will not. What you will receive, weeks later, is a MaPrimeRénov' notification about work you never ordered, paid to a bank account that is not yours. By the time you contest it, the money is gone and the offshore account is closed.

Variant 3: The phishing email

The email lands in your inbox with a government-looking blue header, a fake République Française logo, and a subject line that hooks you immediately. "Votre dossier MaPrimeRénov' a été pré-approuvé." Or "Action requise: confirmer votre éligibilité MaPrimeRénov' avant le 31 décembre." The body is short and reassuring. A green button reads "Confirmer mon dossier" or "Accéder à mon espace."

The button goes to a near-perfect clone of the real portal. Same color scheme, same "Se connecter avec France Connect" widget, same fonts. The clone domain is something like maprimerenov-officiel.fr, prime-renov-gouv.com, or aides-renovation-2026.fr. Once you click the France Connect button on the fake page, you land on a fake impots.gouv.fr login. You type your tax credentials, the scam captures everything, then redirects you to the real portal so you do not notice.

From that point on the attacker has full keys to your fiscal identity. They open a MaPrimeRénov' file in your name, choose work that needs no on-site verification, file the subsidy claim, and route payment to their account.

The exact French phrases scammers use

Phishing campaigns in French recycle a handful of phrases because they convert. If a call, email, or in-person pitch uses any of these word-for-word, treat it as hostile and walk away.

• "Vous êtes éligible à MaPrimeRénov' jusqu'à €15.000." Real ANAH never quotes a ceiling amount over the phone before opening a file. The exact amount depends on your income, your project, and your local energy advisor.
• "Audit énergétique gratuit financé par l'État." Energy audits are subsidized, not handed out by traveling salespeople. You request one through a certified RGE auditor, not the other way around.
• "Dossier MaPrimeRénov' pré-approuvé." Files are not pre-approved. They are opened by you, reviewed by ANAH, and confirmed only after the work is completed and invoices submitted.
• "Votre prime expire le 31 décembre." A manufactured deadline. MaPrimeRénov' rules update annually but no individual file "expires" on a stranger's phone call.

If you hear one of these phrases, you are inside a scam script. Hang up, close the email, shut the door.

What real MaPrimeRénov' looks like vs the fake

The real process is boring, which is exactly why scammers can dress up something more exciting and steal attention.

You initiate. Always. You go to maprimerenov.gouv.fr, click "Créer mon compte," log in with France Connect, and answer a questionnaire about your home, your income, and the work you want to do. There is no phone call out of the blue, no surprise visitor, no pre-approved file. The website tells you what you may qualify for, and only then do you contact a certified RGE company to quote the actual job.

RGE certification is the second guardrail. Reconnu Garant de l'Environnement is the official label installers need to do MaPrimeRénov' work. The registry sits at france-renov.gouv.fr and you can search any company name or SIRET before signing anything. A real RGE company has been through audits, carries the right insurance, and is identifiable from public records. A scam company has none of that, but will hand you a printed "RGE" certificate that looks plausible to anyone who has not searched the registry.

Real domains are short and end in .gouv.fr. maprimerenov.gouv.fr for the program. anah.fr for the agency. france-renov.gouv.fr for the wider information service. franceconnect.gouv.fr for the identity layer. Anything else, no matter how official the logo, is not the French government.

Red flags that should end the conversation

• Unsolicited contact by phone, email, SMS, or door-to-door visit referencing MaPrimeRénov', ANAH, or "France Rénov'."
• A request for your France Connect, impots.gouv.fr, or Ameli credentials, on any channel that is not the official portal you typed in yourself.
• Pressure to act before a deadline ("avant le 31 décembre," "dans les 24 heures," "votre prime expire").
• An "auditor" who insists on filling the form for you instead of letting you log in by yourself.
• A company name that does not appear on the france-renov.gouv.fr RGE registry.
• A domain that is not exactly maprimerenov.gouv.fr. Hyphens, extra words like "officiel" or "france" or "aides," and any TLD that is not .gouv.fr are all warning signs.
• A payment request, deposit, or "frais de dossier." The MaPrimeRénov' application itself is free, end of story.
• An offer to "open the file for you" in exchange for a percentage of the subsidy. That is the structure of the scam.

What to do when MaPrimeRénov' is on the table

Three steps, in order. Do not skip the second one.

First, type maprimerenov.gouv.fr directly into your browser. Do not click a link from an email, SMS, ad, or QR code on a flyer. Log in with France Connect. The dashboard shows your actual eligibility and any open file. If a stranger told you a file already exists in your name, this is where you confirm or deny it.

Second, before signing anything with any installer, search the company on france-renov.gouv.fr. The RGE registry is searchable by name, SIRET, postal code, and trade specialty. If the company you are talking to is not listed for the specific work category you need, walk away. There are also region-specific energy advisors (Espaces Conseil France Rénov') who give free, in-person advice and do not sell installations themselves. Use them.

Third, never share France Connect credentials with anyone. Not an auditor, not a sales rep, not a phone advisor, not your installer. France Connect is your identity, the same way your impots.gouv.fr password is. The MaPrimeRénov' workflow is designed for you to log in yourself. Anyone who asks to do it on your behalf is either incompetent or hostile.

What to do if you already fell for it

Speed matters. The same hour you realize, do these in order:

1. Change your France Connect password at franceconnect.gouv.fr, then change the underlying impots.gouv.fr, Ameli, ou L'Assurance Retraite passwords too (France Connect federates whichever one you used to log in). Use a new password you have never used anywhere else.
2. Log in to maprimerenov.gouv.fr and check if a file was opened in your name. If yes, screenshot everything (dossier ID, dates, work description, designated payee account) before contesting.
3. Call ANAH directly at the official number listed on anah.fr or 0 806 703 803 (service gratuit + prix appel). Tell them a file was opened fraudulently. They will freeze the payment if it has not yet been released.
4. File a police complaint (plainte) at any commissariat or gendarmerie, or pre-file online at pre-plainte-en-ligne.gouv.fr. Keep the récépissé, you will need it for everything that follows.
5. Declare the incident at cybermalveillance.gouv.fr. The platform routes the case to the right service and pairs you with a free assistance specialist if needed.
6. Watch your bank accounts for the next 90 days. Phished France Connect credentials sometimes get used for tax-refund fraud or fake unemployment claims, not just MaPrimeRénov'.

The most overlooked step is calling ANAH. If you act before the payment is released, the agency can stop the transfer entirely. That window can be days, sometimes weeks. Do not assume it is too late.

How to report a MaPrimeRénov' scam

The French anti-fraud ecosystem has four useful entry points. You do not need to pick one, you can use all four.

• Cybermalveillance.gouv.fr for the digital side (phishing emails, fake websites, France Connect compromise). Free assistance, routes to professionals if needed.
• DGCCRF (Direction Générale de la Concurrence, de la Consommation et de la Répression des Fraudes) via signal.conso.gouv.fr for the consumer-protection side (false advertising, abusive sales practices, fake RGE claims).
• ANAH directly via the contact form at anah.fr if a fraudulent file was opened in your name or if you suspect an installer is filing fake claims.
• Signal-spam.fr to report phishing emails so the senders end up on national blocklists. Forwarding the email here helps protect the next victim.

For SMS scams referencing MaPrimeRénov', forward the message to 33700, the national SMS-spam reporting service. It is free and the carrier-side filters get updated from these reports.

How SafeBrowz blocks this threat

SafeBrowz runs a 3-layer detection architecture: Local + APIs + AI.

• Layer 1 - Local detection: 60+ URL patterns + 550+ brand-specific signatures (including French government brand impersonation, France Connect lookalikes, and Punycode homograph variants of .gouv.fr domains) + community whitelist/blacklist, all running directly in the extension before the page renders. Catches the maprimerenov-officiel.{tld}, prime-renov-gouv.{tld}, aides-renovation-{year}.{tld}, ma-prime-renov.{tld} pattern family instantly.
• Layer 2 - API checks: aggregates Google Safe Browsing, PhishTank, URLhaus, ScamAdviser, and 30+ scam TLDs for known malicious domains targeting French government services.
• Layer 3 - AI deep scan (Premium): 100+ language content analysis (including French) catches novel French government impersonation pages in seconds, even ones that just went live.

Detection signatures come from threat-intelligence research and brand database analysis, not from user browsing data. No per-user browsing history is stored.

Frequently asked questions

Does MaPrimeRénov' really send auditors to my house?

Not unsolicited. Real energy audits happen only after you initiate them through maprimerenov.gouv.fr or contract an RGE-certified auditor yourself. ANAH and France Rénov' do not dispatch door-to-door inspectors. Anyone arriving at your door claiming to run a MaPrimeRénov' audit on the spot is selling fraud.

Will the government call me to offer free renovation aid?

No. ANAH, MaPrimeRénov', and France Rénov' do not cold-call homeowners offering subsidies, free audits, or "file preparation." Any caller using that pitch is a scammer, regardless of how convincing they sound or whether the number on your screen looks French.

Is maprimerenov-officiel.fr a real government site?

No. French government services use the .gouv.fr top-level domain. The only real MaPrimeRénov' URL is maprimerenov.gouv.fr. Anything with extra words like "officiel," "france," "gouv" (as a fake suffix instead of .gouv.fr), hyphens, or alternative TLDs (.fr, .com, .online, .info) is a lookalike built to steal your credentials.

What is the only real MaPrimeRénov' URL?

maprimerenov.gouv.fr. Type it directly into your browser bar yourself. Do not click links from emails, SMS, ads, or QR codes. The related official domains are anah.fr, france-renov.gouv.fr, and franceconnect.gouv.fr.

How do I verify if a renovation company is RGE certified?

Search the company by name, SIRET, postal code, or trade category at france-renov.gouv.fr. The RGE registry is the official source. If a company hands you a printed RGE certificate but does not appear in the registry for the work category you need, the certificate is fake. RGE certifications are also category-specific, so a company labeled RGE for insulation is not automatically RGE for heat pumps.

What should I do if I gave my France Connect credentials to a scammer?

Move fast. Change your France Connect password at franceconnect.gouv.fr and the underlying account password (impots.gouv.fr or Ameli, depending on which one you used). Then log in to maprimerenov.gouv.fr to check whether a fraudulent file was opened in your name. Call ANAH at 0 806 703 803 to freeze any pending payment. File a police complaint and declare the incident at cybermalveillance.gouv.fr. Watch your bank statements for 90 days for follow-on fraud.