First Month, Last Month, and What's Legal to Collect
The Short Answer
On most NYC rentals, the lawful upfront stack is first month's rent + a security deposit capped at one month - plus the $20 application fee and any broker fee you personally agreed to. HSTPA limits how much a landlord can collect in advance, which is why demanding "first, last, and security" can push past the legal limit on covered units: that combination effectively takes more than the one-month deposit cap allows. Know the math so you bring exactly the right cash and refuse unlawful demands.
Why This Matters
The upfront cash to move into a NYC apartment is the single biggest barrier for most renters, and landlords sometimes inflate it with demands that exceed what the law allows. Knowing the lawful stack - first month + one-month deposit - lets you budget accurately and recognize when you're being asked for too much. A renter who knows the rule can refuse "first, last, and security" on a covered unit; a renter who doesn't may hand over an extra month they'll struggle to recover.
It also protects you at the riskiest moment. Upfront-payment demands often come with time pressure ("pay now to hold it"), and that pressure is exactly when unlawful demands and even scams slip through. Knowing the legal limits is your anchor against both.
The Money Math
On a $3,000/month unit:
- Lawful stack: first month ($3,000) + one-month deposit ($3,000) = $6,000, plus the $20 application fee and any broker fee you agreed to.
- Unlawful "first, last, and security": first ($3,000) + last ($3,000) + security ($3,000) = $9,000 - which exceeds the one-month deposit cap on covered units. That extra $3,000 is the unlawful piece.
The difference is a full month's rent - money you'd otherwise tie up (and might struggle to get back). Knowing the cap keeps $3,000 in your pocket on this example alone.
How People Get This Wrong
The first mistake is accepting "first, last, and security" as standard. On covered units it generally isn't lawful, because it exceeds the one-month deposit cap.
The second is paying holding deposits without clarifying terms. A deposit to "hold" a unit should be in writing with its refundability and application spelled out - and never paid before you're confident the listing and landlord are legitimate.
The third is conflating a legitimate broker fee (one you agreed to) with the upfront rent/deposit stack. They're separate; a landlord's-broker fee can't be added at all (FARE Act).
Where Renters Get Stuck
- "First, last, and security" demands that exceed the cap.
- Holding deposits with unclear refundability.
- Pressure to pay before a signed lease.
- Add-on fees that push the total past what's lawful.
- Not getting receipts for what they pay.
Your Step-by-Step Playbook
- Know the lawful stack: first month + one-month deposit (+ $20 app fee + any broker fee you agreed to).
- Refuse excess advance demands - "first, last, and security" generally exceeds the cap on covered units.
- Clarify any holding deposit in writing: refundable? how applied? Pay only when you're confident it's legitimate.
- Separate the broker fee: a landlord's-broker fee can't be added (FARE Act); your own broker's fee is separate and disclosed.
- Get receipts and a written ledger of every amount and what it's for.
- Report unlawful demands to DCWP.
Weighing Your Options
| Upfront demand | Lawful on covered units? | Your move |
|---|---|---|
| First month + 1-month deposit | Yes | Pay; get receipts |
| First, last, and security | Generally no (exceeds cap) | Refuse the excess |
| Holding deposit | Clarify terms | Get refundability in writing |
| Landlord's-broker fee | No (FARE Act) | Refuse |
| Your own broker's fee | Yes (if you hired) | Separate; disclosed |
The NYC Rules That Apply
- GOL §7-108 (HSTPA): security deposit capped at one month; limits on advance payments.
- $20 application fee cap (HSTPA).
- FARE Act: no landlord's-broker fee charged to you; all tenant fees disclosed.
- Applies to essentially all NYS residential rentals.
Run the Numbers
Lawful upfront stack:
Upfront = first month + 1-month deposit + $20 app fee (+ broker fee ONLY if you hired the broker)
Why "first, last, and security" is a problem:
first + last + security > one-month deposit cap → the excess is unlawful on covered units
Common Mistakes to Avoid
- Paying "first, last, and security" without question.
- Paying a holding deposit with unclear terms.
- Paying before a signed lease.
- Letting add-on fees push the total past lawful limits.
- Not getting receipts.
- Not reporting unlawful demands.
The Thing Most People Miss
"First, last, and security" sounds like a normal NYC move-in package - it's a phrase renters hear constantly - but on covered units it generally exceeds the legal limit, because the deposit is capped at one month and advance payments are limited. The lawful stack is leaner than the folklore: first month plus one month's deposit. Renters who know this refuse the extra month confidently, while those who don't tie up cash they may have to fight to recover. Anchor on the cap, get receipts for everything, and treat any demand beyond first-plus-one-month-deposit (other than a broker fee you actually agreed to) as something to question and report.
Renter Decision Layer
When this applies to you: at lease signing and any time a landlord requests upfront money.
Red-flag signals:
- "First, last, and security" on a covered unit.
- A holding deposit with no written terms.
- Pressure to pay before signing.
- Add-on fees inflating the total.
Your quick checklist:
- Confirmed the lawful stack (first + one-month deposit + $20 + agreed broker fee).
- Refused excess advance demands.
- Got holding-deposit terms in writing.
- Separated/declined any landlord's-broker fee.
- Kept receipts; ready to report.
What to do next: pay only the lawful stack and report overreach; for the full move-in number see The Move-In Cost Estimator and for deposits see Security Deposits in New York.
Quick Questions
What can a landlord collect upfront? First month's rent plus a security deposit capped at one month - plus the $20 application fee and any broker fee you agreed to.
Is "first, last, and security" legal? On covered units, generally no - that combination exceeds the one-month deposit cap.
What about a holding deposit? Clarify in writing whether it's refundable and how it applies, and never pay before you're sure the listing and landlord are legitimate.
Can a broker fee be added to that? Only your own broker's fee, if you hired one. A landlord's-broker fee can't be charged to you (FARE Act).
What if a landlord demands more? Refuse the excess, get receipts for what you do pay, and report unlawful demands to DCWP.
Citations
- NY General Obligations Law §7-108: https://www.nysenate.gov/legislation/laws/GOB/7-108
- NYC DCWP - FARE Act: https://www.nyc.gov/site/dca/about/FAQ-Broker-Fees.page
Related Reading
This is general information, not legal, tax or accounting advice. Every situation is different. Talk to a licensed attorney, accountant or tax professional before you act.
Looking for a place?
Browse what is open on Botway and save the ones you like.