The $446 Million Problem
The FBI reports $446 million in annual losses from real estate wire fraud. 66% of property managers report experiencing fraud attempts, according to the National Association of Realtors. ScamVerify™ AI document analysis helps homebuyers, sellers, and real estate professionals verify closing documents before wiring funds.
Real estate wire fraud is devastating because the amounts are large (often the buyer's entire down payment or full purchase price), the transfers are fast (wire transfers settle within hours), and the fraud is often discovered too late for recovery. A single successful attack can cost a homebuyer their life savings.
How Real Estate Wire Fraud Works
The Business Email Compromise Connection
Most real estate wire fraud begins with business email compromise (BEC). Attackers gain access to email accounts belonging to real estate agents, title companies, mortgage lenders, or attorneys involved in a transaction. From inside these accounts, the attacker monitors ongoing deals and waits for the closing.
The attack follows a consistent pattern:
-
Email account compromise. The attacker gains access through phishing, credential theft, or password reuse. Sometimes they compromise the agent's account; sometimes it is the title company or attorney.
-
Transaction monitoring. The attacker reads emails to identify active closings, buyer names, property addresses, closing dates, and expected wire amounts.
-
Timing the attack. The attacker sends fraudulent wire instructions shortly before the scheduled closing, when the buyer expects to receive wiring details.
-
The fake wire instructions. An email arrives from what appears to be the title company, attorney, or agent, containing a PDF with altered wire transfer instructions. The document looks identical to the real instructions, but the bank account and routing numbers belong to the attacker.
-
The wire transfer. The buyer wires their down payment or purchase price to the fraudulent account. The money is moved or withdrawn within hours.
-
Discovery. The fraud is discovered when the real title company inquires about the missing funds, often days after the wire was sent.
What Fake Closing Documents Look Like
Fraudulent closing documents are designed to be indistinguishable from legitimate ones:
| Document Element | Legitimate | Fraudulent |
|---|---|---|
| Title company letterhead | Official branding | Exact copy or slight variation |
| Wire instructions format | Matches company standard | Matches, with changed account numbers |
| Sender email | agent@titlecompany.com | agent@titlecompany.co or spoofed headers |
| Routing number | Title company's escrow account | Attacker-controlled account |
| Property address | Correct | Correct (copied from monitored emails) |
| Closing date | Correct | Correct (timed to match real closing) |
The only differences are the bank account number, routing number, and sometimes the receiving bank name. Everything else, including property details, buyer name, and amount, is accurate because the attacker copied it from real correspondence.
Why Recovery Is Almost Impossible
Wire transfers are designed for speed and finality. Once a wire leaves your bank:
- Funds typically arrive at the destination within 2-4 hours
- The receiving bank has no obligation to freeze the funds without a court order
- Attackers often use intermediary accounts that forward funds to overseas accounts within hours
- By the time fraud is reported (often 1-3 days later), the money has been moved multiple times
The FBI estimates that only 29% of real estate wire fraud cases result in any fund recovery, and full recovery is rare. Prevention is the only reliable protection.
How to Protect Yourself
Before Closing Day
Establish verified communication channels. At the start of any real estate transaction, agree on how wire instructions will be communicated. The best practice is to receive wire instructions in person or by phone call to a verified number. Never rely solely on email.
Confirm wire instructions by phone. Before sending any wire, call the title company or attorney using a phone number from their official website or your original signed engagement letter. Do not use any phone number from the email containing wire instructions.
Ask about security procedures. Legitimate title companies increasingly use secure portals for wire instructions rather than email. Ask your title company what security measures they use and how they will send wire details.
Verifying Closing Documents
Compare every detail. If you receive wire instructions by email, compare the bank name, routing number, and account number against instructions you received through a separate, verified channel.
Look for email inconsistencies. Check the sender's full email address (not just the display name) for subtle changes. Look at the email headers for signs of spoofing.
Verify the receiving bank. Call the bank listed in the wire instructions and confirm they have an escrow account in the title company's name with the specified account number.
Upload to ScamVerify. Upload closing documents to the ScamVerify document checker. The AI analysis extracts phone numbers, email addresses, and URLs from the document and checks them against 8 million+ threat records, catching documents that reference known fraudulent entities.
Upload a document to analyze
Upload any PDF, image, or document to check for signs of fraud or manipulation.
Analyze DocumentDuring the Wire Transfer
Wire early in the day. Send wires in the morning so any issues can be addressed during banking hours the same day.
Set up a callback. Ask your bank to call you to verify the wire details before processing any wire over a certain amount.
Confirm receipt. After sending the wire, call the title company (using your verified phone number) to confirm they received the funds. If they did not, contact your bank immediately to attempt a recall.
Red Flags in Wire Instructions
| Red Flag | What It Means |
|---|---|
| Wire instructions received by email only | Higher risk of interception or substitution |
| "Updated" or "corrected" wire instructions | Common pretext for fraudulent instructions |
| Different bank than previously discussed | Potential fraudulent account |
| Urgency to wire immediately | Pressure to prevent verification |
| Instructions from a free email domain | Not from a legitimate business |
| Request to wire to an individual, not a company | Escrow funds should go to business accounts |
The single most dangerous phrase in real estate fraud is "updated wire instructions." If anyone tells you the wire instructions have changed, stop and verify through a completely separate channel before proceeding.
What to Do If You Wired to the Wrong Account
Time is critical. Every hour matters.
- Call your bank immediately. Request a wire recall. Banks can sometimes freeze or recall wires within the first 24 hours.
- Call the FBI's IC3 at ic3.gov. File a complaint and specifically mention real estate wire fraud.
- Contact local FBI field office. For large amounts, direct FBI involvement can sometimes facilitate faster fund recovery through the Financial Fraud Kill Chain.
- File a police report with your local law enforcement.
- Notify the real title company, your agent, and your attorney so they can alert other parties and investigate the email compromise.
- Contact the receiving bank directly and inform them the wire was fraudulent. They may be able to freeze the funds.
The Title Company and Agent's Responsibility
Real estate professionals have an increasing obligation to protect against wire fraud:
- Many states now require title companies to verify wire instructions through a secondary channel
- Errors and omissions insurance for real estate professionals increasingly excludes wire fraud losses
- The American Land Title Association (ALTA) publishes wire fraud prevention best practices
- Some title companies now use encrypted portals rather than email for wire instructions
If your title company sends wire instructions by unencrypted email with no secondary verification, that is a red flag about their security practices.
FAQ
Can my real estate agent's email be hacked?
Yes, and this is one of the most common entry points for real estate wire fraud. Agents manage multiple transactions and communicate extensively by email, making their accounts high-value targets. Attackers use phishing, credential stuffing, and other techniques to gain access, then monitor transactions for the optimal moment to send fraudulent wire instructions.
Is it safe to wire money for a real estate closing?
Wire transfers are the standard method for real estate closings, but they carry inherent risk because they are fast and difficult to reverse. The transfer itself is safe if the instructions are legitimate. The risk is in verifying that the instructions actually come from your title company and not an attacker. Always verify by phone through independently obtained contact information.
What if the title company says to ignore fraud warnings?
Never ignore wire fraud warnings. Legitimate title companies take fraud prevention seriously and will understand your caution. If a company pressures you to skip verification steps or dismisses your concerns, consider that a significant red flag about their professionalism.
Does title insurance protect against wire fraud?
Standard title insurance policies generally do not cover losses from wire fraud. Title insurance protects against defects in the title (liens, claims, errors in public records). Wire fraud losses are a separate category. Some insurers now offer optional wire fraud coverage, but it is not standard.
How common is real estate wire fraud?
With $446 million in annual losses and 66% of property managers reporting fraud attempts, it is common enough that every real estate transaction participant should take precautions. The risk is highest for transactions involving large down payments or cash purchases where the entire purchase price is wired.