Why Wire Fraud Targets Real Estate Transactions
Real estate wire fraud occurs when criminals impersonate a trusted party or compromise communications to redirect closing funds. Before sending money, verify the recipient and instructions through a trusted, independently obtained contact method. A familiar email address, logo, or ongoing email thread is not proof that payment instructions are authentic.
📊 The Stakes
A fraudulent transfer can put a buyer's closing funds at risk. The FBI recommends independently verifying payment requests and contacting your financial institution immediately if a transfer is fraudulent. Recovery is not guaranteed; do not wait for a reporting deadline.
The 12 Red Flags
1. Wire instructions arrive by email for the first time
If you've been communicating about wire instructions verbally or in-person and suddenly receive an email with "updated" wiring details, treat it as suspicious. Legitimate closing officers don't change delivery methods without explanation.
2. The sender's email domain has subtle variations
Fraudsters register domains that look nearly identical to the real title company. Examples: firstamericantitle.co instead of firstam.com, or titlecompany-closing.com instead of titlecompany.com. Check character by character.
3. Wire instructions "changed" from previous version
Independently verify any change to previously provided instructions with your trusted closing contact. Do not rely on a reply to the same email thread.
4. Urgency pressure
"Wire today or the closing will be delayed." "This must be done by 3pm." "The title company needs confirmation now." Urgency is a social engineering technique designed to prevent you from slowing down and verifying.
Suspicious wire instructions in your inbox?
Paste them into HFD Fraud Scan's free AI-assisted message review. Get a structured red-flag checklist.
Scan for free — no account required5. Instructions to confirm via email, not phone
A fraudster monitoring the email thread will respond as the real title company if you reply by email. Insisting on email confirmation is a control mechanism. Always verify by phone — to a number you sourced independently.
6. Wire routing to an unfamiliar bank or location
An unfamiliar bank or unexpected destination deserves independent confirmation. Ask your bank and closing professional to verify the instructions. A valid routing number identifies a bank, not the account holder or the legitimacy of the payment.
7. A fresh email thread with "updated" information
Fraudsters sometimes start a new email thread rather than continuing an existing one, using a spoofed address. If you receive closing instructions from what appears to be a new email instead of an existing thread, verify.
8. The email doesn't reference specific transaction details
Legitimate closing communications reference your specific property, closing date, and transaction number. Generic language like "your real estate transaction" or "the property purchase" without specifics is a warning sign.
9. Instructions arrive on a Friday or holiday
Urgency near a bank cutoff, weekend, or holiday can make verification harder. Friday itself is not evidence of fraud; do not let timing pressure replace verification.
10. The "title company" email doesn't match the company's website
Look up the title company's contact details independently and ask about an unfamiliar sender domain. A mismatch needs explanation, but legitimate service providers may use other domains; a matching domain can also be compromised.
11. Requests to keep the wire transfer confidential
Any instruction to "not discuss these instructions with anyone" or "keep this transfer confidential" should immediately trigger alarm. Legitimate closing professionals have no reason for secrecy around wire instructions.
12. The wire amount doesn't match your closing disclosure
Your closing disclosure (CD) specifies exactly how much cash you need to close. If the wire amount in the email differs from your CD — even slightly — do not wire. Call your settlement agent.
✅ The One Verification Rule
Before wiring any amount, verify the instructions in person or call your title company or escrow officer using a trusted, independently obtained number. Do not use the number in an unverified payment request. A scan is not a substitute for this step.
What to Do If You Already Wired
If you believe you've been a victim of wire fraud, act immediately:
- Call your bank right now — request an immediate wire recall. Every minute the funds sit in the fraudulent account reduces recovery chances.
- Ask your bank to contact the receiving institution immediately, as the FBI recommends.
- File an IC3 complaint at ic3.gov. Include transaction details and preserve your complaint confirmation. Reporting does not guarantee recovery.
- File a local police report — you'll need a police report number for insurance and legal purposes.
- Notify your real estate agent and attorney — they may have additional reporting obligations.