You have found your home. Negotiated the price. Signed the contract. You are days away from closing when you receive an email from what appears to be your title company with updated wire transfer instructions. You send the money. The closing never happens. The wire is gone.

This is real estate wire fraud — and it cost Americans $275 million across at least 12,368 reported victims in 2025, according to the FBI IC3 2025 Annual Report, with over $1.6 billion lost in the six-year period 2020–2025. The FBI officially designates email wire fraud — where criminals impersonate title companies and real estate professionals to redirect closing funds — as one of the fastest-growing, most financially damaging internet-enabled crimes.

What Is Real Estate Wire Fraud?

Real estate wire fraud is a scam in which criminals intercept or impersonate the email communications of a title company, escrow officer, real estate agent, or attorney in order to redirect closing funds — down payments, earnest money, or proceeds — to accounts they control.

Unlike traditional fraud that requires forged documents or in-person deception, wire fraud exploits the ordinary email communications that flow through every real estate transaction. It targets the moment when buyers, sellers, or their representatives are under pressure to move quickly.

How Wire Redirect Scams Work — Step by Step

Step 1: The intercept. A criminal hacks or creates a look-alike email domain belonging to your title company, escrow firm, or real estate agent. Sometimes they compromise an actual email account. They monitor communications silently, waiting for the right moment.

Step 2: The false instruction. Days before closing — when wire transfers are expected — the criminal sends an email that appears to come from your title company or agent. The email contains updated wire instructions with a new routing and account number.

Step 3: The urgency play. The message often includes language designed to prevent you from calling to verify: "Due to banking security protocols, please use the attached instructions only. Do not call as our phone lines are being upgraded."

Step 4: The transfer. The victim sends the wire — often a down payment of tens or hundreds of thousands of dollars — to the criminal's account.

Step 5: The disappearance. Funds are immediately moved through a series of accounts or converted to cryptocurrency. Speed is everything: the FBI's Recovery Asset Team achieves a 71% success rate when victims report within 72 hours. After that window closes, recovery drops to near zero.

Red Flags to Watch For

  • Any email requesting a change to previously provided wire instructions — especially close to closing
  • Urgency language discouraging you from calling to verify
  • Slight variations in the email address (e.g., titlecompanyinc.com vs. titlecompany-inc.com)
  • Wire instructions arriving in a PDF rather than embedded in the email
  • Instructions to wire to a bank in a different state than the title company's location
  • A request to send wire confirmation to a different email address

How to Verify Wire Instructions Before Sending

Always call to verify — using a number you look up yourself. Never use the phone number in a suspicious email. Look up your title company's number from their official website or a previous communication you initiated. Call before wiring any amount.

Verify the exact account number and routing number verbally. Confirm digit by digit. Fraudulent accounts often differ by only one or two digits from the legitimate ones.

Ask your bank to put a delay on large wires. Some banks will allow a 24-48 hour hold, giving you time to confirm.

Establish verification protocols at the start of a transaction. Agree with your agent and title company on how wire instructions will be delivered — and that any changes will be verified by phone.

Scan any suspicious message before acting. If you receive a suspicious email, wire instruction, or closing document that doesn't feel right, use HFD Fraud Scan's free AI scanner to analyze it for fraud patterns before responding.

What to Do If You've Already Wired Funds

Time is critical. Contact your bank immediately and ask them to issue a SWIFT recall on the wire. Contact the FBI's IC3 (ic3.gov) to file a report — they have a financial fraud kill chain that can sometimes freeze funds before they're moved. Contact local law enforcement and your state attorney general's office. If you purchased title insurance, contact your insurer.

Review a Suspicious Email or Wire Instruction — Free
AI-assisted red-flag pattern checklist · Built on FBI IC3 + FTC fraud patterns
Get Started — Free →