Why Wire Fraud Targets Real Estate Transactions
Real estate closings involve large, time-pressured wire transfers — often the largest financial transaction of a buyer's life. Fraudsters have learned that buyers under closing deadline pressure are less likely to slow down and verify wire instructions. The FBI designated real estate wire fraud as one of the most financially damaging internet crimes, with losses exceeding $275 million across at least 12,368 victims in 2025 (FBI IC3 2025 Annual Report).
📊 The Stakes
$275M lost to real estate fraud across 12,368+ victims in 2025 — FBI IC3 2025 Annual Report. The average loss per victim exceeds $22,000, with losses of $200,000–$500,000 common in high-value markets. The FBI's 72-hour recovery window means every hour you delay reporting reduces your chance of recovery.
The 12 Red Flags
1. Wire instructions arrive by email for the first time
If you've been communicating about wire instructions verbally or in-person and suddenly receive an email with "updated" wiring details, treat it as suspicious. Legitimate closing officers don't change delivery methods without explanation.
2. The sender's email domain has subtle variations
Fraudsters register domains that look nearly identical to the real title company. Examples: firstamericantitle.co instead of firstam.com, or titlecompany-closing.com instead of titlecompany.com. Check character by character.
3. Wire instructions "changed" from previous version
Any change to previously provided wire instructions is a red flag. Legitimate changes are extremely rare and should always be verified by a phone call to a number you already have on file.
4. Urgency pressure
"Wire today or the closing will be delayed." "This must be done by 3pm." "The title company needs confirmation now." Urgency is a social engineering technique designed to prevent you from slowing down and verifying.
Suspicious wire instructions in your inbox?
Paste them into HFD Fraud Scan's free AI-assisted message review. Get a structured red-flag checklist.
Scan for free — no account required5. Instructions to confirm via email, not phone
A fraudster monitoring the email thread will respond as the real title company if you reply by email. Insisting on email confirmation is a control mechanism. Always verify by phone — to a number you sourced independently.
6. Wire routing to an unfamiliar bank or location
If the routing number leads to a bank you've never heard of, or the bank's branch is in a state or country unrelated to your transaction, it's a significant red flag. Run the routing number at ffiec.gov/npw to verify the bank.
7. A fresh email thread with "updated" information
Fraudsters sometimes start a new email thread rather than continuing an existing one, using a spoofed address. If you receive closing instructions from what appears to be a new email instead of an existing thread, verify.
8. The email doesn't reference specific transaction details
Legitimate closing communications reference your specific property, closing date, and transaction number. Generic language like "your real estate transaction" or "the property purchase" without specifics is a warning sign.
9. Instructions arrive on a Friday or holiday
Fraudsters know banks are closed or have reduced staff on Fridays, weekends, and holidays. If wire instructions arrive at these times with urgency pressure, this combination is a classic fraud pattern.
10. The "title company" email doesn't match the company's website
Look up the title company's official website independently. If the email domain used to send you instructions doesn't match what's on their official website, it's almost certainly fraudulent.
11. Requests to keep the wire transfer confidential
Any instruction to "not discuss these instructions with anyone" or "keep this transfer confidential" should immediately trigger alarm. Legitimate closing professionals have no reason for secrecy around wire instructions.
12. The wire amount doesn't match your closing disclosure
Your closing disclosure (CD) specifies exactly how much cash you need to close. If the wire amount in the email differs from your CD — even slightly — do not wire. Call your settlement agent.
✅ The One Verification Rule
Before wiring any amount: call your title company or escrow officer at a phone number you sourced from their official website — not from the email containing the wire instructions. This one habit prevents the vast majority of real estate wire fraud.
What to Do If You Already Wired
If you believe you've been a victim of wire fraud, act immediately:
- Call your bank right now — request an immediate wire recall. Every minute the funds sit in the fraudulent account reduces recovery chances.
- Call the FBI Recovery Asset Team at 1-855-292-3937 and ask them to submit a Financial Fraud Kill Chain request.
- File an IC3 complaint at ic3.gov — the FBI's Internet Crime Complaint Center. This is required for the recovery program.
- File a local police report — you'll need a police report number for insurance and legal purposes.
- Notify your real estate agent and attorney — they may have additional reporting obligations.
