The most dangerous moment in buying a home is not the inspection or the appraisal. It is the email that tells you where to wire your money. That single message is where fraud has quietly moved, and it is the one part of the transaction most buyers have never been taught to question.
This guide walks through what real estate wire fraud is, how the scheme actually unfolds, the warning signs to watch for, and the specific steps that let you confirm instructions on your own before closing. It also covers what to do in the first hours if a wire has already gone out, because in that situation speed is the single largest factor in recovery.
What real estate wire fraud is
Real estate wire fraud is a form of business email compromise. A criminal gains visibility into a pending transaction, impersonates a trusted party — your title company, escrow officer, lender, or agent — and sends altered wiring instructions. You believe you are sending your down payment or closing funds to escrow. Instead, the money lands in an account the criminal controls. Once a wire leaves your bank, it moves quickly and is often difficult to reverse.
These schemes are not limited to real estate. Business email compromise causes billions of dollars in losses across industries every year in the United States. Real estate is one of the most targeted sectors because the transactions are large, time-sensitive, and involve multiple parties exchanging documents and instructions by email over weeks.
How the scam actually works
Understanding the sequence is what makes the warning signs obvious later. Nearly every real estate wire fraud follows the same pattern.
- The criminal gets inside the conversation Often through a phishing email that captures the password to an agent's, lender's, or title company's inbox. From that point they can read every message about your transaction without anyone knowing they are there.
- They watch and wait for closing They learn the names, the timeline, the tone, and the dollar amounts. They wait for the window when funds are about to move, because that is when a request to wire money looks completely normal.
- They send altered instructions At the right moment, they send wiring instructions that appear to come from your title or escrow company. The logo, the signature block, and the language often match. Only the account number and routing number belong to the criminal.
- You wire in good faith Believing you are funding your closing, you send the money. The transfer settles into the criminal's account, which is frequently emptied or moved within hours.
- The loss surfaces at the table The theft is typically discovered only when the real title company reports that funds never arrived — often on closing day, when the deal was expected to complete.
Why closing is the target
Closing is engineered for this kind of attack, and criminals know it. A large sum is expected to move on a fixed date. Multiple parties are emailing instructions back and forth. Everyone is under pressure to finish on time. A request to wire money does not raise an eyebrow because it is exactly the step the buyer has been preparing for. The scheme works by hiding inside a transaction you already expected to complete.
The warning signs
No single sign proves fraud on its own, and the absence of these signs does not guarantee a message is genuine. Treat any of them as a reason to pause and confirm through a separate channel before you act.
- A last-minute change to wiring instructions — a new account number, a different bank, or updated routing numbers. This is the single most common red flag in real estate wire fraud.
- Pressure to move fast, or language warning you that calling to confirm will delay the closing. Legitimate title companies welcome a verification call.
- A sender address that is slightly off — an added letter, a swapped domain, or a subtle misspelling of a familiar name.
- Instructions that arrive earlier than expected, before your title company would normally send final closing figures.
- A receiving account name that does not match the title or escrow company you have been working with.
- Unusual phrasing or tone that does not sound like the person you have been communicating with throughout the transaction.
How to confirm before you wire
These steps require no special software. They rely on one phone call and the habit of pausing at the exact moment a criminal is counting on you to rush.
Before sending any wire, call your title company or escrow officer to confirm the instructions out loud. Use a phone number from an earlier document, from their official website, or from a business card — not the number printed in the wiring email. If that email is fraudulent, the number in it routes directly back to the criminal.
- Confirm the account number, routing number, and the exact name on the receiving account by voice — not by replying to the email.
- Treat any change to previously provided instructions as an automatic reason to stop and reconfirm from the beginning.
- When your bank and title company allow it, send a small test amount first and confirm it was received before wiring the balance.
- After the wire goes out, call again within a few hours to confirm the funds arrived. If something is wrong, those first hours are when recovery is still possible.
- Ask your bank in advance what its wire recall process is, so you know exactly who to call and what to say if you ever need to act immediately.
If you already sent the wire
If you believe a wire has gone to the wrong account, act immediately. The FBI's Recovery Asset Team has a documented success rate when fraud is reported quickly — and that rate drops sharply with every hour that passes.
- Call your bank right now Report the fraudulent transfer and ask them to attempt a wire recall and to contact the receiving bank to freeze or hold the funds. Have the wire confirmation number and the fraudulent account details ready.
- File a report at ic3.gov File a complaint with the FBI's Internet Crime Complaint Center. When a fraudulent wire is reported promptly, the IC3 Recovery Asset Team can work with financial institutions to attempt to freeze the funds before they move again.
- Notify your title company and agent Alert everyone in the transaction immediately so they can help coordinate and so the criminal cannot attempt the same scheme against another party in the same deal.
- File a report with local law enforcement A police report creates an official record that supports your bank's recovery efforts and may be required by your title insurance carrier.
How we can help — and what we cannot do
Home Fraud Defense is an educational resource. We teach buyers, sellers, and real estate professionals how to recognize the patterns behind these schemes and how to build the habit of confirming instructions before acting. Our tools surface public records and the questions worth asking so you can slow down at the right moment.
We do not confirm wiring instructions on your behalf, and we are never the party of record on any wire. The only reliable confirmation comes from you, speaking directly with your title or escrow company through a number you already trust. That single phone call remains the most dependable protection available.