wire fraud and how real estate closings get hijacked

In short

I once watched a young couple sit at a kitchen table, staring at an email on a laptop, certain it was the last step before their keys. If you are buying a home, that email could be the moment a thief steps in. Before any money moves, call the title company at a phone number you found on your own, not one printed in the email. Ask them to read the wiring instructions back to you. Never send funds on the strength of an email alone. If something feels off, stop and ask. And if money has already gone, call your bank that same hour, because time is everything.

The whole of it

What it is

A friend of mine spent two years saving for a down payment, and I have never forgotten how proud she looked talking about it. That pride is just what a wire fraud thief counts on. In a closing hijack, a criminal breaks into someone's email, often a real estate agent's or a title company's. The criminal then reads along quietly as the deal moves forward. When the time comes to send the down payment, the thief sends a fake email that looks just like the real one. It carries new wiring instructions and a bank account the thief controls.

The buyer sends the money, and it is gone. Sometimes it is gone within hours. The FBI's Internet Crime Complaint Center, known as IC3, takes reports of this kind of crime at ic3.gov, and the Federal Trade Commission has plain advice for home buyers at consumer.ftc.gov. Both are worth a look before you ever sit down at a closing table.

How it works

You have probably gotten a hundred emails during a home purchase, and by the end you trust the thread. The thief knows that. He studies the real emails first. He learns the names, the dates, the closing amount, even how the agent signs off. Then he writes a message that fits right in. It might say the bank details have changed, or that a new account is needed because of an audit, or that the earlier instructions had a mistake.

Sometimes the thief hacks the real account. Other times he makes a lookalike address, with one letter swapped or one small change in the part after the at sign. The two can be hard to tell apart on a phone screen. The message often pushes you to hurry. It may say the closing is at risk if the money is late. Hurry is the thief's best friend. A real title company will not mind if you slow down to check.

A wire transfer is also hard to undo. It moves money straight from one bank to another, and it does not work like a credit card. Once the receiving bank has paid it out, getting it back is a long shot. That is why the checking must happen before the money leaves, not after.

The numbers, and where to find yours

I once asked a loan officer what the hardest part of her job was, and she said it was telling people that the biggest check of their life was only as safe as one phone call. So here are the numbers worth knowing. The FBI's IC3 reports each year on losses from business email compromise and real estate fraud. You can find the current report on ic3.gov, and I would rather send you there than quote a figure that may be out of date.

Your own numbers matter more. Find your exact cash to close on the Closing Disclosure, the form your lender must give you at least the current figure, which the official source publishes each year days before closing. Compare the amount on that form to the amount in any wiring request. If the two do not match, stop. Also write down the phone number of your title or escrow company from the contract you signed, or from the company's own website that you typed in yourself. Keep that number by your side. It is your safe line.

A worked example

A woman I will call Dana was buying her first home for $285,000. She had saved $20,000 for the down payment and closing costs. Her lender had sent her the Closing Disclosure, and it showed $18,400 due at closing.

Two days before closing, Dana got an email that looked like it came from her title company. It said the wiring instructions had changed and asked her to send $18,400 to a new account by noon. The sender name looked right. The logo looked right. The message even used her agent's name.

Dana felt her stomach tighten. She almost sent the money. Instead, she remembered the advice her agent had given her at the start. She picked up her phone and dialed the title company using the number on her signed contract. The person who answered told her no changes had been made. The email was fake.

Here is the math of what she saved. She had $20,000 set aside, and $18,400 was due. That left $20,000 minus $18,400, which is $1,600 as a cushion. The fraud would have taken $18,400 and left her with $1,600, no home purchase, and a very hard year. One phone call that took about five minutes protected all of it.

Dana also forwarded the fake email to the title company and reported it at ic3.gov. That helped the company warn others. She closed on time and moved in that month.

Where it goes wrong

I have noticed that smart people get caught, not careless ones. That is worth saying out loud, because shame keeps people quiet. If you are caught, it is no sign you were foolish. The thief is a professional, and he had a good script.

Here is where the plan tends to break. A buyer checks the email address but not the phone number, and the phone number in the email is the thief's. A buyer calls the number from the email and ends up talking to the criminal. A buyer trusts a message because it came inside a long, real thread. A buyer is rushed by a deadline and skips the call. A buyer wires money from work with no time to double check. Each of these is a small slip, and each one is common.

If it happens, move fast. Call your bank right away and ask for a wire recall. Then call the title company and your agent. File a report at ic3.gov and with your local police. The IC3 page explains what to include in a report, and a fast report gives the bank and law enforcement the most to work with. The sooner the call, the better, though nothing is promised. Keep every email as it is, and do not delete anything.

Questions to answer before you leave this page

Do you know the phone number of your title or escrow company, and did you get it from a source you trust and not from an email? Have you decided that you will call and confirm any wiring request out loud before a dollar moves? Does the amount in the request match the cash to close on your Closing Disclosure? Can you tell the difference between the real email address of your agent and a lookalike? Have you told your agent and your lender that you plan to verify every wire by phone, so nobody is surprised? And if a message ever says the instructions have changed, will you treat that as a reason to stop and call, never as a reason to hurry?