Real estate wire fraud: how your closing funds get stolen
Real estate wire fraud is one of the highest-dollar fraud categories affecting individual Americans. The FBI's IC3 reports that real estate and rental fraud accounts for hundreds of millions in annual losses, with average individual losses often exceeding $100,000. Victims are homebuyers who wire their down payment or closing costs to a bank account that belongs to a scammer.
The attack works through Business Email Compromise (BEC): a scammer either hacks the email account of your real estate agent, title company, or closing attorney, or creates a very convincing spoofed email address. Close to your closing date — often the day before or the morning of — you receive an email appearing to be from your known contact with 'updated' wire transfer instructions. You wire the funds. They go to the scammer. The actual closing falls through.
The sophistication of these attacks has increased sharply. Scammers monitor hacked email accounts for weeks before acting, learning the parties involved, the property address, and the approximate closing amount to make the fraudulent instructions indistinguishable from legitimate communication.
🚩 Red flags to watch for
- ▶Wire instructions that arrive or change via email close to your closing date.
- ▶Any change to the bank name, account number, or routing number from what was previously discussed.
- ▶Urgency around the wire: 'you must transfer today or the closing will be delayed'.
- ▶Wire instructions that differ even slightly from any previously provided in person or over the phone.
✅ What to do
- 1The golden rule: always verify wire instructions by phone, on a number you already have from a previous confirmed communication — never from the email in question. Call your title company or attorney and read back the account number to confirm.
- 2Never change wire instructions based solely on an email, even if it appears to be from your known contacts. Email accounts can be hacked or spoofed.
- 3If you've wired funds to the wrong account: call your bank immediately — speed is critical, as wire recalls are time-sensitive. Report to the FBI's IC3 at ic3.gov. IC3 has a dedicated Financial Fraud Kill Chain team that can sometimes intercept transferred funds if reported within 72 hours.
- 4Ask your title company and attorney whether they have verified wire protection procedures — reputable firms often confirm wire instructions by phone as a matter of policy.
📣 Where to report (by country)
🇺🇸 United States
🇬🇧 United Kingdom
- Action Fraud
- Police Scotland — call 101
🇦🇺 Australia
🇨🇦 Canada
🌍 Everywhere else
- Contact your local police and your bank immediately
- If money was sent, ask your bank about a recall request — act within hours
Got a suspicious message right now?
Paste it into our free AI checker for an instant pattern analysis
No account needed · Free to try · Privacy-first
Check your message free →No tool is a guarantee. AI pattern detection is a guide, not a verdict — always use your own judgment.
Common questions
I verified the email domain and it looked exactly right. How was it fake?
Email domains can be spoofed to display the correct address in most email clients while routing replies to a fraudulent address. More commonly, the account itself is genuinely compromised — the scammer is sitting inside a real email account and sending from it. Visual inspection of an email address is not sufficient verification for a six-figure wire transfer.
The FBI recovered wire fraud funds for someone I read about. Is that common?
Recovery is possible but time-dependent. If you report within hours to both your bank and the FBI's IC3, there is a real chance of recovery through the Financial Fraud Kill Chain process. Recovery becomes very difficult after 24–48 hours and nearly impossible after 72 hours.