Firewalls and cybersecurity across San Bernardino County. Locally owned and operated, with local support. Call or text (760) 684-4139Sign inRequest service or a quote
WENO Office Solutions

Home > Cybersecurity > Real estate and escrow wire fraud

FOR REALTORS, ESCROW, TITLE AND THEIR CLIENTS
One fake email can take a lifetime of savings.

Real estate wire fraud: escrow and closing scams to watch for right now

Real estate wire fraud, also called escrow or closing wire fraud, is growing fast, and AI now lets criminals fake voices, IDs and even video calls. Here is what is happening right now, the warning signs, and the simple habits that stop it. We review the watch list below often and update it as new scams appear.

★ Serving local businesses 30+ years✓ Staff training for agents and escrow teams
Call to verify. Every time.

The short version

  • Real estate fraud losses reported to the FBI hit about $275 million in 2025, up roughly 59 percent in one year.
  • Seller impersonation attempts more than doubled: 59 percent of title firms saw at least one, up from 28 percent.
  • Criminals now clone voices and fake video to sound like your agent, escrow officer or seller.
  • The fix is simple and free: verify every wire by phone, using a number you already had, never one from the email.
  • Train every agent, assistant and escrow officer, and give every client the same warning in writing at the start.
$275Mreal estate fraud losses, 2025
12,368victims reported to the FBI
$3B+business email compromise losses
59%of title firms hit by seller impersonation

What to watch for now

Last reviewed November 3, 2026.

AI voice clones of escrow and title staffBuyers get a call that sounds exactly like their escrow officer, sometimes from a spoofed number that matches the office, "confirming" new wire instructions. Hang up and call back on the number you were given at the start.
Seller impersonation on vacant land and paid off homesFraudsters pose as owners of vacant lots, rentals and second homes, list them with forged or AI made IDs, and push for a fast cash close. Out of state seller, email or text only, below market price, in a hurry: slow down and verify identity independently.
Deepfake video during ID checksTitle companies have caught looping AI generated video on verification calls. Ask for live actions, compare against records from the county and the tax bill, and never rely on a driver license photo alone.
Hacked agent and lender email accountsThe email really does come from your agent's account, because it was taken over. Real addresses and real threads make the fake instructions look normal. A known sender is not proof.
Look alike domains and fake portalsOne letter off domains and copied login pages steal passwords or redirect payments. Type addresses yourself and check them character by character.

How a closing wire gets stolen

📧1. Get inA phishing email steals an agent, lender or escrow password, or the criminal registers a look alike domain.
👀2. Watch quietlyThey read the email threads for weeks, learning names, dates, amounts and how everyone writes.
⏳3. Strike at closingRight before funds move, they send "updated" wire instructions, often with urgency: "the bank changed our account today."
💸4. Money goneThe wire lands in a mule account and is moved within hours. Speed of reporting is everything.

Warning signs anyone can spot

  • Wire instructions that changed, or arrive by email or text at all.
  • Pressure to wire today, "before the bank closes," or to keep it quiet.
  • The account name is a person, not the escrow or title company.
  • A new phone number in an email signature or a "call me at my cell" request.
  • A seller who can only be reached by email or text and wants proceeds wired fast.
  • Small changes in an email address: rn for m, a missing letter, .co instead of .com.

For agents and brokers

  • Tell every client at the first meeting: we will never send or change wire instructions by email.
  • Turn on multi factor sign in for email, transaction software and MLS accounts.
  • Never forward wire instructions. Point clients to escrow, by phone.
  • Use a secure transaction platform instead of email for documents with account numbers.
  • Watch for listing requests from out of area owners of vacant land. Verify before you list.

For escrow and title offices

  • Callback rule: verify every disbursement on a phone number captured at the start of the file, never from the newest email or the incoming call.
  • Nothing changes by phone alone. A verbal change with no matching written request through your secure portal is refused.
  • Two people approve every outgoing wire. Confirm receipt with the recipient after funding.
  • Check deed history and identity with more than a license on vacant land, rentals and inherited property.
  • Train staff on impersonation fraud and document it. ALTA Best Practices expect written wire procedures and staff training.
  • Lock down email: multi factor sign in, DMARC on your domain, and alerts for new forwarding rules.

Printable wire fraud checklist for escrow and title staff →

For buyers and sellers

  • Before you wire, call your escrow officer at the number from your first paperwork or their official website you typed yourself.
  • Confirm the bank, routing number, account number, account name and exact amount by voice.
  • Call again right after you send it, so a problem is caught in minutes, not days.
  • If anything feels rushed or different, stop. A one day delay is cheap. A stolen down payment is not.
Already wired money to the wrong account?Call your bank right now and ask for a wire recall. Then report it at ic3.gov (type it yourself, fake look alike sites exist) and call your escrow company. The first hours matter most.

How WENO helps real estate and escrow offices

We set up the protection behind the habits: secure Microsoft 365 email with multi factor sign in, domain protection against spoofing, WatchGuard® firewalls, and staff training built for agents, assistants and escrow teams. See our cybersecurity training classes and the daily cyber threat watch.

Call to verify. Every time.Protect my office

Sources

  1. FBI Internet Crime Complaint Center, 2025 Internet Crime Report.
  2. American Land Title Association, 2026 Critical Issues Study and Best Practices 4.2.
  3. National Association of REALTORS, reporting on the 2025 IC3 data.
  4. First American and title industry guidance on seller impersonation and deepfakes.

This page is general education, not legal advice. Follow your brokerage, escrow and lender procedures.