Home > Cybersecurity > Real estate and escrow wire fraud
Real estate wire fraud: escrow and closing scams to watch for right now
Real estate wire fraud, also called escrow or closing wire fraud, is growing fast, and AI now lets criminals fake voices, IDs and even video calls. Here is what is happening right now, the warning signs, and the simple habits that stop it. We review the watch list below often and update it as new scams appear.
The short version
- Real estate fraud losses reported to the FBI hit about $275 million in 2025, up roughly 59 percent in one year.
- Seller impersonation attempts more than doubled: 59 percent of title firms saw at least one, up from 28 percent.
- Criminals now clone voices and fake video to sound like your agent, escrow officer or seller.
- The fix is simple and free: verify every wire by phone, using a number you already had, never one from the email.
- Train every agent, assistant and escrow officer, and give every client the same warning in writing at the start.
What to watch for now
Last reviewed November 3, 2026.
How a closing wire gets stolen
Warning signs anyone can spot
- Wire instructions that changed, or arrive by email or text at all.
- Pressure to wire today, "before the bank closes," or to keep it quiet.
- The account name is a person, not the escrow or title company.
- A new phone number in an email signature or a "call me at my cell" request.
- A seller who can only be reached by email or text and wants proceeds wired fast.
- Small changes in an email address: rn for m, a missing letter, .co instead of .com.
For agents and brokers
- Tell every client at the first meeting: we will never send or change wire instructions by email.
- Turn on multi factor sign in for email, transaction software and MLS accounts.
- Never forward wire instructions. Point clients to escrow, by phone.
- Use a secure transaction platform instead of email for documents with account numbers.
- Watch for listing requests from out of area owners of vacant land. Verify before you list.
For escrow and title offices
- Callback rule: verify every disbursement on a phone number captured at the start of the file, never from the newest email or the incoming call.
- Nothing changes by phone alone. A verbal change with no matching written request through your secure portal is refused.
- Two people approve every outgoing wire. Confirm receipt with the recipient after funding.
- Check deed history and identity with more than a license on vacant land, rentals and inherited property.
- Train staff on impersonation fraud and document it. ALTA Best Practices expect written wire procedures and staff training.
- Lock down email: multi factor sign in, DMARC on your domain, and alerts for new forwarding rules.
Printable wire fraud checklist for escrow and title staff →
For buyers and sellers
- Before you wire, call your escrow officer at the number from your first paperwork or their official website you typed yourself.
- Confirm the bank, routing number, account number, account name and exact amount by voice.
- Call again right after you send it, so a problem is caught in minutes, not days.
- If anything feels rushed or different, stop. A one day delay is cheap. A stolen down payment is not.
How WENO helps real estate and escrow offices
We set up the protection behind the habits: secure Microsoft 365 email with multi factor sign in, domain protection against spoofing, WatchGuard® firewalls, and staff training built for agents, assistants and escrow teams. See our cybersecurity training classes and the daily cyber threat watch.
Sources
- FBI Internet Crime Complaint Center, 2025 Internet Crime Report.
- American Land Title Association, 2026 Critical Issues Study and Best Practices 4.2.
- National Association of REALTORS, reporting on the 2025 IC3 data.
- First American and title industry guidance on seller impersonation and deepfakes.
This page is general education, not legal advice. Follow your brokerage, escrow and lender procedures.
