Scammers hijack home-closing emails to divert down payments, and the money is rarely recovered.

Elderly man wearing glasses using a laptop at home.

The most dangerous moment in buying or selling a home is the day the money moves. Criminals have learned to slip into the email chain between buyers, agents, title companies, and closing attorneys, then send fraudulent wire instructions at exactly the point a large payment is expected. The victim believes the request came from the title company; the funds land in an account the scammer controls; and because a wire is effectively cash once it clears, the money is often gone for good. For an older buyer moving the proceeds of a lifetime into a new home, a single diverted wire can erase a down payment in minutes.

Business email compromise at the closing table

The tactic is a form of what the FBI calls business email compromise, and its guidance on the scheme describes how attackers gain access to or convincingly imitate a legitimate email account to redirect a payment. In a real-estate deal, the fraudster monitors the correspondence quietly, learns the timeline and the parties involved, and waits for the moment closing funds are due. Then a message arrives that looks like it came from the title or escrow company, announcing “updated” wire instructions and a new account number.

Everything about the message is designed to feel routine. It references the correct property, uses the right names, and often mimics the sender’s signature and tone. The only thing that has changed is the destination account, and by the time the buyer or the title company realizes the real instructions were never revised, the wire has already been sent and pulled out the other end.


Free retirement updates: Miss an enrollment or claim deadline and it may be gone. Our free Retirement Shield newsletter keeps readers ahead of the ones that matter. Get the free newsletter.

The scale of the losses

Business email compromise is among the costliest categories of online crime tracked by federal investigators. Reported losses to the scheme reached roughly $2.77 billion in the most recent annual tally from the FBI’s Internet Crime Complaint Center, ranking it near the top of the dollar chart even though it is far from the most frequently reported crime. Real estate is one of the sectors hit hardest, because the transactions are large, infrequent for most people, and involve several parties who rarely meet in person.

The real-estate slice of the problem runs into the hundreds of millions of dollars a year, with individual incidents commonly landing in the six figures. That severity per case is what makes the fraud so devastating: unlike a stolen credit-card number, a diverted closing wire is a lump sum, and it often represents money the buyer needs on a fixed date to complete the purchase.

Why the money rarely comes back

Recovery is the exception, not the rule, and the reason is the nature of a wire transfer. Once funds settle in the recipient’s account, the sending bank cannot simply reverse the transaction the way it might dispute a card charge. Scammers move the money onward within hours, often through a chain of accounts or overseas, so the trail goes cold quickly. The best chance of clawing anything back depends on catching the error almost immediately and asking the bank to attempt a recall before the funds are dispersed, a window that can close in a single business day.

That short timeline is why federal guidance stresses reporting to the FBI’s Internet Crime Complaint Center without delay, since a fast report can occasionally trigger a financial fraud recovery process while the money is still traceable. Even then, success is far from guaranteed, and many victims never see the funds again.

Confirming wire instructions the right way

The defense that consistently works is verification through a separate, trusted channel before any money moves. Because the fraudulent instructions arrive by email, confirming them by email accomplishes nothing; the safe step is a phone call to the title company or closing attorney at a number obtained independently, not the number printed in the suspicious message. Any last-minute change to wire instructions, any new account number, or any note of unusual urgency should be treated as a warning sign rather than a routine update.

It also helps to establish the verification routine at the start of a transaction, agreeing with the title company on how instructions will be delivered and how any change will be confirmed. After a wire is sent, calling the receiving institution to confirm the funds arrived where they were supposed to can surface a diversion while the recall window is still open. In a process where a single email can cost a home buyer everything set aside for the purchase, a two-minute phone call to a known number is the cheapest insurance available.

This article was produced with AI assistance and reviewed by The Financial Wire editorial team.

More Financial Reading

Leave a Reply

Your email address will not be published. Required fields are marked *