Days before a home sale closes, the buyer expects an email carrying instructions for wiring the down payment or the full purchase price to the closing agent. Criminals have learned to strike at exactly that moment. By breaking into or imitating the email account of a real estate agent, title company or closing attorney, they send a polished message with “updated” banking details and steer the entire payment into an account they control. The money often lands overseas within hours, and the family that thought it was buying a home is left with neither the house nor the cash.
How the closing-day switch works
The scheme is a form of what investigators call business email compromise, and real estate deals are a favorite target because the transactions are large, one-time and time-pressured. Fraudsters get inside the email traffic surrounding a sale, quietly monitor the schedule, and learn the names of everyone involved and the day the wire is due. When the moment arrives, they send a message that looks like it came from a trusted party in the deal, announcing that the wire instructions have changed and providing a new account number.
The disguise is the whole trick. According to the FBI’s guidance on business email compromise, criminals spoof a legitimate, known email address or register a near-identical one, then pose as someone the victim already trusts to make the fraudulent request feel routine. Because the email arrives inside an exchange the buyer has been part of for weeks, the switched instructions rarely raise suspicion.
Free retirement updates: Scam calls targeting retirees change every week. Our free Retirement Shield newsletter flags the ones going around and the one tell that stops each. Sign up free.
Why the money disappears so fast
A wire transfer is built for speed, and that speed is what the thieves exploit. Once a buyer sends the funds, the receiving bank can make the money available almost immediately, and the criminals move it again, often splitting it across accounts and pushing it abroad before anyone notices the payment never reached the closing table. Unlike a disputed credit-card charge, a wire the sender authorized is extremely hard to reverse.
The stakes are severe because the sums are life-altering. A down payment on a home, or the full price paid in cash by a retiree downsizing or buying outright, can represent decades of savings. When that single wire goes to the wrong account, there is frequently no insurance and no easy recovery, which is why prevention matters far more here than in almost any other everyday transaction.
Certain moments in a deal carry extra risk. The days immediately before closing are the danger zone, when everyone expects a flurry of last-minute emails and a request to send money feels normal. Retirees who buy or sell a home only a few times in their lives may not know what a legitimate closing process looks like, and the criminals count on that unfamiliarity, dressing up the fraud in the logos, signatures and file numbers lifted from the real transaction.
The verification step that stops it cold
The defense the FBI stresses is simple and human: confirm the details by voice before sending a dollar. Any email announcing new, changed or last-minute wire instructions should be treated as suspect until the buyer independently verifies it by calling the agent, title company or attorney on a phone number gathered earlier from a signed document or the company’s official listing, never a number printed in the suspicious email itself.
A few habits reinforce that call. Wire instructions rarely change at the last minute in a legitimate closing, so a sudden change is a red flag rather than a routine update. Small tells in the email itself often give the scheme away, such as a sender address that is off by a single letter, a reply that routes to an unfamiliar domain, or pressure to act before the buyer can verify anything. Buyers can also confirm receipt with the closing agent within a day of sending, since catching a misdirected wire within hours gives the banks their best and often only chance to freeze it.
What to do the moment a wire goes wrong
Speed is everything after a mistaken transfer. The sender’s bank should be contacted immediately with a request to recall the wire and to alert the receiving bank, because a fast freeze can sometimes claw back funds that have not yet been pulled out. The faster that call happens, the better the odds.
The next step is a report to law enforcement through the FBI’s Internet Crime Complaint Center at ic3.gov, which routes wire-fraud complaints to a recovery process that has, in time-sensitive cases, helped intercept transfers before criminals cash out. Filing the complaint with the specific dollar amount, account numbers and timing lets investigators ask the receiving bank to hold the funds, a step that only works while the money is still sitting there. The bureau’s own numbers show real estate wire fraud draining hundreds of thousands of dollars per incident, and its recovery efforts hinge on victims reporting within hours rather than days.
This article was researched and drafted with AI assistance and reviewed against the linked primary sources.
More Financial Reading
- Bank statements: how long to keep them and when to toss them
- How many CDs can you park at 1 bank? FDIC rules you must know



