The largest sum many families ever move at once is the wire that funds a home purchase, whether it is a down payment or the full balance due at the closing table. Criminals have built an entire playbook around intercepting that single transfer in the final hours before a sale closes. By the time a buyer discovers the wiring instructions were forged, the money has usually been pulled out the other end and the deal is in chaos.
Business email compromise aimed at the closing table
Real-estate wire fraud is a form of what investigators call business email compromise. Fraudsters quietly monitor or spoof the email account of a title company, escrow officer, or real-estate agent, watching a transaction move toward its closing date. When the moment is right, they send the buyer a message that appears to come from the closing team, carrying “updated” or “corrected” wiring instructions that route the funds to an account the criminals control.
Because the email arrives inside a real conversation, names the correct property, and uses familiar signatures, it rarely triggers suspicion. The buyer wires the money exactly as instructed, and it is then moved rapidly through a chain of accounts and often placed beyond reach. The FBI’s Internet Crime Complaint Center has documented large losses from real-estate and closing-related wire fraud, with buyers and sellers who are less familiar with electronic closing routines among the most exposed.
Buyers are not the only targets. Sellers waiting on their proceeds and homeowners refinancing a mortgage face the same danger, because any large closing-related transfer can be diverted the same way. In some cases criminals redirect a seller’s payout by emailing the closing agent fake instructions for where the money should land, which means a lifetime of accumulated home equity can be rerouted in a single transaction. The common thread runs through every version: a substantial payment tied to a real-estate deal, a predictable closing date, and communication that happens largely by email, an environment that gives a patient fraudster room to slip a forged message into the flow.
Free retirement updates: Scam calls targeting retirees change every week. Our free Retirement Shield newsletter flags the ones going around and the one tell that stops each. Sign up free.
Why a last-minute change is the whole trick
The timing is not an accident. A home closing is one of the few moments in ordinary life when a buyer expects to send a very large amount of money to a party they may have never met in person, on a tight schedule set by lenders and sellers. That combination of pressure, unfamiliarity, and a hard deadline is exactly the environment the scheme is designed to exploit.
Any email that alters payment details at the last minute deserves outright suspicion, no matter how routine the explanation sounds. Fraudsters lean on phrases like a “bank account change,” a “wire desk error,” or “new escrow instructions” to make the switch feel administrative. A legitimate closing agent almost never overhauls wiring details by email in the final hours, and a buyer who treats every change as a red flag loses nothing by pausing to check.
Verifying wiring instructions before a dollar moves
The single most effective defense is refusing to trust wiring instructions delivered by email. Before sending anything, the buyer should confirm the account details by calling the title or escrow company directly, using a phone number obtained independently from an earlier document or the company’s official listing, not a number printed in the suspicious message itself. Fraudsters often include their own “verification” line, so a call to that number simply reaches the scammer.
Confirming the routing and account numbers out loud, then confirming again that the wire actually arrived, closes most of the gaps criminals rely on. It also helps to be wary of first-time instructions that appear only by email, to avoid sending funds based on a PDF attachment alone, and to ask the closing agent in advance how legitimate changes, if any, would be communicated. A few minutes on the phone is trivial next to the size of the transfer at stake.
A handful of added habits reinforce that verification. Links and phone numbers embedded in the payment email should be ignored, since a spoofed message can point straight back to the fraudster; the safest number is one taken from an earlier signed document or the company’s published listing. Where a bank offers it, sending a small test transfer first and confirming receipt before moving the full amount can expose a wrong account before the bulk of the money is gone. Slowing the final step down, rather than rushing to meet an artificial deadline, is what most often keeps a closing on track.
Acting fast when money lands in the wrong account
Speed matters enormously after a mistaken wire, because stolen funds are frequently withdrawn or moved within hours. Anyone who suspects money went to a fraudster should contact their bank immediately and request a wire recall or reversal, then report the incident to the FBI and file a complaint with the Internet Crime Complaint Center. In some cases, when victims act quickly, banks and investigators have been able to freeze funds before they vanish.
For older homeowners moving proceeds from a sale or wiring a down payment for a new place, the financial stakes are especially severe, since the money is often earmarked retirement equity that cannot easily be rebuilt. Treating wiring instructions as something to verify by voice, never by email alone, is the habit that keeps a life-changing sum from disappearing into a stranger’s account in the last moments before a closing.
This article was produced with AI assistance and reviewed by The Financial Wire editorial team.
More Financial Reading
- What really happens to your joint savings account when you die?
- How many CDs can you park at 1 bank? FDIC rules you must know
Warren Cohen is a finance writer based in Phoenix, Arizona, covering personal finance topics including credit, banking, and beginner investing. He earned his degree in business administration from Arizona State University and began his career working in consumer finance, where he gained direct experience with lending and credit systems. He now writes for personal finance websites and fintech platforms, focusing on clear, practical content that helps readers make informed financial decisions.
