Wire Fraud in Real Estate: How It Works, and How to Stop It

Source: FBI Internet Crime Complaint Center (IC3), 2025 Internet Crime Report. Real estate fraud losses have climbed every year since 2023: $145M (2023) → $173M (2024) → $275M (2025).

How the scam actually works

Wire fraud in a real estate closing is almost always a variant of business email compromise (BEC). It doesn't require hacking a bank or a title company's systems — it only requires getting into one inbox along the way.

1. A criminal compromises an email account. Usually through a phishing email sent to a real estate agent, loan officer, escrow officer, or title company employee. Real estate professionals are targeted because their inboxes are full of active transactions with predictable closing dates.
2. They watch and wait. Once inside an inbox, the criminal quietly monitors the conversation thread for weeks, learning names, dates, and the exact tone the parties use with each other.
3. They strike right before closing. Days or hours before funds are due, the buyer receives an email that looks exactly like it came from escrow — same names, same thread, sometimes a spoofed domain that's off by a single letter — with new wiring instructions.
4. The buyer wires the funds. The money moves to an account the criminal controls, often at a bank on the other side of the country, and is drained or moved again within hours.

The red flags

• Any change to wiring instructions, especially a last-minute one — escrow holders do not change wiring instructions by email without warning.
• A sudden switch in urgency or tone — language pushing you to wire "immediately" or "before the bank closes."
• A reply-to address that doesn't match the sender, or a domain that's almost right (pocketescr0w.com instead of pocketescrow.org, for example).
• A phone number in the email itself offered as the way to "verify" the new instructions — if the verification number came from the same suspicious email, it verifies nothing.

How to protect your closing funds

One habit stops nearly all of this: never wire money based on instructions you only received by email. Before you send a single dollar:

1. Call your escrow officer using a phone number you already have on file — not one from the email with the instructions.
2. Verbally confirm the receiving bank name, account number, and routing number, digit by digit.
3. Be suspicious of any instructions that arrive close to your closing date or that differ from what you were told earlier in the transaction.
4. After wiring, call your bank to confirm the wire was received by the intended account before considering the matter closed.

Pocket Escrow App's Wire Fraud Verification Checklist walks through this exact process field by field, and produces a signed PDF record of the verification for your file.

Frequently asked questions

How common is wire fraud in real estate?

Very. IC3 recorded 12,368 real estate fraud complaints in 2025 with losses over $275 million, up from $173 million in 2024 and $145 million in 2023. Business email compromise, the scheme behind most wire fraud, was the single costliest cybercrime category IC3 tracked in 2025, at over $3 billion in losses.

How does wire fraud happen during an escrow closing?

A criminal compromises an email account belonging to someone in the transaction, monitors it until closing is near, then sends the buyer fraudulent wiring instructions that appear to come from escrow. The buyer wires funds to an account the criminal controls.

Can money already wired to a fraudster be recovered?

Sometimes, but only with fast action. Call your bank immediately to request a wire recall and file an IC3 complaint within 72 hours. Recovery odds fall sharply once funds move through multiple accounts.

What is the single most important rule to avoid wire fraud?

Never wire funds based on instructions received only by email. Always verbally confirm wiring instructions using a phone number you already have on file — not one listed in the email.