Closing wire fraud is a form of business email compromise: criminals impersonate a title company, escrow officer, attorney or agent and send new wire instructions so the buyer's closing funds land in the scammer's account instead of the real one. The National Association of REALTORS® (NAR) says scammers hack or spoof email, watch the deal, then push a last-minute change of account or payment type. The FBI's Internet Crime Complaint Center (IC3) tells victims to call their bank immediately for a recall and to file a detailed complaint at ic3.gov so its Recovery Asset Team can try to freeze funds. No email change of wire instructions should be trusted without an out-of-band check on a number you already know.
At a glance
| Question | Short answer | Source |
|---|---|---|
| What is the scam? | Fake or compromised email that changes where closing funds should be wired | NAR Consumer Guide; FinCEN RE-BEC analysis |
| Who is most often impersonated? | Title and closing entities (FinCEN's real-estate BEC study) | FinCEN FTA (BSA data, 2020–2021) |
| Where do the first fraudulent wires often go? | Nearly 88% of RE-BEC incidents in FinCEN's study started at U.S. depository accounts | FinCEN FTA |
| What should you do before any wire? | Confirm instructions in person or by phone using a trusted number — not one in the email | NAR; IC3 BEC tips |
| What if funds already went out? | Call the originating bank for a recall / Hold Harmless Letter; file at ic3.gov with full banking details | IC3 BEC page; IC3 Recovery Asset Team |
| IC3 "Real Estate" 2025 totals | 12,368 complaints; $275,110,419 reported losses — category includes investment, rental and timeshare fraud, not only closing wires | FBI IC3 2025 Annual Report |
How the scam hits a luxury closing
NAR's consumer guide describes the pattern in plain terms. Cybercriminals target buyers, sellers, attorneys, title companies and agents. They gain access to an email account or send mail that looks almost right — logos, names, an address off by a letter — then wait until earnest money, down payment or closing funds are due. The message asks the buyer to wire to a new account, or to switch from a check to a wire. Luxury closings are attractive for the same reasons FinCEN flagged for the sector: large wires and heavy email traffic among title, escrow, lender, attorney and brokerage.
FinCEN's March 2023 Financial Trend Analysis of business email compromise in the real estate sector (BSA data for 2020–2021) found that individual homebuyers "suffer disproportionately," that title and closing entities were the parties most often impersonated, and that nearly 88% of the studied RE-BEC incidents began with a transfer into a U.S. depository account rather than a foreign one. Funds can then move quickly to payment platforms or convertible virtual currency. That is why a same-day phone check matters more than a polished email.
IC3's annual reports also publish a Real Estate crime type. Treat those totals carefully. IC3 defines Real Estate Fraud as loss of funds from a real estate investment or fraud involving rental or timeshare property — so the category is broader than spoofed closing wires. Still, IC3's Recovery Asset Team case write-ups show the closing pattern: spoofed agent or attorney email, a large domestic wire, and a race to freeze the receiving account.
Practical hygiene (buyers, sellers, agents)
From NAR's consumer guide and Wire Fraud page, and from IC3's BEC "Stay Protected" tips:
- Agree on verification before anyone wires. At the start of the deal, decide how wire instructions will be confirmed (known phone number, in person, or a pre-agreed code). Write the title/escrow phone number from a trusted source — the company's website you typed yourself, or a card from an earlier meeting — not from a late email.
- Never treat email as the final word on wiring instructions. NAR's recommended practices say not to send wire instructions or personal financial information by email. Prefer a secure transaction portal when the closing team offers one.
- Suspect last-minute changes. Title companies and lenders rarely change wiring instructions by surprise email or voicemail. Any urgency, new account, new bank, or "send today or you lose the rate/lock" line is a reason to stop.
- Call a known number before and after the wire. Confirm the account name and numbers with the real recipient, then call again after sending to confirm receipt — still on a number you already trust.
- Check the real email address. IC3 warns people to view full email extensions (especially on phones) and to verify that the sender address matches the person it claims to be. Look-alike domains are common.
- Use secondary channels. IC3 recommends secondary channels or two-factor checks before accepting a change of account information.
- Agents and brokers: NAR suggests educating buyers early (many firms use a signed wire-fraud disclosure), putting a wire-fraud notice in the email signature, using strong passwords and multifactor authentication, and never forwarding unverified wiring instructions.
None of this guarantees a safe closing. It is the hygiene official sources publish.
If funds were already sent
Time matters. IC3's BEC page and Recovery Asset Team guidance say:
- Call the originating bank immediately. Request a recall or reversal and ask for a Hold Harmless Letter or Letter of Indemnity. Different banks have different policies; ask what they can do the same day.
- File a detailed complaint at ic3.gov. Include full transaction details and banking information in the required fields. IC3's Recovery Asset Team can liaise with recipient banks to request a freeze when criteria are met (the domestic Financial Fraud Kill Chain process).
- Contact the local FBI field office as NAR advises once the bank and IC3 filings are underway.
- NAR's Wire Fraud page adds that filing with IC3 within 24 hours — and no more than 72 hours — gives the best chance of recovery. Recovery is never guaranteed.
Do not wait to "see if the title company got it." If anything about the instructions feels off after the fact, treat it as fraud until the real closing team confirms otherwise on a trusted channel.
What the official numbers do and don't say
- IC3 Real Estate, 2025: 12,368 complaints and $275,110,419 in reported losses (2024: 9,359 complaints and $173,586,820). Definition includes investment, rental and timeshare fraud, not only closing wires.
- IC3 BEC overall, 2025: 24,768 complaints and $3,046,598,558 in reported losses. Closing wires are one BEC pattern among many.
- FinCEN RE-BEC study (BSA, 2020–2021): qualitative patterns above, including the nearly-88% domestic first hop — not a 2025 loss total for luxury deals.
Featured agents: Haute Real Estate Network members include Dante DiSabato, a luxury real estate agent with William Raveis Real Estate in Naples, Florida, and Matt Brown, a Naples luxury real estate specialist with William Raveis Real Estate. Browse Find a Realtor.
Related
- What Is Title Insurance and Do I Need It?
- What Is Escrow in a Luxury Transaction?
- What Is Wire Transfer Compliance for Foreign Buyers?
- Closing Costs for Luxury Condos in Miami
- NAR Settlement & Buyer-Broker Agreements (2026)
- Insights
FAQ
What is a real estate closing wire scam? It is when someone posing as title, escrow, an attorney or an agent emails new wiring instructions so closing funds go to a criminal account. NAR and FinCEN describe this as email compromise or impersonation timed to the transfer of funds.
Can I trust wiring instructions that arrive by email? Not by themselves. NAR says to confirm instructions in person or by phone with a trusted number, and to be suspicious of last-minute email or voicemail changes.
Who do scammers usually impersonate? In FinCEN's real-estate BEC analysis of BSA filings for 2020–2021, title and closing entities were the parties most often impersonated. Agents, attorneys and other parties are also used as cover.
What should I do the moment I suspect a bad wire? Call your bank and ask for a recall or reversal and any indemnification documents, then file at ic3.gov with complete banking details. NAR also points to the local FBI field office.
Does filing with IC3 guarantee I get the money back? No. IC3's Recovery Asset Team may request a freeze when a complaint meets its process criteria. Speed helps; recovery is not promised.
Are FBI "real estate fraud" totals the same as closing wire losses? No. IC3 defines Real Estate Fraud to include investment losses and rental or timeshare fraud. Closing-wire cases also appear under BEC. Read the category label before quoting a number.
Sources
- FBI Internet Crime Complaint Center, 2025 Internet Crime Report (accessed Nov. 5, 2026) — Real Estate and BEC totals; glossary definition; Recovery Asset Team examples
- FBI Internet Crime Complaint Center, 2024 Internet Crime Report (accessed Nov. 5, 2026) — prior-year Real Estate totals; March 2024 Recovery Asset Team real-estate BEC example
- FBI IC3, Business Email Compromise (BEC) (accessed Nov. 5, 2026) — prevention tips and incident steps
- FBI IC3, Domestic Financial Fraud Kill Chain (D-FFKC) Process (accessed Nov. 5, 2026) — Recovery Asset Team victim guidance
- FinCEN, Analysis of Business Email Compromise in the Real Estate Sector and linked Financial Trend Analysis PDF (accessed Nov. 5, 2026)
- National Association of REALTORS®, Consumer Guide: How to Protect Against Real Estate Wire Fraud (accessed Nov. 5, 2026)
- National Association of REALTORS®, Wire Fraud (accessed Nov. 5, 2026)