Wire Fraud at Closing: Don't Lose Your Down Payment in 2026

Three days before Elena was set to close on a $362,000 house last March, an email landed in the thread she'd been using with her title company for weeks. The same logo and signature, the same polite tone. The closing had been moved up, it said, and here were the updated instructions for wiring her $38,400. She sent it that afternoon. By the time the real title company called the next morning to ask where her funds were, the account she'd wired to was empty and closed.

Elena wasn't careless. She didn't click a link from a stranger or read her account number to a fake caller. She followed instructions that arrived inside a real conversation, at the exact moment she was expecting to move a large sum. That timing is the whole trick, and it's why closing wire fraud keeps working on careful, informed people.

The numbers are getting worse, not better. Reported losses across all internet crime hit $20.8 billion in 2025, up 26% from the year before, according to the FBI's Internet Crime Complaint Center. Within that, the FBI logged 12,368 real estate fraud complaints and $275.1 million in losses. Business email compromise, the broader category that closing scams fall under, was the second-costliest crime the bureau tracked all year at $3.04 billion, and 86% of that money left by wire or ACH transfer, the kind of payment that's fast, final, and painfully hard to reverse.

You might assume this is rare. A study by the American Land Title Association and CertifID found that roughly one in four people are targeted during a real estate deal, and nearly one in twenty become victims. First-time buyers are about three times more likely to get hit, partly because the whole process is new to them and every unfamiliar email looks plausible.

The email that looks exactly right

Closing wire fraud almost never starts on closing day. It starts weeks earlier, quietly.

Somewhere in the chain of people handling your purchase, the title or escrow company, your agent, the loan officer, sometimes your own inbox, a criminal gets a foothold. Usually it's a phishing email that steals a password and hands the thief a silent view of a real account. From there they read. They learn the closing date, the property address, the names of everyone involved, and the tone each person uses. Then they wait.

When the timing is right, they send you a message that looks like it came from your title company. It references your actual file and uses the right names. Then comes the update that matters: the wiring instructions have changed, and here's the new account for your closing funds. That account is theirs.

You send the money. Within hours they move it out through a chain of accounts, often converting it to cash or crypto or pushing it abroad, so that by the time anyone notices, nothing is sitting still to recover.

The signs that should stop you cold

A handful of patterns show up again and again:

• Wiring instructions that arrive or change by email, especially at the last minute.
• Any pressure to hurry, like "we need this today to keep your closing on schedule."
• A different bank than the one your title company named when you met in person.
• Small mismatches in the sender's address, a swapped letter or a slightly altered domain.
• A request to confirm only by email, or to keep the transfer quiet.

No single item here is proof. Together, or even one of them at the wrong moment, they're your cue to stop typing and pick up the phone.

Why wired money is so hard to get back

The cruelty of this scam is in what happens after you realize.

When a thief runs up your credit card, federal law caps what you owe and your issuer reverses the charges. Your debit card carries its own protections under a separate set of rules. A wire transfer you send yourself has neither. You authorized it. As far as the banking system is concerned, you told it to move your money, and no guaranteed refund is waiting once you learn you were tricked.

So recovery becomes a race against the clock. The FBI runs a Recovery Asset Team that can ask a receiving bank to freeze a fraudulent transfer before the money scatters. In 2025 that team froze $679 million out of $1.16 billion in reported thefts, a 58% success rate. Those wins come overwhelmingly from victims who report within hours. Once the funds hop a few accounts down the chain, the trail goes cold and the odds collapse.

Before you wire a dollar, verify

Preventing this costs nothing but a phone call and a few minutes of friction. Treat wire instructions as something you confirm out loud, never something you accept on faith from an email. This routine closes the door.

Get the instructions early, ideally in person or through your title company's secure portal if they offer one. Plenty of them now use identity-verification services built for exactly this problem.

Then call to confirm, using a phone number you found yourself. Not the number in the email, and not the number in the email's signature. Use a number from the contract you signed, the company's official website, or a business card someone handed you. Read the account and routing numbers back to a live person and confirm them out loud before you send anything.

Assume any change is fraud until proven otherwise. Legitimate title companies rarely switch bank accounts in the middle of a deal, and when they do, they'll gladly confirm it by phone. A real closing agent will never be annoyed that you called to check. A scammer is betting you'll be too polite or too rushed to bother.

After you send the wire, call again within a few hours to confirm the money landed. A misdirected transfer caught the same day has a fighting chance. One caught a week later usually doesn't.

If you're buying land or a second home, stay especially alert. A cousin of this scam, seller impersonation, has criminals posing as the owner of a vacant lot or an empty property and collecting the proceeds at closing. Title industry data shows vacant land is the most common target by a wide margin. Your defense is the same: confirm identities and payment details through channels you control.

If you already sent the money

Speed decides everything here. Work these steps at the same time if you can, and don't wait for business hours.

1. Call your bank immediately. Ask them to attempt a wire recall and to contact the receiving bank to freeze the account. Say the words "wire fraud" so it gets routed correctly.
2. Call the receiving bank's fraud line if you can reach it, report the fraud, and ask them to freeze the funds.
3. File a report at ic3.gov, the FBI's complaint center, right away. That is what puts the Recovery Asset Team in motion. Give every detail: amounts, account numbers, dates, and the emails.
4. File a report with your local police for the record.
5. Tell your title company, agent, and lender, so they can warn everyone else on the transaction and check whether their own systems were breached.
6. Keep everything. Save the fraudulent emails with their headers and delete nothing.

None of this guarantees you'll see the money again. But acting inside the first day is the single biggest factor in whether a freeze works.

The Bottom Line

Closing on a home is the largest wire most people will ever send, and the criminals know it. The defense isn't complicated and it isn't expensive. It's a habit. Three moves to make before you're anywhere near closing day:

1. Verify wire instructions by phone, using a number you looked up yourself. Do it every time, even when the email looks perfect, and read the account numbers back to a live person. Treat any last-minute change as fraud until a call proves otherwise.
2. Set the rule with your team now. Tell your agent and title company at the start that you'll confirm all wiring details by phone and won't act on emailed changes. Ask whether they use a secure portal for moving closing funds.
3. Save the emergency numbers today. Store your bank's wire or fraud line and ic3.gov where you can find them fast, so if something goes wrong you're reporting it in minutes instead of digging for a phone number while the money moves.