Fraud & Scams

Wire Transfer and Business Email Scams: Real Estate Closing Fraud

By The KinKeeper team · June 9, 2026 · Updated July 22, 2026

Some of the largest single losses happen in an instant, when a wire transfer goes to the wrong place. In these scams, criminals quietly take over or imitate an email account, then send realistic instructions that redirect a payment, often a home down payment or closing funds, straight into their own account. By the time anyone notices, the money is gone.

This matters most around big, one-time payments, which older adults often make when buying, selling, or downsizing a home. This guide explains how wire transfer and business email scams work, shows a real example, and gives you a plan to keep large payments safe.

What it is

This scam is often called business email compromise (BEC) or, for homebuyers, real estate wire fraud. A scammer gains access to or spoofs an email account, such as a real estate agent, title company, lawyer, or contractor, then sends payment instructions that look legitimate but route the money to the criminal.

The scam succeeds because it arrives inside a real transaction you are expecting. You are planning to wire money, so an email about where to send it does not seem suspicious.

How it works

  1. Criminals monitor or break into an email account involved in a transaction, like a title company or real estate agent.
  2. They learn the timing and details of an upcoming payment.
  3. At just the right moment, they send realistic wiring instructions, or change existing ones, to redirect the funds.
  4. The victim wires the money to the scammer’s account, and it is quickly moved beyond reach.

A common version targets homebuyers near closing, with an email that looks like the title company saying the wire details have “changed.” Another redirects payment of a routine invoice to a new account.

A real example

George and Helen, both in their 70s, are selling their longtime home and downsizing. Days before closing, they get an email that appears to come from their title company, with updated wiring instructions for their proceeds and a friendly note about a “new banking partner.” The email matches the company’s logo and signature. They forward the new details to their bank. The account belonged to a scammer who had been reading the title company’s email. The couple’s home-sale proceeds vanish, and recovering them becomes a race against time.

By the numbers

Red flags to watch for

  • An email changing or “updating” wire instructions, especially close to a deadline.
  • New banking details that differ from what you were originally given.
  • Pressure to wire money quickly and confirm only by email.
  • Small differences in an email address or domain you do not notice at a glance.
  • A request to keep the change quiet or to skip a phone confirmation.

How to protect yourself

  1. Always verify wire instructions by calling a known, trusted phone number, never a number from the email.
  2. Be suspicious of any last-minute change to payment or wiring details.
  3. Confirm in person or by phone before sending large sums, and ask your bank about same-day recall options.
  4. Use established, verified professionals, and ask up front how they will communicate wiring details.
  5. Reduce exposure of your plans and contacts. Scammers research targets using details from data-broker and people-search sites. Removing your information from those sites, which a privacy or data-removal service can do for you, gives them less to work with.
  6. Involve a trusted family member in big transactions, so a second person can help verify before money moves.

If you are looking out for an aging parent, especially one living alone, you can lower their risk before a scammer ever gets through:

  • Talk it through. Walk them through this scam in plain terms, and agree on one simple rule: pause and call you before sending money or sharing personal information.
  • Limit publicly exposed details. Opt-out requests can reduce some broker and people-search listings, but they cannot prevent targeting or remove information from breaches, private databases, or every broker.
  • Build a safety net. Help them turn on account and transaction alerts, review statements together, and consider being a trusted contact so you can catch trouble early. For large payments like a home sale, ask to be a second set of eyes.

Before the wire and after the wire are different jobs

The safest moment to catch changed instructions is before money moves: call a trusted number, read the account details back, and require a second person to verify a last-minute change. Transaction alerts and read-only monitoring work later. They can help a family notice that a wire or unfamiliar payee appeared, but they cannot approve, block, or recall the transfer.

If your family wants an ongoing review layer around supported accounts, start with the read-only financial monitoring guide. KinKeeper Money can bring supported account activity forward for human review while leaving account control with the owner. Keep the bank’s alerts and the family’s pre-wire verification rule in place either way.

If you’ve already responded

Call your bank immediately and ask whether it can recall or hold the wire. Report the incident promptly to the FBI at IC3.gov and keep the complaint details. Also notify the title company, agent, or business whose email was involved, and report the fraud at ReportFraud.ftc.gov.

In the news

Sources

Frequently asked questions

How do scammers know about my home purchase?

They break into or monitor email accounts in the transaction, such as a title company or agent, then time their fake instructions to your closing.

How can I send a wire safely?

Verify the instructions by calling a known, trusted number first, and be suspicious of any last-minute change sent by email.

Can a wire be recovered?

Sometimes, if you act within hours. Call your bank immediately and report it to the FBI at ic3.gov.

Money safety

Bring unusual transactions into view

Join the waitlist for Money launch and product updates, or use ScamScan when a suspicious message is already in front of you.

Waitlist updates · No payment required · Unsubscribe anytime