How does real estate wire fraud work now?

Closing day still moves by wire transfer, and criminals have gotten better at faking the instructions — with cloned voices, hijacked email threads, and forged deeds on vacant land. Here's what's actually happening.

Rennie Barton · September 14, 2026 · 5 min read

In this article

Every home purchase ends the same way: a buyer wires a large sum of money based on instructions that arrive electronically, once, under time pressure. That's the exact moment criminals target, and the tools available to them have improved a lot faster than most buyers' guard has. This isn't a reason to distrust your closing — it's a reason to know the two or three habits that actually stop the fraud that's out there.

The FBI's Internet Crime Complaint Center logged real estate-related fraud complaints up roughly 58 percent in 2025, with business email compromise — the umbrella category most closing fraud falls under — accounting for just over $3 billion in reported losses nationally. Title insurers and settlement companies report the same trend from the other side: a 2026 industry survey found 60 percent of title professionals saying fraud attempts against their offices are increasing, and most pointed to AI as the reason the fakes have gotten harder to spot.

Business email compromise is still the most common way closing funds get stolen, and it doesn't require much sophistication — just patience. A criminal gets into, or simply monitors, an email account somewhere in the transaction chain: the title company, the agent, sometimes the buyer's own inbox. They watch the deal progress, then time a message to land right when a wire is expected, using the real signature block, the real logo, and language that matches how the actual company writes. The only thing different is the account number.

  • Arrives right before closing with unusual urgency
  • Changes routing or account numbers from what you were told at contract
  • Comes from a domain that's one letter off from the real company's
  • Provides its own phone number to "verify" the change
  • Asks you to keep the change confidential from your agent or lender

The newer wrinkle is voice. Cloning tools now need as little as ten seconds of someone's voice — pulled from a bio video, a webinar recording, a podcast appearance, or a LinkedIn post — to generate a convincing phone call. CertifID's 2026 wire fraud report notes plainly that AI can clone voices, replicate email threads, and generate fraudulent documents with very little effort, and that 82 percent of consumers surveyed already understand criminals are using AI to impersonate real estate professionals. A call that sounds exactly like your title agent is no longer proof that it is your title agent.

A different scheme targets land rather than a closing in progress. Vacant parcels — the kind that make up a good share of West Michigan's lakeshore and inland-lake inventory — are attractive targets because they usually carry no mortgage, no occupant to notice anything wrong, and often an owner who lives elsewhere or checks in rarely. Industry data on recent title fraud cases put the split at roughly 62 percent vacant land versus 12 percent owner-occupied homes. The scheme runs on forged identity: someone poses as the owner, lists the parcel below market to move fast, and steers the closing toward a notary and title company they control. Michigan's county recording offices, like most states', aren't required to substantively verify a deed before recording it — though local registers have discretion to flag an unusual filing and hold it while they look into it.

  • Confirm wire instructions by phone, using a number you already had — never one from the email itself
  • Treat any last-minute change to wire instructions as a reason to stop and call, not proceed
  • Ask your title company how they verify changes before the funds are due
  • Sign up for your county register of deeds' fraud alert service if one exists
  • For a vacant or seasonal parcel, confirm directly with the seller through a known number before wiring anything

None of this requires new software or a security background — it requires treating a wire instruction the way you'd treat a stranger asking for your bank details, because that's functionally what a compromised email is. Before closing on an unimproved parcel in particular, it's worth pulling the county's own recorded chain of title yourself; the site's Property Research Center walks through exactly how to do that with Michigan's public records, rather than relying solely on what a closing email tells you.