WEBSITE VISITOR IP NOTIFICATIONS

Warning: Email Wire Instruction Fraud Scam Hitting Real Estate Industry

Warning to the real estate industry: a widespread real estate fraud is currently underway that could cost you and your client tens, or even hundreds, of thousands of dollars.

The Scam

The scam is simple: the scammer obtains access to information concerning a pending real estate transaction, using this information to impersonate a party to the transaction to provide fraudulent wire instructions.

Spoofing

Often times, this scam involves a compromised email account of an individual to a real estate transaction (e.g., the agent, escrow, lender, broker, title insurer, seller, buyer, etc.), which the scammer uses to obtain information concerning a pending transaction.

To assume the identity of a party to the real estate transaction, the scammer may send an email that appears to be from a legitimate sender (jsmith@calescrow.com). It is commonly believed that an account must be compromised to send an email that appears to be from that account. This is not the case.

The scammer may also purchase a domain name (e.g., jsmith@calescrow.us) that appears very similar to the legitimate domain name (jsmith@calescrow.com). The scammer may also have control of a compromised email account of a party to the transaction. Under either of these two scenarios, the scammer can send and receive communications with the victim.

Fraudulent Wire Instructions Email

The email will generally inform the buyer/lender of the wiring instructions (or new wiring instructions). With the wiring party expecting an email with escrow instructions from escrow, the broker or the agent, the wiring party may have no reason to think twice about this email.

If the scammer has an ability to read all emails with a buyer, they may be able to convincingly assume the identity of a party to the transaction, picking up where the last email left off (“I’m glad the terminate inspection went well. The new wire instructions are attached.”). With the wiring party having no reason to believe the e-mail to be fake, the wiring party may act on the email without any further confirmation.

Damages

This scam can cause a buyer’s deposit, down payment or even the entire balance of the contract to be wired to the scammer’s bank account. The resulting loss of hundreds of thousands of dollars may give rise to legal liability. Lawyers may consider negligence and breach of fiduciary duty claims, in addition to other causes of action.

How the Hackers/Phishers Compromise an Email Account

Although some may refer to the scam artist as a hacker, they may simply have gained access to the email account by phishing, which involves any number of methods to gain a username and password. This can include sending a link to a website that appears to be a login page to Google, Yahoo, Hotmail, AOL or other popular services. Phishers may be able to determine an email password by using a program to repeatedly guess the password (cracking). They may also utilize spear phishing techniques where the recipient receives an email that appears to come from someone that they know. Another technique is to load a virus on the recipient’s computer, which may come by way of an email attachment or even a download from a website that appears to have a legitimate purpose (Trojan horse).

Warnings

Broad warnings started in 2012, with specific warnings of this precise real estate escrow wire scam beginning in late 2013. The scam was named the “man-in-the-email-scam” by the FBI as it is a variation on the man-in-the-middle scam. Attorney Artin Betpera wrote an excellent description of this scam, warning real estate professionals to avoid free email addresses. Other warnings have been issued by the American Land Title Association, Chicago Title and many other sources. Although this blog post focuses on the real estate industry, the man-in-the-email scam has also impacted other industries.

Fraud Prevention

Professionals should take steps to ensure the security of email communications, including, but not limited to:

  • Avoiding business with any party that uses a free email service
  • Using encryption in emails and attachments
  • Warning buyers/lenders of this potential fraud before it occurs
  • Consulting a computer security expert
  • Training employees on computer security
  • Installing appropriate software to prevent or detect the security issues that give rise to this scam

If you’ve been victimized by this scam, consult a real estate attorney to discover if you may have legal rights.

About Scott Talkov

Scott Talkov is a partition lawyer in California. He founded Talkov Law Corp. after more than one decade of experience with one of the region's oldest law firms, where he served as one of the firm's partners. He has been featured on ABC 7, CNN, KCBS, and KCAL-9, and in the Los Angeles Times, the Orange County Register, the San Diego Union-Tribune, the Press-Enterprise, and in Los Angeles Lawyer Magazine. Scott has been named a Super Lawyers Rising Star for 9 consecutive years. He can be reached about new matters at info@talkovlaw.com or (844) 4-TALKOV (825568). He can also be contacted directly at scott@talkovlaw.com.

Talkov Law is Rated 5 out of 5 stars based on 51 customer reviews.

Contact Us Today for a Free Consultation & Pay No Retainer

Call Talkov Law to discuss having your legal fees paid from the proceeds of sale of your property and no money down

    Awards and Recognition

    US News and World Report Scott Talkov

    We Have Been Featured On:

    The Real Deal

    Recent Blog Posts

    The information on this site, including the Talkov Law Blog, is intended for general information purposes only. By using this site, you agree that any information contained in the site does not constitute legal, financial or any other form of professional advice. Information on this site may be changed without notice and is not guaranteed to be complete, accurate, correct or up-to-date.