A $1.3 Million Wire, Gone in Minutes
A retiree closing on a home received what looked like a routine email from the title company: updated wiring instructions, a new account number, and a request to send funds before the end of the day. The sending address was one letter off from the title company’s real domain. By the time anyone noticed, $1.3 million was gone. That case appears in the FBI’s 2025 Internet Crime Report, and it is not an outlier.
Real estate fraud complaints to the FBI’s Internet Crime Complaint Center reached 12,368 in 2025, with reported losses of $275.1 million, up from roughly $173 million the year before, according to Florida Realtors. The National Association of REALTORS® flagged business email compromise, the scheme behind most closing wire theft, as the single costliest category of cybercrime the FBI tracked last year.
Every closing that moves six or seven figures by wire is a target. A Miami-Dade estate sale, a Palm Beach waterfront purchase, a Broward commercial acquisition: the dollar amounts involved make luxury and premium transactions worth a criminal’s time in a way a routine rental deposit never will be. At MJI Realty Group, wire verification is not a courtesy mentioned in passing at closing. It is a step every buyer and seller walks through before a dollar moves, because once the funds clear, the loss is rarely recoverable.
The math behind this crime is simple and it explains why the losses keep climbing year over year. A criminal who successfully intercepts one $50,000 down payment has made a decent week’s work. A criminal who successfully intercepts one $4 million all-cash closing on a Miami Beach condo or a Palm Beach estate has made a career-changing score from a single email. That asymmetry is exactly why South Florida’s luxury market, with its high concentration of large, fast, cash-heavy transactions, sits near the top of the target list nationally, not at the bottom.
How the Scam Works: Business Email Compromise at the Closing Table
Most closing wire fraud starts weeks before the wire itself, with a compromised inbox. A criminal gains access to the email account of an agent, a title agent, a closing attorney, or sometimes the buyer, often through a phishing link clicked months earlier. Once inside, the attacker does not act immediately. They read the thread, learn the closing date, and study the tone the parties use with each other.
Days or hours before closing, the fraudster sends a message that looks like it comes from the title company or the seller’s attorney: updated wiring instructions, a new bank, and a plausible reason for the change, often a claimed banking system upgrade or a new escrow account. The sending domain is almost right but not quite. A title company at “sunshinetitle.com” becomes “sunshinetitles.com” or “sunshine-title.com,” a single character a buyer will not catch while scrolling on a phone between meetings.
Florida Realtors has documented cases that go further still, with scammers cloning a closer’s voice or spoofing a video call to confirm the fake instructions when a suspicious buyer tries to call and check. The stolen funds typically move through a domestic account held for only a few days before being drained and dispersed, which is why speed of detection matters more than almost any other factor in recovery.
What makes business email compromise so effective is that it does not rely on breaking encryption or defeating a firewall. It relies on a buyer’s trust in a familiar name arriving at a familiar moment. A closing involves a dozen legitimate emails from a title company, a lender, an attorney, and an agent, all in the same few days. One more message asking for a wire does not stand out unless the recipient has already decided, in advance, that no wiring instructions will ever be trusted without an independent phone call.
Why Luxury Florida Closings Draw the Most Attention
South Florida carries three features that make it a magnet for this specific fraud: transaction size, transaction speed, and a high share of buyers who are not local. Miami-Dade, Broward, and Palm Beach luxury purchases frequently close in cash, which means the entire purchase price moves by wire in a single transfer rather than a smaller down payment layered on top of a mortgage. A financed transaction caps a scammer’s upside at the down payment and closing costs. An all-cash luxury purchase puts the full price in play.
International and out-of-state buyers add another layer of exposure. A buyer relocating from New York, or closing remotely from Toronto or Sao Paulo, is less likely to know the title company’s staff personally, less likely to recognize a legitimate phone number on sight, and more likely to accept a polished email or a video call as sufficient proof. Compressed timelines compound the problem further. Pre-construction condo closings, off-market luxury sales, and 1031 exchange deadlines all create the same pressure: a buyer who feels rushed skips the verification step a criminal is counting on them skipping.
None of this means a serious buyer should slow down a real transaction. It means the wire step gets treated with the same seriousness as the signature on the deed.
Commercial buyers face a related version of the same exposure. A multifamily acquisition, a warehouse purchase, or a 1031 exchange replacement property often involves a qualified intermediary holding proceeds between the sale of one asset and the purchase of the next, which means two separate wires, two separate windows of vulnerability, and two separate title or escrow companies whose email systems need to be trusted. Investors moving through a portfolio of properties on a tight exchange calendar are, if anything, a more attractive target than a single homebuyer, simply because the same buyer will wire large sums more than once in a short period.
What a Legitimate Title Company Will Never Do
Florida title companies and real estate attorneys who handle closings every day know the pattern criminals rely on, and a well-run firm builds its process around never triggering it. A legitimate closing agent sends initial wiring instructions once, typically through a secure closing portal rather than a plain email, and does not change them by email mid-transaction. If instructions appear to change at any point, that alone is the warning sign, regardless of how convincing the message looks.
Red flags worth memorizing before any closing involving a wire transfer:
- Wiring instructions that arrive or change by email during an active transaction
- Pressure to wire funds “within the hour” or the closing will supposedly fall through
- A phone number provided only inside the email itself, with no independent way to confirm it
- An account name that does not match the title company’s exact legal name
- A sender domain that is almost right but not quite, such as an extra letter, an added hyphen, or a different extension
None of these require special technical skill to catch. They require slowing down for one phone call, which is the single habit that stops most of this fraud before it starts.
Most established Florida title agencies now follow best practices set by the American Land Title Association, which include multi-factor authentication on internal email systems, encrypted client portals for delivering wiring instructions, and staff training on how to spot a spoofed request before it reaches a client. A buyer or seller has every right to ask a title company directly what its wire verification policy is before signing an escrow agreement, and a firm that cannot answer clearly is not one to trust with a seven-figure closing.
The Wire Verification Checklist Before Any Closing Funds Move
Every closing at MJI Realty Group runs through the same four checks before a wire goes out, whether the transaction is a $900,000 condo or an $18 million estate. None of these steps add meaningful time to a closing. Together, they take less than fifteen minutes.
A title company that resists this process, or acts inconvenienced by a verification call, is not a title company worth closing with. In a market where the average wire dwarfs the average paycheck, a fifteen-minute phone call is the cheapest insurance policy in the entire transaction.
This is worth repeating separately because it is the step buyers skip most often under time pressure: source the phone number yourself. Do not call a number printed in the email with the wiring instructions, do not call a number texted to you that same day, and do not call a number a “closing coordinator” reads aloud on an unexpected phone call. Pull the number from the title company’s prior paperwork, from an earlier email in a thread that started weeks before closing, or from a direct search of the company’s own website typed into a browser rather than clicked from a link.
If the Wire Already Went Out, the First Hours Decide the Outcome
Speed is the entire game once a fraudulent wire has been sent. The FBI’s Financial Fraud Kill Chain, a rapid-response program built specifically for this crime, initiated 3,900 recovery attempts in 2025 and froze $679 million of the $1.16 billion criminals tried to steal, a 58 percent recovery rate, according to the FBI’s 2025 Internet Crime Report. That recovery rate exists because banks can sometimes freeze or reverse a wire before the receiving account empties, but only within a narrow window, often measured in hours rather than days.
The moment fraud is suspected:
- Call the sending bank immediately and request a wire recall, using the bank’s fraud department, not a branch teller line
- File a complaint at ic3.gov, which routes directly to the FBI’s recovery team
- Contact the title company and closing attorney by phone to confirm whether their systems were compromised
- Notify local police and the nearest FBI field office
Liability for a wire sent to the wrong account is not automatic, and it depends heavily on which party’s negligence enabled the fraud, a question governed in most states by Uniform Commercial Code Article 4A. Courts generally look at whether the sending bank followed a commercially reasonable security procedure and whether either party ignored an obvious red flag along the way. That analysis is a conversation for an attorney immediately after the fraud is discovered, not weeks later, because evidence about who knew what and when only gets harder to reconstruct as time passes.
Homeowners and title insurance policies rarely cover wire fraud losses directly, since the funds were sent voluntarily rather than stolen through a break-in or a forged deed, which is exactly why prevention carries more weight here than in almost any other part of a real estate transaction. Some closing attorneys and title companies now carry their own cyber liability coverage or offer optional wire fraud insurance riders for large transactions, and it is a reasonable question to ask before closing on a high-value property.
How MJI Realty Group Protects Closing Funds
We work exclusively with South Florida title companies and closing attorneys who treat wire verification as non-negotiable, not as a courtesy they extend when a client happens to ask. Every buyer and seller we represent hears the same instructions in writing before a contract is even signed: wiring instructions never change by email, every instruction gets confirmed by phone using a number sourced independently, and no closing timeline is ever tight enough to justify skipping that call.
Discretion runs through everything MJI Realty Group does, and that includes protecting the money behind a transaction, not just the buyer’s or seller’s privacy. Typical Florida brokers are not required to walk clients through wire fraud protocols. We do it on every closing, luxury or commercial, because a six-figure loss is not a risk worth leaving to chance.
That extends to how we vet the professionals around a transaction. Our extensive network of South Florida attorneys, title agents, and lenders has been built over years of closings, which means every referral comes from firsthand experience rather than a directory listing. When a client is relocating from out of state or closing from overseas, that established relationship is what lets a title company skip nothing and still keep a closing moving at the pace a competitive Miami, Fort Lauderdale, or Palm Beach offer demands.
If you are preparing to buy or sell a luxury property in South Florida and want a team that treats closing security as seriously as it treats the negotiation, MJI Realty Group works with clients who value both speed and protection. Real estate decisions depend on individual circumstances; this is general information, not legal, tax, or investment advice for your specific situation, and any concern about a specific wire or transaction should go to your closing attorney and bank immediately.
