Wire Fraud Mortgage 2026: How Man-in-the-Middle Attacks Work and How to Prevent Them

Real estate wire fraud is the largest single category of FBI Internet Crime Complaint Center losses. Fraudsters intercept email communications between borrowers, title companies, and real estate agents. They send a spoof email appearing to come from the title company with revised wire instructions. The money lands in a mule account and is moved offshore within hours.

How the Attack Works

The attack sequence: the fraudster compromises email of a title company, real estate agent, or borrower; monitors the transaction for closing date and expected wire amount; sends a convincing spoof email with updated wire instructions days before closing; the borrower wires funds to the fraudster's account; and funds are moved internationally before the error is discovered.

• ✦Spoofed email addresses often differ by one character from the real address
• ✦Subject lines are copied from legitimate prior emails to appear as a thread continuation
• ✦The spoof email often references real transaction details to appear credible
• ✦Fraud is discovered when the title company calls to confirm receipt of funds that never arrived
• ✦Recovery rate is very low once funds leave the initial mule account

MLO Responsibilities

MLOs are not required to verify wire instructions themselves, but the most effective fraud prevention happens when everyone in the transaction chain reinforces the same message. Brief every client at application: never wire funds based on email instructions alone. Always call the title company on a phone number obtained independently (not from the suspicious email) to verify wire instructions before sending.

If Fraud Occurs

Report immediately. Contact the sending bank to request a wire recall (success rate drops to near zero after 24-72 hours). File an FBI IC3 complaint at ic3.gov. Contact the Financial Crimes Enforcement Network (FinCEN). Some states require reporting real estate wire fraud to state regulators. Speed is the only variable that matters.