The Email Looked Legit. The Wiring Instructions Were Not. Here's How Wire Fraud Works at Closing—and Why the Law May Not Save You.

The Call That Saved $700,000

In late 2025, a homebuyer in Cle Elum, Washington wired more than $700,000 to what he believed were the instructions sent by his title company. The email bore the company's name. The wiring instructions looked professional. Everything about the message passed a surface-level check.

One detail broke the scheme: the email came from a Gmail address, not from the title company's domain.^[1]

The buyer called his title company after sending the transfer. He learned the message was a fake. He contacted his bank in time to stop the wire, which investigators said likely would have moved overseas and vanished permanently.^[1] Detectives later said they believed the title company itself had been compromised through a phishing attack, giving criminals access to customer data and the specifics of the transaction.^[1]

He got lucky. Most people do not.

---

How the Scam Works

Wire fraud targeting homebuyers is not sophisticated in concept. It is sophisticated in execution.

Criminals gain access to email accounts at title companies, real estate agencies, or law firms, typically through phishing emails that trick employees into revealing login credentials.^[6] Once inside, they monitor transactions in progress. They identify closings with large wire amounts. They draft emails that mimic the real company's tone, format, and branding, then send wiring instructions from an address that looks identical at a glance.

In the Cle Elum case, the sender used a free Gmail account with the title company's name in the display field. That detail would have been visible only if the buyer had checked the full email header, something almost no homebuyer knows to do.^[1]

The ALTA Rapid Response Plan for Wire Fraud Incidents, the industry's own protocol for responding to these breaches, acknowledges that title companies are frequent targets.^[6] The FBI's IC3 reports, cited by ALTA, document the scale: real estate wire fraud has cost buyers and sellers hundreds of millions of dollars annually, with recovery rates near zero once funds leave the United States.^[6]

---

Who Gets Paid at Closing—and Why That Creates an Incentive Problem

At every residential closing, multiple parties are compensated only when the deal finishes: the real estate agents, the mortgage lender, the title or escrow company, the settlement attorney, and any home warranty provider.^[6] That structure is legal and standard. It also means every party in the room has a financial reason to keep the transaction moving.

No one at the closing table is paid to slow down and audit whether the buyer's wiring instructions are authentic. The title company may have been the phishing victim; it is also the entity collecting a title insurance premium and settlement fee from that same buyer. The lender is focused on getting the loan closed. The agents are focused on commission.

This is not an accusation of bad faith. It is a description of the incentive structure. When something goes wrong, the parties disperse. The buyer absorbs the loss.

---

What the Law Says About Who Bears the Loss

In Wheeler v. Clear Title Co., Inc., the Nevada Court of Appeals considered exactly this scenario: a buyer who received phishing wire transfer instructions, wired funds to a fraudster instead of the escrow company, and then tried to hold the title company responsible.^[6]

The court ruled against the buyer. The title company's name appeared in the fraudulent email, the court noted, but the buyer had no direct communication with the company confirming those instructions. The buyer bore the loss.^[6]

That ruling reflects a broader legal principle: the duty to verify wire instructions falls on the party sending the money. No federal consumer protection statute currently creates a reimbursement obligation for title companies or escrow agents when their email systems are compromised and a buyer wires funds to a fraudster.

The CFPB publishes guidance on fraud and scams, and its complaint system allows buyers to report financial fraud, with most companies required to respond within 15 days.^[2][4] The CFPB can investigate patterns and take enforcement action against companies that violate consumer protection statutes. But the CFPB does not guarantee reimbursement to individual buyers who wire money to criminals, even when the criminals impersonated a regulated entity.^[2]

---

The Three-Day Window That Could Save You

Lenders are required to provide the Closing Disclosure three business days before the scheduled closing.^[3] This window exists so buyers can review the final terms of their loan before the transaction is complete. What the CFPB's Closing Disclosure explainer does not explicitly state is that this window is also your best opportunity to verify every piece of financial information in your transaction, including wire instructions, before any money moves.^[3]

The Loan Estimate, provided earlier in the process by your lender, outlines estimated closing costs and is another document worth cross-referencing against what your title company communicates.^[5]

These disclosures are required. Reading them carefully, and using the three-day window to make phone calls, is not.

---

What You Can Do This Week

The Cle Elum buyer recovered his money because he called his title company before the wire left the country. That is a strategy, but it is a reactive one. The following steps are proactive and take effect before any wire is prepared.

Before you wire any funds, call your title or escrow company directly using a phone number you looked up independently, not one provided in an email. Do not use a call-back number in the email header. Use the number on the company's official website or on a recent settlement statement you received in person or by mail.

Verify the wire instructions verbally with a named representative at the title company. Confirm the account name, the bank routing number, and the exact dollar amount. Write down who you spoke with and the time of the call.

Do not send wire instructions to anyone for review via email. If you forward an email containing wire instructions, you may inadvertently expose the details to a fraudster who has compromised the recipient's account.

Treat any email that contains wire instructions as suspicious by default. The Cle Elum fraud email bore the title company's name and appeared legitimate. The Gmail sender address was the only obvious tell, and it was invisible to a buyer who did not know to look for it.^[1]

If you receive wire instructions by email, call the title company on a separately verified number and confirm the instructions before sending any money. This is the single step that would have prevented the Cle Elum loss and every similar case documented by ALTA's Rapid Response Plan.^[6]

If you sent a wire and suspect it may be fraudulent, contact your bank immediately. The Cle Elum buyer contacted his bank in time to stop the transfer before it left the country.^[1] Speed matters. International wires can move in hours. Domestic wires can clear the same business day.

If you believe you are a victim of wire fraud, contact the Kittitas County Sheriff's Office at 509-962-7525 if you are in Washington State, or your local law enforcement agency. You can also file a complaint with the CFPB at consumerfinance.gov/complaint, which typically takes less than 10 minutes to submit online.^[4]

---

What This Means for You

Wire fraud at closing is not a rare disaster that happens to other people. It is a structured, profitable crime that exploits one of the largest financial transactions most people will ever make, using the email systems of the very companies buyers trust to manage the closing. The Cle Elum buyer recovered his money because he called in time. The Nevada court made clear that the law does not require title companies to make buyers whole when their systems are breached.^[6]

Every party at your closing is paid when the deal closes. No one at that table is paid to slow down when a wire transfer is pending. The three-day disclosure window exists by regulation, but using it to verify wire instructions is your responsibility, not the title company's. The CFPB complaint system exists to report fraud, but it does not replace the verification call that would have prevented the Cle Elum loss in the first place.^[3][4]

The $700,000 homebuyer in Cle Elum is not a cautionary tale. He is a survivor. The next buyer who gets an email with wiring instructions may not be.

Call the title company before you wire anything. Not the number in the email. The number you looked up yourself.