Wire Fraud in a Texas Closing: Protect Your Down Payment

The most expensive thing that goes wrong in a Texas home purchase has nothing to do with the house, the loan or the inspection. It is a buyer sending their entire down payment to a criminal.

It happens regularly, to careful people, and it is preventable with one habit that takes ten minutes. This is the only post on this site whose entire purpose is to make you do one specific thing.

How the Scam Actually Works

1. A criminal gains access to an email account belonging to someone in the transaction: an agent, a title company employee, a lender, or the buyer themselves. This is usually done with stolen credentials or a convincing login page.
2. They read quietly for weeks. They learn the names, the property address, the closing date, the tone people use, the signature blocks. They are not in a hurry.
3. Days before closing, they send wire instructions. Correct property address. Correct closing date. Correct names. A logo. A plausible signature block. Sometimes from a lookalike domain with one letter changed, sometimes from the genuine compromised account.
4. The buyer wires. Everything looks right, so they do what they were told.
5. The money is gone within hours, moved through several accounts and frequently offshore. The discovery usually comes when the title company asks where the funds are.

Why It Is So Convincing

Because it is not a generic phishing email. It is written by someone who has been reading your transaction for a month.

• It arrives at exactly the right moment, when you are expecting wire instructions.
• It contains details only an insider would know, including your closing date and the property address.
• It may come from a real address that has been compromised, so nothing looks wrong.
• Everyone involved is busy and the timeline is short. The fraud exploits normal transaction pressure rather than carelessness.

People who fall for this are not foolish. They are people who did what a legitimate-looking email from a legitimate-looking party told them to do at the exact moment they were expecting that instruction.

The One Rule That Stops It

Before sending any money, call the title company on a phone number you obtained independently, and verify the account number and routing number digit by digit.

Every word in that sentence is doing work:

• Call. Voice, not email. Email is the compromised channel.
• A number you obtained independently.From the company’s website that you looked up yourself, from the title commitment you received weeks ago, or from a business card. Never a number inside the email with the instructions, and never one from a signature block in that email. Criminals put their own number there.
• Digit by digit. Read the whole account number and routing number aloud and have them confirm each. A single altered digit is the entire attack.
• Before sending any money. Not after. There is no meaningful recall once the funds land.

Two additional protections worth adopting. Save the title company’s phone number in your own phone in the first week of the transaction, so you have it before you need it. And if instructions ever change, treat that as fraud until a phone call proves otherwise, because legitimate title companies essentially never change wire instructions late in a transaction.

The Red Flags

• Any email saying wire instructions have changed. The single strongest signal.
• Urgency.“Send today to avoid delaying closing.” Real closings do not work that way, and pressure is a technique.
• A slightly different sender address. A missing letter, a swapped letter, a different domain suffix. Check character by character rather than glancing at the display name.
• A new phone number in the signature block.
• Instructions to a bank in a state unrelated to the transaction, or a payee name that does not match the title company exactly.
• A request to keep it confidential or not to discuss it with your agent.

If any of these appear, stop and make the phone call. The worst outcome of an unnecessary verification call is two minutes of someone’s time.

Sellers Are Targets Too

Less discussed and equally serious. The seller-side version intercepts the proceeds: a criminal sends the title company fraudulent instructions purporting to come from the seller, redirecting the payout.

Protections if you are selling:

• Provide your wire instructions in person or by verified phone call, not by email.
• Expect the title company to call you and verify. Good ones do. Cooperate with it rather than treating it as bureaucracy.
• Confirm receipt of funds the day of funding. Do not assume.
• Consider a check instead of a wire if the timing allows.

There is also a related fraud worth knowing about: fake sellers listing property they do not own, usually vacant land, and taking a deposit. Title companies catch most of these, which is one of several reasons to use a reputable one. What the title company actually does.

If It Happens: The First Hour

Recovery is possible and it depends almost entirely on speed. Funds are usually moved onward within hours, so the first hour is worth more than the next three days.

1. Call your bank immediatelyand request a wire recall. Use the words “fraudulent wire transfer” and ask for their fraud department directly.
2. File a complaint with the FBI’s Internet Crime Complaint Center, which maintains a process specifically for rapidly freezing fraudulent domestic wire transfers.
3. Call the receiving bank if you have its details, and report the fraud.
4. Notify the title company, your agent and your lender, so the transaction can be managed and so others in the chain can check whether their systems are compromised.
5. File a report with local law enforcement.
6. Preserve everything. Emails with full headers, the instructions, phone records.

Do all of that within the hour. It is genuinely the difference between recovery and loss, and it is worth reading this section once now so that you are not learning it while panicking.

The prevention is so much cheaper than the cure that it is worth restating one last time: call a number you already had, and confirm the digits, before you send anything. The rest of the closing checklist.