Wire Fraud Is Coming for Your STR Closing and the Confirmation Call Will Not Save You

The FBI’s 2025 Internet Crime Report recorded $275,110,419 in reported real estate fraud losses across 12,368 complaints, and the Bureau now states plainly that criminals use AI voice cloning to request wire payments. Which means the one safety habit most buyers actually practice, calling to confirm wiring instructions before they hit send, no longer proves anything by itself.

I have spent enough of my career reading closing files to know that the scariest document in a real estate transaction is never the one with the notary seal on it. It is the ordinary email. Nobody reads an ordinary email twice.

During my time clerking for Judge Morrison I watched a lot of commercial disputes turn on which party had the worse afternoon three months earlier. Wire fraud cases have that quality. One unremarkable Wednesday, one attachment, and the rest is litigation.

If you buy short-term rentals, and particularly if you buy them in a state you do not live in, you sit in the exact profile these criminals are built to hunt. Not because you are careless. Because your transaction is remote, your closing team is a set of email signatures, and your down payment moves in one large chunk on a deadline.

The Numbers, and Why They Understate the Problem

Start with the FBI’s 2025 Internet Crime Report, which is the closest thing this problem has to an official scoreboard. Across all crime types, the Bureau took 1,008,597 complaints in 2025 reporting $20.877 billion in losses, a 26 percent increase over 2024.

The “Real Estate” category accounted for 12,368 of those complaints and $275,110,419 in losses. Divide it out and the average reported loss lands around $22,244.

Here is the part that matters more. That real estate line item is not where most closing wire fraud gets counted. Business email compromise (the FBI’s term for a criminal impersonating a trusted party over email to redirect a payment) is its own category, and in 2025 it produced 24,768 complaints and $3,046,598,558 in losses. That is an average reported loss of roughly $123,005 per complaint, and it was the second most damaging crime type in the entire report.

The overlap is not something I am inferring. The FBI’s own recovery unit labels these incidents “BEC/Real Estate” in its case data. So when you read that real estate fraud cost victims $275 million last year, understand that closing-table wire fraud is scattered across two categories, and the bigger one is measured in billions.

On the AI question, the report is specific. IC3 received 22,364 complaints in 2025 involving AI, with adjusted losses over $893,346,472. In its section on how AI gets used in fraud, the Bureau writes that chat generators can produce official-sounding emails containing directions to wire funds, and that “voice cloning can also be used to request wire payment.” Businesses reported over $30 million in losses to BEC schemes with an AI component in 2025 alone.

Why Remote STR Buyers Are the Softest Target in the Transaction

A local buyer purchasing a primary residence usually meets somebody. They sit across a desk from a closing agent, shake hands with a lender, and have a face attached to a name before money moves.

Now consider how you probably bought your last short-term rental. You toured it on video or sent an inspector. You e-signed everything. Your entire closing team exists to you as a set of email threads and a couple of calls with people whose voices you would not recognize in a crowded room. That is not a criticism of remote investing, it is how the business works now. But it removes the informal identity checks a traditional closing has baked in without anyone thinking about them.

There is a second problem. Investment closings involve more moving parties than a typical purchase: a listing agent, a buyer’s agent, a title or escrow officer, sometimes a separate closing attorney, a DSCR lender you have never worked with before, occasionally an entity formation attorney if you are closing into an LLC. Every additional participant is another email domain a criminal can spoof, and another person whose voice can be sampled from a podcast appearance or a marketing video.

Third, and this one is uncomfortable: investors close fast and close repeatedly. Speed is your competitive advantage in this business. It is also the thing that makes a last-minute “our wire instructions changed, we need this by 3pm” email feel plausible instead of insane.

How the Scam Actually Runs

The criminal does not break into a bank. He reads your email, or your agent’s, or the title company’s, and he waits.

Access usually comes from a phishing email or a reused password at one of the many parties to the deal. Once inside a mailbox, the intruder does nothing for days or weeks. He reads. He learns the closing date, the wire amount, the names, how your escrow officer signs off her emails.

Then, shortly before funding, you receive wiring instructions. They look right because the criminal has seen the real ones. The sending address is off by a character or two, or it is genuinely the real address if the mailbox itself is compromised, in which case nothing about the message is wrong at all.

Picture this: you are closing on a duplex in Gulf Shores from your kitchen table in Ohio. Wednesday afternoon, an email arrives from your escrow officer with a PDF of wiring instructions and a friendly note apologizing for the change, something about the firm’s bank consolidating accounts. You are a careful person. You call the number in the email signature. A woman answers, sounds exactly like the escrow officer you spoke with last week, confirms the change, and apologizes again. You wire $187,000. On Friday the real escrow officer calls to ask where the money is.

The FBI’s report documents cases with this shape. In March 2025, a Missouri senior citizen closing on a property received a compromised email from the “title company” carrying wire instructions for over $1.3 million to a fraudulent account. When the Bureau’s recovery team froze that account, it found wires from additional victims already sitting in it. In August 2025, a buyer closing on a home received an email impersonating their own attorneys and wired over $449,000.

The Confirmation Call Is No Longer Proof

For roughly a decade, the standard advice was to call and confirm. That advice was correct, and it is still necessary, but the second half of it has quietly become the whole thing.

The FBI issued a public service announcement on May 15, 2025 about criminals using AI-generated voice messages to impersonate people the target already trusts. The Bureau’s language is blunt: “AI-generated content has advanced to the point that it is often difficult to identify.”

So a phone call confirms nothing about who is speaking. What a phone call still confirms is which number you dialed. That is the entire security value now, and it means the number has to come from somewhere the criminal could not have touched.

The American Land Title Association, the trade body for title insurers and settlement agents, publishes an Outgoing Wire Preparation Checklist and a Rapid Response Plan for wire fraud incidents. On its consumer site, the guidance is stated in one line worth memorizing: “Confirm your wiring instructions by phone using a known number before transferring funds.” Known number. Not the one in the email, not the one in the PDF letterhead, not the one the caller ID displayed.

How to Verify Wiring Instructions the Right Way

None of this is complicated. It is just tedious, and tedium is the point.

Get the phone number at contract, in writing, on paper. The day you go under contract, ask your title or escrow officer for their direct line and record it somewhere outside your email. A note in your phone. A sticky note on the monitor. Anywhere a compromised mailbox cannot reach.

Establish a verbal passphrase. The FBI’s own PSA recommends creating a secret word for identity verification with people you communicate with. Agree on one with your escrow officer at contract, over the phone, and never put it in an email. When you call to confirm the wire, ask for it. A cloned voice can say anything, but it can only say what the criminal knows.

Treat any change in instructions as fraud until proven otherwise. ALTA’s consumer guidance says it directly: it is uncommon for title companies to change wiring instructions and payment information by email. If it happens, your default assumption should be that you are being robbed, and you should be pleasantly surprised to learn otherwise.

Forward, do not reply. Replying puts you back in whatever thread the criminal is sitting in. Forwarding, with the recipient’s address typed manually, forces you to look at the actual domain. Look-alike domains are the workhorse of this scam.

Ask your bank to confirm the name on the receiving account. If the wire is going to a title company, the account name should be that title company’s escrow account, not an individual, not an unrelated LLC, not a payroll services company in another state.

Send a test wire when the amount is large. Wire $100. Call the known number and confirm receipt. Then send the balance. The cost is a wire fee and one extra business day.

Call to confirm the funds landed. Do it the same day, using the known number. The single biggest variable in whether you get your money back is how fast the freeze request goes out.

Red Flags That Show Up Mostly in Investment Property Closings

Some of these are generic. A few are specific to how investors buy.

Urgency tied to a rate lock or a 1031 exchange deadline is the classic pressure lever, and criminals reading your inbox know your deadlines better than you do at 11pm on a Tuesday. A hard identification clock is a gift to somebody trying to make you skip a verification step.

Instructions routing funds to a bank with no connection to the property, the title company, or you. Escrow money for a Tennessee cabin should not be going to a credit union in a state nobody in your transaction has ever mentioned.

A change in the closing agent or attorney late in the deal, communicated only by email. It happens legitimately. It is also an elegant way to introduce a brand new set of banking details without the awkwardness of “changing” anything.

Any request to wire to an individual’s account rather than an escrow or trust account. There is no legitimate version of this in a normal purchase closing.

Communication that shifts channels without explanation. If your escrow officer has emailed you for six weeks and suddenly wants to handle the wire over text, that is worth thirty seconds of paranoia.

None of this replaces the broader work of vetting the deal itself. If you are still at the diligence stage, our walkthrough of what to check before closing on a short-term rental and the seven legal questions to answer first cover the ground before the money moves.

If You Already Sent the Wire, the First Few Hours Decide Everything

Speed is not a nice-to-have here. It is the whole strategy.

Call your bank immediately, report the wire as fraudulent, and request a recall along with any indemnification documents the bank requires. Different institutions have different policies, and the FBI recommends knowing in advance what yours will do.

Then file a complaint at ic3.gov with full transaction details. This is not paperwork for a file drawer. It is what triggers the Bureau’s Financial Fraud Kill Chain (the FBI’s coordinated process for getting freeze requests to recipient banks before the money is moved onward).

The results are better than most people expect. In 2025 the FBI’s Recovery Asset Team initiated 3,900 kill chain incidents covering $1,163,919,846 in attempted theft and froze $679,013,183 of it, a 58 percent success rate. In the August 2025 closing case, the victims’ attorneys had already tried and failed to reach the recipient bank on their own; the freeze only happened after the IC3 complaint was filed.

Notify the title company and your agent too, because the same criminal is frequently working several closings out of the same compromised mailbox.

Who Eats the Loss

Wire transfers sit outside Regulation E, the consumer protection rule that gives you the familiar limited-liability treatment when someone runs up your debit card. The exclusion is written into the regulation itself at 12 CFR 1005.3(c)(3), which carves out transfers through Fedwire and similar systems. Wire transfers are instead governed by state adoptions of Uniform Commercial Code Article 4A, which is a commercial framework built around banks executing payment orders, not around making defrauded consumers whole.

The practical translation: if you authorize a wire to a criminal, you generally authorized it. Your bank did what you told it to do.

There is some movement at the edges. In the New York Attorney General’s suit against Citibank in the Southern District of New York (docket 1:24-cv-00659), a federal judge allowed claims to proceed in January 2025 on the theory that the consumer-initiated portion of an electronically initiated wire can fall within the Electronic Fund Transfer Act. That is one district court, it binds no other court, and it is a departure from decades of contrary reading. I would not plan a $200,000 wire around it.

Which leaves the fight over who bears the loss as a fact-specific mess between buyer, title company, agent, and their respective insurers, resolved slowly and expensively. Some settlement agents carry cyber coverage or offer wire protection products. Ask what yours has before you need it, not after.

This article provides general information and should not be construed as legal advice. Consult a qualified attorney in your jurisdiction for advice specific to your situation.

We do our best to keep our regulatory guides accurate and up to date, but ordinances change and we are only human. Always verify current requirements directly with your local municipality before making business decisions.

Run the Numbers Before You Get to the Closing Table

Wire fraud is the risk at the end of the deal. The risk at the beginning is buying a property whose numbers never worked. Our free STR Analyzer pulls real market data on any address so you can estimate revenue, occupancy, and expenses before you are the one under deadline pressure at a closing table.

Stay in the Loop

STR regulations change. Tax rates shift. New ordinances pop up with little warning, and so do new versions of this scam. Join the StaySTRA Insider newsletter and we will keep you updated on the changes that actually affect how you operate.