Seller Impersonation Fraud: What Title Companies Need to Know
Seller impersonation fraud happens when a criminal poses as a property’s true owner. They sell it, or borrow against it, then disappear with the closing funds. The scheme relies on stolen identity documents. Title and escrow staff rarely meet the real seller face to face. By the time anyone notices, the wire has already gone out.
This isn’t a rare edge case. It’s a real risk for title agencies and escrow offices of every size. Vacant land and mortgage-free property are the biggest targets, and we’ll get into why below.
You don’t need to be a fraud investigator to catch this. You need to know what the scheme actually looks like, why certain properties draw it, and where it fits alongside the wire fraud and email scams your office already trains for. This page covers the first two. A companion guide covers the technical and process controls that stop it.
How the Scheme Actually Works
The fraud almost always starts with stolen identity documents. The impersonator gets the real owner’s Social Security number and driver’s license number. From there, they build a paper trail convincing enough to pass as the seller through most of a transaction.
Sometimes the fraud goes a step further. The impersonator uses a notary’s credentials without that notary ever knowing to fake the acknowledgment on closing documents. That detail is what makes this fraud so hard to catch on paper. The signatures and stamps can look completely legitimate.
Notarization exists to catch exactly this kind of impersonation. It’s supposed to confirm the person signing is who they claim to be. When a notary’s credentials get used without their knowledge, that safeguard disappears too. Everything downstream, the deed, the closing statement, the disbursement, gets built on a lie nobody in the transaction can see.
Here’s the typical sequence:
- Steal the real owner’s Social Security number and driver’s license number.
- Impersonate the owner through the listing, contract, and closing, sometimes with a notary’s credentials misused along the way.
- Push the deal to close fast, collect the proceeds, and disappear before the real owner ever finds out.
None of this requires sophisticated hacking. It requires patience, a handful of stolen documents, and a title or escrow office that never questions why the “seller” won’t get on a call.
Why Vacant Land and Paid-Off Property Are the Sweet Spot
Fraudsters don’t target every property equally. Vacant land and mortgage-free homes get hit hardest. The reason comes down to who’s watching, and the honest answer is often nobody.
A financed, owner-occupied home has built-in tripwires. The lender expects a payoff statement when the property sells. The owner lives there and would notice a stranger listing it. Vacant and unencumbered property has none of that built-in oversight.
Three things line up to make these properties attractive:
- No lender. Nobody is waiting on a payoff notice or asking questions before funds go out.
- No occupant. There’s no one on-site to notice a for-sale sign, a survey crew, or a closing moving forward.
- Nobody watching. An out-of-state or inherited owner may not check on a vacant lot for months, sometimes years.
That combination is exactly what makes these properties attractive to a fraudster. The deal can move from first contact to closed sale before anyone who’d normally object even knows it happened. A property nobody is actively minding is a property nobody is actively defending.
This is also why the risk doesn’t stay confined to niche land deals. Any mortgage-free property, an inherited house, a paid-off rental, a second home held free and clear, carries the same exposure. If there’s no lender in the loop and no one checking in regularly, it fits the profile fraudsters look for.
How Common Is This Right Now
This isn’t a hypothetical. It’s happening to title companies at scale.
It found 28% had experienced at least one seller impersonation attempt that year. Of those, 16% ended up paying a fraudulent claim.
Vacant land carries this risk disproportionately. The NAR 2025 Deed & Title Fraud Survey found 62% of reported title fraud cases involved vacant land. Only 12% involved owner-occupied homes.
| Data Point | Finding | Source |
|---|---|---|
| Claims paid | 16% of companies with an attempt paid a fraudulent claim | Same ALTA study |
| Vacant land share | 62% of reported title fraud cases | NAR 2025 Deed & Title Fraud Survey |
| Owner-occupied share | 12% of reported title fraud cases | Same NAR survey |
28% of title companies experienced a seller impersonation fraud attempt in 2023, and 62% of reported title fraud cases involved vacant land.
Where Wire Fraud and Business Email Compromise Fit In
Seller impersonation fraud rarely stays isolated. Once a fraudulent sale is moving, criminals often pivot straight to wire fraud.
Cybercriminals attempted to redirect closing funds in about a third of all transactions. Only about 8% of those attempts actually succeeded. That gap shows training and verification work.
Nationally, the stakes are large. Business email compromise alone drove more than $3 billion in losses across all cybercrime types.
| Wire Fraud Metric | Figure |
|---|---|
| Companies that actually wired funds to a fraudulent account | 7% |
ALTA also publishes two practical tools for this exact moment. The Outgoing Wire Preparation Checklist verifies wiring instructions before funds move. It calls for an independently sourced phone number, never one from the email itself. The Rapid Response Plan gives staff a pre-built action plan for the moment fraud is suspected.
Red Flags Your Staff Can Actually Use
Not every red flag means fraud. But a cluster of them should slow the file down.
- Seller communicates only by email and avoids video calls or in-person meetings.
- Price sits below market, paired with insistence on an all-cash buyer.
- Seller pushes hard for a fast close and resists standard verification steps.
- Payoff or mailing address doesn’t match the property or the seller’s history.
Any single item here isn’t proof. Two or three together are worth a second look.
What This Means for Your WISP and Vendor Management
Seller impersonation fraud is a people problem first. It converges fast with your technical controls once a scheme starts moving.
ALTA’s Best Practices Pillar 3 requires a Written Information Security Plan, or WISP, to protect non-public personal information. Our Pillar 3 WISP guide covers the full ALTA Best Practices framework in detail.
Pillar 3’s technical requirements include:
- Multi-factor authentication (MFA) on email and case-management systems
- A documented password policy, with forced resets after any suspected compromise
- Vetting of vendors, contractors, and third-party systems against your own WISP
- Verified notarization workflows that confirm who actually signed
- Staff training on the red flags covered above
- Email authentication (DMARC, SPF, DKIM) to blunt spoofed seller and lender emails
These same controls blunt the business email compromise vector that often follows seller impersonation fraud. Our guide to business email compromise covers that side in depth.
See Where You Stand
Answer a few plain-English questions about your WISP, MFA, and vendor management. Get your readiness level and the specific gaps to close. No sign-up needed to see your results.
Get your free 2-minute ALTA risk check
Related Guides
- ALTA Best Practices Pillar 3: A WISP Guide for Title Agencies
- Business Email Compromise: The Scam Behind Most Closing Fraud
Frequently Asked Questions
Seller impersonation fraud is a scheme where a criminal poses as a property’s real owner. They often use a stolen Social Security number and driver’s license number. The goal is to sell the property, or borrow against it, and steal the proceeds. Sometimes a notary’s credentials get used without that notary’s knowledge. Vacant land and mortgage-free property are the most common targets, since no lender or occupant is watching closely.
Title and escrow staff confirm identity through government-issued ID checks and direct contact with the seller. Video calls work better than email-only contact for catching an impersonator. Staff also verify phone numbers independently, rather than using a number supplied in an email. None of these steps alone guarantees safety. That’s why several are used together.
Coverage varies by policy and by state. Some title insurance policies include enhanced endorsements for certain impersonation or forgery losses. Others don’t include that coverage at all. Agencies should confirm exactly what their own policy covers. Don’t assume seller impersonation fraud is automatically included.
Seller impersonation fraud is about who the criminal claims to be. It’s a fake seller pushing a fraudulent sale toward closing. Wire fraud is about how the money moves. It usually tricks someone into sending funds to the wrong account. The two often overlap. Once a fraudulent sale is moving, the payout is often executed through a wire fraud scheme.
Protect Your Closings With the Right Technical Backbone
Seller impersonation fraud exploits gaps in verification, not gaps in technology alone. But MFA, vendor vetting, and email security give your team the backbone Pillar 3 asks for. LeadingIT builds and maintains that backbone for title and settlement companies across Chicagoland. See our managed IT services for title agencies. Ready to talk? Book a call or contact us and we’ll follow up.
Want our cybersecurity insights first? Add LeadingIT as a preferred source on Google and see more of our guidance in your results.
