Wire Fraud Prevention for Title Agents: Protecting the Business, Not Just the Closing
Wire fraud prevention for title agents is not just about warning homebuyers to call before they wire money. It also means protecting the agency’s own outgoing wires. Every payment to an underwriter, a payoff lender, or another title company is a target.
Most wire fraud content is written for the consumer side of the desk. It tells buyers to verify instructions by phone before they send funds. That advice is good, but it skips half the risk.
The other half is the agency itself. Title companies move money constantly between business counterparties, not just from buyers at closing. Each of those transfers can be spoofed the same way a buyer’s wire can. This guide covers that side: verifying outgoing business wires, locking down the email accounts that originate them, and building the written procedures ALTA and lenders expect to see.
Wire Fraud Is a B2B Problem, Not Just a Consumer One
A title agency sends and receives wires constantly, and not only at closing. Every one of these relationships is a spoofing target:
- Underwriters, for premium remittance and escrow reconciliation
- Payoff lenders, when an existing mortgage needs to be satisfied
- Other title companies, on split-closing or co-insured deals
- Vendors, including settlement software providers and outside counsel
A criminal who compromises an underwriter’s email account can send payoff instructions that look completely routine. Nobody at the title agency has to make a mistake at closing for that fraud to work. The fraud happens entirely on the business side, between two companies that trust each other’s email.
This is a different scheme from seller impersonation fraud. Seller impersonation targets the property’s ownership records, usually to hijack the sale of vacant or free-and-clear land. Wire fraud targets the funds-transfer instructions themselves, on any transaction, at any point money moves. An agency can have strong protections against one and still be wide open to the other.
How Often Title Agencies Actually Get Targeted
The targeting rate is high, but the success rate is much lower, and that gap is the whole point of prevention.
ALTA’s 2021 Wire Fraud and Cyber Crime Survey polled nearly 550 title agents. It found that criminals attempted wire fraud in about a third of all real estate transactions. Only around 8% of those attempts actually succeeded.
Title professionals were targeted for wire fraud in roughly one out of every three transactions, but only about 8% of those attempts succeeded, according to ALTA’s 2021 survey of nearly 550 title agents.
It is the result of agencies that verify instructions before money moves, and agencies that don’t. Prevention controls are the difference between “targeted” and “a headline.”
Where Wire Fraud Meets Business Email Compromise
Wire fraud against title agencies rarely happens in isolation. It is usually one symptom of a compromised or spoofed email account, which the FBI tracks under a broader category called business email compromise (BEC).
The FBI’s Internet Crime Complaint Center (IC3) names real estate transaction targeting as one of five recognized BEC variants. It is not a rare edge case. It is a named, tracked category of fraud with its own growth trend.
Losses grew faster than the number of reports. That points to fraud getting more targeted and more expensive per incident, not just more frequent. An agency’s own email security, not only its wire-verification habits, is part of the prevention picture.
What ALTA’s Own Tools Say to Do
ALTA does not leave title agencies to figure this out alone. It publishes a named Outgoing Wire Preparation Checklist for exactly this problem.
The checklist walks staff through separate verification stages before any outgoing wire is released. The core mechanism across all of them is out-of-band verification. That means confirming any new or changed wiring instructions by phone. The number has to come from a source the agency already trusts, never from the email itself.
That last detail is where most agencies get it wrong. A fraudster who spoofs an email will often include a “confirmation” phone number right in the message. Calling that number does not verify anything. It just calls the fraudster back. Real verification means pulling the number from a prior file, a signed agreement, or a known company directory instead.
ALTA also maintains a separate, named Rapid Response Plan for Wire Fraud Incidents, for when a fraudulent wire has already gone out. That plan is about speed after the fact, not prevention beforehand, and it deserves its own full walkthrough rather than a summary here.
What Title Companies Are Actually Spending on Prevention
Prevention doesn’t require a big budget. It requires the right tools, used consistently.
ALTA’s February 2025 cybercrime study surveyed 360 title companies on 2023 data. It found real numbers behind what agencies actually use to fight wire fraud.
| Mitigation Tool | Adoption Rate Among Surveyed Title Companies |
|---|---|
| Wire or payee verification software | 48% |
| Phishing simulation training | 26% |
That same study found annual spend on these tools ranged from $1,000 to $25,000 across the companies surveyed. Most agencies don’t need an enterprise security budget to close this gap. They need the specific tools proven to work, and staff trained to use them on a regular schedule.
Out-of-Band Verification: The Core Control
One habit stops more fraud than any other tool on this list. Verify by phone, using a number you already had on file. Never use a number pulled from the email itself.
This works because criminals can spoof an email perfectly. They cannot spoof a callback to a number the fraudster never had.
Build it into a simple, repeatable process:
- Any new or changed wiring instructions trigger a verification call before funds move.
- Staff call the number on file from a prior deal or signed agreement, never a number in the email.
- If the instructions came from a business counterparty, confirm with a known contact there by phone.
- Document the verification call, including who called and when, before releasing the wire.
Skip this process even once. The checklist becomes a formality instead of a control.
If a Fraudulent Wire Goes Out Anyway
Prevention fails sometimes, even with good controls. When it does, speed decides whether the money comes back.
The first hours after a fraudulent wire matter more than anything that happens later. That full playbook lives in Wire Transfer Fraud Recovery: What to Do in the First Hours. This guide covers prevention, not recovery, so those steps aren’t repeated here.
How This Fits ALTA Best Practices Pillar 3
Wire fraud prevention isn’t a standalone project. It’s one piece of a larger framework ALTA already expects title agencies to follow.
ALTA Best Practices Pillar 3 covers three connected pieces:
- A written information security program (WISP) that names wire verification as a required control
- Multifactor authentication (MFA) on email accounts, which stops most account takeovers before they start
- Vendor management, the practice of tracking which counterparties you trust and how you verify them
Wire fraud prevention sits inside all three. A strong WISP requires the out-of-band verification habit above. MFA protects the inboxes that originate wire instructions. Vendor management is what makes calling a known number possible in the first place.
For the full Pillar 3 build-out, see ALTA Best Practices Pillar 3: A WISP Guide for Title Agencies.
See Where You Stand
Not sure where your agency’s WISP, MFA, and vendor management stand against Pillar 3? Answer a few plain-English questions. Get your readiness level and the specific gaps to close. No sign-up needed to see your result.
Take the free 2-minute ALTA Best Practices Pillar 3 risk-check
Related Guides
- ALTA Best Practices Pillar 3: A WISP Guide for Title Agencies
- Seller Impersonation Fraud: What Title Companies Need to Know
- Wire Transfer Fraud Recovery: What to Do in the First Hours
- CEO Fraud and Wire Transfer Scams: How They Work
Frequently Asked Questions
No, they are different schemes. Wire fraud targets the instructions that move money, usually through a spoofed or hijacked email account. Seller impersonation fraud targets the property’s ownership records instead, often to hijack the sale of vacant or free-and-clear land. An agency needs separate controls for each.
The core method is out-of-band verification. Staff call a phone number they already had on file, never a number supplied in the email itself. Any new or changed instructions trigger this call before funds move. Many agencies now pair this habit with dedicated wire or payee verification software.
It’s a named tool ALTA publishes to guide staff through verifying outgoing wires before release. It walks through separate verification stages, with an out-of-band phone call as the core step. Title agencies use it as a repeatable, documented process rather than an informal habit.
Yes, that risk is real. It’s a major reason agencies build formal verification processes in the first place. Whether liability lands on the agency often depends on whether it followed a documented, reasonable process. A written procedure that staff actually follow is both a fraud control and a legal defense. [UNVERIFIED: exact liability outcomes vary by state; confirm specific exposure with legal counsel.]
Get Your Agency’s Wire Controls Reviewed
Wire fraud prevention works best as part of a broader security program built for title agencies. LeadingIT provides managed IT and compliance services for title and settlement companies. They cover email security, MFA, and vendor management, the exact pieces this guide describes.
If you want a second set of eyes on your setup, book a call or contact us. We’ll walk through where your agency stands today.
Want our cybersecurity insights first? Add LeadingIT as a preferred source on Google and see more of our guidance in your results.
