24/05/2016
BE VERY CAREFUL TO DOUBLE CHECK EVERYTHING WHEN WIRING FUNDS....Picture this: Wire transfer instructions are emailed to the buyer. The buyer complies with the instructions to the letter. The next day, escrow contacts the buyer asking if the money has been sent yet. The buyer checks with his bank and is assured that the funds have been transferred out. When the money has still not shown up, everyone begins to retrace steps. As it turns out, the wiring instruction was bogus. The email came from an address that looked very much like that of the escrow or title company, but it was not actually theirs.
And the recipient bank account? It was real; it just wasn’t the correct one. And, yes, it has been emptied out by now.
The scheme has been perpetrated by hackers, and it has been going on around the country for a while now. Here's how one alert describes the process:
First, hackers identify the email accounts of real estate agents and brokers. (Not a hard thing to do with real estate ads and messages all over the internet and social media.) Then they hack directly into the accounts “and identify emails referencing pending real estate deals. From these strings of emails, the hackers pull out specific details about the deal, such as: (a) the parties’ names, (b) the title company involved, (c) the escrow officer in charge of the deal, and (d) other information specific to the transaction.”
Then the bad guys sit back and keep track of the transaction's progress. As it gets near to closing, they send fraudulent email “directly to the buyer or lender, making it look like it was sent by the real estate agent, mortgage broker, or escrow agent. These fraudulent emails now direct the buyer and/or lender to wire the funds necessary to close escrow directly to a different bank account than the one provided in the preliminary report or in the escrow instructions. Obviously, this new bank account is controlled by the hacker, not the title company or the escrow holder.”
If the buyer, or the lender, does not detect the fraud, “the money is wired to the bogus account controlled by the hacker and is immediately withdrawn, never to be seen again."