There are two different crimes here and it is worth separating them, because agents tend to be briefed on the first and blindsided by the second.

Closing wire fraud targets the money. Someone monitors a transaction, learns the closing date, and sends the buyer new wiring instructions at the last possible moment. The buyer wires their down payment to the criminal.

Seller impersonation targets the property. Someone who is not the owner lists a property they do not own — usually vacant land or a property with no mortgage and an absentee owner — signs a deed as that owner, and takes the proceeds. Nobody's money is redirected. A sale simply happens that should never have happened.

The first is a payment-security problem. The second is an identity problem, and it is the one that has grown.

The numbers, and where they come from

The American Land Title Association's 2026 study found that 59% of title firms reported a seller-impersonation attempt during the year, up from 28% in 2024. 45% reported one in the prior month alone, up from 19%. Reported by HousingWire and WRE News.

The National Association of REALTORS® reports that more than one in five consumers encountered suspicious communications during a closing.

CertifID's State of Wire Fraud 2026 adds three figures worth holding on to: around 60% of title and escrow firms say attempts are increasing; roughly 87% of attempted fraud is caught during curative review — the unglamorous work of examining title and clearing exceptions; and vacant land is the most-targeted property type, at about 82%.

That last pair is the most useful thing on this page. The fraud is caught in title work, not at the signing table, and it aims at land.

Why vacant land

Every feature that makes vacant land easy to sell makes it easy to steal.

Nobody lives there. No tenant, no neighbour who knows the owner, nobody to notice a sign going up.
It is often owned free and clear. No lender, so no payoff, so no institution with a reason to look closely.
The owner is often out of state, sometimes out of the country, and sometimes an heir who has never seen the parcel.
There is no inspection and no appraisal walkthrough in the normal sense — fewer people physically touch the transaction.
It closes fast. A cash land deal can go from contract to recording in under two weeks.

In Utah that is not a hypothetical category. It is a large share of what changes hands outside the Wasatch Front.

What an impersonation attempt actually looks like

The pattern is consistent enough to recognise, and the tells are behavioural rather than technical.

The seller contacts you, unsolicited, by email, and wants to keep it that way. Every attempt to move to a phone call is deflected.
They are always somewhere else. Overseas, travelling for work, caring for a relative — a reason a face-to-face signing cannot happen.
They want a remote notary, and often a specific one, or they produce a notarised document from a jurisdiction that has nothing to do with the property or the stated address.
Cash, and fast. Below market, no financing contingency, a short close, and unusual flexibility on price in exchange for speed.
Documents arrive as images, slightly wrong. An ID that does not quite match the vesting. A signature that does not match the recorded deed.
Urgency at every step, and irritation when anyone slows down.
The proceeds go somewhere unexpected — a different name, a different state, an account that does not match the seller.

Add to this what is now routine rather than exotic: AI voice cloning from a few seconds of public audio, and caller ID spoofing that makes an incoming call display a number you recognise. An inbound call is no longer evidence of anything. An outbound call, to a number you obtained independently, still is. That distinction is the whole defence.

Closing wire fraud: the other half

The money version is older and better known, and it still works because it only has to work once.

Criminals gain access to an email account — an agent's, a buyer's, sometimes a transaction coordinator's — and read quietly for weeks. They learn the names, the tone, the closing date. Then, usually within 48 hours of closing, the buyer receives wiring instructions. The instructions are well written. They reference real details of the real transaction. They arrive from an address that differs from the genuine one by a single character, or from the genuine address itself if the account is compromised. Often they carry a line explaining that the instructions have changed.

Wire instructions do not change. If they appear to have changed, they have not — somebody is lying to you.

The rules that actually prevent it

Short list. It has to be short, because a long one does not get followed.

Never accept wiring instructions by email. Not as a PDF, not in the body, not from a portal link in an email.
Call to verify, on a number you already had. From the signed contract, from the company's website, from your own contacts — never from the email, the letterhead in the email, or the signature block.
Verify before every wire, including the second one. The first can be clean and the second redirected.
Tell your buyer this at contract, in writing, and tell them again the week of closing. Say the sentence out loud: we will never email you new wiring instructions.
Treat a last-minute change of anything — bank, account, beneficiary name, closing time — as a stop, not a step.
On the listing side, meet your seller. In person or on video, early. An agent who has met the seller is the cheapest control in the whole system.
Look at the record. A recent deed, a recent change of mailing address, or an owner who does not match the property's history is worth a question.

What we do on our side

The title agency is not a bystander here. Curative review is where most of this is caught, and that is our work.

We verify seller identity rather than accepting documents at face value, and we escalate when identity and the record do not agree.
We use callbacks to known-good numbers rather than numbers supplied in the correspondence under review.
We do not change wiring instructions by email, and we will not accept a change to yours that way either.
We would rather delay a closing than fund a fraud. If we slow a file down for an identity question, that is the control working, not the file going wrong.

What to tell your client, and when

Most of the defence is a conversation, and the timing of it matters more than the wording. Three moments.

At contract. Put it in writing, in the same message as everything else you send a new client, and keep it short enough to be read:

We will never send you wiring instructions by email, and neither will the title company. If you receive any — including from an address that looks like ours — call us on the number in this message before you do anything. Wiring instructions do not change.

The week of closing. Say it again, out loud, on the phone. This is the window the fraud aims at, and a warning given four weeks earlier has been forgotten. Tell them what the real process looks like so the fake one is recognisable: who will contact them, how, and on what number.

Before the wire goes. One call, from the buyer to the title company, on a number the buyer already had. Not a reply, not a forward, not a number from a document. If your buyer makes exactly one defensive phone call in the whole transaction, this is the one.

For sellers the equivalent is simpler and it falls on the listing side: meet them early, in person or on video, and make sure the proceeds are going to an account in the seller's own name. An agent who has actually seen their seller has closed the door the impersonation walks through.

Why telling your title agency early is the right move

A Utah title agency is not a bystander when a wire goes wrong, and it is not weighing up whether the problem is worth mentioning.

We are licensed and regulated by the Utah Insurance Department, we are appointed by our underwriters, and we answer to both. A suspect wire on one of our files is not an awkward conversation we would rather avoid — it is something we escalate, because escalating it is how it gets recovered and because it is the relationship we have with the regulator and the underwriters that makes us worth using in the first place.

The practical consequence for you is the only part you need: tell us immediately, and tell us before you are certain. An agent who calls with "this might be nothing" gets help. An agent who waits until it is definitely something has usually spent the window in which the money could have been recalled.

If it has already happened

Minutes matter more than anything else on this page. A wire can sometimes be recalled if the receiving bank is reached before the funds are moved on, and that window is short.

Call the sending bank immediately and ask for a wire recall.
Call us immediately, on the office number, and say what happened rather than asking whether it is a problem.
Do not reply to the fraudulent email and do not call any number in it. Both tip off the criminal and both risk giving away more.
Preserve everything. Full email headers, not forwarded copies.

Wire fraud and seller impersonation: what Utah agents need to watch for