The Threat of Wire Fraud Is Real | From NAR

May 23, 2016

Key Takeaways

A hacker hacked into an agent's email account, monitored a current transaction, and started communicating with the client as if they were the agent. They asked the client to "email rather than text" because "I will be in meetings all day" or in "open house shows all day" and can't respond via phone or text.
The client wired $20k to the hacker for "an additional refundable binder deposit" that the title company was supposedly asking for.
The account it was wired to is in Aurora, CO.
Upon completing the first $20k the hacker then asked for an additional $50k. This is when the client contacted the agent and the fraud was discovered.
The hackers accessed her account from computers in California (various locations spanning from San Francisco to Los Angeles).

When NAR General Counsel Katie Johnson asked a group of real estate professionals whether they or someone they knew had clients that were victims of wire fraud, more than one-third of the audience at the Idea Exchange Council for Brokers raised their hands.

Johnson laid out the top legal friction points currently facing practitioners during the REALTORS® Legislative Meetings & Trade Expo in Washington, D.C. last week. Wire fraud topped the list as a sophisticated scam causing consumers to lose millions of dollars each year.

Hackers are gaining access to e-mail accounts through captured passwords, and they’ll search inboxes for messages related to real estate transactions, Johnson said. Once they find a victim who’s in the process of buying a home, they’ll send a spoof e-mail that looks like it’s from their agent, title representative, or attorney, and it will say there are “new” wiring instructions, which includes a fraudulent account. The home buyer will then unwittingly wire funds directly into the hacker’s account, Johnson said.

“Once they send it, the money is gone,” she added. “Millions of dollars are lost on this.”

Jessica Edgerton, NAR associate counsel, presented suggestions during the Professional Standards Forum & Committee Meeting to help clients avoid falling victim to wire fraud.

“The more we raise awareness of these scams, the more red flags consumers will recognize,” Edgerton says.

6 tips for keeping the transaction secure:

Build a standard warning about wire scams into your e-mail signature or include a disclaimer at the bottom of your e-mails that says you will not discuss personal financial information over e-mail.
At the beginning of every transaction, tell clients what your communication practices are.
If you or your agents do engage in a wire transfer with a client, call them on the phone immediately prior to the transfer of funds so they know they’re sending money to the legitimate source.
You and your clients should avoid free Wi-Fi with no firewall to protect against hackers capturing an e-mail password or other sensitive information.
Always use strong passwords and change them regularly; advise your clients to do the same. It also wouldn’t hurt for your client to change their password before wire instructions are sent.
Brokers should consider employing a staff person who’s responsible for monitoring, updating, and implementing information security systems and procedures at your company.

“We can implement every technical safeguard we can think of, but if our people [agents and staff] aren’t following protocol, it’s like leaving the door to the citadel wide open,” Edgerton says.

The video below will also help educate your clients on the threat of wire fraud. Feel free to embed this video on your website or share it with your clients via e-mail or on social media.