Cyber Security - Protect Your Real Estate and Mortgage Transaction

Protecting Yourself From Real Estate Cyber-fraud

Sensitive information plays a critical role in your real estate transaction, and it’s imperative that this information remains safe and protected. Aiello & Associates strives to provide consumers with peace of mind in knowing that their personal, nonpublic sensitive information is protected.

As a consumer, there are steps you can take to protect yourself from cyber-fraud:

Recently, there has been a wave of cyber-fraud. Cybercriminals hack into the email accounts of real estate agents or other persons involved in real estate transactions. These “hackers” are patient; they sit and wait until they discover useful information to assist in the scam and trick you into sending money through a wire transfer to a bank account that appears to be legitimately owned by a party involved in the transaction (but is not).

The hackers send an email that appears to be from an individual involved in the transaction (a practice called spoofing). At first glance, these spoofing email addresses appear legitimate but often have one additional letter or some other minor variation from the actual email address


For example: Agent@AgentOfffice.com instead of Agent@AgentOffice.com


These spoofing emails advise the recipient (often the buyer) that there has been a last-minute change to the wiring instructions and request that funds be sent to the new account information provided. By following these instructions, the funds are inadvertently wired to the hacker’s account and, most often, lost forever.

  • Recognize common indicators of cyber-fraud

    Recognize common indicators of cyber-fraud:


    • Emails requesting last-minute changes to wiring information (e.g., particularly changes in the beneficiary and/or receiving bank)
    • Requests for wire transfers late in the day or week or outside of business hours
    • Emails with poor grammar and/or typographical errors
    • Slight, typically unnoticeable-at-first-glance changes in the email address

  • Suggested best practices for transmitting and receiving sensitive information

    Suggested best practices for transmitting and receiving sensitive information:


    • Send emails with sensitive, personal information, through encrypted email only.
    • Verify requests to change wiring instructions through a trusted method (like a phone number previously verified); never use a phone number in the email.
    • Verify wire transfer requests to locations outside normal business areas.
    • Never click on any links in an unverified or unexpected email.
    • Always question attachments and links that are sent unencrypted.

  • What to do if you believe you are a victim of cyber-fraud

    What to do if you believe you are a victim of cyber-fraud:


    • If money was wired in response to fraudulent wiring instructions, immediately call all banks and financial institutions that could put a stop to the wire of your funds.
    • Contact your local police or local municipalities’ real estate fraud division.
    • Contact any other parties who may have been exposed to the Cyber-Fraud so that appropriate action may be taken.
    • Change all usernames and passwords associated with any account that you believe may have been compromised.
    • Report any cybercrime activity to the: Federal Bureau of Investigation Internet Crime Complaint Center.

    https://www.ic3.gov/

Buying and selling a home is an exciting time, but there can be pitfalls for unsuspecting consumers. Be aware that cyber criminals may be scheming to steal your personal information and your money.

When you buy a home, you'll be required to submit personal information to your lender and/or settlement or escrow agent. This information may include social security numbers, bank account numbers and credit and loan account numbers. Unfortunately, would-be fraudsters sometimes attempt to steal personal information and even money through real estate transactions.

5 Tips to Protect Yourself

  1. Always carefully examine the email address from which you receive updates on your transaction from your real estate agent, loan agent, escrow officer or settlement agent to verify it is correct. If an email seems suspicious, notify your real estate agent, loan agent or settlement agent immediately.
  2. Call instead of email. Use the phone number on the company's official website or business card. Don't trust the phone number included in the email.
  3. Be suspicions of any requested change to wiring instructions. It's highly unusual for your title or escrow company to request any last-minute changes.
  4. Confirm the account information before sending. Ask your bank to verify the account information before sending a wire.
  5. Verify funds immediately. Call your title or escrow company to verify the funds have been received.

What to do if you think you have been targeted?

Source: FBI