A wire fraud warning notice is a short written document a title company, real estate agent, closing attorney, or lender gives a client before any funds move, telling the client exactly how to verify legitimate wiring instructions and promising that the firm will never change bank details by email. To be useful, it has to name a specific person to call, give a verified phone number, state a no-change policy, require a callback before every wire, and get into the client’s hands at the start of the engagement rather than on closing day. Business email compromise accounted for nearly $2.8 billion in reported losses in 2024, and the FBI’s Internet Crime Complaint Center logged more than $275 million in real estate-related fraud from over 12,300 victims in a recent reporting period.1Nacha. FBI’s IC3 Finds Almost $8.5 Billion Lost to Business Email Compromise in Last Three Years2National Association of REALTORS®. Online Real Estate Fraud Climbed to $275M in 2025, FBI Says
What the Notice Must Contain
Vague language about “being careful” does nothing. A notice earns its keep only when it gives the client a specific action to take before sending money. Five elements belong in every version:
- A named verification contact. Identify one person, with a backup, whose job is to confirm wiring instructions by phone. Include a landline the client can verify independently, not a number pulled from an email.
- A no-change policy. State that wiring instructions will not change once the transaction begins. Anything claiming otherwise is fraudulent.
- Approved communication channels. List the exact email domains the firm uses. A domain off by a single character is the most common trick.
- A callback requirement. Tell the client to call the verification contact at a previously known number before initiating any wire. Every time, no exceptions.
- Consequences of skipping verification. Explain that the firm cannot recover funds sent to a fraudulent account if the client did not follow the verification steps.
The reason the number should be a landline is port-out fraud. Criminals contact a mobile carrier, impersonate the account holder, and redirect the phone number to their own device. Once they control the number, they can intercept calls and two-factor authentication codes meant for the real person.3Federal Communications Commission. Port-Out Fraud Targets Your Private Accounts An office landline is far harder to hijack.
Sample Language You Can Adapt
Below is template language. Replace the bracketed fields with your firm’s information. Keep the phrasing blunt. This is not the place for legal subtlety.
Header and Primary Warning
Open with a bold heading reading WIRE FRAUD WARNING. The first paragraph carries the single most important instruction:
Criminals routinely hack email accounts and send fake wiring instructions that look legitimate. Never wire money based on instructions received by email, even if the email appears to come from [Firm Name]. Before sending any funds, call [Verification Contact Name] at [Verified Landline Phone Number] to confirm every detail. Use a phone number you have verified independently, not one provided in an email.
The American Land Title Association recommends similar phrasing for email signature lines: “If you receive an email containing Wire Transfer Instructions, DO NOT RESPOND TO THE EMAIL! Instead, call your escrow officer/closer immediately, using previously known contact information and NOT information provided in the email, to verify the information prior to sending funds.”4American Land Title Association. Sample Wire Fraud Warnings You Can Use
No-Change Clause
The middle section draws a hard line:
[Firm Name] will never send you new or updated wiring instructions by email, text message, or any other electronic communication. The bank account information provided at the start of your transaction is the only valid account. If you receive a message of any kind directing you to send funds to a different account, it is fraudulent. Contact [Verification Contact Name] at [Verified Phone Number] immediately to report it.
This clause matters because the most common attack is a spoofed email that arrives hours before closing with “updated” routing numbers. When the notice has already told the client this will never happen, the scam email contradicts a rule the client has read and signed.
Acknowledgment and Liability Statement
Close with language about what happens if the client skips the verification steps:
[Firm Name] bears no responsibility for funds transferred to a fraudulent account when the sender did not follow the verification procedures described in this notice. Wire transfers are generally irreversible. By signing below, you acknowledge that you have read and understand this warning.
Add a signature line with the client’s name, printed name, and date. Whether this operates as a true liability waiver depends on your jurisdiction and the specific facts, so consult your own counsel before relying on it to shield against negligence claims. The notice is strongest as evidence that the client was warned, not as a guaranteed legal shield.
How to Deliver It So Clients Actually Read It
A warning buried in a closing packet the client never opens is barely better than no warning at all. Delivery matters as much as content.
Send It as a Standalone Document at Engagement
The full notice should reach the client as a separate document at the start of the relationship, attached to the engagement letter, representation agreement, or opening escrow instructions. Sending it as its own PDF, rather than embedding it on page 47 of a packet, forces the client to open and read it. Require a signed acknowledgment before the transaction moves forward. Waiting until closing day defeats the purpose, because wiring instructions often go out days or weeks earlier.
Add a Short Version to Every Email Signature
The National Association of Realtors recommends a condensed version of the warning in the firm’s email signature, while stressing that the signature alone “should not serve as a substitute for educating your clients and other participants in your real estate transactions about email wire fraud.”5National Association of REALTORS®. Wire Fraud Email Notice Template A short, bold-text reminder in every outgoing email keeps the risk visible throughout the transaction. ALTA’s sample footer runs one or two sentences, which is enough to trigger a callback habit without being ignored as boilerplate.4American Land Title Association. Sample Wire Fraud Warnings You Can Use
Post It in a Secure Client Portal
If the firm uses a secure portal with login and multi-factor authentication, posting the notice and all wiring instructions there adds a layer of protection. A portal makes it harder for a hacker who has compromised an email account to intercept or alter the warning, and it creates an auditable record showing when the client accessed the notice.
Reinforce It Verbally
Mention the risk on the first phone call or at the first meeting. People absorb warnings better when they hear them from a person, not just a document. A brief line like “We’ll never change our wiring instructions by email, and here’s the number you’ll call to confirm them” takes thirty seconds and sharply raises the chance the client follows the callback procedure.
What the Notice Does Not Do
Having a signed notice in the file does not automatically shift liability or guarantee insurance coverage. Many cyber liability policies are claims-made and reported, with notice windows as short as thirty days from the moment the firm first suspects something has gone wrong, and most exclude incidents the firm already knew about before coverage began.6Alliant National Title Insurance Co. When Wire Fraud Happens, Your Cyber Policy Clock May Already Be Running Many errors and omissions policies also contain exclusions for losses stemming from unauthorized access to computer systems, which courts have applied to hacked third-party emails that redirected a wire, and most include consent-to-settle clauses that let the insurer deny coverage if the firm reimburses the client without written approval first.7Wiley Rein LLP. No Coverage for Loss in Consequence of Social Engineering Fraud Review both policies now, before an incident, and know exactly where notice has to go and how fast. The warning notice supports a due-diligence argument. It does not replace the policy’s own rules.
If a Fraudulent Wire Goes Out Anyway
Speed is everything. Wire transfers settle quickly, and once the money leaves the receiving bank, recovery becomes very hard. If a client suspects a fraudulent transfer:
- Call the sending bank immediately and ask them to initiate a recall or reversal. Banks can sometimes freeze funds if they act within hours.
- Call the receiving bank, if known, and request a hold on the account.
- File a complaint with the FBI’s Internet Crime Complaint Center at ic3.gov. IC3 coordinates with financial institutions and law enforcement to attempt recovery.8FBI. Common Frauds and Scams
- Notify the firm’s cyber and E&O insurers. Do not wait for the situation to stabilize.
- Preserve every email, text, and call log tied to the transaction. These records are essential for law enforcement and any insurance claim.
Early reporting gives law enforcement the best chance of tracing and freezing stolen funds, which is the practical reason to tell clients up front that the callback is not a formality.