Planning & Execution

Wire Fraud Prevention for 1031 Exchanges

1031 exchanges involve large wire transfers, making them prime targets for fraud. Hackers impersonate real estate professionals to redirect millions. Here's how to protect yourself.

Written by Top1031 ResearchPublished Updated 7 min read
Key takeaway

Wire fraud in 1031 exchanges is a growing and sophisticated threat: criminals break into the email of an agent, QI, or title company and send fake wiring instructions to redirect the proceeds, with the average loss running into six figures. The defense is to confirm every wiring instruction by phone using a number you already had, to distrust email-only instructions, and to send sensitive details only over encrypted channels.

The proceeds from a 1031 exchange often run from several hundred thousand to several million dollars. For a stretch of days that money moves between people who may never have met, on a deadline, and almost entirely by email. That makes it close to an ideal target for wire fraud, and when a criminal pulls it off, the money rarely comes back. The defense is unglamorous: confirm by phone before you send, every time.

Why 1031 exchanges draw wire fraud

The size of the prize is only part of what makes these deals attractive. The exchange runs on a clock. The 45-day and 180-day deadlines keep everyone focused on hitting dates, which is exactly when a last-minute change to bank details slips through without a second look. The cast is large: a typical exchange involves the investor, the qualified intermediary - the QI, the firm that holds your sale proceeds between the two closings - plus a title company, real estate agents, lenders, and attorneys. Each one's email account is a possible way in, and a single compromised inbox can expose the whole transaction. Often the investor is working with the QI for the first time, so there is no baseline for what a normal message looks like and an odd one is easy to miss. And so much of the coordination happens over email that an attacker has a quiet place to watch, learn the details, and impersonate.

How the scam usually unfolds

  1. An attacker breaks into the email account of one party, usually through phishing or stolen credentials.
  2. They monitor the account for closing notifications and wire-instruction exchanges.
  3. Shortly before closing, they send an email from the hacked account, or from a near-identical lookalike address, carrying "updated" wiring instructions that route to their own account.
  4. The email includes accurate transaction details - property address, sale price, the parties' names - so it reads as legitimate.
  5. The recipient wires the funds to the fraudulent account.
  6. Within hours the money is moved to another bank, converted to cryptocurrency, or sent overseas. Recovery rates are very low.

The pre-close checklist

Work through every item before any wire goes out. Print it and keep it with your closing file.

Verify the wiring instructions

Lock down communication

Control who can move money

Confirm after sending

If you think a wire has gone to a criminal

Act now. Hours matter.

  1. Call your bank using the number on your card, not one from an email. Describe the suspect wire and ask for an immediate recall or hold.
  2. File a complaint with the FBI's Internet Crime Complaint Center (IC3) at ic3.gov, with all transaction details, email addresses, and account numbers.
  3. Contact your local FBI field office for direct help.
  4. Notify your QI, title company, and everyone else involved. Their systems may be compromised.
  5. Send no further wires until the situation is fully investigated.
  6. Save everything: the fraudulent email, your wire confirmation, bank records, and all related messages.

Recovery is most likely when the money went to a domestic account and your recall request reaches the receiving bank before the funds move on. Speed is everything.

What a careful QI or title company already does

Before you hire a QI or title company, ask how they prevent wire fraud. Careful firms:

  • Verify every disbursement instruction by phone callback to numbers already on file
  • Require two people to authorize an outgoing wire
  • Use encrypted email and secure portals for sensitive documents
  • Train staff to spot phishing and business email compromise, where a scammer poses as a trusted contact to trigger a transfer
  • Carry cyber-liability insurance

A QI or title company without specific, documented anti-fraud procedures is a gap worth raising before you go further. For more on vetting a QI, see the QI fund-safety guide and the guide to choosing a QI.

The one rule behind every step

Every item on this page comes down to one habit: never wire money on email instructions alone, and always confirm by phone using a number you already have on file. It takes about five minutes, set against the sums moving through the exchange. Make it non-negotiable for every wire, in every transaction.

The bottom line

An email that looks legitimate can still be a fake. Every wire needs a phone confirmation with someone you already know, using a number you already have. That single step breaks the method behind these scams.

Quick answers

Frequently asked questions

How do wire fraud scams work in 1031 exchanges?

Criminals break into the email account of a real estate agent, QI, or title company and send messages with fake wiring instructions. The victim wires the money to the criminal's account instead of the legitimate party's. Recovery is hard because the funds are usually gone fast, moved to another bank, converted to cryptocurrency, or sent overseas.

What should I never do with wiring instructions?

Never wire money on email instructions alone, even when the email looks like it came from a trusted source. Never click links in emails telling you to wire funds. Never send wire details by email.

How do I verify wiring instructions safely?

Call the person requesting the wire using a number you already have, not one from the email. Confirm the instructions out loud. After sending, call again to confirm the money arrived.

What if I suspect fraud?

Contact your bank immediately with every detail of the suspect wire and ask for a recall or hold. File a report with the FBI's Internet Crime Complaint Center (IC3) at ic3.gov. The sooner you report, the better the chance of recovery.

Can wiring instructions be verified through secure portals?

A portal can help, but phone verification is more reliable. If you use one, call to confirm the portal itself is legitimate and the account you're seeing is real.

The live marketBrowse current DST offeringsCompare active offerings identified through public SEC filings and documented sources. Browse active DST offerings