Last-Minute Wire Intercept Drains $128,400 From Las Vegas Homebuyer Before Settlement

The Detailed Story

LAS VEGAS, NV — Thirty-six hours before closing, a first-time buyer received an email that appeared to come from the title officer. It used the company’s branding and real file number, but redirected the buyer’s entire $128,400 down payment.

The buyer had been under contract for 45 days. The message claimed the title company had moved escrow operations to a new bank and attached “Updated Final Wiring Instructions,” with a warning that immediate action was required.

The buyer sent the wire at a local bank. The next morning, the real title officer called to ask when the closing money would arrive.

By the time a recall began, the funds had been split among money-mule accounts and moved through digital-asset channels. Investigators identified a look-alike domain that replaced a letter with the numeral “1.”

Key Facts & Victim Impact

• Loss: $128,400 in personal savings and down-payment reserves.
• Timing: The false instructions arrived 36 hours before settlement.
• Attack: A compromised transaction conversation and a nearly identical sender domain.
• Impact: The sale failed on settlement day and federal recovery procedures began.

Critical Red Flags

1. Changed payment details: A digital message modifies account or routing information near closing.
2. Character substitution: The domain swaps a letter for a similar-looking numeral or symbol.
3. Settlement panic: The message threatens default, penalties, or loss of the home unless money moves immediately.
4. Unexpected bank: The destination institution differs from the one discussed earlier in the transaction.

Irving’s Bottom Line

Treat every wire instruction as unverified until you call a known number and confirm it verbally. If a change arrives, stop the transfer—even if the message contains accurate private details.