Recommended Free Tools
Protect a mortgage payoff wire with two safeguards: secure your email account, and verify every wire instruction—including any last-minute change—by calling a trusted number you saved independently. An email that appears to come from your lender, servicer, title company, or settlement agent is not proof that its payment details are genuine.
How email can be used to divert a mortgage payoff wire
Business email compromise (BEC), sometimes called email account compromise, involves either impersonating a legitimate sender or gaining access to a real mailbox. An attacker may use a spoofed address or a compromised account to enter an existing conversation, where a false payment request can look consistent with the transaction.
As an Amazon Associate I earn from qualifying purchases.
The FBI describes a homebuyer receiving title-company instructions to wire a down payment. The Consumer Financial Protection Bureau (CFPB) warns that scammers may monitor real-estate correspondence and send plausible messages with false or altered closing-wire instructions. A mortgage payoff scam can exploit the same reliance on email and the urgency of a real-estate payment; the cited guidance does not quantify mortgage-payoff fraud as a separate category. FBI guidance on business email compromise · CFPB guidance on mortgage-closing scams
The stakes are not merely hypothetical, but historical figures need context. In a June 3, 2019 article, the CFPB reported a 1,100 percent increase in reports of attempted real-estate wire fraud between 2015 and 2017, and estimated nearly $1 billion in real-estate transaction losses in 2017. These figures are not current annual estimates and do not specifically measure mortgage-payoff fraud.
#1 Best Overall
Secure the email account that carries the transaction
Use a password that is unique to email
Create a strong password or passphrase that you do not use on any other account. Reuse can let a password exposed elsewhere put your email at risk—the same mailbox that may contain payoff notices, personal details, and messages an attacker could exploit in a payment conversation.
Turn on multi-factor authentication
Enable multi-factor authentication (MFA), also called two-factor authentication, wherever your email provider offers it. The FBI advises: “Set up two-factor (or multi-factor) authentication on any account that allows it, and never disable it.” Never share a one-time sign-in code with someone who contacts you.
Rank #2
- Ideal for Gifting
- Ideal for a bookworm
- Compact for travelling
MFA is not a guarantee against phishing. The FBI warns that a person who enters login credentials on a fraudulent sign-in page can still expose the account. Open email through the provider’s known app, a bookmark you created, or an address you type yourself—not a link in an unexpected message. FBI BEC guidance
Consider a security key only if it fits your setup
A physical security key is one possible MFA method if your email provider supports it. Check that both your account and devices are compatible before buying one, and understand the provider’s recovery process if the key is lost. A key alone does not guarantee that an account cannot be taken over or that a wire cannot be diverted.
Keep recovery routes under your control
Review the recovery phone number and email address on your account. Make sure each is current and controlled by you; a recovery method that belongs to someone else or is no longer accessible can undermine account security.
Verify payoff instructions without relying on email
Before a payment is due, establish a trusted way to reach the mortgage, servicing, title, or settlement representative. The verification channel must be independent of the email that contains the wire instructions.
Rank #4
- Save a trusted contact before instructions arrive. Get the representative’s phone number from a source independent of later email messages, such as transaction paperwork or a contact method you have already verified. Save it so you can reach the person directly.
- Confirm the complete wire details by phone or in person. Read back the recipient name and account number, along with the other details needed to direct the wire. Do not treat an email, even one in an ongoing thread, as confirmation.
- Stop when instructions change. A last-minute change to a recipient or account is a reason to pause—not to hurry. Call the number you saved earlier, or speak in person, and independently reconfirm the change before sending funds. The FBI also advises independently verifying payment requests and account changes.
- Keep sensitive financial details out of email. The CFPB says, “Email is never a secure way to send financial information.” Do not email financial information or provide account details in response to a message or text asking you to verify them. Treat unexpected links and attachments with caution. CFPB mortgage-closing scam guidance · CFPB explanation of phishing
If a message appears urgent, that does not make its instructions trustworthy. Pause the payment and use the independently saved contact method. Never call a number or follow a link supplied in a suspicious message or in the changed instructions themselves. CFPB mortgage-closing scam guidance · FBI BEC guidance
Outdated Drivers Are Slowing You Down
One free scan finds every outdated or missing driver and matches the right update for your exact hardware.Free scan · exact hardware matchPC Slower Than It Used to Be?
A free scan shows the junk files, broken settings and background clutter dragging Windows down - then fixes them in one click.Free scan · Windows 10 & 11What to do if your email may be compromised
If you suspect someone accessed your mailbox, secure it from a trusted device and contact transaction representatives by phone or another independently verified channel. The Federal Trade Commission recommends changing the password, signing out other sessions, enabling MFA, and reviewing account recovery information. Inspect forwarding rules, sent messages, and deleted mail for unfamiliar activity; an attacker may use mailbox settings or hidden messages to maintain access or disrupt your communications. FTC steps for a hacked email or social media account
Best Value
- It can be a gift option
- Comes with secure packaging
- Helpful in various ways
- Change the email password to a strong one not used elsewhere.
- Sign out other active sessions, if your provider offers that control.
- Turn on MFA and check that recovery phone and email details are yours.
- Look for unfamiliar forwarding rules, sent messages, and deleted messages.
- Call your mortgage, title, settlement, or servicing contact using the saved number and tell them the email account may be compromised.
If you already sent a suspicious wire
Act immediately. Contact the sending bank or wire-transfer provider and request a recall or reversal. Do not wait for a reply to an email before calling. Then report the incident to the FBI’s Internet Crime Complaint Center (IC3), secure the email account, and alert the transaction contacts through a separately verified channel. A recall is a request, not a guarantee that the funds can be recovered.
The CFPB advises contacting your bank right away after a wire-fraud loss; the FBI recommends reporting BEC to IC3. CFPB mortgage-closing scam guidance · FBI BEC guidance
A practical pre-wire checklist
- Email has a unique password and MFA is enabled.
- Your email recovery phone and address are accurate and controlled by you.
- You have a representative’s phone number saved from a source independent of the wire email.
- You have confirmed the complete recipient and account details by calling that number or speaking in person.
- You have paused and independently reconfirmed any last-minute change.
- You are not sending financial information by email or using a phone number or link from a suspicious message.
The cited guidance is U.S.-focused. If you are elsewhere, contact your bank and use the appropriate local authorities’ reporting process.
Free tools Windows power users keep installed
One-click scans. No signup required.
Quick Recap
Product prices and availability are accurate as of the date/time indicated and are subject to change. Any price and availability information displayed on Amazon at the time of purchase will apply.
