Wire Fraud Prevention for a Canadian Seller: Protecting the Net Proceeds Wire

Section 01Why the seller-side risk differs from the buyer-side risk

The buyer's wire-fraud risk has been covered in detail in the Real estate wire fraud: a Canadian buyer's prevention guide. Reading that article gives the foundational understanding of how Business Email Compromise works, the IC3 statistics, and the response protocol. This article focuses on what is different for a seller.

A buyer initiates a wire to a title company. The buyer's defensive task is to verify that the title company's account is the actual title company's account before sending. The risk is concentrated at the moment the buyer hits "send" on the wire.

A seller does not initiate a wire. A seller receives one. The title company sends the seller's net proceeds out, often to a Canadian bank account, sometimes to a US bank account the seller maintains, and increasingly into a foreign-exchange broker's USD account for the seller's repatriation flow. The defensive task is twofold: (a) ensure the title company actually has the seller's correct wiring instructions, and (b) ensure no third party has substituted fraudulent instructions for the seller's real ones.

This second task is the gap. Most title-company wire-fraud protocols are oriented to the buyer side (verifying the title company's identity to the buyer). The reverse direction (verifying the seller's identity to the title company) is less mature and depends on the title company's individual procedures.

Section 02How the seller-side fraud actually works

Pattern 1: Compromised seller email. The criminal phishes the seller's personal email address weeks before closing. The criminal monitors silently. As closing approaches, the criminal sends the title company an email from the seller's compromised address with "updated wiring instructions" routing the net to the criminal's account. The title company has no reason to suspect.

Pattern 2: Compromised listing broker email. The criminal compromises the listing brokerage's email instead. The fraudulent instructions arrive at the title company purportedly from the broker, who is "forwarding the seller's wiring instructions." The title company, accustomed to receiving routine updates from the broker, processes them.

Pattern 3: Lookalike domain impersonating the seller. The criminal registers a domain similar to the seller's actual email (one character off) and sends instructions from that lookalike domain. The title company glances at the sender name and accepts.

Pattern 4: Last-minute "correction". The seller has previously sent correct instructions. Two business days before closing, an email arrives at the title company "correcting a typo" or "updating the bank's routing number due to a recent merger". The title company updates without verifying.

Pattern 5: Identity-spoofed phone call. Less common but documented. The criminal calls the title company, identifies as the seller (with personal details obtained from the email thread), and provides updated wire instructions verbally. The title company logs the call as verification.

Verified fact: All five patterns appear in IC3 case files for 2024 and 2025. The IC3 2025 Annual Report identifies real estate as a high-risk BEC subcategory, with cash-to-close wires and seller-net wires both being repeatedly targeted.

Section 03How a Canadian seller's situation amplifies risk

Takeaway: the Canadian seller's profile is structurally vulnerable in the same way the Canadian buyer's profile is. The protection protocol must compensate.

Section 04The seller-side prevention protocol

Six steps, in order, applied to every seller-side wire including the return of the earnest money deposit if the contract terminates.

Step 1: Establish a verification phone number for the title company at the start of the transaction. When the title company is identified, ask: "What phone number should I call to confirm the wire of my net proceeds before you send it?" Save it in your phone contacts. Do not rely on the email signature block. The same step Recommended for buyers applies for sellers.

Step 2: Provide your wiring instructions through a secure channel, not as an open email. Three acceptable channels: (a) an in-person delivery if the seller travels to Florida for any pre-closing meeting; (b) the title company's secure document-exchange portal (Qualia, ResWare, Closinglock); (c) a printed letter signed and notarized by the seller, sent by courier with tracking. Avoid sending instructions as a Word document or PDF attachment to an open email thread. If the title company insists on email, send a hash or a checksum of the instructions on a separate channel (a phone call or a different email address) so any tampering is detectable.

Step 3: Confirm the title company has your correct instructions on file at least 5 business days before closing. Call the title company on the verified number from step 1 and read the receiving bank name, routing number, account number, and beneficiary name back to them. Confirm the wire amount approximation. The earlier this confirmation happens, the harder it is for a criminal to alter the file before closing.

Step 4: Authorize the title company to escalate if any "correction" or "update" arrives. Provide written instruction to the title company: "If you receive any communication purportedly from me revising my wire instructions after [date], do not act on it without calling me on [verified phone number] and confirming verbally with at least one identifying question." Most reputable Florida title companies will accept this instruction and add it to the file.

Step 5: On closing day, ensure you are reachable for the title company's pre-wire verification. Closings typically wire seller funds in the early afternoon EST. A Canadian seller in Vancouver should be reachable from approximately 9 am to 2 pm Pacific. A seller in Newfoundland should be reachable from 11 am to 4 pm local. Confirm by email the day before closing.

Step 6: Confirm receipt within 4 hours of the wire being sent. Once the title company confirms the wire has been sent, expect the funds to land at your Canadian bank within 1 to 24 hours depending on the route. If the funds are not received by the next business morning, escalate immediately to both the title company and your Canadian bank's fraud department.

Opinion (editorial judgment): for any seller's net proceeds wire over USD 100,000, the additional cost of routing the wire through the title company's secure portal rather than email is negligible. The default for such amounts should be portal-only. If a title company refuses to use a secure portal, that is itself a yellow flag worth questioning.

Section 05Worked example: how the protocol stops a real attack

Quebec resident sells a Florida condo for USD 425,000. Estimated net to seller after FIRPTA, doc stamp, commission, and other costs: USD 225,000 to be wired to the seller's USD account at a Canadian bank.

Day -5 (5 business days before closing): the seller calls the title company's verified number. Confirms receiving bank name, routing number, account number, and beneficiary name as shown on file. Confirms approximate wire amount. Adds a written instruction: "Do not modify these instructions absent a verbal confirmation call to my mobile."

Day -2: an email arrives at the title company purporting to be from the seller. New "corrected" wiring instructions to a different bank in Texas, beneficiary name "Maple Trust Holdings LLC". The email cites the seller's name and the property address.

What the protocol catches: the title company has the standing instruction from Day -5. The closer at the title company calls the seller on the verified mobile number. The seller, who has sent no such email, says immediately the email is fraudulent. The title company places a fraud flag on the file. The seller and the title company together report to: the title company's underwriter, the seller's email provider (compromise investigation), the IC3 (ic3.gov), and the Canadian Anti-Fraud Centre (antifraudcentre-centreantifraude.ca).

Day 0 (closing): the wire is sent to the original verified instructions. The seller's correct USD account receives the net. The fraud is closed without loss.

Verified fact: this is the precise pattern stopped by reputable Florida title companies on a routine basis when the standing-instruction protocol is in place. The pattern is also the precise pattern that succeeds when the protocol is absent.

Section 06Common mistakes by Canadian sellers

1. Treating the seller side as low-risk. The seller-side wire is just as exposed as the buyer-side wire. The criminal's payoff is the same six-figure number.
2. Sending wiring instructions as a quick email reply on a busy day. Email is the attack surface. Use a portal or notarized printed letter.
3. Not establishing a verification phone number with the title company at the start. Wait until closing week to ask for one and you have already lost ground; the criminal monitoring the email thread now also knows the verification number.
4. Allowing the listing broker to communicate wire instructions to the title company on the seller's behalf. The listing broker's email is also a target. If the broker must be in the chain, instructions still need verification on a non-email channel.
5. Not confirming receipt of net proceeds within hours of closing. The fraud is detectable in the first 24 hours. After 72 hours, the freeze rate drops sharply.
6. Routing funds through a foreign-exchange broker without separately verifying the FX broker's account. The title company wiring to an FX broker is a two-step funds chain. Each leg needs verification.
7. Reusing the same email address for wiring instructions, FAR/BAR contract, and personal communications. A single compromised email address gives the criminal everything. Some sellers use a closing-specific email address for high-value real estate transactions.
8. Assuming the title company's E&O insurance will make the seller whole if a fraud succeeds. Title-company E&O policies vary; recovery from them is litigation-intensive and partial. Prevention is materially cheaper than recovery.

Section 07Pre-closing checklist

1. The title company's verification phone number is saved in your phone contacts and was obtained on a non-email channel at the start of the transaction.
2. The title company is using a secure document portal (Qualia, ResWare, Closinglock) for sensitive document exchange. If not, you have planned an alternative non-email channel.
3. Your wiring instructions to the title company have been delivered through the secure portal or by notarized printed letter, not as an email attachment on an open thread.
4. You have called the title company at least 5 business days before closing and verbally confirmed your wiring instructions field by field.
5. A standing instruction is on file at the title company prohibiting silent modification of your wiring instructions.
6. You are reachable on closing day during the title company's likely wire-execution window (early afternoon EST).
7. Your Canadian bank's fraud-department phone number is saved and accessible.
8. The IC3 URL (ic3.gov) and the CAFC URL (antifraudcentre-centreantifraude.ca) are saved.
9. After closing, you have a calendar reminder to confirm receipt of the net proceeds wire within 4 hours.
10. A second reminder to confirm receipt by the next business morning.
11. Your foreign-exchange broker, if used, has been verified separately on a non-email channel.
12. Your closing communications are routed through a fresh email address, not your personal email of years.

Section 08FAQ

Should I read the buyer-side article too, even though I am selling?

Yes. The buyer-side article covers the BEC mechanics, the IC3 statistics, the FFKC recovery process, and the Canadian-side reporting channels in detail. The seller-side adapts those mechanics to the receiving direction. Both articles are companion reading: Real estate wire fraud: a Canadian buyer's prevention guide.

Does the title company carry insurance against this?

Most Florida title companies carry errors-and-omissions (E&O) insurance with cybersecurity coverage. Coverage varies. In a successful seller-side fraud, the question of whether the loss is borne by the seller, the title company, or the title insurance underwriter often becomes a litigation matter. The court analysis tends to focus on which party's email or system was compromised. Prevention is materially cheaper than litigation.

Can my Canadian bank refuse to receive a wire if I express concern?

In limited cases. A Canadian bank receiving an inbound wire can hold the funds pending verification if the customer has flagged the wire in advance. This is rare and bank-specific.

Are there services like CertifID or Closinglock for the seller side?

The same products that protect buyer wires also work for sellers. The title company is the deciding party on adoption. Ask the title company at the start of the transaction whether they use a verification platform. If not, consider routing your wiring instructions through a notarized printed letter rather than email.

Is FINTRAC reporting relevant for an inbound wire from a US title company?

Yes. Canadian banks receiving international wires of CAD 10,000 or more report them to FINTRAC under the Proceeds of Crime (Money Laundering) and Terrorist Financing Act. The reporting is automatic. The seller does not need to do anything beyond completing the bank's source-of-funds questionnaire honestly. A reported wire is not a flagged wire; reporting and fraud detection are different functions.

My closing is happening through a Florida real estate attorney rather than a title company. Does that change the protocol?

No materially. The same email-security and verification disciplines apply. A licensed Florida real estate attorney is a frequent BEC target. Apply the protocol with the attorney's office.

What if the listing broker, not me, is the one giving the title company my wiring instructions?

Then the listing broker is in the trust chain and must be verified the same way. Provide your instructions to the broker on a non-email channel, and call the title company directly to confirm what they received from the broker matches what you sent.

Honest scope statement: This article focuses on the wire of the seller's net proceeds at closing. It does not cover the wire mechanics of the FIRPTA refund the following year (a wire from the IRS, with its own protocol), the wire mechanics of the earnest money deposit return if the contract is terminated, or the wire mechanics of the proceeds repatriation from USD to CAD via a foreign-exchange broker. Each of those sub-flows would benefit from its own dedicated treatment.