When wire fraud occurs, the loss of funds can be deeply distressing. That pain is now often compounded by the legal baseline for 鈥渞easonable care鈥� dramatically shifting. Courts no longer view wire fraud or deepfakes as unavoidable cyber events or tragedies.

Title agents now face escalating legal risks and negligence liability. Cybercriminals are increasingly leveraging deepfakes in social engineering and business email compromise (BEC) to orchestrate real estate wire fraud and seller impersonation schemes.

If an agency fails to use basic, reasonable defenses like multi-factor authentication or automated ID and bank verification platforms, judges are increasingly finding them liable for lost funds under negligence and breach claims.

In addition to the security measures used, a court or jury will likely also consider the overall reasonableness of the title company鈥檚 wiring procedures. They will review the steps agencies took to safeguard wire transfers and verify their authenticity.

Did the agent double-check the sender鈥檚 email address? Did the agent follow proper procedures to detect communication peculiarities, like grammatical errors or whether an unsecured email was used? Did more than one employee review the communication? Did they confirm the wiring instructions in a second, alternative mode of communication? These are just a few questions that a court might ask when assessing liability.

Agencies can reduce their exposure by strictly adhering to procedure. Carefully reviewing and authenticating all communication not only minimizes susceptibility to wire fraud schemes but also the chances that a court or jury will find the agent negligent.

All agents are at risk of ID and wire fraud-related cybercrime. Whether they are direct victims of the fraud or simply involved in a fraudulent transaction, agents face a real possibility of being held liable. Wire fraud schemes also continue to grow more pervasive and sophisticated with each passing year, which makes reasonable and prudent anti-fraud controls critical to prevent financial losses. Some best practices include:

• Requiring two forms of communication/authentication before issuing a wire;
• Using multi-factor authentication;
• Using an anti-fraud tool on every transaction;
• Educating and training employees in data security and maintaining evidence records; and
• Using secure, encrypted email with passwords and digital signatures for messages.

Using these precautions decreases the risk of fraud and makes it easier to defend against civil litigation should your agency unfortunately fall victim to one of these schemes. Title agents should also carry standalone, comprehensive cyber insurance. This adds an essential, additional layer of protection against both fraud-related crimes and their resulting liabilities.

Have questions about strengthening your agency鈥檚 wire fraud prevention practices or technology due diligence? Contact Tom Weyant at tweyant@alliantnational.com.

The post Wire Fraud and the Rising Standards of Tech Due Diligence appeared first on 星空传媒 星空传媒 Title Insurance Co..

Cyber insurance can be an important protection for title agencies, but it is not a guarantee that every fraud-related loss will be covered. A recent federal case, (S.D. Ohio Mar. 13, 2026), offers a useful reminder of how quickly coverage issues can arise when a title agency experiences a wire fraud incident and waits too long to notify its cyber insurer.

The case involved a buyer who was defrauded out of more than $480,000 after receiving spoofed wiring instructions that appeared to come from the title agency. The buyer later sued the agency for negligence. Although the agency carried cyber insurance, the cyber insurer denied coverage. The court agreed with the insurer, finding that the claim was not reported within the required timeframes and that the agency had prior knowledge of the incident.

The agency was aware of the incident when it occurred, or shortly after, but waited until it was sued by the buyer before notifying its cyber insurer. By that time, the cyber-policy period in place when the incident occurred had ended, and a new cyber-policy period had begun. Even though the same insurer issued the follow-on policy, the court found that the agency had not satisfied the policy鈥檚 reporting requirements.

The result reinforces that strict compliance with policy conditions 鈥� especially prompt notice and timing requirements 鈥� is essential for coverage to apply.

Cyber insurance does not automatically cover fraud losses

Many title agencies may assume, 鈥淲e have cyber insurance, so we鈥檙e protected.鈥� That assumption can be dangerous.

Cyber coverage depends on the specific terms of the policy. In this case, the agency鈥檚 coverage turned on policy wording, timing and reporting requirements. The loss involved a fraud scheme tied to spoofed wiring instructions, but that fact alone did not determine the outcome. The court focused on whether the agency complied with the policy鈥檚 conditions.

The bottom line is straightforward: cyber insurance is not a general safety net. It is a contract with strict rules that agencies need to understand and follow.

Timing can determine whether coverage exists

Most cyber policies issued to title agencies are 鈥渃laims-made and reported鈥� policies. This typically means that the claim must be made during the policy period and reported during that same period, or within another timeframe set by the policy.

In this case, the fraud occurred in March 2024. The lawsuit against the title agency was not filed until October 2024, and the agency reported the claim at that time. By then, the policy period in place when the incident occurred had already expired.

The agency also had a subsequent policy with the same cyber insurer. But that did not solve the problem. The result was that there was no coverage under the earlier policy, and the later policy did not pick up the incident simply because it was issued by the same insurer and began immediately after the prior policy ended.

For agencies, this is one of the most important lessons from the case. The claim should have been reported during the same policy period in which the incident occurred, and within the timeframe required by the policy. A policy renewal does not reset the clock on an incident the agency already knows about. Each policy period stands on its own.

Report potential incidents early

The agency鈥檚 delay in reporting was central to the coverage dispute. The title agency discovered the fraud in March 2024 and investigated internally, but waited until November 2024 to notify its cyber insurer. The policy required notice within 30 days of discovering a potential issue.

That word 鈥� potential 鈥� matters. The reporting obligation was not dependent on a lawsuit being filed. It was also not dependent on months of attempts to resolve the issue or recover the funds. The obligation was triggered when the agency became aware that something had gone wrong, or that something may have gone wrong.

The lesson is that agencies should not wait for perfect information before giving notice. When something seems wrong, the clock may already be running.

鈥淲e were not hacked鈥� may not be enough

Another important point from the case is that cyber risk is not limited to a direct breach of an agency鈥檚 computer systems.

The title agency argued that its systems had not been compromised, and its IT vendor confirmed there had been no intrusion. But that did not change the outcome. The claim centered on email spoofing, fraud carried out through impersonation and the agency鈥檚 alleged failure to prevent the scam.

That distinction matters. Fraudsters can infiltrate real estate transactions without directly hacking an agency鈥檚 systems. They may use email spoofing, social engineering, fake wiring instructions or other methods designed to exploit trust and urgency. These schemes can be difficult to avoid even when best practices are followed.

Even where an agency鈥檚 systems are secure, it may still face liability for email fraud, wire fraud schemes and social engineering attacks. Cyber risk extends beyond traditional hacking.

Prior knowledge can defeat coverage

The court also addressed the agency鈥檚 attempt to rely on the later policy period. That effort failed because the agency already knew about the incident before the new policy began.

Most policies exclude known incidents that existed before coverage started. That is why an agency generally cannot wait until renewal and expect a new policy to cover an old problem. If the agency has prior knowledge of a loss, claim, circumstance or potential issue, that knowledge can become a coverage barrier.

The lesson is clear: an agency cannot rely on renewing its policy to cover past problems. Report potential claims in the policy period in which the issue arises, and do so within the timeframe required by the policy.

Know who owes coverage

The title agency sued both the cyber insurer and the insurance producer. The court ruled that only the insurer had contractual obligations under the policy. The producer did not have a duty to provide coverage.

That means agencies should understand who issues the policy, who handles claims and who actually owes coverage. The producer may help place coverage and answer questions, but the insurer issues the policy and bears the contractual coverage obligations. When a claim occurs, agencies need to know exactly where notice must be sent, who must receive it and what the policy requires.

Because the producer did not owe coverage, suing the producer did not advance the agency鈥檚 coverage position and, from a practical standpoint, was a waste of time, money and effort.

Bad faith claims are difficult when policy terms are clear

The agency also argued that the insurer acted in bad faith. The court disagreed because the denial was based on clear policy terms and the timeline supported the insurer鈥檚 position.

If an agency misses a policy deadline or fails to satisfy a reporting condition, a bad faith argument is not likely to change the outcome. The better course is to understand the policy requirements and follow them from the beginning.

What title agencies should do now

The case offers several practical steps for title agencies. First, create a 24-to-48-hour reporting rule. The first 24 to 48 hours after a suspected incident are often the most important for taking action to optimize the chances of a successful recovery. If your agency sees a suspicious email, wire fraud attempt, client complaint or possible misdirected funds, notify your cyber insurer immediately. Do not wait for confirmation or legal action.

Agencies should also contact 星空传媒 星空传媒鈥檚 Fraud Hotline at FraudHotline@alliantnational.com without delay. Early notice alerts and enables the 星空传媒 星空传媒 team to provide assistance when time is critical and when agencies most need advice and direction on next steps.

Second, train staff to recognize fraud red flags. Most losses involve familiar patterns: email spoofing, fake wiring instructions and social engineering. Staff should always verify wiring instructions verbally by calling a known and confirmed phone number. Email changes should be treated as suspicious. The mindset should be simple: VERIFY, THEN TRUST: Every file, every party, every time.

Third, review your cyber policy in plain English. Ask your broker what counts as a claim, when reporting must occur, whether social engineering losses are covered and what exclusions apply. Agencies should understand both their coverage and their obligations before a problem occurs.

If the policy language is unclear, ask questions now. Be proactive with your cyber insurer鈥檚 insurance producer and the cyber insurer about what is covered under the policy you are purchasing and what actions may affect coverage. Even if there is no cyber-insurance coverage for a particular incident, the title agency may still be found responsible and held financially liable for the loss.

Fourth, document everything immediately. When an incident occurs, record dates, timelines, emails, communications, internal actions and any steps taken to investigate or respond. Documentation can directly affect coverage eligibility.

Finally, do not assume that renewal fixes a problem. A new policy does not reset obligations under a prior policy and generally does not cover known incidents that happened during a preceding period. Each policy and coverage period stands on its own. Agencies should also ask their cyber insurer鈥檚 insurance producer about extended reporting period options, sometimes called 鈥渢ail鈥� coverage, and retroactive date coverage for prior incident protection when renewing policies.

The bottom line

The biggest lesson from this case is simple: cyber insurance only works when agencies follow the policy requirements exactly. Agencies do not always lose coverage because they lack insurance. They may lose it because they report too late, misunderstand what triggers coverage or assume that a lawsuit matters more than early warning signs.

If you take just one action after reading this, build plans for immediate reporting and documentation. That single change can determine whether your policy protects you or leaves you exposed to a six-figure loss.

Additionally, 星空传媒 星空传媒 offers a complimentary cyber insurance gap review for our agents. It is designed to assist title insurance agents in reviewing their cyber insurance coverage to identify gaps, limitations, subjectivities, and potential risks that may not be fully covered.

For more information on the service or to request this gap review, please contact Tom Weyant: tweyant@alliantnational.com  

The post When Wire Fraud Happens, Your Cyber Policy Clock May Already Be Running appeared first on 星空传媒 星空传媒 Title Insurance Co..

Today鈥檚 businesses face a unique challenge. They must find ways to showcase their trustworthiness to audiences that are increasingly distracted. That challenge becomes even more important in title insurance.

Businesses are continually signaling to audiences in various ways whether or not they are trustworthy. At the audience level, those trust signals can include everything from a modern website and responsive communication to customer reviews, branding and clear messaging. But once an audience member becomes a customer, another level of trust is required. Customers need to understand both your commitment to protecting the integrity of their transaction and the critical steps they need to take to help keep it secure. Let鈥檚 see what it takes to do both.

Step 1: Segment strategically

Creating trust signals that feel meaningful but still respectful of your audience鈥檚 time starts by understanding them. Your audience is not a monolith. It is an array of constituencies, each with their own motivations, fears and needs. Considering 鈥渂uyer personas鈥� is a great way to begin building trust. You will then better understand what each audience member is looking for from a title agency and know how to position your services in a way that grabs a buyer鈥檚 attention.

When building out these personas, resist overthinking it. Simply ask what each audience segment is worried about, what they need to do next and how much they already understand. That way, you can cut right to the chase and highlight why you are best positioned to meet their needs and address their fears. For example, is your buyer purchasing their first home or are they a seasoned homeowner facing the digital closing process for the first time?

Step 2: Put fraud prevention front and center

As you build your customer personas, you will also need to convey to each of them the inherent risks in today鈥檚 fraud landscape. At 星空传媒 星空传媒, we encourage agents to adopt a simple principle: VERIFY, THEN TRUST: Every file, every party, every time. The challenge is bringing consumers into that mindset in a clear and practical way. Real estate transactions, where hundreds of thousands or even millions of dollars are exchanged, remain attractive targets for scammers, and customers may not fully understand the threat level, especially when they are caught up in the many moving pieces of a transaction. This represents an obvious opportunity to build greater trust. By making your agency鈥檚 fraud-prevention practices as visible as possible, you can help your customers feel more secure in your ability to protect the integrity of their transactions, while also helping them understand the role they play in keeping those transactions safe and maintaining the necessary protections of their personal information and assets.

Some best practices for getting customers the information they require without overburdening them include:

• Make fraud warnings obvious: Place short, clear reminders in all emails, website pages and other customer-facing materials and always encourage the exchange of critical information through your secure agency closing portal.聽
• Avoid jargon: Customers need a quick and crystal-clear understanding of your ID verification practices, secure portals and other anti-fraud procedures鈥攚ritten in plain English.聽
• Give customers a safe point of contact: Provide a designated point of contact upfront, along with instructions on which number to use and which situations merit a pause, particularly before sending funds. Customers should be reminded that if something changes or feels unusual, they should not rely on a recent email or another communication stream. They should return to the original contact information you provided and verify before taking the next step. For example, your customers should always be reminded that you will NEVER change your wire instructions at the last minute. Direct them to the trusted point of contact should they receive such a direction.
• Create standard fraud-prevention language: Ensure your customers receive the same guidance at every touchpoint. Team training is important here. Your team should continually reinforce the same messages and procedures, so the guidance does not get muddled and consumers do not become disengaged. The threat level is high and customers need to appreciate that from the minute their transaction is initiated.

With these steps, even the most distracted and scattered audience will more easily understand your commitment to keeping their transactions secure. That builds trust in your organization while also helping customers understand the steps they can take鈥攁nd need to take鈥攖o help protect their transaction. Your customers have a critical role to play, but trusting that you will guide them appropriately and safely will be a valuable tool in their protection.

Step 3: Visuals are very important

Ensuring your agency exudes credibility and trustworthiness begins with your website. Adhering to modern web design practices, using consistent fonts and colors and ensuring mobile responsiveness are all non-negotiable. Reviewing client-facing forms for accuracy, correct branding and messaging, particularly around fraud, and a smooth user experience is also important, as is auditing the communications and physical documentation that come from your agency.

Be the resource that your customers require. Secure links to checklists for closings, fraud prevention tips, and frequently asked questions and answers make certain to your customer that you are their reliable resource throughout the closing process. You are the resource they can trust at every stage.

Step 4: Review your reviews

Remember: The communication channels you 鈥渙wn鈥� are just the tip of the iceberg for establishing trust. Today鈥檚 audiences are channel switchers. When choosing a company in which to place their trust, they will vet not only your site and social media channels, but also third-party sites, reviews and customer feedback.

You need to be similarly active in these spaces. Whether it be your Google Business Profile or various review sites, you must be ready to respond to questions, offer advice or address complaints. If you do this well, time-crunched prospects will see you as a convenient and communicative business partner. If you don鈥檛, you risk disengagement. Make a customer satisfaction survey part of the post-closing outreach to your customers. Allow them to sing your praises or learn from your mistakes to enhance the next transaction experience. 

Step 5: Highlight the human

Last but certainly not least, few things help build trust and relationship as much as highlighting the human element of your business. As we all know, relationships are everything in the title and settlement industry.  Sometimes in real estate transactions, the human factor can feel lost under procedures and paperwork, which is a big problem when trying to elevate your agency鈥檚 credibility. Overcoming this means connecting customers to the specific people they will engage with as their closing moves to completion. Clarifying roles and reinforcing the verification steps customers should follow before acting on transaction instructions is also critical to a positive and trust-based customer experience.

VERIFY, THEN TRUST is at the heart of our business

It can be a real struggle to help customers feel comfortable and confident enough to entrust you with their transactions鈥nd their MONEY! One reason is that it鈥檚 becoming an enormous lift to even connect with customers in our fragmented and fluid digital age. That鈥檚 where these trust-building steps can make a difference. By showing customers that you are committed to protecting their transactions鈥攁nd by helping them understand their own role in the process鈥攜ou can build trust, which will benefit your customers and your agency鈥檚 future success through referrals from satisfied customers.

The post 21st Century Trust Signals: Helping Consumers Keep Transactions Safe appeared first on 星空传媒 星空传媒 Title Insurance Co..

By Bryan Johnson, IT Director, 星空传媒

Although the risks of our digital-first economy are becoming increasingly well known, many people still are not sharing information safely. Far too many businesses rely on email and PDF attachments when sending transaction information, despite the problems they can pose for organizational security and efficiency. Thankfully, there is a better way forward: portals, permissions, and link expirations. These can all go a long way toward tightening your agency鈥檚 information controls while improving workflows at the same time. Here鈥檚 what that can look like in practical terms for your team.

What counts as sensitive info?

First, let鈥檚 dig into what counts as sensitive information that should NEVER go into emails or attached PDFs. Some of the common examples include:

• Anything that could be construed as non-public personal information (NPI), like social security numbers (SSNs), dates of birth (DOB), bank information and more.
• All wire instructions, payoff information, or disbursement data.
• Any statements from lenders or closing documents.
• All information that could be leveraged to impersonate transaction stakeholders, like signatures, account numbers, or scanned copies of IDs.

A common rule of thumb is this: If it could possibly harm someone or derail your transaction, find a different way to share it.

Pursue a portal-centric approach

Rather than risk compromising your security or efficiency with PDF attachments, pursue implementing a document-sharing portal for your agency. These portals can be broken down into two buckets. There are industry-specific document-sharing portals offered by brands like Qualia and SoftPro. And there are general document-sharing portals such as ShareFile, Dropbox, Google Drive and Microsoft OneDrive.

The portal type you choose should come down to your businesses needs. If you are a high-volume agency with multiple offices and large coordination needs, you鈥檒l likely benefit the most from a more tailored solution. Custom platforms like these often excel at unifying document versions and creating a single source of truth to move transactions faster at scale.

On the other hand, if you are a small shop, a more generalized portal may be sufficient. Either approach involves tradeoffs, but you can benefit from looking inward and carefully assessing your team鈥檚 needs before pulling the trigger.

Implement best practices with your portal

After making your decision on a document-sharing portal, you should establish safeguards around permissions and links. Title agents are busy people, so implementing built-in guardrails is important.

Keep things simple: while employees can still use email to coordinate around closings, links鈥攏ot attachments鈥攕hould be how important or sensitive information is shared. The beautiful thing about links is that they are endlessly customizable with today鈥檚 modern tools. Consider establishing the following defaults for your links:

• Make each link 鈥淰iew only鈥� as its default setting. Avoid allowing downloads unless completely necessary.
• Refrain from setting a link鈥檚 permissions to 鈥渁nyone with the link.鈥� This is critical for sensitive information.
• If your platform allows it, prohibit resharing links and require recipients to be invited users.
• DO NOT leave links live indefinitely. Consider a 7-day limit for IDs and wires and 2-4 weeks for other documents.  

Taking these steps ensures you will be getting the most value out of your portal. And more importantly, it guarantees that you are using all available means to protect your customers鈥� transactions and guard your company鈥檚 reputation.

Become a more secure and reliable title partner

Amid the hustle and bustle of a transaction workflow, it can be tempting to attach important documents and send an email. But believe me when I say that you want to resist that impulse. While email and attachments are convenient, they can pose real risks to your agency鈥檚 security and long-term viability. Implementing and optimizing a modern document sharing platform with the right permissions and guardrails can help you work more safely and efficiently. Making this investment in your document sharing practices also demonstrates a real commitment to the security of your customers and partners. This will translate not only into satisfied customers but also solidify your reputation as a reliable title partner.

The post Stop Risking Your Sensitive Docs appeared first on 星空传媒 星空传媒 Title Insurance Co..

By Bryan Johnson, IT Director, 星空传媒

Keeping your agency鈥檚 data and digital assets safe these days can often feel like a never-ending battle. Unlike you and your team, fraudsters and other criminals never take a day off. They don鈥檛 go on vacation, and they never get sick. Because of this, your agency needs a cybersecurity policy that is also always-on. While this requires many moving pieces all working harmoniously together, today we are going to focus on just one important element: passkeys.

What are passkeys and why do they matter?

You may already be familiar with passkeys. If you have an iPhone, you may have seen prompts to save a passkey for a supported app or website. If you choose to do so, you often won鈥檛 need to enter your password again on that device. Instead, you approve the sign-in with Face ID, Touch ID, or your device passcode, and the passkey authenticates you to the app or site.

Passkeys use what is known as 鈥減ublic-key cryptography.鈥� In plain English, that means that passkeys create two linked digital keys鈥攁 public key, stored by the website or app, and a private key, which stays safely on your device. These keys work together upon sign-in to verify your access, all while never exposing a password that a hacker can pick off and weaponize.

This is obviously a nice thing for consumers from a convenience perspective, but passkeys also hold numerous security advantages. Traditional passwords are more vulnerable to thieves because users often reuse them across sites鈥攎aking them easier to guess. Passkeys, on the other hand, cannot be reused, rendering that security concern irrelevant.

In addition, passkeys are never 鈥渉oused鈥� in the systems of a website or app. They stay safe on your local machine. This means that even if a company experiences a data breach (an all-too-common occurrence these days) there will be no sensitive user information to steal.

Perhaps most importantly, passkeys greatly reduce the prospect of a user getting 鈥減hished鈥� by a criminal. Phishing is one of the most common cybersecurity concerns out there. It works so well because human error often happens online and hackers have gotten very, very good at tricking people into handing over their sensitive information.

Passkeys largely negate that concern. If a cybercriminal tricks someone into going to a fake website, for example, a user鈥檚 passkey will not work on it. Or to put it another way, with passkeys, users are not at risk of accidentally giving away a reusable asset that can be exploited. In fact, they are not giving away an asset at all, but half an asset that requires the other key to work.

Make passkeys central to your cybersecurity approach

Clearly, passkeys can be just as valuable to businesses as they are to individual users, especially businesses like title agencies that must routinely protect sensitive data and user information. There are multiple systems and touchpoints where deploying this technology would reinforce your overall security posture, such as employee email, escrow and transaction systems, document portals, and any client-facing accounts where closing information may be shared.

Once you鈥檝e made the decision to deploy passkeys, the best way to start is with the systems you are using every day. Many agencies, for example, use some variation of Microsoft 365 or Google Workspace to handle employee emails and other business applications. Within these platforms, you can turn on passkey support and then start testing internally to see how it works. Once you get the lay of the land, you can expand it throughout the rest of your team.

You can, of course, build your own system, but it is generally not recommended unless you have strong identity management experience on staff. Creating your own passkey server can be expensive and time-consuming, and unless you know exactly what you鈥檙e doing, it can lead to a critical security incident.

Taking the bait

Our digital-first world is an amazing place, but it can also be a fatiguing one. While people can and must take breaks, our security systems cannot afford to. The criminals and hucksters out there are always circling, looking for a weak point in your defenses. While passkeys can鈥檛 keep all these threats at bay on their own, they can do a lot of good. Passkeys eliminate some of the most common methods thieves utilize to attack your team, harm your agency and steal your data. They disrupt routine phishing methods. And they ensure that even if you wind up taking their bait once in a while, there is nothing worth reeling in.

The post Deploy Passkeys in 2026 for Better Security appeared first on 星空传媒 星空传媒 Title Insurance Co..

Every wire fraud defense expert agrees on one thing: the number one factor in recovering diverted funds is time. Every minute counts once fraud is detected, and hesitation or delays can make it harder to track down and restore lost funds.

That鈥檚 why a wire fraud response plan is imperative for every title agent.

The American Land Title Association (ALTA) recommends that every title company develop, document and train every staff member in the critical first steps for effective responses to wire fraud incidents. , can help agencies prepare to respond quickly and effectively as outlined in key points highlighted in this article.

Elements of a Wire Fraud Response Plan

The first step in preventing fraud is maintaining strong policies and procedures for verifying the identities of parties to the transaction and wire instructions to protect all parties: Buyer, seller, lender, underwriter and title agent. 星空传媒 星空传媒 agents are urged to implement procedures making sure to Verify, then Trust – every file, every party, every time.

But if the unthinkable happens, the most successful response strategies are those established in advance and clearly communicated to all staff members, banking partners and transaction participants.

Like a well-trained sports team, every member of your organization should understand their role and be ready to act immediately if fraud is detected.

General protocols

• Establish a close relationship with your bank representatives and maintain regular communication about emerging fraud threats and response procedures.
  • Make sure you have a phone contact that is not an 鈥�800 number鈥� to avoid delays.
• Discuss wire retrieval scenarios with your bank and establish emergency contacts in the bank鈥檚 fraud department that can be reached immediately if fraud is suspected.
  • Share this information with every employee as first reactions are critical.
• Establish and document emergency contacts across your response network, including bank fraud departments, law enforcement, legal counsel and your underwriter.
  • The local FBI office and the Secret Service office in your region should be included in this contact network.

Rapid response actions

• Your staff should be trained to immediately alert company management and the ageny鈥檚 internal wire fraud response team if a suspicious or potentially fraudulent transfer is detected.
  • Encourage transparency as delay or fear of retaliation for errors can cause losses to increase.
• Contact the sending bank鈥檚 fraud department immediately and request a recall of the wire transfer due to suspected fraud. Ask the bank to initiate the FBI鈥檚 鈥淔inancial Fraud Kill Chain Process鈥� if applicable.
• Notify the receiving bank鈥檚 fraud department and request that the account receiving the funds be frozen pending investigation.
• Report the incident to appropriate law enforcement agencies, including your local police department, the FBI field office serving your jurisdiction, as well as Secret Service teams.
• File a complaint with the FBI鈥檚 Internet Crime Complaint Center (IC3) as quickly as possible via their website, .
• Inform the parties to the transaction using known, trusted phone numbers and established communication channels.
• Notify your underwriter and coordinate next steps. 星空传媒 星空传媒鈥檚 Claims Team and Underwriting Counsel are available to assist agents in evaluating and responding to suspected fraud events.
• Contact your own agency legal counsel to assess potential liability and assist with recovery efforts.
• Depending on the circumstances, notify appropriate insurance carriers such as cyber liability, escrow security bond or errors and omissions insurers.
  • Do not delay these notifications as missed deadlines on notices can result in a claim denial and financial losses for your agency.

Putting all of these resources in motion immediately is critical to securing the support of professionals or organizations with tools that could assist you in recovering the diverted funds.

The FBI鈥檚 Internet Complaint Crime Center, , is one of your most important contacts. According to the FBI鈥檚 2024 Internet Crime Report, the IC3 Recovery Asset Team initiated the Financial Fraud Kill Chain on 3,020 complaints involving $848.4 million in attempted theft[i]. Financial institutions were able to freeze $561 million of those funds, representing a 66% success rate.

The effectiveness of this process depends heavily on how quickly fraud is reported, which is why having a response plan in place and acting immediately is critical.

Even the most vigilant companies may fall victim to fraud, but having a clear response plan and trained team in place can significantly improve the chances of recovering lost funds.

As always, immediately reach out to your 星空传媒 星空传媒 Claims Team and Underwriting Counsel if you have any questions or concerns. Together we can fight fraudsters, but always remember to take the steps to stop fraud and Verify, then Trust – every file, every party, every time.

The post When Wire Fraud Happens, Minutes Count appeared first on 星空传媒 星空传媒 Title Insurance Co..

By: Elyce Schweitzer, 星空传媒 星空传媒 Regulatory Compliance Officer

Artificial intelligence has made fraud more convincing and more difficult to spot. As we explored in our earlier piece on deepfake-enabled fraud, today鈥檚 bad actors can impersonate real parties, voices, and documents with a level of sophistication that would have been unimaginable just a few years ago.

In response, lawmakers and regulators are strengthening the legal tools available to prosecutors, civil enforcers, and courts. These developments don鈥檛 rewrite core fraud principles, but they do change how those principles apply to real estate closings 鈥� and they reinforce the value of careful verification.

Understanding this evolving landscape helps explain why it鈥檚 so important to Verify, Then trust 鈥� every file, every party, every time.  

Fraud and Impersonation: Statutory Tools That Matter

States are updating their criminal and civil fraud statutes to make it clearer that impersonation using modern technology is not a technical loophole but a prosecutable offense.

For example, in Texas, (effective September 1, 2025) amended Chapter 32 of the Texas Penal Code by adding Sections 32.56 and 32.57. Section 32.56 makes it an offense, with intent to enter or remain on real property, to knowingly present to another person a false, fraudulent, or fictitious document purporting to be a lease agreement, deed, or other instrument conveying real property or an interest in real property. Section 32.57 makes it a first-degree felony to knowingly list, advertise, sell, rent, or lease residential real property without legal title or authority.

In practice, these sections clarify that impersonation involving falsified property documents constitutes fraud, even when the deception relies on digital or AI-assisted tools. Notably for title agents, when such cases are investigated or litigated, the analysis may extend beyond the fraudulent act itself to examine how the transaction progressed, including what steps were taken to confirm identity and authority before reliance occurred.

The Role of Notarization and Remote Online Notarization

Notarization has become a critical built-in safety mechanism for property transactions. States that authorize Remote Online Notarization (RON) typically require defined identity-verification procedures, which may include multi-factor authentication, recorded sessions, and retained audit logs.

These requirements do more than check a box. They create layers of verification that are observable after the fact. When fraud does occur, prosecutors, judges, and civil litigants may scrutinize whether these verification layers were followed.

In other words, notarization statutes don鈥檛 replace professional diligence 鈥� but they codify expectations for how identity and intent should be confirmed and documented.

Expanding Definitions of Deceptive Communication

Other states have updated their fraud laws to explicitly cover realistic representations made with advanced technologies. , effective April 2, 2025, defines 鈥渄eceptive audio or visual media鈥� as the use of highly realistic representations of speech, conduct, or writing where the subject did not actually engage in that conduct. The statute criminalizes generating, soliciting, disclosing, or using deceptive audio or visual media for the purpose of attempting or furthering the commission of a crime or offense, or with knowledge it will be used for that purpose.

takes a broader approach by recognizing that sophisticated communications techniques, including those enabled by technology, play a central role in modern fraud schemes. The statute consolidates fraud and organized fraud offenses, aligns state law with federal mail and wire fraud precedents, and includes enhanced penalties for certain first-degree felony offenses. It also provides civil remedies related to identity misuse and sets limitation periods and tolling rules that account for defendants who are absent from the state or lack an ascertainable address.

These statutory definitions reinforce something title professionals already know from experience: fraud is not defined by medium but by intent and effect. A voice message, video call, or carefully worded email can be just as fraudulent as a forged signature on paper. What matters is whether it induces action based on false representations.

Federal Reporting and Awareness Efforts

At the federal level, activity has focused on understanding and reporting on the risks associated with AI technologies. For example, legislation passed in connection with the 2021 星空传媒 Defense Authorization Act (NDAA) the Department of Homeland Security to produce annual reports on digital content forgery technology. 鈥� the core technology behind deepfakes.

For those of you who enjoy reading more technical material, the is available for your enjoyment.  A review of the report makes it clear that the technology and its potential for harm to our industry is complicated.

These federal efforts help catalog the risks and raise awareness across industries, but they do not change state criminal or civil liability in property transactions. Instead, they improve the information environment in which professionals and regulators operate.

What This Means for Title Professionals

When closings are reviewed after fraud occurs, the focus will likely shift to whether steps were taken to verify identity, authority, and intent, and whether those steps were reasonable under the circumstances. This reflects how fraud is often evaluated after the fact: technology may enable new methods of deception, but it does not change the underlying wisdom: Verify, Then Trust before acting.

The Bottom Line

Regulatory and statutory changes are not abstract developments. They reflect how lawmakers and enforcers are applying long-established fraud principles to modern threats.

Deepfakes and AI-enabled impersonation present real risks in real estate transactions. The truth is, when fraud is investigated or litigated, attention will likely shift beyond the technology itself to how the transaction unfolded, including whether identity and authority were meaningfully confirmed before reliance occurred.

For agents who incorporate verification as a routine part of their workflow, 鈥淰erify, Then Trust鈥� functions as a practical risk-management framework. It aligns with the way fraud is examined after the fact and supports defensible decision-making when transactions are questioned. Applied consistently, this approach helps protect the transaction, the parties involved, and the professionals responsible for bringing the deal to completion.

The post How New Fraud and Notarization Laws Affect Real Estate Closings appeared first on 星空传媒 星空传媒 Title Insurance Co..

By Mauri Hawkins, Chief Claims Counsel, 星空传媒

Title pros know that fraud is a big problem in our industry, but the available data is still eye-popping. In 2024, the American Land Title Association (ALTA) reported that fraud and forgery claim costs averaged over $143,000 per incident.[i] Such losses can significantly impact a typical agency鈥檚 business, which makes prevention your best defense. To help, we鈥檝e outlined 2026鈥檚 top fraud threats as well as strategies for spotting them early and protecting every file, every party, every day.

Why redouble our focus on fraud in 2026?

Fraud in 2026 harms businesses in a way that goes beyond dollars and cents. Fraud can also inflict major reputational damage, leading to lost referrals and, quite possibly, the closure of your business itself. In short, fraud and forgery can derail your company鈥檚 goals and prospects in both the short and long term. These serious consequences highlight why we must scrutinize the details of every file that comes across our desks鈥攑articularly from the insidious schemes we will explore below.

Seller impersonation is a danger

First up is seller impersonation. Increasingly common, seller impersonators pose as property owners and sell properties out from under the real owners without their even knowing. Given how widespread it has become, agents must never eyeball ID documents. ID-verification tools must be used on every file, every party, every day instead. Agents must also take time to scrutinize notary seals and the notaries themselves. When possible, avoid mail-away closings and use a reputable remote online notarization (RON) provider. Also, validate IDs at the time you receive an order, as this helps stop fraud in its tracks! And finally, educate your real estate agents, lenders and consumers on the very real risk of losing their money.

Vacant land sales pose a real threat

Vacant land remains another top fraud target in 2026. It is driving a huge share of claims nationwide and can get wildly expensive.

To cut down on these claims, ID-verification tools are again your best friend. Apply them to every file at the beginning of each order. That way, you can properly verify the parties involved and not waste time on bogus deals.

You should also always contact vested owners at a trusted address, whether by email or by mail, to confirm the sale. Finally, stay on guard for red flags like recent address changes or sudden changes to entity information located in the Secretary of State records. Those are go-to moves that sophisticated fraudsters love to deploy.

Fight back against payoff fraud

At 星空传媒 星空传媒, we are also seeing a sharp rise in payoff fraud. These involve bad actors injecting themselves into the payoff process and rerouting funds away from the real lender or servicer and into their own bank accounts. Fraudsters have gotten good at compromising payoff mechanisms鈥攆rom email to fax. Given that, the principle of Verify, Then Trust matters more than ever before.

Some best practices to remember include:

• Never accept payoff info from a party to the transaction.
• Prior to sending funds, confirm with the lender, using independently verified contact information, the wire information or payment address.
• Follow the verified lender instructions exactly and double-check payment details before disbursing.
• Treat any last-minute changes or 鈥渘ew鈥� payoff directions as a major red flag, and contact the lender directly at the independently verified contact information before taking any further action.

For more best practices, managers should review  on handling payoffs securely and share it with their agents.

Staying cyber smart

No conversation about fraud in 2026 would be complete without touching upon cybersecurity concerns, particularly from phishing emails. Cyberattacks are one of the most common ways fraudsters can attack our industry. In fact, data reveals that over $16 billion in losses resulted from cybersecurity issues alone.[ii]

The silver lining is that we have a powerful way to prevent cybercrime and stem these losses. The numbers show that one of the most consistent reasons why a cyberattack is successful has to do with human error. Implementing security awareness training for your agency can reduce the likelihood of a fraudster pulling a fast one by 70-90%.[iii]

Strong cyber insurance is also essential for agencies to protect themselves from fraudsters. Review your policy鈥檚 terms and conditions thoroughly, institute processes and procedures for the team to follow in each transaction, and document each file with the actions taken to show that the processes and procedures were followed. This is highly important for when a claim is made under the cyber insurance policy.

You have a partner in the fight against fraud

At 星空传媒 星空传媒, we鈥檙e here to support you in the fight against fraudsters. We have resources that can help:

• 星空传媒 星空传媒 Crime Watch Program: If an 星空传媒 星空传媒 agent鈥檚 employee spots and prevents possible fraud, agency management can nominate that employee to receive an award. Find more information here about the program.
• The 星空传媒 星空传媒 Fraud Prevention Tips: Find handy best practices for spotting and stopping fraud with this tip sheet.
• ID Verification Tools: Explore today鈥檚 top platforms and make sure your team is trained on the right policies and best practices. 星空传媒 星空传媒 agents, for example, 鈥攁 leading identity verification provider.

You鈥檙e ready to face fraudsters

Armed with these tools and knowledge of 2026鈥檚 top fraud threats, you鈥檙e ready to spot bad actors and act before a scheme escalates into a loss.  Just remember to never take anything at face value and to verify before you ever extend your trust. By approaching your files with the mantra of 鈥淰erify, Then Trust鈥� in mind, you can rest easy knowing you鈥檝e protected every file, every party, every day.  

[i]

[ii]

[iii]

The post Top Fraud Concerns to Watch Out for in 2026 appeared first on 星空传媒 星空传媒 Title Insurance Co..

As fraud tactics evolve, so must the way the industry protects consumers and transactions. That鈥檚 why 星空传媒 星空传媒 has launched Verify, Then Trust鈥攁 new initiative designed to raise awareness and reinforce best practices that help stop fraud before it becomes a claim. Agents are urged to Verify, Then Trust on every file, every party, every time.

The Rise of Deepfake Fraud in Real Estate

Deepfake fraud has been making headlines in unexpected ways, and real estate is one of the latest industries to be hit. In the past two years, fraudsters have leveraged AI-powered deepfake technology to pose as property owners, financial executives, and even notary publics. Even experienced agents working with what they think are repeat or loyal customers have suffered devastating losses.

Take, for example, a case from 2023 where a scammer used a deepfake voice to impersonate a real estate attorney in communications with a client. The unsuspecting buyer believed he was speaking with his legitimate attorney and wired a six-figure down payment鈥攕traight into the scammer鈥檚 account.

Another shocking case involved a fraudster using a deepfake video to pose as a property owner looking to sell a luxury home. The scammer managed to fool not only the buyer, but also the title company, leading to the fraudulent sale of a multimillion-dollar estate.

Of course, there was also the fraudulent attempt to force a foreclosure sale of Graceland, Elvis Presley鈥檚 home, which made headlines in 2024. These fraudsters are bold and believe that increasingly large and high-profile targets can yield even bigger payouts.

How to Combat Deepfake Fraud in Real Estate

With deepfake technology becoming more advanced, spotting fraud with the naked eye is harder than ever. But that doesn鈥檛 mean we鈥檙e powerless. Here are some strategies to avoid falling victim:

Double-Verify Identities
Don鈥檛 rely solely on phone calls, video calls, or emails. Always confirm identities through multiple channels鈥攕uch as in-person meetings, official documentation, letters via 鈥渟nail mail,鈥� and voice confirmation through previously established phone numbers. This is even more critical in vacant land transactions or refinances involving free and clear properties.

Use Multi-Factor Authentication (MFA)
When transferring funds or signing critical documents, consider requiring multi-factor authentication (MFA). This adds an extra layer of security beyond visual or voice verification alone. It鈥檚 always important to treat funds with great care鈥攁s if the money were your own鈥攁nd take appropriate steps to protect them. If funds go missing, customers may seek reimbursement from the agent鈥檚 personal account.

Scrutinize Video Calls and Emails
If something feels off鈥攍ike unnatural blinking, delayed audio sync, or robotic speech patterns鈥攂e skeptical. Deepfake videos often have subtle imperfections that can give them away. Ask probing questions a deepfake would not be able to answer accurately. You may even want to establish a special passphrase with customers, provided to them only through a secure portal.

Conduct Due Diligence
If a new client or seller suddenly appears with urgent demands, do your due diligence. Check property records, verify business affiliations, and ensure everything aligns with known facts. As they saying goes: If it appears too good to be true, it probably is. Scammers also like to amp-up the pressure, so do not let a hurried closing or pushy customer cause you to shortcut your verification processes.

Leverage Fraud Detection Tools
Just as AI is being used to create deepfakes, it鈥檚 also being used to detect them. Some AI-driven tools analyze facial movements, voice anomalies, and inconsistencies in digital assets to help identify fraudulent activity. In the real estate space, tools such as CertifID add another layer of confidence to the process. 星空传媒 星空传媒 agents can now use CertifID with discounted pricing to protect deals by verifying identities, managing and ordering payoffs, and securing wire instructions. Verify, then Trust 鈥� every file, every party, every time.

The Bottom Line

Deepfake technology is no longer a futuristic concern鈥攊t鈥檚 here, and it鈥檚 changing the way fraudsters operate. By staying vigilant and implementing multi-layered verification methods, you can ensure that your next property transaction doesn鈥檛 turn into a deepfake disaster. Remember: Verify, Then Trust 鈥� every file, every party, every time.

See 星空传媒 星空传媒鈥檚 recent , which was inspired by a real-life attempt to commit wire fraud using deepfake technology.

The post Deepfake Dangers: How AI Trickery Is Targeting Real Estate Transactions appeared first on 星空传媒 星空传媒 Title Insurance Co..

By: Bryan Johnson, IT Director, 星空传媒

With the new year upon us, it鈥檚 time again for my annual roundup of tech trends to watch in the months ahead. After over 20 years in software development and IT, I can safely say that technology best practices are changing all the time鈥攐ften with blazing speed. It鈥檚 essential for businesses to stay aligned with the latest developments. By following these recommendations, you can do just that and ensure your technology stack fires on all cylinders in 2026.

Make 2026 the year you get AI right

While the constant stream of AI coverage has become overwhelming in the last few years, don鈥檛 tune it out. AI really can have a transformative effect on your business. Many have already recognized its potential, with three in four companies using AI to optimize at least one business function.[i] In 2026, this trend will only accelerate, with more businesses adopting AI agents to:

• Automate production workflows bysearching and summarizing documents, generating emails and tracking deadlines, all of which can accelerate closings.
• Boost security by flagging anomalies, verifying identities and maintaining communication, which enhances trust.
• Support compliance by using AI to check disclosures and maintain audit logs.

If you haven鈥檛 started using AI yet, you don鈥檛 need to be intimidated. To get started, just pick one or two high-volume, low-risk tasks where you can test out a pilot program. Assign a staff member to 鈥渙wn鈥� the program, choose your tool and define your metrics of success. After 30 days, if you like what you see, you can expand the program. If not, simply retool and try something else.

Zero trust = fewer security issues

I鈥檝e talked about zero trust a few times on this blog, but it remains a critical security protocol for agencies to adopt in 2026. For a while now, the cybersecurity field has basically adopted 鈥淢urphy鈥檚 law.鈥� We assume data breaches are a matter of when鈥攏ot if. This framework is smart because it prioritizes protecting identities and data when these inevitable breaches occur.

Agencies would be well advised to align with this security approach, as the data shows, breaches are becoming far more common. Sixty-five percent of organizations were, in fact, hit by a ransomware attack in 2024.[ii] If you are ever unlucky enough to be one of those statistics, you can mitigate the fallout if you have highly stringent security protocols in place, such as:  

• Universal MFA adoption for email, production software, escrow platforms, remote access and cloud tools. Collectively, this reduces the likelihood of a stolen password compromising your entire operation.
• A strong 鈥淶ero Trust鈥� mindset, which assumes every device, user and connection could be compromised, and that users should only be given the minimum access required to do their jobs.
• Thoughtful, cautious third-party controls that treat every IT vendor, platform and integration as a potential attack vector. To safeguard against potential vulnerabilities, agencies should ask vendors for security documentation, avoid shared logins, limit vendor access and make sure incident-response expectations are baked into any contracts.

Once you have security controls like these set up, you鈥檒l be in a strong position to prevent wire fraud and reduce downtime. You鈥檒l also demonstrate to stakeholders that your agency is taking cybersecurity seriously in 2026.

Go 鈥渄igital first鈥� in 2026

Perhaps the most substantive IT change over the past few years in the title industry has been the normalization of all-digital closings. Remote online notarization (RON) usage, for example, has dramatically surged, with one study showing an astounding 40% increase.[iii] Agencies that stay current with these shifting expectations will gain in 2026. Not only is it a great competitive differentiator, but digitizing your operations can also improve your operational efficiency, strengthen compliance and even expand your customer pool.

Just like with AI, digitizing your process doesn鈥檛 need to feel overwhelming. You can begin by tackling just one closing with one customer. Work with your IT team and/or provider to confirm what RON or e-signing tools you have at your disposal and how you can use them compliantly. Then, chart out your process and implement it.

Don鈥檛 forget to compile data on how digitalization impacted your turn times, what pain points you encountered and what feedback you received from your customers. That last part is arguably the most important, as you will need it to iterate for future improvement.

Be open to opportunity

The poet Edith Lovejoy Pierce once wrote, 鈥淲e will open the book. Its pages are blank. We are going to put words on them ourselves. The book is called 鈥極pportunity,鈥� and its first chapter is New Year鈥檚 Day.鈥� I think this is a good way to sum up what I鈥檝e been trying to convey with this blog. We鈥檝e covered just a few of the ways to improve your agency鈥檚 technology stack in 2026, and by extension, how you deliver for customers and grow your business. If you鈥檙e open to experimenting with new technologies and laying the groundwork for more secure systems, you can seize these opportunities as the holidays end and the new year begins. Rest assured, your customers will thank you for it.

[i]

[ii]

[iii]

The post Level Up Your IT Game In 2026 appeared first on 星空传媒 星空传媒 Title Insurance Co..