Most articles about real estate fraud have focused on the same scenario: hackers breaking into professionals' email accounts to learn about upcoming transactions, then emailing the buyer to wire money to the hacker's account. In reality, there are many other ways hackers insert themselves into communications, such as tricking the real estate professional into installing malicious software on their computer or phone, or changing escrow instructions (or other disbursements) at the office of the real estate professional via email. Hacking can also be done by less sophisticated methods, including phone, fax or inter-office memo. The latest evolution of the scam, however, is truly insidious.

1. A hacker obtains a REALTOR®'s transaction management/e-signature system login credentials by using a phishing email that looks like it's from the transaction management system.

• The user first types their credentials into the fake transaction management website, then are forwarded to the real one where their credentials work. They never even notice they've been phished. They just think they mistyped a password the first time.

• The hacker may set up an email-filtering rule so emails from the client "skip the inbox" and go right to the hacker.
   
• Emails to clients can now be sent from the agent's real email address. It's not a spoofed email (which only looks like it's from the agent's account).

4. Because the hacker has information about the mortgage and title company from the transaction system, they can spoof an email from those parties, too. When a client receives a (spoofed) email from multiple parties that confirm each other's message, they're more likely to trust each of those emails.