Wire transfer fraud is any scheme that tricks you into sending money by wire to an account a criminal controls, and once the transfer settles you have no automatic right to get it back. The FBI’s Internet Crime Complaint Center recorded over $3 billion in losses from business email compromise alone in 2025, plus hundreds of millions more from real estate closing scams, romance fraud, and AI-powered impersonation.1Internet Crime Complaint Center (IC3). 2025 IC3 Annual Report Recovery is possible in a narrow window measured in hours, not days. Everything else in this article follows from that fact.
The Main Patterns to Recognize
Most wire fraud runs on one of a few scripts. The wrapping changes; the mechanics don’t. Someone you trust appears to ask for money, and there’s a reason you can’t wait.
Business Email Compromise
Business email compromise (BEC) is the single most expensive category of wire fraud. Attackers break into a company’s email system and read quietly until they see an upcoming payment. Then they send a message that looks like it came from a supervisor, vendor, or business partner, with new wiring instructions. The email often references real invoice numbers, project names, and transaction details, because the sender has been inside the thread. Between October 2013 and December 2023, BEC schemes accounted for more than $55 billion in reported losses worldwide.2Internet Crime Complaint Center (IC3). Business Email Compromise: The $55 Billion Scam
Real Estate Closing Scams
Real estate wire fraud hits home buyers at closing. Criminals hack or spoof emails from title companies, real estate agents, or settlement attorneys, then send fraudulent wiring instructions for the buyer’s down payment or closing costs. The buyer is already expecting to wire a large sum, so the request feels routine. FBI data shows real estate fraud produced more than $275 million in losses from at least 12,368 victims in 2025.1Internet Crime Complaint Center (IC3). 2025 IC3 Annual Report Attacks spike on Fridays and before holiday weekends, when banks are harder to reach.
Romance and Emergency Scams
Romance scams work on a longer clock. The fraudster builds a relationship over weeks or months on a dating site or social platform, then invents a crisis: a medical bill, a legal fee, a stranded traveler. Emergency scams use the same emotional lever on a shorter timeline, with a caller claiming to be a grandchild who has been arrested or injured and needs bail money wired now.
AI-Powered Voice Impersonation
Voice-cloning tools have made emergency and BEC calls dramatically more convincing. Criminals can build a realistic copy of someone’s voice from a few seconds of audio pulled from social media posts or voicemail greetings. The clone reproduces tone, cadence, and accent closely enough that family members often can’t tell it’s fake. In BEC attacks, a cloned executive voice calls the accounting department and verbally authorizes a transfer that the email set up.
Red Flags in the Request Itself
Urgency is the most reliable warning sign. Nearly every wire fraud attempt includes a reason you can’t wait: a deal will collapse, a penalty will apply, a family member will stay in jail. That pressure exists to stop you from making the one phone call that would end the scam.
Look at the email address, not just the display name. Spoofed addresses frequently swap a single character, replacing a lowercase “m” with “rn” so that “company.com” becomes “cornpany.com.” The difference is easy to miss on a phone. Check the reply-to header too, because it often points to a completely different address from the one in the “from” field.
Last-minute changes to wiring instructions deserve the highest suspicion. Scammers will say the original bank account is “under audit” or that the company recently switched banks. These changes almost always arrive by email rather than phone (though AI voice cloning is narrowing that gap). Any request to keep the transaction confidential, or to avoid discussing it with your bank, is a near-certain sign of fraud.
How to Verify Before You Send
Verify every wire transfer through a separate channel. If instructions come by email, call the sender at a phone number you already have on file, not a number included in the email. This single step stops the majority of wire fraud attempts, and skipping it is where most victims lose their money. It feels redundant. Redundancy is the point.
Turn on multi-factor authentication for every banking and email account. If your email is protected only by a password, a criminal who obtains that password can read every message and time an attack perfectly. A second factor from an authenticator app or hardware key makes that first breach far less useful.
Business accounts benefit from dual-authorization policies, where two employees must approve any outgoing wire.3Federal Financial Institutions Examination Council. Authentication and Access to Financial Institution Services and Systems A second reviewer who wasn’t part of the original email thread is far more likely to notice odd account details or unusual timing. For international transfers, you can cross-check the recipient’s Bank Identifier Code against SWIFT’s online registry to confirm the receiving institution.4SWIFT. BIC Search
For real estate transactions, confirm wiring instructions in person or by phone with your title company or closing attorney before sending anything. Set that verification procedure at the beginning of the deal, before any money is due, and agree that email alone will never be enough.
What to Do in the First 24 to 72 Hours
The first day or two after a fraudulent wire is the only realistic recovery window. Every hour that passes makes recovery less likely, because the money is being moved, split, and withdrawn on the other end.
Take these steps in order:
- Call your bank’s fraud department and request a wire recall. For domestic transfers, the bank will attempt to reach the receiving institution directly. For international transfers, your bank can initiate a SWIFT recall notice. Ask the bank to issue a Hold Harmless Letter or Letter of Indemnity to the receiving bank.5Department of Justice. Wire Transfer Fraud: How Scams Work and How to Protect Yourself – Section: Guidance for Victims
- File an IC3 complaint at ic3.gov. Include the account numbers for both the sending and receiving banks, the transfer date and amount, and any email headers from the fraudulent messages. IC3’s Recovery Asset Team works with banks to freeze funds in domestic accounts. For international transfers of $50,000 or more, the FBI can activate the Financial Fraud Kill Chain to coordinate with foreign banks and law enforcement, but only if you report within 72 hours.6Internet Crime Complaint Center (IC3). Frequently Asked Questions5Department of Justice. Wire Transfer Fraud: How Scams Work and How to Protect Yourself – Section: Guidance for Victims
- File a separate report at ReportFraud.ftc.gov. The FTC doesn’t investigate individual cases, but the data feeds a national fraud database used by law enforcement.
- Preserve every scrap of evidence. Save emails, texts, phone logs, and screenshots. Forward the original fraudulent email as an attachment rather than inline so the full header information survives. Don’t delete anything, even if it looks irrelevant.
Your bank will run an internal investigation, which typically takes several weeks. Recovery rates are low, especially once money has reached an overseas account and been withdrawn. File the reports anyway. The documentation supports insurance claims, tax deductions, and any later legal action.
Who Actually Absorbs the Loss
The legal framework for wire transfers gives victims far fewer protections than most people assume, and this is the part that catches people hardest.
Consumers: Regulation E Doesn’t Apply
The Electronic Fund Transfer Act and its implementing rule, Regulation E, protect consumers against unauthorized debit card charges, ACH debits, and certain peer-to-peer payments.7Consumer Financial Protection Bureau. Regulation E – 1005.3 Coverage Wire transfers are explicitly excluded. The regulation carves out any transfer through Fedwire or a similar wire transfer system, and SWIFT falls under the same exclusion.8eCFR. 12 CFR Part 205 – Electronic Fund Transfers (Regulation E) – Section: 205.3 Coverage
The practical result: if you initiated the wire yourself, even because a criminal deceived you, your bank generally has no obligation to refund the money. You authorized the payment. Being deceived about where it was going doesn’t change how the law classifies the transfer.
Businesses: UCC Article 4A
For business wire transfers, Article 4A of the Uniform Commercial Code decides who eats the loss. Under UCC § 4A-202, an unauthorized payment order is treated as valid, meaning the business absorbs the loss, if the bank accepted it in good faith and in compliance with a commercially reasonable security procedure the business had agreed to.9Legal Information Institute (LII). UCC 4A-202 – Authorized and Verified Payment Orders
Whether a security procedure is “commercially reasonable” is a question courts answer using several factors: the size and frequency of the business’s typical transfers, what security options the bank offered, what the business chose, and what similar banks and customers generally use. If the bank offered stronger authentication (callback verification or token-based authorization) and the business declined it, the business has a weak argument that the bank should pay. If the bank never offered adequate security for the volume involved, the bank may be on the hook.9Legal Information Institute (LII). UCC 4A-202 – Authorized and Verified Payment Orders
Tax Treatment of a Wire Fraud Loss
Whether you can deduct a wire fraud loss on your federal taxes depends on why you were sending the money. Under 26 U.S.C. § 165, theft losses from a transaction entered into for profit remain deductible.10Office of the Law Revision Counsel. 26 USC 165 – Losses That covers business payments, investment transactions, and real estate purchases, which is where wire fraud losses tend to be largest.
Personal theft losses that aren’t connected to a profit-making transaction have been mostly nondeductible since the Tax Cuts and Jobs Act took effect in 2018. That restriction limits personal casualty and theft loss deductions to federally declared disasters and, more recently, state-declared disasters.11Congress.gov. The Nonbusiness Casualty Loss Deduction A romance scam loss generally doesn’t qualify unless you can show you entered the transaction expecting financial gain.
IRS guidance has broadened the profit-motive interpretation somewhat, and a taxpayer who was tricked into moving money in the false belief they were protecting their own funds or investments may still be able to establish the profit connection. To claim the deduction, file IRS Form 4684 in the tax year you discover the theft, not the year the money was taken.12Internal Revenue Service. Instructions for Form 4684 The loss must qualify as theft under your state’s criminal law, and you must have no reasonable expectation of recovering the funds.
Insurance That May Cover the Loss
Standard homeowners and renters policies don’t cover wire transfer fraud. Personal cyber insurance endorsements, added on to an existing homeowners policy, are increasingly available and may cover fraud losses. Limits vary widely, from roughly $25,000 up to $250,000 or more. Read the endorsement carefully, because exclusions for voluntary transfers (where you authorized the wire yourself) can gut the coverage for the exact scenario you’re trying to protect against.
Businesses have more options. Commercial crime insurance policies can include a social engineering fraud endorsement designed for losses where an employee is deceived into sending money to a criminal. These endorsements typically cover vendor impersonation, executive impersonation, and client impersonation. Limits often start around $250,000 per occurrence, with higher limits available through additional underwriting. The policy term to look for is a carve-back to the voluntary parting exclusion. Without it, the insurer may deny the claim on the grounds that the employee voluntarily sent the money.
If your business sends wire transfers regularly, a social engineering endorsement is one of the few ways to shift the financial risk of a successful attack. The premium is modest relative to the exposure, and the coverage fills a gap that federal law and standard banking agreements leave wide open.