Impersonators frequently clone an escrow attorney’s name and letterhead while changing only the bank account. A single callback habit can prevent loss; after a loss, documentation drives response.
Compare the fraudulent instructions to prior authentic letters from the same firm. Preserve both versions, email headers and any portal messages that delivered the altered details.
Notify the real attorney and the sending bank the same day. The legitimate firm’s confirmation that its account did not receive funds is powerful for recalls and reports.
Ask whether the firm’s domain, MFA or staff mailbox was compromised or whether the attack was pure spoofing. That distinction guides IT preservation and later claims analysis.
Disclaimer: This article provides general information only. It is not legal advice and does not guarantee recovery in any matter.