WFG National Title Launches Cyberfraud Awareness Team

2

WFG National Title, a Portland-based national title insurance, settlement, valuation and technology services company, is creating a Cyberfraud Awareness Team to educate consumers and companies involved in the home buying and mortgage process.

The company is asking industry participants – including real estate agents, mortgage lenders, financial institutions and other title insurance companies – to join the team to educate consumers about the dangers of online and email fraud, particularly at the time of closing when funds need to be wired to settlement service providers.

WFG has hired Aaron Cole, a local homeowner who just lost $123,000 in a sophisticated email scam, as the team spokesperson.

A few days before the Coles were supposed to close on the purchase of their new home, Aaron Cole received an email – purportedly from WFG – instructing him to wire the down payment to an email address that looked like WFG’s but actually belonged to the scam artist.

By the time Cole realized that the email was bogus, the money had been transferred from his bank account to a bank account in Florida before eventually being transferred to four other banks and then out of the country.

The Coles were in danger of losing their home days before Christmas. WFG found a way to help the Cole family and put Aaron in a position to educate other consumers on the dangers of cyberfraud, particularly the fraudulent email scam known as “phishing.”

After conducting a thorough investigation, Don O’Neill, executive vice president and chief compliance officer for WFG, confirmed that WFG’s email account was secure and clear of any hacking activity, which typically means in these cases that an email or emails from other parties involved in the transaction were compromised.

Personal email accounts are usually not encrypted and can be easily hacked, as is often the case for consumers and real estate agents working on their personal cell phones, computers and email accounts. 

“While Aaron’s story has a happy ending, most borrowers scammed by email hackers generally wind up with an unhappy ending,” O’Neill says in a release. “We believe people will pay attention to Aaron’s story because they can relate to other consumers who are in the process of transferring funds while purchasing a home.”

WFG is creating an awareness among the large number of real estate agencies that do not consistently leverage critical cybersecurity protections. According to Bruce Phillips, head of WFG’s information security team (INFOSEC), without these protections, individuals and companies are vulnerable to hacking.

“Unsecure email and mobile devices are particularly at risk, and consumers are vulnerable at emotional times with tight deadlines, such as home closings,” Phillips says.

O’Neill, Phillips and WFG first recommend to always make absolutely sure an email address is legitimate before sending any sensitive personal, private information or documents or money to anyone – even if the recipient is someone they have emailed in the past.

“If you’re not sure, call the institution you’re working with to verify wire transfer directions,” O’Neill says. “Be especially on guard when you’re given last-minute changes and instructions to send money immediately. Those are red flags.”

Subscribe
Notify of
guest
2 Comments
newest
oldest most voted
Inline Feedbacks
View all comments
J. Souza
J. Souza
5 years ago

#1-Where, what, and who are the companies that provide these prevention services, such as “phishing” ?
#2-Your comment makes it look like Gmail (& others) automatically provide email encryption. I believe you meant, pethaps, to add the fact this service must be requested and applied.

Andy White
Andy White
5 years ago

There are services to prevent this actual scam, and they only cost $1-3 per home purchase. Unfortunately, many title companies think they don’t need it because they use ‘secure’ email (e.g. WFG), and their buyers become defrauded.

Also, the comment “Personal email accounts are usually not encrypted” – most email domains provide email encryption (e.g. Gmail, Outlook.com) by default.