Wire Fraud When Buying Property in Spain: How to Protect Your Transfer

If you take one precaution when buying in Spain, make it this one: before you send a single euro, call your lawyer or agent on a phone number you already know — not one from an email — and confirm the bank details out loud. Real estate wire fraud works by slipping a fake "the account has changed" email into your inbox at the exact moment you're expecting to transfer money. The scam is entirely preventable, but only if you verify every payment instruction through a channel the fraudster can't touch: a live voice on a known number. Everything else in this guide is detail around that one habit.

A note before you dive in: banking procedures, fraud tactics, and the exact steps to recover a misdirected transfer shift over time, and they differ between US and Spanish banks. What follows reflects our latest research, but confirm the current specifics with your bank and your lawyer before you act on them.

Why American Buyers Are Right to Worry About This

If you've bought or sold a home in the US in the last few years, you've probably seen the warnings in bold at the bottom of every email from your title company: we will never change wire instructions by email. That warning exists because real estate wire fraud has become one of the most damaging financial crimes in the country. According to the FBI's Internet Crime Complaint Center, real estate–related fraud accounted for 12,368 complaints and more than $275 million in reported losses in its most recent annual report (2025 IC3 Annual Report, as of August 2026) — and those are only the cases people reported. The broader category these scams fall under, business email compromise, drove more than $3 billion in losses in the same report. You can see the FBI's own breakdown at ic3.gov.

So the instinct that makes you nervous about wiring a large sum to an unfamiliar account is a good instinct. Keep it. The goal of this guide isn't to talk you out of that caution — it's to channel it into a simple protocol so you can complete a Spanish purchase with confidence rather than dread.

Buying abroad does add three things that make the fraud slightly easier to pull off, and worth naming plainly:

First, the bank details genuinely are unfamiliar. A Spanish IBAN is a long string starting with "ES" followed by 22 digits. To an American eye, there's no way to "recognize" it the way you might recognize a domestic account. A fraudster's fake IBAN looks exactly as legitimate as a real one — because to you, both look equally foreign. That's precisely the vulnerability the scam exploits.

Second, the sums are large and time-pressured. A reservation deposit, then a larger deposit at private contract, then the completion balance at the notary — each is a moment where a big transfer is expected and everyone's attention is on the deal closing on schedule. Fraudsters love deadlines, because urgency shuts down double-checking.

Third, everything happens over email, often across time zones, frequently in a second language for at least one party. You may never sit in the same room as your lawyer before completion. That distance is normal in a cross-border purchase — but it also means email carries more weight than it should, which is exactly the channel you cannot fully trust.

How the Scam Actually Works

Understanding the mechanics takes the mystery out of it. Business email compromise in a property purchase almost always follows the same shape.

At some point weeks before your money moves, a criminal quietly gains visibility into an email conversation — sometimes by compromising an email account (your agent's, a lawyer's assistant's, occasionally a buyer's), sometimes just by spoofing an address so it looks almost identical to a real one. They don't do anything at first. They read. They learn the names, the property, the timeline, the tone people use with each other, and — critically — the date the transfer is due.

Then, close to that date, comes the message. It looks like it's from your lawyer or agent. It references the right property, the right amount, the right stage of the deal. And it says some version of: our bank account has changed, please use these updated details for the transfer. Sometimes the reason given is plausible-sounding — an audit, a new client account, a problem with the old bank. The new IBAN belongs to the fraudster. If you pay it, the money is gone within hours, often moved onward through several accounts before anyone notices.

The reason this works isn't that victims are careless. It works because the email arrives exactly when a payment is expected, from a name you trust, about a deal that's real. Nothing feels off. That's the whole design.

The Red Flags — What Should Make You Stop

You don't need to become a cybersecurity expert. You need to recognize a short list of moments that should trigger a phone call before you do anything else.

Any change to bank details, ever. This is the big one. A genuine, established lawyer or agency does not casually change the client account they've asked you to pay into halfway through a transaction. Treat any mid-deal change of IBAN as a fraud attempt until you have personally confirmed otherwise by voice. Not "probably fine" — confirmed.

Urgency and pressure. "The seller needs this today or we lose the property." "The notary appointment is at risk." Real deadlines exist in Spanish purchases, but a legitimate professional will never object to you pausing five minutes to verify a bank detail by phone. Pushback against verification is itself a red flag.

Small oddities in the email. A sender address that's subtly wrong (a swapped letter, a .net instead of .com, a slightly different domain). Slightly off phrasing. A reply that doesn't quite continue the previous thread. A request to keep the change "confidential." None of these is proof on its own — but any of them means slow down and call.

A request that breaks the pattern. New account, new bank, a bank in a different country from where you'd expect, a personal account instead of a firm's client account. Anything that departs from what was previously agreed deserves a verifying call.

The Verification Protocol — Your One Rule

Here's the whole defense, and it's simple enough to do every single time: confirm every payment instruction by voice, on a number you already have, before you transfer.

Concretely:

• Get the bank details early and in person or by call, not just by email. At the start of the process, establish with your lawyer where completion funds will go, and note the IBAN. Confirm it verbally.
• Save a known-good phone number for your lawyer and agent at the start — from their official website, their business card, the number you've already been speaking to them on. Not a number from the email asking you to pay.
• Before every transfer, call that known number and read the IBAN back digit by digit to a human who confirms it. Do this even if nothing looks wrong. Especially then.
• Never accept a change of bank details by email alone. If an email says the account changed, assume it's fraud and call to confirm. If the change is genuine, your lawyer will happily confirm it. If it isn't, you've just stopped a six-figure loss with a two-minute call.
• Ask your Spanish bank about confirmation-of-payee checks. Increasingly, transfers can be checked against the account holder's name before sending. Use any such feature your bank offers.

That's it. If you do nothing else, do this. The fraudster's entire scheme depends on you trusting an emailed instruction without picking up the phone. Remove that one assumption and the scam collapses.

The FBI's guidance for the public says the same thing in its own words — verify payment and account changes in person or by a known phone number, and be suspicious of any last-minute change to wiring instructions (ic3.gov). The National Association of Realtors publishes wire fraud guidance for buyers along the same lines at nar.realtor, and the US Cybersecurity and Infrastructure Security Agency explains the broader business email compromise pattern at cisa.gov.

How Spanish Notary and Lawyer Client Accounts Work

Part of what makes American buyers uneasy is not knowing where the money is supposed to go in a Spanish purchase. Knowing the normal, legitimate flow makes an abnormal request much easier to spot.

In a typical Spanish transaction, your own independent lawyer handles or supervises the movement of your funds. Reputable Spanish law firms hold money on behalf of clients in a dedicated client account (a cuenta cliente) — an account kept separate from the firm's own operating money, used to receive your funds and pay them out to the seller at the right moment. This is the account you'd normally be paying into, and its details should be established with you early and confirmed by voice, not sprung on you at the last minute.

Completion itself happens in front of a notary (notario), a public official whose job is to certify that the deed of sale is properly executed. In practice, the balance of the purchase price is very often paid at completion by a Spanish bank draft (cheque bancario) — a certified check your bank issues, handed to the seller in front of the notary — rather than by a live wire transfer done in the room. That matters for fraud, because arranging a bank draft involves your Spanish bank directly and gives another built-in checkpoint. Your lawyer will tell you in advance which method your completion will use.

The practical takeaway: the legitimate destinations for your money in a Spanish purchase are a small, known set — your lawyer's client account, or a bank draft arranged through your own bank. Any email steering you somewhere else, especially at short notice, is exactly the thing to verify by phone before acting. If you don't yet have an independent Spanish lawyer, that's the first gap to close, and our guide on do you need a Spanish lawyer explains why that lawyer is non-negotiable — including for keeping your funds safe. Where this sits in the overall purchase timeline is covered in how to buy property in Spain as an American.

If You've Already Sent the Money — Act Within Hours

If you suspect a transfer has gone to a fraudster, speed is everything. Misdirected funds can sometimes be frozen and recovered, but the window is measured in hours to a couple of days, not weeks. Do these in parallel, immediately:

1. Call your own bank (the sending bank) right away, tell them you've been the victim of wire fraud or business email compromise, and ask them to attempt a recall of the funds and to contact the receiving bank to freeze the account.
2. Contact the receiving bank — the Spanish bank the money went to — through your lawyer if you can, to report the fraud and request a freeze on the funds.
3. Report it to the FBI immediately at [ic3.gov](https://www.ic3.gov). The IC3's Recovery Asset Team works with banks to try to freeze fraudulent transfers, and reporting fast measurably improves the odds. Report even if the money went abroad — that's exactly the kind of case they handle.
4. Report it in Spain too — to the Spanish police (a denuncia) and, through your lawyer, to the relevant Spanish authorities, since the receiving account is there.
5. Tell your lawyer and agent immediately so everyone in the transaction knows and no further payments go out.

Keep every email, every bank reference, and a timeline of what happened. It won't feel calm in the moment, but banks and law enforcement have handled this exact scenario many times, and fast, parallel action is what gives recovery a real chance.

The Reassuring Part

It's worth ending where we started, because the fear this topic provokes is out of proportion to how hard it is to defend against. Every large property purchase, in the US or Spain, involves moving serious money — and the entire fraud depends on one thing: you trusting an emailed instruction without confirming it by voice. That's a single point of failure, and it's entirely in your control. Buyers who verify by phone essentially don't fall for this scam. The precaution costs you two minutes and one phone call per transfer.

Working with people who take this as seriously as you do helps too. At Luumare Estate we coordinate purchases for international buyers with our network of partner lawyers, and clear, verified payment steps — established up front, confirmed by voice, never changed by email — are simply part of how a transaction should run. If you'd like to understand how the funds flow works for a specific property you're considering, see our services page, or reach out and we'll walk you through it before any money moves.