{"success":true,"data":{"id":"realestate-earnest-money-wire-fraud","label":"Fake earnest money deposit wire instructions from an unknown sender — \"new wire instructions for your earnest money deposit — wire closing funds to a different account than previously established\"; wire-fraud BEC variant targeting homebuyers.","description":"Fake earnest money deposit wire instructions from an unknown sender in a real estate transaction — wire-fraud BEC variant specifically targeting homebuyers' earnest money. \"New/updated wire instructions for your earnest money deposit — please wire closing funds to a different account than previously established.\" SACRED: real wire instruction documents and earnest money communications are protected by safety-keywords.ts ('wire instructions', 'earnest money'). This signal fires on the cold-inbound variant: earnest money + new wire instructions + same-day/urgent framing + no In-Reply-To context (no prior thread). Real closing professionals never send wire-instruction changes via cold inbound email — the FBI reports $446M lost annually to real estate wire fraud. Detection: earnest money + wire instruction vocabulary + urgency/same-day language + no In-Reply-To + no List-Unsubscribe. Source: GC1-R17; FBI IC3 Real Estate Wire Fraud advisory 2025; ALTA best practices.","tier":"warning","category":"phishing","isThin":false}}