What payment fraud looks like and why homeowners are targets
Payment fraud is when someone uses your financial information — your bank account, credit card, or mortgage account number — to move money without your permission. Homeowners are common targets because mortgage payments are large, regular, and often made by automatic transfer or check. A fraudster who intercepts even one payment can steal thousands of dollars.
The most common forms are wire fraud (redirecting a wire transfer meant for your lender to a criminal's account), check fraud (forging your name or intercepting a mailed check), and account takeover (gaining access to your online banking and changing the payment destination). Each one looks different and requires different steps to catch and stop.
The danger is timing. If a fraudulent payment goes through before you notice, your mortgage payment is late, your credit report gets dinged, and you may face late fees or even foreclosure proceedings while you fight to recover the money. Banks and lenders can take weeks to reverse fraudulent transfers, and some never do.
Key Takeaways
- Wire fraud is the most expensive type for homeowners because large sums move instantly and are hard to reverse; never wire money based on an email or phone call alone.
- Check fraud happens when someone intercepts your mailed check or forges your signature; use a locked mailbox or pay online instead.
- Account takeover occurs when a criminal gains your login credentials and changes where payments go; use a unique, strong password and enable two-factor authentication on your mortgage account.
- If you spot fraud, contact your lender and bank immediately, file a police report, and place a fraud alert with the credit bureaus.
- Verify payment instructions directly with your lender by calling the number on your mortgage statement, never a number provided in an email or text.
Wire fraud: the most costly form and how to prevent it
Wire fraud happens when you send money to what you think is your lender's account, but it actually goes to a criminal's bank. This is the most expensive type of payment fraud because wire transfers are nearly impossible to reverse once they clear. A criminal can drain tens of thousands of dollars in minutes.
The setup is usually an email or text that looks like it came from your lender or title company. It contains new wiring instructions and urgency — "wire funds by 5 p.m. today" or "confirm receipt immediately." The email address is almost correct but slightly off (like lender-payments@gmail.com instead of the real domain). You wire the money, and it vanishes.
To prevent wire fraud, never act on wiring instructions that arrive by email, text, or phone call. Instead, call your lender using the phone number on your mortgage statement or property documents. Ask them to confirm whether they sent that message and whether the account number is correct. Do this every single time, even if you have wired to them before. Lenders expect this question and will not be annoyed.
If you are closing on a home purchase, the title company will send wiring instructions. Call the title company directly using the number from your closing disclosure or the company's website — not a number in the email. Confirm the wire amount, the account number, and the deadline before you send anything.
Check fraud and mail interception
Check fraud takes two forms: someone intercepts a mailed check before it reaches your lender, or someone forges your signature on a blank check. Either way, the check clears from your account and your mortgage payment never arrives.
Interception is common in neighborhoods with unsecured mailboxes. A criminal watches for outgoing mail, takes the check, and either deposits it into their own account (after altering the payee name) or sells it. You do not notice until your lender sends a late notice.
The simplest prevention is to stop mailing checks altogether. Pay online through your lender's website or mobile app, set up automatic transfers from your bank, or use your bank's bill-pay service. These methods leave a clear digital record and eliminate the mail-theft window.
If you must mail a check, use a locked mailbox or hand-deliver it to your lender's office. Never leave outgoing mail in an unsecured residential mailbox overnight. If you are away from home for an extended period, ask the post office to hold your mail or have a trusted person collect it daily.
Account takeover: when a criminal gains your login access
Account takeover happens when someone obtains your username and password for your mortgage lender's online portal. Once inside, they change the payment destination to their own bank account. Your next automatic payment goes to them instead of your lender, and you do not find out until the late notice arrives.
Criminals usually get login credentials through phishing emails (fake emails that look like they came from your lender and ask you to "verify" your password), data breaches at other companies where you reused the same password, or malware on your computer. Once they are in, they can also change your email address on file, so password-reset emails go to them instead of you.
Protect your account by using a password that is unique to your lender — do not reuse a password from another website or service. Make it at least 12 characters long and include uppercase letters, numbers, and symbols. Store it in a password manager like Bitwarden or 1Password rather than writing it down or using the same password everywhere.
Enable two-factor authentication (also called 2FA) on your mortgage account if your lender offers it. This means that even if someone has your password, they cannot log in without a code sent to your phone or email. Check your lender's website for the security settings menu, usually under "Account" or "Security."
Spotting fraud before it costs you money
The first sign of payment fraud is usually a late notice from your lender for a payment you know you made. Do not assume it is a clerical error. Log into your bank account and your lender's portal immediately to check where the money went.
Look for these red flags: a payment that left your bank account but does not appear in your lender's system, a payment that went to an unfamiliar account number, a change in your payment method that you did not authorize, or an email from your lender asking you to re-verify your account information. If you see any of these, contact your lender and bank right away.
Check your mortgage statement and online account monthly, not just when a payment is due. Criminals sometimes change your mailing address or email address first, so you stop receiving statements and do not notice the fraud for weeks. If your statement stops arriving or your online login stops working, call your lender to ask why.
Monitor your credit report for unauthorized accounts or inquiries. You can view your credit report free once per year at annualcreditreport.com. If you see accounts you did not open or hard inquiries you did not authorize, a criminal may have your personal information and could be setting up fraud.
What to do if you discover fraud
If you believe your mortgage payment was fraudulently diverted or your account was compromised, act immediately. Every day of delay makes recovery harder and increases the risk of a late payment on your credit report.
First, contact your lender's fraud department or customer service line. Use the phone number on your mortgage statement, not any number in a suspicious email or text. Tell them what happened, when you discovered it, and what evidence you have (screenshots, bank statements, emails). Ask them to reverse any fraudulent charges and confirm that your account is secure.
Next, contact your bank or credit card company. Report the fraudulent transaction and ask them to reverse it. Banks can sometimes recover money that was sent to another account, especially if they act quickly. Provide them with the same details you gave your lender.
File a report with your local police department. You will need this report for your lender and bank, and it creates an official record. You can file online in many jurisdictions or visit your local precinct in person.
Place a fraud alert with the three credit bureaus (Equifax, Experian, and TransUnion) by contacting one of them; they will notify the other two. A fraud alert tells creditors to verify your identity before opening new accounts in your name. You can do this free at equifax.com, experian.com, or transunion.com.
Recovering money and protecting your credit
Recovery depends on the type of fraud and how quickly you reported it. Wire fraud is the hardest to reverse because wire transfers are designed to be final. Your bank can try to recall the transfer, but if the criminal has already withdrawn the money, it is gone. Some banks have fraud insurance that covers wire fraud, but coverage varies.
Check fraud and account takeover are easier to reverse because banks can dispute the transaction and often recover the money within 10 business days. Keep detailed records of every communication with your lender and bank, including dates, times, names of people you spoke with, and what was said.
While you are fighting the fraud, your mortgage payment is still late. Contact your lender and explain the situation. Ask whether they will waive the late fee and whether the late payment will be reported to the credit bureaus. Some lenders will hold off on reporting if you can show proof of the fraud and your efforts to recover the money.
If the late payment is already on your credit report, you can dispute it with the credit bureaus once you have recovered the money or have a written statement from your lender confirming the fraud. The bureaus will investigate and may remove the late mark if they determine it was fraudulent.
Frequently Asked Questions
Can my bank reverse a wire transfer if I sent it to a fraudster?
Banks can attempt to recall a wire transfer, but success depends on whether the receiving bank has already released the funds. If the money is still in the receiving account, the bank may be able to reverse it. If the criminal has withdrawn it, recovery is unlikely. Report wire fraud to your bank immediately — waiting even a few hours reduces the chance of recovery.
What if my lender says I am responsible for the fraudulent payment?
You are generally not responsible for fraudulent transactions if you reported them promptly and did not cause the fraud through negligence (like sharing your password or ignoring security warnings). If your lender refuses to reverse the charge, file a complaint with your state's banking regulator or the Consumer Financial Protection Bureau (CFPB). Document everything in writing.
How long does it take to recover money from payment fraud?
Recovery timelines vary. Banks typically investigate fraud claims within 10 business days and may issue a provisional credit while they investigate. A full reversal can take 30 to 90 days. Wire fraud is slower and less likely to be recovered. Ask your bank and lender for a timeline specific to your case.
Will payment fraud hurt my credit score?
A late payment caused by fraud can damage your credit score, but you can dispute it with the credit bureaus once the fraud is confirmed. If your lender confirms the fraud in writing, include that letter with your dispute. The bureaus may remove the late mark if they determine it was not your fault.
Should I change my mortgage payment method after fraud?
Yes. If your account was compromised, switch to a different payment method — for example, from automatic transfer to online bill pay, or from checks to automatic transfer. Change your password and enable two-factor authentication. If your email or phone number was changed by the fraudster, update those too and monitor your account closely for the next few months.