A spoofed closing instruction
- The problem
- A buyer receives wiring instructions that appear to come from the agent, sent from a domain one character off the brokerage name.
- What we do
- The lookalike domain is filtered before delivery on the brokerage side, external messages are clearly marked, and the agent has practiced this exact scenario in training.
- The result
- The attempt is reported rather than forwarded, and the transaction closes normally.