Information security controls
Title company wire fraud protection
We protect title companies and settlement offices from Charleston to Savannah. Your office keeps its own callback rule, and we secure the email around it.
Closing office defense
Settlement agents run the last office before money moves.
Title or settlement offices send and receive wiring instructions at a closing. If a spoofed instruction bypasses your checks, the money departs. ALTA's Best Practices ask for a written information security plan and a written wire procedure.
- 1
Closer's mailbox
Strict sign-in rules limit what a stolen password can do against your closers' inboxes.
- 2
Wire desk
We secure the computers your staff uses to send out final payoff and wire numbers.
- 3
Callback rule for changed instructions
A written rule verifies every new account number by phone before a payment leaves.
Published numbers on business email compromise
Annual 2025 figures from the FBI show reported losses, and ALTA Best Practices lists the items a written information security plan should include.
24,768
Business email compromise complaints
Victims filed complaints in 2025 with $3,046,598,558 in reported losses.
$449,000
FBI-reported August 2025 closing wire over $449,000
Buyers sent a wire after an email impersonated their attorneys while closing on a home, and the recipient bank reported the full amount on hold after a complaint filing and a freeze request.
8
Items in ALTA Pillar 3.A
Multi-factor authentication, passwords, software updates, physical security, network and cloud security, use guidelines, encryption and monitoring.
FBI IC3 2025 Internet Crime Report and ALTA Best Practices 5.0.
Offices handling real estate closings
Census Bureau 2022 counts for six counties from Charleston to Savannah show 30 title and settlement offices and 980 law offices of all kinds.
Select an office type
Common mailbox risks
A business email compromise attack against a title office follows predictable steps.
Every step pairs an attacker's action with technical controls CloudCentric configures beforehand. Screenshots display Microsoft's own documentation using sample data.
Set up beforehand
FBI IC3 2025 report, NAR, ALTA and Microsoft Learn.
ALTA Pillar 3 alongside technical controls
ALTA Best Practices 5.0 Pillar 3 lists the elements a written information security plan should include. Listed items detail the systems CloudCentric configures. A title company owns its written plan and hires an outside assessor, while CloudCentric sets up and runs the technical controls.
ALTA reference
Software
See also
Response steps guide an office through an attacked mailbox.
Action steps follow ALTA's Rapid Response Plan and Microsoft's compromised account steps. Your office makes the phone calls to banks and transaction parties, while CloudCentric handles the technical controls for the mailbox.
ALTA's rapid response plan and Microsoft Learn.
Common questions about a title office's email defense
- What does ALTA Best Practices Pillar 3 ask of a title company?
ALTA asks for a written information security plan and a privacy plan with eight listed elements. Version 5.0 took effect on 10-08-2026.
- Where does the wire transfer procedure sit in ALTA guidelines?
Pillar 2.G asks for a written procedure that is tested at least annually, and it pairs with Pillar 2.K for a written response procedure.
- What does CloudCentric set up for Pillar 3 and who owns the plan?
A title company owns its written plan and works with an outside assessor. CloudCentric sets up and runs the technical controls.
- What can an office do today with no software at all?
NAR's steps advise a business to never send wiring instructions by email. A written callback rule verifies every changed detail by phone using independently obtained numbers.
- Can CloudCentric stop every fraudulent message?
No filter or rule is perfectly effective against every single attempt. A wire callback rule comes first to catch any attacks passing the technical defenses.
- What happens when a mailbox is hit and do Microsoft 365 and Google Workspace both work?
Our technicians lock down the compromised account, hunt for hidden inbox rules, and check your sign-in logs. We support both Microsoft 365 and Google Workspace, though you will need specific Microsoft plans to run alerts, Defender for Office 365, and attack simulation training.
- How does the work start and what does South Carolina require of closings?
Setup work starts with a call to (844) 422-7000, and coverage spans from Charleston to Savannah. South Carolina's state Supreme Court held that closings are conducted under an attorney's supervision.
Sources: ALTA Best Practices 5.0 (Pillars 2 and 3); ALTA Best Practices 5.0 release notes; ALTA rapid response plan for wire fraud incidents; FBI IC3 2025 Internet Crime Report; NAR wire fraud guidance; South Carolina Supreme Court, Doe v. McMaster; Microsoft Learn, respond to a compromised email account.
Secure your closing communications
Protect your title office and settlement agents against wire fraud with managed technical controls.