AI Deepfakes and Wire Transfer Fraud: The New Frontier of Real Estate Scams Targeting Jamaica

• Fraudsters use AI voice cloning to impersonate solicitors and redirect wire transfers.
• Victims receive convincing calls or videos from what appears to be their own lawyer.
• Jamaica’s cybercrime unit has flagged real estate as a high-value target sector for wire fraud.
• Once funds leave the victim’s account, recovery is rare regardless of fraud report speed.
• Verification calls using a known number — not one in a received message — are the core defence.

Property transactions involve large sums moving between parties at defined stages: deposit, balance of purchase price, mortgage proceeds. That predictable flow of funds, combined with the multi-party nature of a conveyancing transaction — buyer, seller, two sets of lawyers, a bank, and sometimes a real estate agent — makes real estate an attractive target for business email compromise and, increasingly, AI-assisted impersonation fraud.

Cybercrime specialists in Jamaica and across the Caribbean have reported an increase in wire transfer fraud targeting property transactions. The method varies, but the core of each scheme is the same: at the critical moment when a large payment is about to be made, the victim receives what appears to be a legitimate instruction from a trusted party — their solicitor, their real estate agent, or a bank officer — directing them to send funds to a new or changed account. The account belongs to the fraudster.

How AI Changes the Threat

Traditional business email compromise relies on spoofed email addresses or hacked inboxes. AI voice cloning and video deepfake technology add a new dimension: a buyer who receives a phone call or video message that sounds and looks exactly like their solicitor, from what appears to be the solicitor’s known number, confirming that the bank account details for completing the purchase have changed, has very little in the way of instinctive defence.

AI voice models can be trained on as little as three seconds of a target’s voice, sourced from a LinkedIn video, a YouTube interview, or a recorded phone greeting. A fraudster who has intercepted email correspondence about a transaction knows when the payment is due, knows the approximate sum, and can produce a convincing impersonation of the solicitor at the exact moment the client is expecting to hear from them.

The Jamaican Context

Jamaica’s Cyber-crime Act 2015 criminalises computer-related fraud, interception of data, and identity-related offences, and provides the legal basis for prosecution. The Cybercrimes Act also facilitates international cooperation in investigating transnational fraud, which is the typical structure of wire transfer scams: the fraudster may be based anywhere in the world. However, prosecution is contingent on detection, and detection is rare when victims only realise the fraud has occurred after funds have left the jurisdiction.

The Financial Investigations Division (FID) and the Major Organised Crime and Anti-Corruption Agency (MOCA) both have mandates that cover financial crime in real estate transactions. Reports of suspected wire transfer fraud in a property context can be made to MOCA or to the police’s Cybercrime Unit.

Protective Steps for Buyers and Sellers

The most effective defence against wire transfer fraud is a simple one: before sending any large payment, call the recipient’s office on a number you looked up independently — not a number provided in an email, text, or incoming call — and verbally confirm the account details. This single step defeats the vast majority of business email compromise and AI impersonation schemes, because the fraudster cannot intercept a call you initiate to a number they have not given you.

Lawyers, real estate agents, and banks should establish with their clients at the start of every transaction that account details will never be changed by email or phone message alone, and that any purported change of account must be verified by an in-person meeting or a call to the office’s main switchboard. Firms that handle property transactions regularly should consider implementing dual-authorisation for outgoing payments above a threshold amount. Guidance on cybercrime reporting and prevention is available from the Jamaica Information Service.