Email Hackers Now Cost Homebuyers £78,000 Per Fraud Case

UK homebuyers lost an average of £78,393 each to conveyancing fraud during 2024-25, according to figures from Report Fraud, with 140 property-related cases logged over the period. The mechanics of the scam are depressingly simple: criminals infiltrate email exchanges between buyers, sellers, estate agents and solicitors, then send convincing but fraudulent payment instructions that redirect deposits or completion funds into accounts controlled by fraudsters. By the time anyone notices, the money has typically been moved through several accounts and is unrecoverable.

The scale of these losses deserves attention precisely because they fall at the most vulnerable moment in a property transaction — the point of completion, when large sums move quickly and emotions run high. A first-time buyer transferring a life-savings deposit, or a landlord settling on a buy-to-let purchase in Manchester or Leeds, is often juggling multiple emails, financial pressure and unfamiliar processes simultaneously. Fraudsters have identified this as a moment of maximum distraction and minimum scrutiny, and they have professionalised their approach accordingly, often using spoofed domains that are near-identical to a genuine solicitor's email address.

What makes this data significant for the wider market is the scale of exposure across the UK's transaction volume. With roughly 1.1 million residential property transactions completed annually in England and Wales, even a relatively small number of successful frauds — 140 reported cases — translates into aggregate losses approaching £11 million for the year, and that figure almost certainly understates the true picture given persistent underreporting of fraud, particularly among victims embarrassed by the circumstances or unsure where to report it. Law firms and conveyancers, who carry professional indemnity exposure and reputational risk when client accounts are compromised, are increasingly being forced to invest in verification protocols, including telephone confirmation of bank details and multi-factor authentication on email systems.

Regional variation matters here too. High-value markets such as London and Surrey present a richer target for fraudsters, given average transaction sums and deposit sizes are substantially larger — a diverted deposit on a £750,000 Surrey family home represents a far more lucrative haul than the equivalent fraud attempted in Newcastle or Liverpool, where average prices remain considerably lower. That said, cities with fast-growing investor activity, including Birmingham and Manchester, where institutional and overseas buy-to-let purchasers are transacting at pace, are becoming increasingly attractive targets precisely because volume and unfamiliarity with local solicitors create more opportunities for interception.

Over the next six to twelve months, expect conveyancing fraud to feature more prominently in professional indemnity insurance pricing and in Law Society guidance to member firms. Insurers are already tightening underwriting requirements around cybersecurity practices for conveyancing practices, and firms unable to demonstrate robust email verification systems may face higher premiums or restricted cover. For buy-to-let landlords and portfolio investors transacting at volume, this should prompt a reassessment of which conveyancers they instruct — firms with demonstrable cyber-hygiene credentials, including accreditation under schemes such as the Conveyancing Quality Scheme, will increasingly be seen as the safer choice, even if their fees sit above the market average. Developers selling new-build stock in bulk to investors face a parallel exposure, given the multiple email threads typically involved in off-plan and part-exchange transactions.

For first-time buyers, the practical takeaway is more immediate: never rely solely on emailed bank details, always confirm account numbers by phone using a number sourced independently rather than from the email itself, and treat any late change to payment instructions — particularly near completion — as an automatic red flag requiring verification. The broader lesson for the market is that as transaction values and volumes recover alongside easing mortgage rates through 2025 and into 2026, the attack surface for fraud grows in parallel. Conveyancing fraud is not a peripheral nuisance; it is a systemic risk that scales directly with market activity, and the industry's response — better technology, mandatory verification standards, and clearer client education — needs to scale just as fast.