Wire Fraud on Rental Deposits in San Antonio: The Title-Company Playbook Renters Should Steal

Wire fraud is not only a closing-table problem. In Bexar County, renters lose security deposits and first-month's rent every month to the same playbook used against homebuyers: a spoofed email, an urgent tone, a new set of wire instructions that look just like the last set. The money leaves the country before anyone notices. Chargebacks do not exist on wires, and Zelle transactions between "friends" are treated as authorized even when you were deceived.

Title companies in San Antonio — Independence, Alamo, Texas National, Stewart — have spent years hardening their process against exactly this. Renters should borrow it. If you are about to send $2,000–$5,000 to secure a house in Stone Oak, Alamo Heights, or Southtown, treat that transfer with the same paranoia a closing escrow officer uses on a $400,000 wire.

How the scam actually runs in San Antonio

There are three common shapes, and they overlap.

• The hijacked listing. A scammer scrapes a legitimate MLS photo set from a SABOR-listed rental, reposts it on Facebook Marketplace or Craigslist at 15–25% below market, and claims to be the out-of-town owner. You never tour the inside. They want a deposit before they mail keys.
• The compromised inbox. A real property manager's email gets phished. The attacker sits quietly, reads the thread where you agreed to move into a duplex near JBSA-Randolph, and at the exact moment wire instructions are sent, injects a lookalike email (a swapped letter, a different TLD) with new routing and account numbers. Everything else looks identical.
• The Zelle pivot. You agreed to pay by check or ACH. On move-in day the "landlord" says the portal is down and asks for Zelle to a personal phone number. Zelle settles in seconds and, per the network's rules, is effectively irreversible for authorized-push-payment fraud.

Bexar County is a rich target for reasons that have nothing to do with San Antonio being naive. PCS cycles at JBSA-Lackland, Randolph, and Fort Sam Houston push thousands of families to sign leases sight-unseen every summer. Out-of-state investors own a large share of single-family rentals in Converse, Cibolo, and Schertz, which makes "the owner lives out of town" plausible. And the local rental market churns fast enough in the $1,600–$2,400 band that a too-good listing does not immediately read as fake.

The title-company verification playbook

Here is what a competent San Antonio escrow officer does before they release a wire. Every step has a renter analog.

1. Verify instructions by voice, on a number you looked up yourself

Title companies do not trust wire instructions that arrive by email, even from a known sender. They call the counterparty on a number pulled from the engagement letter or the company's main website — never the number in the email signature. They read the routing number and the last four of the account back, digit by digit.

Your version: before you send any deposit, call the property manager at the number listed on their TREC license lookup (every Texas real estate broker and property manager is searchable at trec.texas.gov) or on the brokerage's main site — not a number texted to you. If the person on the phone can't confirm the unit address, the rent amount, and the wire instructions, stop.

2. Require the instructions in writing on letterhead, matched to a known entity

Title companies will not wire to an individual's personal account. The receiving party is almost always an LLC or a brokerage trust account. The entity name on the wire must match the entity on the contract.

Your version: the deposit on a Texas residential lease should be payable to the landlord or the brokerage named in the lease — typically a property management LLC you can look up on the Texas Secretary of State's SOSDirect or the free Comptroller Taxable Entity Search. If your lease says "ABC Property Management, LLC" but the wire instructions name "John Smith" at a credit union in another state, that is the fraud, not a quirk.

3. Never accept a change to instructions without re-verification

The single most common closing wire-fraud vector is a last-minute email saying "we updated our banking — please use the attached instructions." Good escrow officers treat any change as presumptively fraudulent until re-verified by phone.

Your version: if the payment method or account changes after you sign the lease, assume the account has been hacked. Call the number you used before. Do not reply to the email.

4. Use a traceable, reversible rail when you can

Title companies use wires because federal law demands it for large amounts, and they accept the risk in exchange for speed. You do not have to. For a security deposit:

• ACH from your bank through the property manager's tenant portal (Buildium, AppFolio, RentCafe, Yardi) is traceable and has a short reversal window.
• Cashier's check delivered in person at the property or at the brokerage office is slow but physical.
• Credit card through the portal gives you chargeback rights under Regulation Z if the landlord turns out not to exist.
• Zelle to a personal number, Venmo, Cash App, wire to an individual, crypto, or gift cards are the red-flag rails. Any landlord who insists on these is either running a scam or running a business you do not want to rent from.

Texas law is on your side, but only if there is a real landlord

Texas Property Code § 92.103 requires a landlord to return a security deposit within 30 days of move-out, with itemized deductions. § 92.109 allows treble damages plus $100 and attorney's fees if the landlord acts in bad faith. Those remedies assume you can serve a real person or entity. If you wired money to a Gmail account impersonating an out-of-state owner, there is no defendant to sue in JP court and no brokerage trust account to claw back from.

That is why the verification step matters more than the legal step. Once the wire leaves, your leverage is gone.

What most people get wrong

• Trusting the domain because it "looks right." @kw-sanantonio.com and @kwsanantonio.com are different domains. Scammers register lookalikes the same week they start the campaign. Correct move: hover every sender address, and only trust domains that match the brokerage's main website listed on its TREC record.
• Calling the number in the email. That number rings the scammer's burner. Correct move: pull the number from TREC, SABOR's member directory, or the brokerage's public site.
• Assuming a signed lease means the landlord is real. A PDF with an electronic signature proves nothing. Correct move: confirm the owner of record on the BCAD property search (free at bcad.org). If the listing is in Live Oak or Selma, pull it from the Bexar Appraisal District; for properties in Guadalupe or Comal counties, use their appraisal districts. The deeded owner's name should line up with the landlord or a managing entity you can connect to them.
• Sending a deposit before you have been inside. A legitimate San Antonio property manager will either meet you at the property or authorize a licensed agent to. If the story is "I'm deployed / I'm a missionary in Africa / I'm closing on another house and can't get to Helotes," the answer is no.
• Using Zelle for "convenience." Zelle is designed for payments to people you already trust. The CFPB and every major Texas bank will tell you in writing that authorized-push-payment fraud on Zelle is generally not reimbursable. Correct move: pay through the tenant portal or by cashier's check.
• Not reporting quickly enough. If you sent a wire in error, you have a narrow window — sometimes under 24 hours — for your bank to attempt a SWIFT recall or a Fedwire reversal. Correct move: call your bank's fraud line immediately, then file with the FBI's IC3 (ic3.gov), the Texas Attorney General's Consumer Protection Division, and SAPD. Your bank's ability to help drops sharply after the funds clear the receiving institution.

If it already happened

Call your bank first — not the landlord, not the listing site. Ask specifically for a wire recall or a Zelle dispute under the fraud (not scam) category, and get the reference number. File an IC3 complaint the same day; the FBI's Recovery Asset Team can sometimes freeze domestic funds within 72 hours if the report is fast and detailed. File a report with SAPD for the paper trail your bank will ask for. If the listing was on Facebook Marketplace or Craigslist, screenshot everything before it disappears.

The best outcome is not needing any of this. Verify by voice, pay through a traceable rail, and tour the inside before money moves.

If you are still early in the search, browse verified San Antonio rentals at /rentals, or read the rest of our scam-avoidance write-ups at /resources. Landlords who want to list a real unit without the fake-listing noise can post free at /list-your-home.