New phishing attempt very realistic to me

Hi All, just sharing this one as it appears to be from First American asking me to “go to documents” link to confirm the CD. Being in fraud in a past life, I noticed no return email address, no loan or order number, no borrower name and no date of closing. I called the Escrow Asst. number shown and of course it is disconnected. Lastly I have no upcoming corresponding closings involving First American this week. Interesting how elaborate the thieves are becoming and using our industry jargon too. I’d be interested to hear if anyone has encountered this or similar email recently?

One more thing, checking the URL to the “go to documents” leads to beyondrocks[.]com

If you have no order assigned that’s a big scam. area code 937 is Ohio isn’t it?

Anyway that’s never how documents are received from FASS. It’s always on the website.

I agree. The point to this phishing is to get anyone not paying attention or new to industry to click the link. Possibly downloading scam software to steal passwords, bank accounts, etc.

Perhaps try contacting that First Am office and let them know someone’s posing as them. They have far more resources than we do to pursue a fraud investigation and possible legal charges. Here’s their contact info from their website:

Irvine
18500 Von Karman Avenue, Suite 600
Irvine, CA 92612
Call: 949-885-2400

2 Likes

I got something similar a few weeks ago. Let ‘real’ company know… Know nothing beyond that.

On LinkedIn First American just posted an article on AI and increased fraud potential. Good read.

2 Likes