{"id":837,"date":"2026-07-30T05:15:31","date_gmt":"2026-07-29T23:45:31","guid":{"rendered":"https:\/\/advaithhomes.co.uk\/?p=837"},"modified":"2026-07-30T05:16:09","modified_gmt":"2026-07-29T23:46:09","slug":"property-document-phishing-scams","status":"publish","type":"post","link":"https:\/\/advaithhomes.co.uk\/property-document-phishing-scams\/","title":{"rendered":"Property Phishing Scams and Identity Theft"},"content":{"rendered":"\n<article class=\"ah-article\">\n<header class=\"ah-article-header\">\n<h2>Property Documents, Phishing and Identity Theft: How to Stay Safe<\/h2>\n<p><strong>Published:<\/strong> 29 July 2026 | <strong>Reviewed:<\/strong> 30 July 2026<\/p>\n<\/header>\n\n<section class=\"ah-introduction\">\n<p>Buying, selling, renting or financing a property requires people to share unusually valuable information. Passports, bank statements, proof of address, mortgage documents and payment instructions may all pass between buyers, sellers, estate agents, conveyancers, lenders and other professionals.<\/p>\n<p>Criminals know that property transactions involve large payments, several organisations and strict deadlines. They may use phishing emails, cloned professional identities or compromised email accounts to steal documents, take over an identity or redirect deposit and completion money.<\/p>\n<blockquote class=\"ah-key-takeaway\">\n<strong>Key protection:<\/strong> Never rely only on how professional an email looks. Before uploading identity documents or transferring money, verify the request using a telephone number or website you obtained independently, not the contact details contained in the message.\n<\/blockquote>\n<\/section>\n\n<section>\n<h2>What Is a Property Phishing Scam?<\/h2>\n<p><strong>Phishing<\/strong> is when a criminal sends a fake email, text message, social-media message or telephone call that appears to come from a trusted person or organisation.<\/p>\n<p>In a property transaction, the criminal may pretend to be:<\/p>\n<ul>\n<li>your solicitor or licensed conveyancer;<\/li>\n<li>an estate or letting agent;<\/li>\n<li>a mortgage adviser, lender or surveyor;<\/li>\n<li>HM Land Registry or another government organisation;<\/li>\n<li>your buyer, seller, landlord or tenant; or<\/li>\n<li>a document-signing or client-portal provider.<\/li>\n<\/ul>\n<p>The objective may be to obtain passwords, identity documents, bank details or money. Some attacks use a completely fabricated message. Others begin after a genuine email account has been accessed, allowing the criminal to read a real conversation and send a convincing reply at the right stage of the transaction.<\/p>\n<\/section>\n\n<section>\n<h2>Why Property Transactions Attract Criminals<\/h2>\n<p>A home purchase or sale creates several opportunities that are valuable to a fraudster:<\/p>\n<ul>\n<li><strong>Large transfers:<\/strong> Deposits, completion funds and sale proceeds can involve substantial sums.<\/li>\n<li><strong>Time pressure:<\/strong> Buyers may believe money must be sent immediately to avoid delaying exchange or completion.<\/li>\n<li><strong>Several participants:<\/strong> It may not be obvious which solicitor, agent, broker or lender sent a particular message.<\/li>\n<li><strong>Predictable milestones:<\/strong> Criminals may wait until exchange or completion is approaching before issuing false payment instructions.<\/li>\n<li><strong>Sensitive documents:<\/strong> Property files often contain enough information to support wider identity fraud.<\/li>\n<\/ul>\n<p>Good spelling and professional branding no longer prove that a message is genuine. Criminals can copy logos, signatures, email layouts and information from websites or social media.<\/p>\n<\/section>\n\n<section>\n<h2>Which Property Documents Need Extra Care?<\/h2>\n<p>Not every property document is confidential. For example, some registered title information in England and Wales can be purchased from HM Land Registry. However, combining several documents can reveal a detailed financial and personal profile.<\/p>\n<p>Take particular care with:<\/p>\n<ul>\n<li>passports, driving licences and residence documents;<\/li>\n<li>bank statements and deposit evidence;<\/li>\n<li>proof of address, utility bills and council tax statements;<\/li>\n<li>source-of-funds and source-of-wealth documents;<\/li>\n<li>mortgage applications, offers and lender correspondence;<\/li>\n<li>contracts, transfer documents and signature pages;<\/li>\n<li>tenancy agreements and landlord information;<\/li>\n<li>legal invoices and client-account bank details; and<\/li>\n<li>emails showing exchange, completion or moving dates.<\/li>\n<\/ul>\n<p>Identity checks and source-of-funds checks are normal parts of many legitimate property transactions. The warning sign is not simply that documents have been requested. The important questions are <strong>who requested them, why they are needed and how they should be sent<\/strong>.<\/p>\n<\/section>\n\n<section>\n<h2>Common Property and Conveyancing Scams<\/h2>\n\n<h3>Fake Secure Document Portals<\/h3>\n<p>A message may ask you to sign in, confirm your identity or upload documents through a link. The page may copy a genuine conveyancer, lender or electronic-signature platform but capture your login details and files.<\/p>\n\n<h3>Changed Solicitor Bank Details<\/h3>\n<p>A fraudster may claim the conveyancer has changed banks, opened a temporary client account or cannot use the account previously supplied. Any unexpected change to payment instructions should be treated as high risk.<\/p>\n\n<h3>Compromised Email Conversations<\/h3>\n<p>A criminal who accesses an email account may monitor a genuine transaction and send messages from within the existing conversation. The email address, previous messages and property details may therefore appear correct.<\/p>\n\n<h3>Cloned Solicitors and Property Professionals<\/h3>\n<p>A criminal may copy the name, address and regulatory details of a real firm but use a different email address, telephone number or bank account. The Solicitors Regulation Authority publishes alerts about bogus solicitors and cloned professional identities.<\/p>\n\n<h3>Malicious Attachments and QR Codes<\/h3>\n<p>Fake contracts, invoices, searches or Land Registry notices may contain malicious files or links. The National Cyber Security Centre also warns that criminals increasingly place QR codes in phishing emails to direct users to fraudulent websites.<\/p>\n<\/section>\n\n<section class=\"ah-warning\">\n<h2>The Payment Check That Could Protect Your Deposit<\/h2>\n<p>Before sending a reservation fee, deposit, purchase money or any other substantial property payment:<\/p>\n<ol>\n<li>Obtain the firm&#8217;s payment procedure early in the transaction.<\/li>\n<li>Check the solicitor or firm through the relevant professional register.<\/li>\n<li>Telephone the firm using a number from its official website, regulatory register or earlier verified paperwork.<\/li>\n<li>Read the sort code and account number back and ask the firm to confirm them.<\/li>\n<li>Confirm the payment reference, recipient name and amount.<\/li>\n<li>Treat every later request to change the account as suspicious until independently verified.<\/li>\n<li>Contact your bank immediately if anything appears wrong after payment.<\/li>\n<\/ol>\n<p><strong>Do not use the telephone number in the email that contains the payment instructions.<\/strong> If the email account has been compromised, the number may belong to the criminal.<\/p>\n<p>Confirmation of Payee and an account name that resembles the solicitor&#8217;s name can provide useful information, but neither should replace independent verification.<\/p>\n<\/section>\n\n<section>\n<h2>How to Share Property Documents More Safely<\/h2>\n<ul>\n<li><strong>Confirm the request first:<\/strong> Ask which documents are required and why.<\/li>\n<li><strong>Use the approved channel:<\/strong> Where available, use the professional&#8217;s verified client portal rather than replying with sensitive attachments.<\/li>\n<li><strong>Open portals independently:<\/strong> Use a saved link or the organisation&#8217;s official website instead of repeatedly following email links.<\/li>\n<li><strong>Use strong email security:<\/strong> Protect your email account with a unique password, multi-factor authentication or a passkey where supported.<\/li>\n<li><strong>Do not reuse passwords:<\/strong> A password exposed by another website should not provide access to your property correspondence.<\/li>\n<li><strong>Keep devices updated:<\/strong> Install operating-system, browser and security updates promptly.<\/li>\n<li><strong>Avoid unnecessary sharing:<\/strong> Send only the pages and information legitimately required.<\/li>\n<li><strong>Ask about retention:<\/strong> Check how documents will be stored and when they will be deleted.<\/li>\n<\/ul>\n<p>Sending a passport or bank statement through an ordinary email may sometimes be permitted by a professional&#8217;s process, but it is reasonable to ask whether a secure upload facility is available.<\/p>\n<\/section>\n\n<section>\n<h2>Important HM Land Registry Email Change in 2026<\/h2>\n<p>HM Land Registry announced on 22 July 2026 that, from <strong>late August 2026<\/strong>, application-related correspondence such as notices, letters and requisitions will move from PDF email attachments to secure document links.<\/p>\n<p>The announced emails will be sent using GOV.UK Notify from <strong>hm.land.registry@notifications.service.gov.uk<\/strong>, and the document links will remain available for 200 days.<\/p>\n<aside class=\"ah-warning\">\n<p><strong>Do not treat the displayed sender address as proof by itself.<\/strong> Email addresses and branding can be imitated. If an unexpected Land Registry message concerns a transaction you do not recognise, access GOV.UK independently or contact HM Land Registry using official contact details.<\/p>\n<\/aside>\n<p>This change applies to HM Land Registry correspondence in England and Wales. Scotland and Northern Ireland have separate registration organisations and processes.<\/p>\n<\/section>\n\n<section class=\"ah-practical-example\">\n<h2>How a Convincing Conveyancing Scam Can Happen<\/h2>\n<p>A buyer has already exchanged genuine emails with their conveyancer. A few days before completion, another message appears in the same conversation. It contains the correct property address, completion date and amount but says the firm&#8217;s usual client account is temporarily unavailable.<\/p>\n<p>The buyer is asked to use a replacement account immediately. Because the conversation and signature look genuine, the buyer transfers the money without telephoning the firm.<\/p>\n<p>The safer response would be to stop, telephone the conveyancer through a previously verified number and confirm every payment detail. Property criminals often depend on urgency preventing that independent check.<\/p>\n<\/section>\n\n<section>\n<h2>What to Do If You Clicked, Uploaded Documents or Paid<\/h2>\n<p>Act quickly, even if you are not certain that fraud has occurred.<\/p>\n<ol>\n<li><strong>Contact your bank immediately<\/strong> if money or banking information may be at risk. Ask its fraud team whether a transfer can be stopped or recalled.<\/li>\n<li><strong>Contact the impersonated professional<\/strong> through independently verified details.<\/li>\n<li><strong>Change compromised passwords<\/strong>, starting with your email and financial accounts. Do not reuse the old password.<\/li>\n<li><strong>Enable stronger account security<\/strong>, including multi-factor authentication or a passkey.<\/li>\n<li><strong>Report lost identity documents<\/strong> to the organisation that issued them.<\/li>\n<li><strong>Check your credit reports<\/strong> for unfamiliar searches, accounts or borrowing applications.<\/li>\n<li><strong>Preserve evidence<\/strong>, including messages, attachments, bank details, screenshots and payment references.<\/li>\n<li><strong>Report the incident<\/strong> through the correct fraud-reporting route.<\/li>\n<\/ol>\n<p>The government&#8217;s Stop! Think Fraud guidance says people concerned about identity misuse can also consider additional credit-file protection. Cifas Protective Registration is one available option and cost &pound;25 for two years when this article was reviewed. Check the current terms before applying.<\/p>\n<\/section>\n\n<section>\n<h2>How to Report Property Phishing and Fraud<\/h2>\n<p>Forward a suspicious email to the National Cyber Security Centre at <strong>report@phishing.gov.uk<\/strong>. This helps the NCSC investigate malicious websites and email addresses. Forwarding an email to the NCSC is not the same as making a police fraud report.<\/p>\n<p>If you have lost money, your identity has been used or you have been affected by cyber crime:<\/p>\n<ul>\n<li><strong>England, Wales and Northern Ireland:<\/strong> Report the incident to <a href=\"https:\/\/www.reportfraud.police.uk\/reporting-a-fraud\/\" target=\"_blank\" rel=\"noopener noreferrer\">Report Fraud<\/a> or telephone 0300 123 2040.<\/li>\n<li><strong>Scotland:<\/strong> Report fraud to Police Scotland by telephoning 101.<\/li>\n<li><strong>Immediate danger or a crime in progress:<\/strong> Telephone 999.<\/li>\n<\/ul>\n<p>If the issue involves a solicitor in England or Wales, check the firm&#8217;s identity using the <a href=\"https:\/\/www.sra.org.uk\/solicitors-register\" target=\"_blank\" rel=\"noopener noreferrer\">SRA Solicitors Register<\/a> and review the SRA&#8217;s scam alerts. Scotland and Northern Ireland have separate professional directories.<\/p>\n<\/section>\n\n<section>\n<h2>Common Mistakes to Avoid<\/h2>\n<ul>\n<li>Assuming a reply inside a genuine email conversation must be safe.<\/li>\n<li>Calling the telephone number shown in the suspicious message.<\/li>\n<li>Believing good spelling, logos or legal language prove authenticity.<\/li>\n<li>Uploading an entire bank statement or passport when it has not been requested.<\/li>\n<li>Sharing transaction progress publicly on social media.<\/li>\n<li>Ignoring an unexpected login notification or password-reset email.<\/li>\n<li>Waiting until the following day to tell the bank about a fraudulent transfer.<\/li>\n<\/ul>\n<\/section>\n\n<section class=\"ah-checklist\">\n<h2>Property Transaction Online Safety Checklist<\/h2>\n<ul>\n<li>Verify every professional through an independent source.<\/li>\n<li>Agree the payment-verification process at the start.<\/li>\n<li>Use a secure client portal where available.<\/li>\n<li>Protect your email account with multi-factor authentication.<\/li>\n<li>Verify any changed bank details by telephone.<\/li>\n<li>Do not let exchange or completion pressure override security checks.<\/li>\n<li>Keep sensitive documents off shared or public devices.<\/li>\n<li>Report suspicious emails and unexpected account activity promptly.<\/li>\n<\/ul>\n<p>For related guidance, read our <a href=\"[INTERNAL-LINK: Property Scams and Online Safety]\">property scams and online safety information<\/a>, <a href=\"[INTERNAL-LINK: What Your Solicitor Checks]\">guide to what your solicitor checks<\/a> and <a href=\"[INTERNAL-LINK: Property Title Fraud]\">property title fraud guide<\/a>.<\/p>\n<\/section>\n\n<section class=\"ah-faq\">\n<h2>Frequently Asked Questions<\/h2>\n\n<details>\n<summary>How can I tell if an email from my solicitor is genuine?<\/summary>\n<p>Do not rely only on the sender address, logo or existing email conversation. Check the firm through the appropriate professional register and telephone it using a number obtained independently. Confirm unusual document requests and all payment details directly.<\/p>\n<\/details>\n\n<details>\n<summary>Do solicitors change their bank details during a property purchase?<\/summary>\n<p>A firm may legitimately change its banking arrangements, but an unexpected change during a transaction is a major warning sign. Do not transfer money until the new details have been confirmed through a known and independently verified contact route.<\/p>\n<\/details>\n\n<details>\n<summary>Is it safe to upload my passport to a conveyancing portal?<\/summary>\n<p>A secure portal operated or approved by your verified conveyancer may be a legitimate way to complete identity checks. Confirm the portal address independently, use a unique password and avoid following an unexpected link without checking the request first.<\/p>\n<\/details>\n\n<details>\n<summary>What should I do after sending money to a fake solicitor account?<\/summary>\n<p>Contact your bank&#8217;s fraud team immediately and ask whether the payment can be stopped or recalled. Contact the genuine solicitor, preserve all evidence and report the fraud to Report Fraud or Police Scotland. Speed can affect the possibility of recovering money.<\/p>\n<\/details>\n\n<details>\n<summary>Can property documents be used for identity theft?<\/summary>\n<p>Yes. Passports, proof of address, bank statements and mortgage information may help a criminal impersonate someone or apply for credit. If documents have been exposed, secure your accounts, monitor credit reports and report any misuse promptly.<\/p>\n<\/details>\n\n<details>\n<summary>Are secure links in HM Land Registry emails genuine?<\/summary>\n<p>From late August 2026, HM Land Registry plans to provide certain application documents through secure links sent using GOV.UK Notify. However, criminals can imitate messages, so verify unexpected correspondence independently, especially where no genuine application is expected.<\/p>\n<\/details>\n<\/section>\n\n<section>\n<h2>Final Thoughts<\/h2>\n<p>Most property professionals use legitimate identity checks and secure processes. The risk arises when a criminal successfully imitates those normal procedures or enters an existing conversation at the moment money or documents are due.<\/p>\n<p>A short independent telephone check may feel inconvenient when completion is approaching, but it is far easier than attempting to recover a deposit or repair an identity after fraud. Slow the process down whenever a request is unexpected, urgent or different from the instructions already verified.<\/p>\n<\/section>\n\n<section class=\"ah-cta\">\n<h2>Need Help Understanding Your Next Step?<\/h2>\n<p>Explore more ADVAITH HOMES property guides, practical checklists and trusted professional connections. If you are unsure which type of property professional you need, visit our <a href=\"[INTERNAL-LINK: Contact ADVAITH HOMES]\">contact page<\/a>.<\/p>\n<\/section>\n\n<section class=\"ah-disclaimer\">\n<h2>Information Disclaimer<\/h2>\n<p>This article provides general information about property scams and online safety. It does not constitute legal, financial, cyber-security or professional advice. If money, personal information or property ownership may be at risk, contact your bank, the relevant professional, the appropriate reporting authority and a suitably qualified adviser without delay.<\/p>\n<\/section>\n\n<section class=\"ah-sources\">\n<h2>Sources and Further Reading<\/h2>\n<ul>\n<li><strong>HM Land Registry:<\/strong> <a href=\"https:\/\/www.gov.uk\/government\/news\/changes-to-how-hm-land-registry-sends-emails-about-applications\" target=\"_blank\" rel=\"noopener noreferrer\">Changes to how HM Land Registry sends emails about applications<\/a>. Accessed 30 July 2026. Supports the late-August 2026 secure-link and GOV.UK Notify email changes.<\/li>\n<li><strong>National Cyber Security Centre:<\/strong> <a href=\"https:\/\/www.ncsc.gov.uk\/collection\/phishing-scams\" target=\"_blank\" rel=\"noopener noreferrer\">Phishing scams: how to spot and report them<\/a>. Accessed 30 July 2026. Supports the explanation of phishing, warning signs and reporting guidance.<\/li>\n<li><strong>National Cyber Security Centre:<\/strong> <a href=\"https:\/\/www.ncsc.gov.uk\/collection\/phishing-scams\/report-scam-email\" target=\"_blank\" rel=\"noopener noreferrer\">Report a scam email<\/a>. Accessed 30 July 2026. Supports the suspicious-email reporting address and next steps after responding.<\/li>\n<li><strong>Solicitors Regulation Authority:<\/strong> <a href=\"https:\/\/guidance.sra.org.uk\/solicitors\/guidance\/cybercrime\/\" target=\"_blank\" rel=\"noopener noreferrer\">Information security and cybercrime<\/a>. Accessed 30 July 2026. Supports the risks of intercepted conveyancing emails, false payment instructions and cloned communications.<\/li>\n<li><strong>Solicitors Regulation Authority:<\/strong> <a href=\"https:\/\/www.sra.org.uk\/bogus-solicitors\" target=\"_blank\" rel=\"noopener noreferrer\">Bogus solicitors<\/a>. Accessed 30 July 2026. Supports checking solicitor identities and cloned-law-firm risks.<\/li>\n<li><strong>Stop! Think Fraud:<\/strong> <a href=\"https:\/\/stopthinkfraud.campaign.gov.uk\/recovery-from-fraud\/recovering-losses\/what-to-do-if-your-identity-has-been-stolen\/\" target=\"_blank\" rel=\"noopener noreferrer\">What to do if your identity has been stolen<\/a>. Accessed 30 July 2026. Supports the identity-theft recovery, credit-report and protective-registration guidance.<\/li>\n<li><strong>Report Fraud:<\/strong> <a href=\"https:\/\/www.reportfraud.police.uk\/reporting-a-fraud\/\" target=\"_blank\" rel=\"noopener noreferrer\">Reporting cyber crime and fraud<\/a>. Accessed 30 July 2026. Supports current fraud-reporting routes for England, Wales and Northern Ireland.<\/li>\n<\/ul>\n<\/section>\n<\/article>\n","protected":false},"excerpt":{"rendered":"<p>Property phishing scams use fake or compromised emails, messages and document portals to steal identity information or redirect property payments. Before uploading documents or transferring money, verify the sender through independently obtained contact details. Treat unexpected bank-detail changes, urgent payment requests and new document links as warning signs.<\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[1],"tags":[],"class_list":["post-837","post","type-post","status-publish","format-standard","hentry","category-uncategorized"],"_links":{"self":[{"href":"https:\/\/advaithhomes.co.uk\/api\/wp\/v2\/posts\/837","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/advaithhomes.co.uk\/api\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/advaithhomes.co.uk\/api\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/advaithhomes.co.uk\/api\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/advaithhomes.co.uk\/api\/wp\/v2\/comments?post=837"}],"version-history":[{"count":2,"href":"https:\/\/advaithhomes.co.uk\/api\/wp\/v2\/posts\/837\/revisions"}],"predecessor-version":[{"id":839,"href":"https:\/\/advaithhomes.co.uk\/api\/wp\/v2\/posts\/837\/revisions\/839"}],"wp:attachment":[{"href":"https:\/\/advaithhomes.co.uk\/api\/wp\/v2\/media?parent=837"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/advaithhomes.co.uk\/api\/wp\/v2\/categories?post=837"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/advaithhomes.co.uk\/api\/wp\/v2\/tags?post=837"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}