How AI Is Making Real Estate Phishing Scams Harder to Spot
Real estate transactions have always attracted fraud, large sums of money, tight timelines, and multiple parties communicating primarily by email make the industry a natural target. What's changed recently is the sophistication of the scams themselves, and much of that shift can be traced to generative AI.
The classic scam, updated
A common tactic follows a familiar arc: a scammer poses as a prospective buyer or tenant, expresses genuine-sounding interest in a specific listing, and exchanges several friendly messages with an agent before ever asking for anything. Only after that rapport is established does the request come, typically a push to move the conversation to a video call, often with a specific insistence on using a particular device or operating system "to avoid connection issues."
That request is the hook. The follow-up message contains a link to a fake meeting invitation. Instead of launching legitimate video conferencing software, it prompts the recipient to download and run an "installer," malware disguised as a routine software update. Because the emails are patient, well-written, and spread across multiple exchanges rather than a single suspicious message, they slip past the instincts most people have developed for spotting a rushed or poorly worded scam.
Why AI changes the equation
Phishing emails used to be easy to flag: awkward phrasing, obvious typos, generic greetings. Generative AI tools have largely erased those tells. Scammers can now produce fluent, contextually appropriate messages that mirror how a real prospective client would write, and can sustain a believable multi-message conversation rather than a single clumsy attempt. Some of these campaigns likely use AI to personalize outreach at scale, referencing real listing addresses and plausible buyer scenarios pulled from public listing data.
This matters especially for an industry built on responsiveness. Agents are trained to reply quickly and warmly to anyone expressing interest in a property, which is exactly the instinct these scams are designed to exploit.
What to watch for
A few patterns still hold up even as the wording improves. Be cautious of any contact who pushes to move a conversation off a phone call and onto a video platform, particularly when they specify a particular device or operating system for "the best experience." That specificity is often about targeting a particular malware payload rather than genuine technical need. Legitimate video conferencing software does not require manually downloading an installer from a link in an email.
If a meeting invite prompts a file download before the meeting even starts, treat it as a red flag. And rapport-building over several messages before any ask is not, on its own, reassurance that a contact is legitimate. It may be a more patient version of the same scam.
