Delora

Buying a home

Red flags and scams when hiring property professionals

The warning signs for each professional a buyer pays, how payment redirection scams target settlement, and five checks before you send money.

Jurisdiction: Australia-wide; state rules are marked with their stateSources last verified: 22 Oct 2026By Delora editorial teamChange history

Key points

  • Payment redirection scams cost Australians $166.8 million in 2025.
  • Never pay to bank details from an email until you have phoned on a number you found yourself.
  • Confirmation of Payee shows whether the name matches the account, but does not block a payment.
  • If money has gone, call your bank immediately.

The short answer

Payment redirection scams commonly target property settlement: a scammer poses as your solicitor, conveyancer or another trusted party and sends altered bank details (ACCC (Scamwatch), verified 1 Aug 2026). These scams cost Australians $166.8 million in 2025 (Australian Competition and Consumer Commission, verified 22 Oct 2026). Never pay to bank details that arrive by email until you have phoned the business on a number you found yourself (National Anti-Scam Centre (ACCC), verified 22 Oct 2026). The other red flags are about the professional: not licensed, no written fee, or a link to the seller's side.

How the settlement scam works

  • The Australian Cyber Security Centre warned on 30 August 2021 that cybercriminals are targeting all parties in the real estate sector, with a particular focus on impersonating conveyancing lawyers and communicating with their clients, by hacking email accounts or using similar domain names to send false bank details for settlement payments. Its advice is to confirm any change of bank details by calling the sender's established phone number or meeting them face-to-face, and to protect email accounts with strong passphrases and multi-factor authentication. (Australian Signals Directorate's Australian Cyber Security Centre, verified 22 Oct 2026)
  • Scamwatch (ACCC) warns that payment redirection scams — also called business email compromise scams — commonly target property settlement payments, with scammers impersonating a solicitor, conveyancer or other trusted party and sending an email with altered bank account details. Scamwatch recommends: 'Don't rush to act. Take the time to call the business you are dealing with — using contact details you've found independently — to check the payment details are correct.' A professional-looking email or an email thread that appears genuine does not prove payment instructions are genuine. (ACCC (Scamwatch), verified 1 Aug 2026)

Five checks before you pay anyone

  1. Get their number yourself, early. Save your conveyancer's and lender's phone numbers from a source you found independently, such as their own website, and use those to check payment details, never the contact details in an email. (National Anti-Scam Centre (ACCC), verified 22 Oct 2026)
  2. Treat any change of payee details as a warning sign. Payment details that change without notice, or an email address slightly different to the usual one, are the signs Scamwatch lists. (National Anti-Scam Centre (ACCC), verified 22 Oct 2026)
  3. Call before you pay. Confirm the account by calling the sender's established phone number, or meet them face-to-face. (Australian Signals Directorate's Australian Cyber Security Centre, verified 22 Oct 2026)
  4. Read the Confirmation of Payee result. When you enter a BSB and account number, a participating bank shows a match, a close match or no match against the name. It does not stop the payment, so a close match or no match means stop and call. (Australian Banking Association, verified 22 Oct 2026)
  5. Lock down your own email. Use a strong passphrase and multi-factor authentication, because scammers also hack email accounts. (Australian Signals Directorate's Australian Cyber Security Centre, verified 22 Oct 2026)

Red flags, professional by professional

Each flag is drawn from the guidance cited next to it, so the state is shown where the rule is a state rule. Where to check each licence is in licence checks by state.

Red flags, professional by professional
WhoRed flag
Conveyancer (VIC)Not on Consumer Affairs Victoria's register of licensed conveyancers (Consumer Affairs Victoria (Business Licensing Authority), verified 22 Oct 2026)
Conveyancer or agent (NSW)VerifyNSW shows disciplinary action or a licence past its expiry (NSW Fair Trading (NSW Government), verified 22 Oct 2026)
Settlement agent (WA)Claims to be licensed but is not in Consumer Protection's licence search (Consumer Protection, Department of Energy, Mines, Industry Regulation and Safety (WA), verified 22 Oct 2026)
Buyer's agent (NSW)Takes a payment for referring you to a selling agent, or does not declare a conflict of interest (NSW Fair Trading (NSW Government), verified 22 Oct 2026)
Buyer's agent (WA)Is a conjunctional agent (buyer manager), who works for the seller and gets a share of the seller's commission (Consumer Protection WA, verified 22 Oct 2026)
Buyer's agent (VIC)Keeps a rebate received in connection with your transaction (Consumer Affairs Victoria, verified 15 Aug 2026)
Building inspector (VIC)The only report on offer is one from the agent or the seller (Consumer Affairs Victoria, verified 22 Oct 2026)
Building inspector (NSW)No adequate professional indemnity insurance (NSW Fair Trading (NSW Government), verified 22 Oct 2026)
Mortgage brokerAsks for a fee before providing services, or before you sign a quote (Australian Securities and Investments Commission (Moneysmart), verified 22 Oct 2026)
Mortgage brokerNot on ASIC's Professional Registers as a credit representative or credit licensee (Australian Securities and Investments Commission (Moneysmart), verified 22 Oct 2026)
AnyoneAn email that changes the payee or bank details you were given (National Anti-Scam Centre (ACCC), verified 22 Oct 2026)

If money has already gone

  • Scamwatch describes business email compromise (payment redirection) scams as scammers pretending to be from a business you've used and sending an invoice with new payee information. Warning signs include payment details that change without notice and an email address that is slightly different to what you normally see. Its advice is to stop and check any change to payee information and contact the business by phone using a number you have sourced independently, not the contact details in the email. If you have been scammed, contact your bank immediately; IDCARE, Australia and New Zealand's national identity and cyber support service, is on 1800 595 160, and reporting the scam to Scamwatch helps stop it and warn others. (National Anti-Scam Centre (ACCC), verified 22 Oct 2026)

Act straight away and tell your conveyancer too. The step-by-step guide for settlement day is how to transfer settlement funds safely.

How big the problem is

  • Australians reported $2.18 billion lost to scams in 2025 across Scamwatch, ReportCyber, IDCARE, the AFCX and ASIC, from 274,577 reports that involved a financial loss. Payment redirection scams cost $166.8 million in 2025, up from $152.6 million in 2024, and were one of the five scam types with the highest losses (ACCC Targeting Scams report, released 30 March 2026). (Australian Competition and Consumer Commission, verified 22 Oct 2026)
  • Confirmation of Payee began rolling out from July 2025 and, as at July 2026, is live at participating banks (more than 100 institutions). Before a payment made with a BSB and account number, it checks the name you entered against the account and shows a match, a close match or no match. It is an advisory checkpoint, not a block: you can still send after a close match or no match, and it does not check accounts held overseas. (Australian Banking Association, verified 22 Oct 2026)

Common questions

What is a payment redirection scam?

A scammer poses as a business you deal with, such as your conveyancer, and sends new bank details so your payment goes to them. Payment redirection scams cost Australians $166.8 million in 2025.

Does Confirmation of Payee stop scams?

It helps but does not block anything. It shows whether the name matches the account before you pay; you can still send after a close match or no match, and it does not check overseas accounts.

What should I do if I have sent money to a scammer?

Contact your bank immediately, then tell your conveyancer. IDCARE, the national identity and cyber support service, is on 1800 595 160, and you can report the scam to Scamwatch.

Practical checklist

Before you send a deposit or settlement money

  • Phone the business on a number from its own website, not from the email
  • Check that the account name gets a match on Confirmation of Payee
  • Treat any change of bank details as a scam until you have confirmed it by phone
  • Turn on multi-factor authentication for your email

Questions for a professional

  • Will you ever change your bank details by email? (The safe answer is no.)
  • How should I confirm your trust account details before I pay?
  • Do you receive any payment connected with my purchase from anyone other than me?

Official resources

Important limitations: General safety information, not a guarantee that any message or account is genuine, and not legal or financial advice. Scam methods change; when in doubt, stop and confirm by phone on a number you found yourself.

Sources and methodology

Figures on this page are drawn from Delora's local knowledge graph, refreshed from these primary sources and checked for changes on a regular schedule. If a figure here looks out of date, the official source above is always the authority — please let us know.

Evidence record

Written by
Delora editorial team
Jurisdiction
Australia-wide; state rules are marked with their state
Content type
Guide (general education, not financial advice)
Last reviewed
2026-11-05
Sources
See "Sources and methodology" above for cited sources