cautious when you send the money on that you're sending it to the real title company and not to a crook who hacked their accounts and sent you a phishing email.

A coworker a couple of years ago was buying a house. He got an email that looked like it came from the title company (correct logo, correct name of the person he'd been working with, correct amount requested). He clicked on the link and transferred the money. The title company said they never got it the money. Turned out that the title company had been hacked, the hackers got their information on upcoming transactions, and the hackers sent out the phishing email to him. People at the office said that he wasn't going to get his money back (the title company said it was his fault he sent it to the wrong place, not their fault that they got hacked) and then he was scrambling to find enough money to close on the property.