shinnslist

Wire fraud, data privacy, AI and social media advertising, fair housing in ads

Current Legal Issues · 2.7 study hours

Bottom line: Verify wire instructions by a known phone number, guard client data, take responsibility for every ad (including AI-written ones), get consent before texting, respect photo copyright, and keep fair-housing language and targeting out of ads.

Bottom line: The biggest modern risks are not in the contract. They are in your inbox, your phone, and your ads. A fake email can send a buyer's life savings to a thief, a text can cost thousands per message, and an AI-written ad can break fair housing law without you noticing.

Wire fraud and email hacking

Wire fraud in real estate usually works like this. A hacker breaks into someone's email (a broker's, a title agent's, or a buyer's) and watches a deal. Just before closing, the hacker sends a message that looks real, saying "our bank details changed, please wire the closing funds here." The money goes to the thief's account and is often gone in hours. This is called business email compromise. A wire transfer is an electronic bank-to-bank transfer that is very hard to reverse.

Protect people with simple habits:

  • Tell buyers at the start, in writing, that your office and the title company will never change wire instructions by email.
  • Before any wire, call the title company at a number you already had from a trusted source (not a number in the email) and confirm the account.
  • Do not send wiring details or sensitive documents in plain email. Use a secure portal.
  • Use a strong password, turn on two-factor sign-in, and keep software updated.
  • Be suspicious of last-minute changes, pressure, misspelled domains (like one letter off), and unusual requests.
  • If a wire went wrong, call the bank immediately and ask for a recall, then report it to the FBI's Internet Crime Complaint Center (IC3) and local police. Speed matters.

Money and trust: if a closing wire error involves trust funds you hold, your duties to account for the money (C.R.S. 12-10-217(1)(h)) and not release funds before they are collected (Rule 6.19(E)) apply.

Protecting personal data

Brokers hold sensitive facts: Social Security numbers, bank statements, loan files, driver's licenses, health or disability details tied to housing. Keep the minimum you need. Store it in a secure system, limit who can open it, lock devices, shred paper, and delete data when your records period ends (four years for transaction files, Rule 6.20). If you suspect a breach, tell your employing broker right away. Colorado and federal privacy and data-breach laws may apply to a firm's handling of personal data. We have not reproduced them here, so check your brokerage's policy.

Texting, calling, and email marketing

The Telephone Consumer Protection Act (TCPA) is a federal law (47 U.S.C. 227) that restricts autodialed calls and texts, prerecorded voice calls, and calls to numbers on the National Do Not Call Registry. Marketing texts sent with automated systems generally need the person's prior express written consent. Statutory damages can reach $500 to $1,500 per message in a private lawsuit, so a list of 1,000 people can mean hundreds of thousands of dollars in exposure. Calling hours generally run 8 a.m. to 9 p.m. in the called person's time zone. The CAN-SPAM Act (15 U.S.C. 7701 and following) governs commercial email: no deceptive headers, a clear way to opt out, and honoring opt-outs. Consent for texting should be recorded and stored. When in doubt, ask your employing broker and a lawyer.

Social media and AI-written ads

The Commission defines advertising as promotion, solicitation, or representation of real estate services that require a license (Rule 1.2). Social media posts, videos, and AI-generated captions count. Key advertising rules in Colorado (Rule 6.10):

  • Advertise in the name of the brokerage firm, clearly and conspicuously. On electronic media, each viewable page needs the firm name, and if space is limited, the name must be disclosed within the first click (Rule 6.10(D)).
  • Brokers and firms are responsible for the accuracy of all advertising, including property data entered into the MLS, and for copyright compliance (Rule 6.10(C)). If a third party handles your ads, you are still responsible.
  • Remove expired listings from your electronic media within three days after a listing contract expires (Rule 6.10(D)(1)).
  • You may not advertise the availability or price of a property without the owner's or the owner's broker's authority, and the price quoted must be the price agreed with the owner (Rule 6.10(F), (G)).
  • Designations and awards must be real and verifiable (Rule 6.10(A)(8)).
  • Knowingly false or misleading advertising is a ground for discipline (C.R.S. 12-10-217(1)(a)).

An AI writing tool will happily invent a "quiet, family-friendly neighborhood with great schools" or "perfect for young professionals." Read every line before posting. The AI does not carry your license, you do. Check facts (square footage, features, lot size) against the listing data. Do not paste client personal data into public AI tools.

Fair housing in ads

The federal Fair Housing Act (42 U.S.C. 3604(c)) bars ads that state a preference or limit based on protected classes. Colorado goes further. It is an unfair housing practice to publish any advertisement relating to the sale or rental of housing that indicates a preference, limitation, specification, or discrimination based on disability, race, creed, color, religion, sex, sexual orientation, gender identity, gender expression, marital status, familial status, veteran or military status, national origin, or ancestry (C.R.S. 24-34-502(1)(d)(I)). A broker who violates or aids a violation of fair housing law faces discipline (C.R.S. 12-10-217(1)(o)) and must notify the Commission in writing within 30 days (Rule 6.23).

  • Risky words: "no kids," "perfect for a young couple," "ideal for empty nesters," "walking distance to church," "Christian neighborhood," "exclusive," "able-bodied." Describe the property, not the people.
  • Safe words: "three bedrooms," "fenced yard," "near the light-rail station," "wheelchair-accessible entrance."
  • Targeting: If you pay a social platform to show ads, choosing an audience by age, family status, or zip codes that act as a stand-in for race can itself be discrimination. Use platforms' housing ad settings, which limit targeting, and do not try to get around them. AI tools can also generate images or text that suggest a preferred buyer; check them.
  • Images: Models and photos that show only one kind of person can imply a preference. Use neutral property photos.

Photos and listing copyright

Copyright (17 U.S.C. 101 and following) gives the creator of a photo, video, floor plan, or text the exclusive right to copy and show it. A professional photographer usually owns the photos unless the contract gives the rights away. Their license may cover only the MLS, not your social media or a postcard. A photo grabbed from Google or from another broker's listing is not free to use. An unlicensed use can lead to demand letters and damages of thousands of dollars per image. The Commission also makes brokers responsible for copyright compliance in ads (Rule 6.10(C)). Get written permission to disseminate another broker's ad, and note the other firm (Rule 6.10(F)(1)).

Example with real numbers

A broker texts a promotional message about a $425,000 listing to 800 phone numbers she bought from a list, without consent.

  1. If even half (400) of the recipients sue, and a court awards the low statutory amount of $500 per message: 400 x $500 = $200,000.
  2. If the court finds the violation was willful and triples to $1,500: 400 x $1,500 = $600,000.
  3. Her copy, written by an AI tool, says "perfect for a young couple without kids." That is a separate fair housing issue under C.R.S. 24-34-502(1)(d), which can lead to a complaint and Commission discipline, with a possible fine up to $2,500 per offense (C.R.S. 12-10-217(1)).
  4. The photo is from a photographer who licensed it only for the MLS. Posting on Instagram without permission can add a copyright claim.

The fix costs almost nothing: get opt-in consent, review every ad line, and read your photo license.

Law cited

Key terms

Wire fraud
Theft by tricking someone into wiring money to a criminal's account.
Business email compromise
A scam where a hacker uses a real or lookalike email account to send fake payment instructions.
Wire transfer
An electronic bank-to-bank money transfer that is very hard to undo.
Two-factor sign-in
A login that needs a password plus a second proof, like a code on your phone.
TCPA
Telephone Consumer Protection Act, the federal law limiting autodialed calls, texts, and robocalls.
Do Not Call Registry
A national list of phone numbers whose owners do not want telemarketing calls.
CAN-SPAM
The federal law setting rules for commercial email, including opt-out.
Advertising
Promotion, solicitation, or representation of services requiring a license, including social posts.
Protected class
A group fair housing law protects from discrimination, such as race, religion, familial status.
Steering
Guiding people toward or away from areas or housing based on protected traits.
Copyright
The creator's exclusive legal right to copy, share, and display their work.
Statutory damages
A set dollar amount per violation that a law allows, without proof of actual loss.

Flashcards

How should wire instructions be verified?

By calling the title company at a number you already had from a trusted source, never one in the email.

Business email compromise in one line?

A hacker uses email to send fake payment instructions before closing.

Wire went to the wrong account. First step?

Call the bank at once to ask for a recall, then report to IC3 and police.

Which federal law limits marketing texts and robocalls?

The TCPA (47 U.S.C. 227).

TCPA damages per message?

Commonly $500, up to $1,500 if willful.

Who is responsible for an ad a third party runs for you?

You are (Rule 6.10(C), (D)(2)).

Remove an expired listing from electronic media within?

Three days (Rule 6.10(D)).

Colorado statute on discriminatory ads?

C.R.S. 24-34-502(1)(d).

Safe vs risky ad words?

Describe the property (3 bedrooms, fenced yard), not the people (no kids, young couple).

Who owns a listing photo by default?

The photographer, unless the contract gives rights to someone else.

Quiz: 10 questions

Tap an answer. It shows right or wrong and opens the reason. Your score is saved in this browser and counts in the study app.

  1. An email 'from the title company' says wire instructions changed. What is the best response?

    1. A Reply to ask for proof
    2. B Wire to the new account to save time
    3. C Forward it to the buyer
    4. D Call the title company at a known number to verify
    Show answer and why

    Answer: D. Call the title company at a known number to verify

    A known phone number defeats an email hacker. Replying to the email only reaches the hacker.

    Wire-fraud best practice

  2. Business email compromise is best described as:

    1. A A virus that deletes email
    2. B A hacker using email to send fake payment instructions
    3. C A spam filter error
    4. D A lender's delay
    Show answer and why

    Answer: B. A hacker using email to send fake payment instructions

    The goal is to redirect money. The other options do not describe a payment fraud.

    Wire-fraud best practice

  3. Which law governs autodialed marketing texts?

    1. A TCPA
    2. B RESPA
    3. C CAN-SPAM
    4. D ADA
    Show answer and why

    Answer: A. TCPA

    The TCPA covers autodialed and prerecorded calls and texts. CAN-SPAM covers commercial email.

    47 U.S.C. 227

  4. A broker texts 600 people without consent. At $500 per message, potential statutory damages are:

    1. A $30,000
    2. B $60,000
    3. C $300,000
    4. D $900,000
    Show answer and why

    Answer: C. $300,000

    600 x $500 = $300,000. $900,000 would be the willful $1,500 amount.

    47 U.S.C. 227

  5. An AI tool writes 'no kids' into a rental ad. Who is responsible?

    1. A The AI company
    2. B The platform
    3. C The broker who publishes it
    4. D Nobody
    Show answer and why

    Answer: C. The broker who publishes it

    The broker is responsible for advertising. C.R.S. 24-34-502(1)(d) bars ads with preferences based on familial status.

    C.R.S. 24-34-502(1)(d)

  6. Which ad phrase is the safest?

    1. A Perfect for young couples
    2. B Adults only
    3. C Three bedrooms with a fenced yard
    4. D Great for Christian families
    Show answer and why

    Answer: C. Three bedrooms with a fenced yard

    It describes the property. The other options state a preference tied to familial status, age, or religion.

    C.R.S. 24-34-502(1)(d)

  7. A listing contract expired on the 1st. By when must the broker remove it from the broker's own website?

    1. A 30 days
    2. B Within 3 days
    3. C End of the month
    4. D Never required
    Show answer and why

    Answer: B. Within 3 days

    Rule 6.10(D) says expired listings come down within three days.

    4 CCR 725-1 Rule 6.10

  8. A photographer licensed photos for the MLS only. The broker uses them on a postcard. This risks:

    1. A A copyright claim
    2. B No issue
    3. C A Commission license fee
    4. D A TCPA claim
    Show answer and why

    Answer: A. A copyright claim

    Use beyond the license is infringement. TCPA applies to calls and texts.

    17 U.S.C. 101 et seq.

  9. Within what time must a broker notify the Commission in writing after a fair housing violation?

    1. A 24 hours
    2. B 30 calendar days
    3. C 6 months
    4. D At renewal
    Show answer and why

    Answer: B. 30 calendar days

    Rule 6.23 sets 30 calendar days. Waiting until renewal is too late.

    4 CCR 725-1 Rule 6.23

  10. Which is NOT a good data-protection habit?

    1. A Two-factor sign-in
    2. B Secure portals for documents
    3. C Emailing a buyer's bank statement in a plain attachment
    4. D Shredding paper files after the retention period
    Show answer and why

    Answer: C. Emailing a buyer's bank statement in a plain attachment

    Plain email can be intercepted or hacked. The other three protect data.

    Data-protection best practice

← Commissions after the 2024 national settlement: buyer agreements, negotiable fees, disclosureWhat gets brokers in trouble: common complaints and how to stay clean →