On September 28, Cranbury Township, New Jersey, wired about $26 million to buy land for affordable housing. It never reached the intended recipient.

The township disclosed the theft on November 6, more than five weeks later. Investigators have frozen nearly $17.3 million. That leaves roughly $8.7 million not yet reported as frozen or recovered, and even frozen money isn’t back in the township’s account. A freeze stops funds from moving. Getting them returned is a separate process.

Officials haven’t said how the wire was diverted, who supplied the payment instructions, or which controls failed. Until they do, any verdict on Cranbury’s process would be a guess. What we can look at is the kind of transaction this was, and what it asks of everyone who works on one.

What we know so far

  • The transaction: a land purchase to help the township meet its affordable housing obligations.
  • The amount: approximately $26 million, sent by wire on September 28.
  • The investigation: a task force led by the Cranbury Township Police Department and the Middlesex County Prosecutor’s Office, with help from county, state, and federal agencies.
  • Recovery so far: nearly $17.3 million in assets frozen.
  • The township’s response: two new oversight roles (an assistant township administrator and an assistant CFO), plans to consider bringing in accounting firm PKF O’Connor Davies, and talks with its insurance carriers.

Township records fill in more of the picture. A March 2026 bond ordinance appropriated $26 million for affordable housing and authorized up to $24.7 million in bonds or bond anticipation notes to fund it. A separate ordinance approved the land purchase and listed the officials and outside advisors authorized to sign. Neither one identifies the seller, the title company, the escrow agent, or the bank handling the closing.

So this was a bond-funded, one-time purchase with a long list of participants. Anyone in public finance has worked on a deal shaped like that.

Why deals like this are hard to protect

Most of a township’s payments follow a rhythm: the same vendors, similar amounts, familiar contacts. A bond-funded land purchase has none of that. Four things work against it.

There’s no history. You’ve never paid this seller before, so there’s no pattern to compare against. The first wire instructions you receive are the only ones you’ll ever see.

Many hands touch it. A deal like this can involve the finance office, the municipal attorney, special counsel, bond counsel, a planner, an appraiser, the seller and seller’s counsel, a title or escrow agent, and at least two banks. Each handoff is another chance for an instruction to be changed, forwarded, or faked.

The details are public. Ordinances, minutes, and offering documents spell out the amount, the purpose, the timing, and often who can sign. That transparency is required and good for taxpayers, but it also gives criminals a script. Nobody has said whether public records played a role in Cranbury. Elsewhere, scammers are already mining public planning records to send fake invoices that appear to come from city hall.

The clock is running. Closings happen on a set date. In our book on transaction security, When Money Moves, we point out that the moment just before funds move is also the moment of greatest pressure. Everyone wants to be done, and that’s when steps get skipped.

Five ways to protect your next closing

1. Assign the wire at kickoff

When Money Moves describes a closing by what it requires: several parties, conditions that must be met before money moves, and funds released alongside documents and approvals. Treat that like a large vendor payment and each party works on its own, assuming someone else checked.

So map the deal before it gets busy. Write down who is involved, which organization each person represents, who will send the wire instructions, and who will confirm them. If nobody owns that last job, give it to someone by name.

2. Decide how wire instructions will arrive

Wire instructions are the most valuable document in the deal. Decide early how they will reach you. The best route is tied to the deal itself, where the sender’s identity and authority are established before they submit anything.

Then tell every participant up front: you won’t act on bank details sent by email, and here is where you will accept them. We made the full case for that rule in Is It Safe to Email Bank Account Details?

3. Check the person, their authority, and the account separately

Each check answers a different question. A real person may have no authority to direct funds. An authorized signer may send the wrong account. And a bank will tell you an account exists. It won’t tell you whether the account belongs to the seller in your contract.

Confirm each one on its own:

  • Who is sending the instructions, using contact details you had before the request arrived.
  • Whether they can direct funds on the seller’s behalf.
  • Whose account it is, validated against the intended recipient.

Any callback should go to a number from your own records. Mobile, Alabama shows why. A supervisor checking a banking change there called the number listed in the fraudulent email instead of the vendor’s preapproved number. The city went on to send $14.7 million to the impostor.

4. Build in a pause before release

When Money Moves calls this stage Ready to Fund: every condition met, every approval in hand, and nothing left to decide. Having that stage on paper gives you a firm answer when someone on the closing call says, “We’ve checked everything. Just send it.”

Before the wire goes out:

  • Get written confirmation that the instructions haven’t changed since they were verified.
  • Treat any change, however small or late, as a new request. Verification starts over.
  • Keep the person who sets up the wire, the person who approves it, and the person who releases it separate. Record who did what.
  • On an eight-figure wire, consider a small test transfer first. Have the recipient confirm it through a channel you already trust.

5. Read your insurance before you need it

Cranbury says it’s working with its insurance carriers. Whether a policy pays often depends on its wording and on what you can prove. In Apache Corp.’s case, a federal appeals court denied coverage for a vendor-fraud loss because the company had authorized the transfer itself. American Tooling Center lost money to a nearly identical scheme and won coverage in a different circuit.

As When Money Moves explains, the difference came down to evidence. Insurers look for three facts: controls existed before the transaction, those controls were followed that time, and fraud got through anyway.

Start by comparing your social engineering sublimit to the size of your largest closings, and look for “voluntary parting” exclusions. Then make sure each verification step leaves a record, such as callbacks logged to known numbers and approvals with names and timestamps.

What this means for your role

  • Issuers and finance officers: You send the wire, so the final check is yours. A closing date is never a reason to skip it.
  • Bond counsel and municipal attorneys: You often run the closing checklist. Add the wire instructions to it: who sends them, and how they get confirmed.
  • Municipal advisors: Ask your clients who confirms wire instructions, by name. “Someone does” isn’t an answer.
  • Underwriters: Wiring bond proceeds at closing carries the same risk. Confirm instructions through channels you already know, especially when something changes late.
  • Paying agents and trustees: Give every disbursement request and every payee change the same care as the first one.

Cranbury isn’t alone

Mobile had already tightened its procedures after an August fraud attempt. The mayor later said those procedures could have prevented the October loss if employees had followed them. Earlier this year, Vermont’s Chittenden Solid Waste District sent more than $3 million to a fraudulent account after an email asked to update a contractor’s payment terms.

Each of those payments went exactly where its instructions said. The mistake came earlier, when someone decided those instructions could be trusted.

How Basefund helps

Basefund puts the people, the checks, and the payment instructions for a transaction in one secure record before any money moves. Participants verify who they are. Payees submit bank details through a protected link instead of email, and each account is validated against the intended recipient. Every approval and change is logged as it happens, and the transaction can be insured.

If you have a closing or a large disbursement coming up, see how Secure Transactions works. And if you want the full framework behind these lessons, request a copy of our book, When Money Moves.