They (Cybercriminals) breach real estate agencies, intercept emails, and lurk, waiting until the final moment when home buyers are ready to make a down payment.

That is 100% the real estate agencies that are at fault here and they should reimburse the people they helped defraud by having poor security and worse practises.