Typical scam is: hack into a real state agency, observe all emails with customers, send email to customer to deposit some funds on some account on the day of the downpayment, 4-5 hours before the real state agency worker would have done the same. Collect 1 day worth of downpayments, and run.