Title company called and left a voicemail saying they emailed wire instructions and to call to verify with them then check with lender on correct closing amount. The email came from the title company domain so it was easy to verify but literally anyone could have called and mentioned the same.