Commercial lease deposits: large transfers with no closing table
Residential closings at least have a regulated intermediary holding funds. A commercial lease deposit goes directly from tenant to landlord entity, arranged between brokers, with nothing between the instruction and the wire.
Why is a commercial lease deposit so exposed?
There is no intermediary. Unlike a property purchase there is no title agency, no escrow, no title insurance covering the deposit, and no industry verification practice. A six-figure transfer goes directly to a landlord entity whose name the tenant has no basis for recognising.
- Commercial leasing has no escrow intermediary, so the transfer goes direct with no institutional verification step.
- Entity structures make the payee name genuinely unfamiliar, which removes the tenant's ability to spot a wrong beneficiary.
- A signed instruction issued by the landlord entity gives the tenant something to verify that does not depend on recognising a name.
Part of Title, escrow and closing wires
What is missing compared with a purchase
| Element | Property purchase | Commercial lease |
|---|---|---|
| Regulated intermediary | Title or escrow agent | None |
| Funds held in trust | Yes | Usually not — direct to landlord entity |
| Industry verification practice | Established, if imperfect | Essentially none |
| Insurance covering the transaction | Title insurance | None for the deposit |
| Familiarity of the payee name | Agency name, checkable | Special purpose entity, unfamiliar by design |
The last row is the one attackers exploit most directly. A tenant wiring to "FS 4400 Holdings III LLC" has no basis for judging whether that is right, because entity names in this market are genuinely opaque.
The broker-email problem
Commercial leasing runs on brokerage. A transaction involves a tenant rep, a landlord rep, property management and often an attorney on each side — all coordinating by email across organisations with very different security postures.
Brokerage firms range from national operations with a security function to two-person shops using consumer email. The attacker picks the weakest, and a compromised broker mailbox provides both the timing and the credibility.
Why the amounts justify the effort
An initial commercial payment typically bundles several components.
- Security deposit — commonly several months of rent
- First month's rent
- Prepaid operating expense estimates under a net structure
- Sometimes a tenant improvement contribution
For a modest office or retail space this lands in the low hundreds of thousands. For industrial or larger footprints it is considerably more, and it is a single transfer.
The structural obstacle to verification
There is no obvious party to run a verification service. Title agencies have a regulatory home, an insurance relationship and a professional association driving practice. Commercial leasing has none of that for the deposit.
So the control has to be something the landlord entity can do unilaterally, without an intermediary and without asking the tenant to adopt anything complicated.
# Issued by the landlord entity, signed with its key
{
"document": "lease_commencement_payment",
"property": "4400 Fillmore St, Suite 900",
"lease": "L-2026-0447",
"tenant": "[tenant entity]",
"landlord": "FS 4400 Holdings III LLC",
"components": {
"security_deposit": 112500.00,
"first_month_rent": 37500.00,
"prepaid_opex": 25000.00
},
"total": 175000.00,
"remit_to": { "bank": "...", "routing": "...", "account": "****9023" },
"due": "2026-04-01"
}
# Tenant's signatory renders this and signs before wiring.
The tenant is no longer asked to judge whether an entity name looks right. They are asked whether a valid signed instruction exists from the party they are contracting with, which is a checkable question.
Who drives adoption
Institutional landlords are the realistic starting point, for reasons that have nothing to do with altruism.
- They lease repeatedly and bear the cost of a failed commencement even when the loss is the tenant's.
- They already have entity-level signing arrangements for other purposes.
- A diverted deposit delays occupancy and rent commencement, which is their problem regardless of fault.
- Their counsel is usually the party that notices the exposure first.
Property managers handling many buildings are the second constituency, since they carry the operational burden of chasing and reconciling these payments today.
The same pattern elsewhere in the portfolio
Once an entity can issue signed payment instructions, the deposit is the smallest application. Tenant improvement allowance disbursements, operating expense reconciliations and capital project payments have the same structure and larger amounts.
That is the practical argument for a landlord starting here: the deposit is a contained pilot for a control that applies across everything the entity pays and receives.
Why the payee name is no help
Landlord entities are special purpose vehicles with deliberately opaque names. A tenant wiring to ‘FS 4400 Holdings III LLC’ has no basis for judging whether that is right, and asking them to check the name is asking them to do something impossible.
| Component | Typical scale |
|---|---|
| Security deposit | Several months of rent |
| First month's rent | One month |
| Prepaid operating expenses | Under a net structure |
| Tenant improvement contribution | Variable |
Objections and honest limits
“The brokers verify this.” Brokerage security posture ranges from a national firm with a security function to a two-person shop on consumer email. The attacker picks the weakest, and that is usually not the one you contracted with.
“This is too small a market to change.” For the deposit alone, perhaps. Once a landlord entity can issue signed payment instructions, tenant improvement disbursements, operating expense reconciliations and capital project payments use the same mechanism.
What a landlord entity can do alone
- Issue the commencement payment instruction as a signed statement. Components itemised, account in full.
- Publish the entity key. So a tenant verifies without asking the broker.
- Give the tenant one rule. No valid instruction, no wire.
- Reuse it across the portfolio. TI disbursements and opex reconciliations have the same shape.
Terms used here
- Triple net
- A lease structure where the tenant pays operating expenses, taxes and insurance in addition to rent.
- Special purpose vehicle
- An entity holding a single property, with a name a tenant has no basis to recognise.
- Commencement payment
- The bundled initial payment at lease start, typically six figures.
Frequently asked questions
Why is commercial leasing more exposed than a purchase? There is no escrow intermediary, no title insurance covering the deposit, and no established industry verification practice. The transfer goes direct.
Why can't the tenant recognise a wrong payee? Landlord entities are special purpose vehicles with deliberately opaque names. A tenant has no basis for judging whether one is correct.
Who should issue the signed instruction? The landlord entity. It is the only party positioned to do it unilaterally without an intermediary, and it bears the cost of a failed commencement.
Does this apply beyond deposits? Yes — tenant improvement disbursements, operating expense reconciliations and capital project payments have the same structure and larger amounts.
Why can't the tenant recognise the payee? Landlord entities are deliberately opaque special purpose vehicles. Asking a tenant to judge the name is asking the impossible.
Who should act first? Institutional landlords. They lease repeatedly, bear the cost of a failed commencement, and can reuse the mechanism across the portfolio.
Where this fits in Manav
Manav renders the wire or payoff details from a statement the issuer countersigned, has the payer sign on their own device, and puts a verifiable receipt on the file for the agency, the lender and the insurer.