Manav.id
Vertical · 4 min read

Commercial lease deposits: large transfers with no closing table

Commercial lease deposits: large transfers with no closing table

Residential closings at least have a regulated intermediary holding funds. A commercial lease deposit goes directly from tenant to landlord entity, arranged between brokers, with nothing between the instruction and the wire.

Why is a commercial lease deposit so exposed?

There is no intermediary. Unlike a property purchase there is no title agency, no escrow, no title insurance covering the deposit, and no industry verification practice. A six-figure transfer goes directly to a landlord entity whose name the tenant has no basis for recognising.

Key takeaways
  • Commercial leasing has no escrow intermediary, so the transfer goes direct with no institutional verification step.
  • Entity structures make the payee name genuinely unfamiliar, which removes the tenant's ability to spot a wrong beneficiary.
  • A signed instruction issued by the landlord entity gives the tenant something to verify that does not depend on recognising a name.

What is missing compared with a purchase

Property purchaseRegulated intermediaryFunds held in trustEstablished verification practiceTitle insuranceCommercial lease depositNo intermediaryDirect to the landlord entityNo practiceNo covervs
ElementProperty purchaseCommercial lease
Regulated intermediaryTitle or escrow agentNone
Funds held in trustYesUsually not — direct to landlord entity
Industry verification practiceEstablished, if imperfectEssentially none
Insurance covering the transactionTitle insuranceNone for the deposit
Familiarity of the payee nameAgency name, checkableSpecial purpose entity, unfamiliar by design

The last row is the one attackers exploit most directly. A tenant wiring to "FS 4400 Holdings III LLC" has no basis for judging whether that is right, because entity names in this market are genuinely opaque.

The broker-email problem

Commercial leasing runs on brokerage. A transaction involves a tenant rep, a landlord rep, property management and often an attorney on each side — all coordinating by email across organisations with very different security postures.

Brokerage firms range from national operations with a security function to two-person shops using consumer email. The attacker picks the weakest, and a compromised broker mailbox provides both the timing and the credibility.

Why the amounts justify the effort

An initial commercial payment typically bundles several components.

For a modest office or retail space this lands in the low hundreds of thousands. For industrial or larger footprints it is considerably more, and it is a single transfer.

The structural obstacle to verification

There is no obvious party to run a verification service. Title agencies have a regulatory home, an insurance relationship and a professional association driving practice. Commercial leasing has none of that for the deposit.

So the control has to be something the landlord entity can do unilaterally, without an intermediary and without asking the tenant to adopt anything complicated.

# Issued by the landlord entity, signed with its key
{
  "document":  "lease_commencement_payment",
  "property":  "4400 Fillmore St, Suite 900",
  "lease":     "L-2026-0447",
  "tenant":    "[tenant entity]",
  "landlord":  "FS 4400 Holdings III LLC",
  "components": {
    "security_deposit": 112500.00,
    "first_month_rent": 37500.00,
    "prepaid_opex":     25000.00
  },
  "total": 175000.00,
  "remit_to": { "bank": "...", "routing": "...", "account": "****9023" },
  "due": "2026-04-01"
}
# Tenant's signatory renders this and signs before wiring.

The tenant is no longer asked to judge whether an entity name looks right. They are asked whether a valid signed instruction exists from the party they are contracting with, which is a checkable question.

Who drives adoption

Institutional landlords are the realistic starting point, for reasons that have nothing to do with altruism.

  1. They lease repeatedly and bear the cost of a failed commencement even when the loss is the tenant's.
  2. They already have entity-level signing arrangements for other purposes.
  3. A diverted deposit delays occupancy and rent commencement, which is their problem regardless of fault.
  4. Their counsel is usually the party that notices the exposure first.

Property managers handling many buildings are the second constituency, since they carry the operational burden of chasing and reconciling these payments today.

The same pattern elsewhere in the portfolio

Once an entity can issue signed payment instructions, the deposit is the smallest application. Tenant improvement allowance disbursements, operating expense reconciliations and capital project payments have the same structure and larger amounts.

That is the practical argument for a landlord starting here: the deposit is a contained pilot for a control that applies across everything the entity pays and receives.

Why the payee name is no help

Landlord entities are special purpose vehicles with deliberately opaque names. A tenant wiring to ‘FS 4400 Holdings III LLC’ has no basis for judging whether that is right, and asking them to check the name is asking them to do something impossible.

What the initial payment usually bundles
ComponentTypical scale
Security depositSeveral months of rent
First month's rentOne month
Prepaid operating expensesUnder a net structure
Tenant improvement contributionVariable

Objections and honest limits

“The brokers verify this.” Brokerage security posture ranges from a national firm with a security function to a two-person shop on consumer email. The attacker picks the weakest, and that is usually not the one you contracted with.

“This is too small a market to change.” For the deposit alone, perhaps. Once a landlord entity can issue signed payment instructions, tenant improvement disbursements, operating expense reconciliations and capital project payments use the same mechanism.

What a landlord entity can do alone

  1. Issue the commencement payment instruction as a signed statement. Components itemised, account in full.
  2. Publish the entity key. So a tenant verifies without asking the broker.
  3. Give the tenant one rule. No valid instruction, no wire.
  4. Reuse it across the portfolio. TI disbursements and opex reconciliations have the same shape.

Terms used here

Triple net
A lease structure where the tenant pays operating expenses, taxes and insurance in addition to rent.
Special purpose vehicle
An entity holding a single property, with a name a tenant has no basis to recognise.
Commencement payment
The bundled initial payment at lease start, typically six figures.

Frequently asked questions

Why is commercial leasing more exposed than a purchase? There is no escrow intermediary, no title insurance covering the deposit, and no established industry verification practice. The transfer goes direct.

Why can't the tenant recognise a wrong payee? Landlord entities are special purpose vehicles with deliberately opaque names. A tenant has no basis for judging whether one is correct.

Who should issue the signed instruction? The landlord entity. It is the only party positioned to do it unilaterally without an intermediary, and it bears the cost of a failed commencement.

Does this apply beyond deposits? Yes — tenant improvement disbursements, operating expense reconciliations and capital project payments have the same structure and larger amounts.

Why can't the tenant recognise the payee? Landlord entities are deliberately opaque special purpose vehicles. Asking a tenant to judge the name is asking the impossible.

Who should act first? Institutional landlords. They lease repeatedly, bear the cost of a failed commencement, and can reuse the mechanism across the portfolio.

Where this fits in Manav

Manav renders the wire or payoff details from a statement the issuer countersigned, has the payer sign on their own device, and puts a verifiable receipt on the file for the agency, the lender and the insurer.

See wire confirmation →

Sources and further reading