> He also provided a fake email for my brother: alexanderedwardenenson@out-look.com. Notice the subtle misspelling — “Benenson” without the second “n” in the email, and the hyphenated “out-look.com” domain.

Surely you meant "'Benenson' without the “b” in the email, and the hyphenated 'out-look.com' domain"?

Somewhat common in the UK as well, example: https://www.bbc.co.uk/news/uk-england-beds-bucks-herts-63392... (It took him 4 years to recover possession https://www.bbc.co.uk/news/articles/cwygv79n8x1o)

Here you can register with the Land Registry and they will email you if any enquiries or attempted sales happen on your property: https://www.gov.uk/protect-land-property-from-fraud

In the US identity theft is easier than in other countries because financial transactions are designed to be convenient, not safe. You can sell a property you own, or move your entire Fidelity savings to another bank, all without showing up in person.

Is this something a title insurance could help with?