Harris County Attorney Abbie Kamin told Houston on September 9, 2026 that her office had filed two civil suits against people accused of stealing homes on paper. Click2Houston (Oct 9) brought the warning back: check your records, and treat a deal that is too cheap or too fast as a problem. The Clerk’s free Property Alert System is the email piece — it mails you when a document is recorded under a name you registered.
This is property fraud plus a county email alert, not a reported hack of the Clerk or the County Attorney. The suits are state court. CourtListener RECAP showed no matching Southern District of Texas docket for these parties when we searched on October 11, 2026.
Official pages: County Attorney — “A Ring of Scammers” · Clerk Property Alert System

Snapshot
| Field | Detail |
|---|---|
| Suits announced | Sept 9, 2026 · Harris County Attorney |
| Local recap | Click2Houston Oct 9, 2026 |
| Captions | Harris County v. Antia Martinez et al. · Harris County v. Mario Cavazos |
| CourtListener (federal) | 0 matching RECAP rows |
| Free alert | Clerk PAS email · 1–2 business days after recording |
Kamin’s office says Martinez covers five homes stolen with forged notarized packets, and Cavazos covers five more. Investigators say some owners were already dead — one in 1992. A prior private suit had Cavazos selling a house to Martinez. Click2Houston quoted Kamin calling it “outright home theft,” including a trick that grafts a real notary signature page onto a fake deed.
A 2025 default judgment under then–County Attorney Christian Menefee returned 40 homes in a different forgery ring. The Scam Free Harris County desk still wants new complaints.
The email problem around a paper crime
Deed theft here is mostly forged filings, not a phished Clerk password. The follow-on risk is still an inbox problem:
- The Clerk’s PAS sends a real email with a link to a watermarked unofficial copy. The Clerk says the system matches names, not addresses, and can alert you about someone else named Smith. Notifications aim for 1–2 business days.
- A fake “Harris County Clerk / new deed on your house — click to review” message is cheap to send.
cclerk.hctx.netIdentity scored 25%.cao.harriscountytx.govIdentity scored 0%. - Once a fake deed is on file, title and wire fraud get easier. That is the same BEC pattern we already score on Texas real-estate brokerages.
Register PAS at the Clerk portal. Type that host. Enter every name variant on your deed. The Clerk’s own disclaimer: PAS does not block a filing, is not legal advice, and is not a warranty.

What Houston homeowners should do
- Look up the legal description on hcad.org, then search that description on the Clerk site. Do this before you need a lawyer.
- Enroll in PAS for every name on the deed. Treat an alert as a review task, not proof the filing is yours.
- If the document is wrong, call a real-estate lawyer and file with the County Attorney’s Stay Scam Free complaint path. Texas Government Code 51.901 is the Clerk’s cited route for a fraudulent instrument.
- Keep the will and probate papers current. Kamin said deceased-owner homes are a favorite target.
- Buyers and renters: walk away from cash-only, same-week closings. A stolen deed can leave the “seller” and the new occupant both holding a mess.
MFA: YubiKey and Google Authenticator
A hardware key does not stop a forged notary page. It does stop a fake “Clerk portal / review your new deed” login that steals the password you use for PAS. Grades match our MFA directory.
| Grade | Meaning |
|---|---|
| Fail | SMS, voice, or email OTP — or no public path |
| Pass | Self-serve Google Authenticator-style open TOTP |
| Strong | FIDO2 / YubiKey-class security key for sign-in |
| Platform | Grade | YubiKey | Authenticator |
|---|---|---|---|
| Harris County Clerk PAS | Fail | No | No |
| Harris County Attorney | Fail | No | No |
The Clerk PAS page documents register / log in, name matching, and email alerts. It does not name a YubiKey or Google Authenticator. The County Attorney newsroom and complaint path publish no portal MFA help either. CivicPlus-style open TOTP on some Texas city sites is not this Clerk stack. Grade Fail.
Directory: MFA support directory · Category → Business Apps.
Recommended MFA tools
| Product | Best for | Get it |
|---|---|---|
| YubiKey 5C NFC | USB-C laptops + NFC phones | Amazon |
| YubiKey 5 NFC | USB-A desktops + NFC phones | Amazon |
| Proton Pass | Passkeys + authenticator-style TOTP | Proton Pass |
We may earn a commission if you buy a YubiKey or sign up for Proton Pass through the links above.

Independent cybersecurity audits
We audited the Clerk, HCAD, the county site, and the County Attorney host on October 11, 2026. 100% is the ideal — none reach it. These scores are public email / transport / website posture. They do not decide the civil suits.
| Organization | Domain | Overall | vs 100% |
|---|---|---|---|
| Harris County Appraisal | hcad.org | 63% | −37 |
| Harris County | harriscountytx.gov | 52% | −48 |
| County Clerk | cclerk.hctx.net | 38% | −62 |
| County Attorney | cao.harriscountytx.gov | 28% | −72 |
| Domain | Identity | Transport | Website |
|---|---|---|---|
| hcad.org | 75% | 45% | 37% |
| harriscountytx.gov | 50% | 15% | 37% |
| cclerk.hctx.net | 25% | 15% | 37% |
| cao.harriscountytx.gov | 0% | 15% | 37% |
Audit links: hcad.org · harriscountytx.gov · cclerk.hctx.net · cao.harriscountytx.gov
cao.harriscountytx.gov Identity 0% is the spoofing risk: a fake “County Attorney / Stay Scam Free / your deed” message is easier to land than the 28% overall implies. The Clerk alert host at 38% / Identity 25% is the mailbox homeowners are being told to trust. Transport 15% on three of four hosts means inbound county mail can still be downgraded without MTA-STS enforce.

Website stack note
Passive website-tech probes on October 11, 2026:
| Domain | Stack signal |
|---|---|
| cclerk.hctx.net | ASP.NET (X-Powered-By exposed); DigiCert TLS expires 2027-04-03 |
| hcad.org | Craft CMS on Plesk; GoDaddy TLS expires 2027-02-25; Bootstrap 4.1.3 (legacy) |
| harriscountytx.gov | Stack undetected; DigiCert TLS expires 2027-02-07 |
| cao.harriscountytx.gov | Stack undetected; Let’s Encrypt TLS expires 2026-11-26 |
Point-in-time only. A Clerk homepage stack is not a finding on a recorded deed.
Blacklist and lookalike domains
Email blacklist checks (public DoH, October 11, 2026): hcad.org, harriscountytx.gov, cclerk.hctx.net, and cao.harriscountytx.gov were clear on mail/domain lists we can query. cclerk.hctx.net and cao.harriscountytx.gov showed no MX in this probe — web posture only. SPFBL notes on HCAD and County Attorney web/CDN addresses are informational — not mail-reputation hits.
DNS lookalike scans (BEC profile, registered signals only):
| Brand scanned | To review | Likely owned | BEC staging |
|---|---|---|---|
| hcad.org | 11 | 0 | 0 |
| harriscountytx.gov | 3 | 0 | 0 |
| cclerk.hctx.net | 9 | 0 | 0 |
High-interest registered names (investigate; not proof the suits used them):
| Lookalike | Technique | Note |
|---|---|---|
| hcad.com / hocad.org / hacad.org | tld-swap / insertion | Live DNS |
| harriscountytx.com / .org / .info | tld-swap | .info has MX |
| hctx.net / hctx.com | defensive-tld / tld-swap | Clerk lives on cclerk.hctx.net |
Type cclerk.hctx.net, hcad.org, and harriscountytx.gov. Continuous monitoring: Cybersquat Domain Monitoring.
Related coverage
- Top Texas real-estate brokerages
- Texas Cyber Command / Cyber Ready
- Houston brushing / unexpected-package QR
- HHSC STEPS / PFD phishing
- MFA support directory
Run a free audit at audit.emailmenow.com or contact EmailMeNow for DMARC / MTA-STS and phishing response aimed at the 100% ideal.