Check Fraud in 2026: What Every Business Needs to Know

Check fraud isn't a 1990s problem anymore. FinCEN reported 680,000 suspicious activity reports for check fraud in 2022, a significant increase from prior years per the Federal Reserve Consumer Compliance Outlook. That's not just inflation in reporting. The actual dollar value of check fraud is growing faster than card fraud or wire fraud.

If you write business checks regularly, this is what's changed and what you should be doing differently in 2026.

What does check fraud actually look like today?

Three patterns make up the vast majority of business check fraud right now:

Mail theft and check washing. A thief steals outgoing mail from your business or personal mailbox, identifies envelopes that look like they contain checks, and uses solvents like acetone or bleach to dissolve the ink. The check gets rewritten for a higher amount and payable to a different name, then deposited or cashed. The original payee never gets paid, you're out the money, and your bank usually treats it as your loss if the check was already endorsed when stolen.

Stolen check duplication. Fraudsters get hold of one of your real check images, either by photographing a check they received, finding a photo on social media, or accessing one through a data breach. They reprint the check on similar paper. The reprint usually looks close enough to pass with a smaller bank or a casual deposit.

Business email compromise leading to check fraud. Someone impersonates a vendor or executive over email and convinces accounting to mail a check to a fake address. The check itself isn't altered. The fraud is in the direction.

The mail theft pattern is the fastest-growing. FinCEN's September 2024 analysis identified mail theft-related check fraud as a serious threat, with financial institutions reporting more than $688 million in suspicious activity over a six-month period.

Why did check fraud get worse?

Two structural changes:

Bank fraud detection got better for cards and ACH but didn't catch up on checks. Cards have real-time fraud scoring on every transaction. ACH has Nacha rules that require originators to verify recipient account information. Checks still rely on the same manual processes banks used in the 1980s, augmented by some automated MICR reading. Fraud detection on checks is mostly a teller-by-teller eyeball check.

Mobile deposit made fraud easier to scale. A fraudster who steals a check no longer has to walk into a bank branch and show ID. They open a fraudulent account at a low-friction online bank, take a photo of the check, and deposit it remotely. The bank usually has no way to physically inspect the check until 2 to 3 business days later, by which time the funds have been moved.

What's the actual financial risk to a small business?

The numbers depend on how quickly you catch the fraud and what your bank's fraud policy is.

If you catch a fraudulent check within 30 days of it clearing, most banks reimburse you under Regulation CC and the Uniform Commercial Code. If you wait longer than 30 days, the bank's obligation drops significantly.

Per the 2025 AFP Payments Fraud and Control Survey, 79 percent of organizations reported experiencing attempted or actual payments fraud in 2024, with checks remaining the most-targeted payment method at 63 percent of organizations victimized.

AFP data shows 63 percent of organizations experienced check fraud in 2024. Positive pay through your bank is the single strongest control against altered checks.

How can your business prevent check fraud in 2026?

Four controls that actually work:

Use positive pay through your bank. This is the single most effective control. You upload a list of every check you've issued (check number, amount, payee) to your bank. The bank only honors checks that match the list. Most business banking accounts include positive pay free or for $10 to $25 per month. If your bank doesn't offer it, switch banks.

Order checks with real security features. Chemical-reactive paper, microprint signature lines, pantograph backgrounds, and MICR-certified ink. We cover what's real vs theater in our check security guide. Standard checks from any reputable printer include these.

Drop outgoing checks at the post office, not in mailboxes. USPS blue collection boxes are safer than personal mailboxes but still less safe than walking into a post office. The safest is mailing from inside a USPS facility before pickup time.

Reconcile your bank account daily, not monthly. Most business banks now offer real-time transaction alerts. Turn them on for every check that posts. The faster you spot an unauthorized check, the better your chance of recovery under Regulation CC.

How Checkomatic helps protect against check fraud

Every business check we print since 1997 ships with bank-grade security features as standard. Chemical-reactive paper that reacts to acetone and bleach. Microprint signature lines that blur when photocopied. Chemical-reactive pantograph backgrounds that show "VOID" or "COPY" on duplicates. MICR-certified ink that bank fraud detection systems read correctly.

We also offer a premium security tier that adds heat-sensitive ink, a security warning band, and a thermochromic icon. For businesses that write large checks or operate in fraud-heavy industries (real estate, construction, large medical practices), the premium tier is worth the few extra dollars per box.

Beyond what's printed on the check, we never store routing or account information after an order ships. Our order verification system flags suspicious order patterns (multiple orders for the same routing/account with different business names, for instance) and pauses them for manual review.

Our business checks catalog shows standard and premium security tiers side by side. Standard works for most small businesses. Premium for higher-risk profiles.

What about digital alternatives to checks?

ACH transfers and wire transfers both have lower fraud rates than checks. ACH fraud is roughly one-fifth of check fraud per dollar moved. Wires have authentication requirements that make them harder to spoof.

The downside is that not every vendor accepts ACH or wire, especially smaller suppliers and individual contractors. Until that changes, checks remain part of US business operations. The right response isn't to eliminate checks, it's to use them with appropriate controls.

For high-volume payables, payroll cards, virtual cards, and pay-by-link services are growing alternatives. They have their own fraud profiles (mostly account takeover) but eliminate the mail theft vector.

Frequently Asked Questions

Who's liable if my check gets washed and re-deposited?

Depends on how fast you catch it. Within 30 days of clearing, your bank usually absorbs the loss under Regulation CC and UCC Article 4A. After 30 days, the bank's obligation is reduced. After a year, your bank generally has no obligation to reimburse.

Does positive pay cost extra?

Most business banking accounts include basic positive pay free. Enhanced positive pay (which also matches the payee name) usually costs $10 to $25 per month. The savings from preventing one fraud event covers the cost for years.

Are checks safer than ACH or wire?

No. Per dollar moved, checks have higher fraud rates than ACH and wire. They remain common because vendor acceptance is universal.

Will banks stop accepting paper checks?

Not in the foreseeable future. The 2024 FedNow Service and instant payments are pushing some volume away from checks, but the Federal Reserve processed nearly 3 billion commercial checks in 2024 and processes roughly half of total US check volume.

What's the most common mistake businesses make on check fraud?

Reconciling monthly instead of daily. By the time a 30-day statement arrives, the recovery window under Regulation CC has narrowed significantly.

What you should do this week

If you write business checks and haven't reviewed your controls in the last year, three things to do this week:

Call your business banker and ask if positive pay is enabled on your account. If it isn't, enable it.

Audit where you mail outgoing checks. Switch from personal mailboxes to post office drop-off.

Confirm your business checks ship with chemical-reactive paper and microprint security features. If they don't, your next reorder should fix that.

Browse our business checks catalog to see the security tiers if you're due for a reorder.