Check Fraud Prevention: How to Protect Your Personal and Business Checks

How Big the Check Fraud Problem Actually Is

Check fraud is not a niche concern. According to the 2025 AFP Payments Fraud and Control Survey, checks remain the payment method most targeted by fraudsters, with 63% of organizations reporting attempted or actual check fraud in 2024. FinCEN, the Financial Crimes Enforcement Network, received more than 682,000 check-fraud-related Suspicious Activity Reports filed in 2024, a figure roughly 95% higher than 2020 levels.

FinCEN reported over $688 million in suspicious activity tied to mail-theft related check fraud in just a six-month window in 2023. Of stolen checks that were used fraudulently, 44% were altered and deposited, 26% were used to create counterfeit checks, and 20% were signed and deposited fraudulently.

The rise is driven by two converging factors. First, postal mail theft targeting checks has accelerated sharply. Cases of serious crime against postal workers more than doubled between 2019 and 2023, according to a GAO analysis. Criminals purchase stolen USPS master keys on dark web marketplaces to access collection boxes. Second, check fraud is technically simple compared to other financial crimes. A stolen check, a bottle of acetone, and a desktop printer are enough to execute most schemes. The barriers to entry are low and the financial payoff per incident can be high.

The result is that both individuals who write personal checks and businesses that issue payments by check face meaningful, measurable fraud risk. The defenses are also well established, which is the focus of the rest of this guide.

The Main Types of Check Fraud

Check Washing

Check washing is the most prevalent form. A criminal steals a check, typically from a mailbox before or after it reaches its destination, and applies chemical solvents including acetone, bleach, or nail polish remover to dissolve the ink. Standard oil-based ballpoint ink sits on the paper surface and lifts away cleanly. The criminal then rewrites the payee name and dollar amount and deposits the check. The original account holder's bank information and signature remain intact, making the altered check look legitimate to bank processing systems.

Counterfeit Checks

With a stolen or intercepted check as a template, fraudsters can scan the document and use desktop publishing software to recreate it, printing counterfeit copies on standard paper with a high-quality printer. These counterfeits carry real routing numbers and account numbers from the victim's original check, which is enough for them to pass initial review at ATMs and mobile deposit channels. The fraud typically surfaces when the item is returned days later during interbank clearing.

Check Forgery

Forged checks involve creating or altering a check with a forged signature. This can involve signing a stolen blank check, forging the maker's signature on a counterfeit, or adding a second endorsement to redirect a deposited check to a different account. Signature forgery is easier when the legitimate signature is visible on a stolen check and the fraudster has time to practice.

Check Kiting

Kiting exploits the float period between when a check is deposited and when it fully clears. The fraudster writes a check from Account A to Account B, then writes a check from Account B back to Account A, creating a cycle of inflated artificial balances. The Check 21 Act of 2004 compressed clearing times to one to two days at most institutions, making sustained kiting much harder, but short-term kiting attempts still occur. Writing a check when you know your account lacks the funds to cover it, regardless of expected deposits, constitutes check fraud under federal law.

Remote Deposit Capture Fraud

Remote deposit capture allows checks to be deposited by photographing them through a mobile banking app. Fraudsters exploit this by depositing the same check multiple times at different institutions before any of them communicate the duplication, or by depositing a counterfeit check through mobile deposit, which uses optical character recognition rather than MICR scanning and is less effective at detecting altered paper.

How to Verify a Check Is Legitimate

When you receive a check you did not expect, from someone you do not know well, or for an amount that does not match what was agreed, verify it before depositing. Verification takes five minutes and can prevent weeks of recovery work.

Step 1: Check the Physical Paper

Legitimate checks are printed on specific security paper with texture and weight you can feel. Run your thumb across the paper. It should feel slightly rough, not smooth or glossy. Hold the check up to a light source and look for a watermark. On genuine high-security checks, watermarks are embedded in the paper fibers at the mill and appear as subtle light and dark patterns when backlit. A printed or copied watermark looks flat and does not have the same translucent quality. Check for the security feature list typically printed on the back of the check. If those features are listed but absent from the front of the check, something is wrong.

Step 2: Verify the Check Number in Two Places

Every check has its check number printed twice: in the top-right corner and in the MICR line at the very bottom-right of the check. These two numbers must match exactly. If they do not, the check has been altered. This is one of the most reliable fraud indicators available because altering a check usually changes the face of the document but leaves the MICR line untouched, or vice versa. A mismatch between the two printed check numbers is a near-certain sign of tampering.

Step 3: Look Up the Routing Number

The nine-digit ABA routing number in the MICR line at the bottom-left of the check identifies the issuing bank. You can verify that this routing number actually belongs to the bank named on the check by using the ABA routing number lookup tool at the American Bankers Association website, or through your own bank's verification resources. If the routing number on the check resolves to a different institution than the one named on the face of the check, the check is fraudulent.

To confirm whether the bank is a legitimate federally insured institution, use the FDIC BankFind Suite at fdic.gov/bankfind-suite, which allows you to search any bank name and confirm its charter status and contact information. If the bank named on the check does not appear in the FDIC database, do not deposit the check.

Step 4: Call the Issuing Bank Directly

For any check above a few hundred dollars from a source you cannot independently verify, call the bank directly. Find the bank's phone number on its official website, not from the check itself. The phone number printed on the check may be part of the fraud. Call the bank's general customer service line, provide the check number, dollar amount, and account number, and ask whether the check was legitimately issued and whether the account has sufficient funds to cover it. For cashier checks, ask specifically whether your institution issued cashier check number X in the amount of Y to the named payee.

Step 5: Use Official Verification Tools

For US Treasury checks including tax refunds, Social Security payments, and government benefit payments, the Treasury Check Verification System (TCVS) at tcvs.fiscal.treasury.gov allows anyone to verify whether a check is a genuine Treasury issuance. As of late 2024, TCVS added payee name validation through its API, which allows financial institutions to confirm that the payee name on the check matches Treasury records.

Red Flags That Signal a Fake or Altered Check

These patterns do not prove a check is fraudulent on their own, but any one of them warrants verification before you deposit or cash:

• The check arrived unsolicited, without a prior transaction or agreement explaining why you are receiving it
• The amount is larger than expected, often paired with a request to send back the difference
• The check number in the top-right corner does not match the check number in the MICR line at the bottom-right
• The routing number does not match the bank named on the check when verified through the ABA lookup
• The bank name printed on the check does not appear in the FDIC BankFind Suite
• The paper feels thin, smooth, or glossy rather than textured
• Watermarks are absent, poorly reproduced, or only visible as printed ink rather than a paper fiber pattern
• The check has a PO Box rather than a street address for the bank
• The memo line says "approved payment," "payment approved," or "certified funds," which are phrases used by fraudsters to create a false sense of legitimacy
• The sender is communicating exclusively by email or text and using pressure tactics around urgency or confidentiality
• The postmark does not match the location of the named bank

Your bank's provisional credit for a deposited check is not confirmation the check is real. Banks make deposited funds available within one to two business days as required by Regulation CC. The check itself takes several additional days to fully clear through the interbank system. If you spend provisionally credited funds and the check later bounces, you owe the bank the full amount regardless of whether you knew the check was fake.

How to Prevent Check Washing

Use a Black Gel Ink Pen

This is the single highest-impact behavioral change for personal check security. Standard ballpoint pens use oil-based ink that sits on the surface of check paper. Common household solvents including acetone (nail polish remover), rubbing alcohol, and bleach dissolve this ink cleanly, leaving the underlying paper undamaged and ready for the fraudster to rewrite.

Gel ink pens work differently at a chemical level. Gel ink uses pigment suspended in a water-based gel carrier. When it dries, the pigment bonds directly with the paper fibers rather than sitting on top of them. Solvents that would dissolve ballpoint ink cannot remove gel pigment without also visibly damaging the paper, which means any washing attempt leaves obvious evidence of tampering. The Better Business Bureau specifically recommends indelible black gel ink for writing checks.

Fill All Fields Completely and With No Gaps

Leave no blank spaces on any line of a check. Draw a line through any unused space on the payee line and the written amount line. A fraudster who cannot wash the ink off can sometimes extend or alter what is already written by inserting characters before or after existing text. Writing "one hundred dollars" and then drawing a line to the end of the amount line leaves no room to insert "and fifty" in front of "dollars." Starting the dollar amount as far left as possible in the numeric box prevents adding digits before the number.

Order Chemically Reactive Check Stock

High-security check paper responds visibly to chemical solvents. When a check washing attempt is made, the chemically reactive paper develops visible staining or discoloration in the area exposed to solvent. The damage is irreversible and obvious to anyone examining the check, including bank tellers and processing systems. This is a primary security feature on all Checkomatic business and personal checks, which use chemically reactive paper as a standard included feature on every order.

Protecting Checks Sent Through the Mail

Mail theft is the most common entry point for check fraud. Criminals steal checks from blue collection boxes, from residential and business mailboxes before or after delivery, and increasingly from postal carriers directly. The checks are then washed or counterfeited for deposit.

Drop Checks at the Post Office Counter

Dropping an envelope containing a check into a blue USPS collection box leaves it exposed to anyone with a collection box master key, which are sold on dark web marketplaces. Taking checks directly to a postal clerk at the post office counter eliminates this exposure entirely. The clerk processes the envelope into the secure postal stream directly. This single habit change removes the most common attack vector for check washing fraud.

Enroll in USPS Informed Delivery

This is a free service from the United States Postal Service that almost no check fraud guide mentions. Informed Delivery sends you a daily email showing scanned images of the exterior of letter-sized mail pieces that are scheduled to arrive at your address that day. If a check you are expecting does not show up in Informed Delivery and does not arrive, you know to contact the issuer immediately before the check reaches a fraudster and is altered. You can sign up at informeddelivery.usps.com using any residential or business address. The service also provides tracking updates on incoming packages. Enrollment takes about ten minutes and costs nothing.

Request Secure Mailing Options

For high-value checks, use USPS Certified Mail with return receipt, which requires a signature upon delivery and provides a delivery confirmation record. This does not prevent theft from the collection side but creates accountability at the delivery end. Some businesses send high-value checks via UPS or FedEx rather than USPS because private carriers have separate tracking systems and different physical handling chains.

Consider Electronic Alternatives for Regular Payments

Recurring payments to known, trusted payees are candidates for ACH transfer rather than paper check. ACH eliminates mail exposure entirely. For one-time payments to new recipients where a paper trail matters, a check sent directly from a post office counter with Informed Delivery monitoring is a reasonably secure approach.

The Overpayment Scam: How It Works and Why It Always Wins

The overpayment scam is the most financially damaging check fraud scheme targeting individuals, and most fraud guides do not explain the mechanics clearly enough for people to recognize it in real time.

The setup: you are selling something, accepting a payment for services, or receiving a prize or inheritance. The paying party sends a check for significantly more than the agreed amount, usually accompanied by an explanation: the extra is to cover shipping costs, taxes, fees, or to pay a third party on their behalf. They ask you to deposit the check and wire or transfer back the excess amount.

The mechanics of why this always succeeds for the fraudster: when you deposit the check, your bank credits your account under Regulation CC, typically within one business day for amounts under your bank's threshold. You see the money in your balance and believe the check has cleared. It has not. Regulation CC requires banks to make funds available before the check has actually settled through the interbank system. The check can take three to ten business days to fully clear, during which time the fraudster's fake check is traveling through the system. When it bounces, the bank debits your account for the full deposit amount. The money you wired to the fraudster is gone permanently. You are left owing the bank the deposit amount you already returned.

The protection is simple: never send any money based on a deposited check until your bank explicitly confirms the check has fully cleared, not just that funds are provisionally available. This is a distinction banks are not always clear about when customers call to "verify" a deposit. Ask specifically whether the check has cleared final interbank settlement, not whether the funds are showing in your balance.

Your Legal Liability Under UCC 3-406

This is the legal dimension of check fraud prevention that virtually no consumer-facing guide covers, and it has direct consequences for what happens when a check written by you is altered and cashed fraudulently.

Section 3-406 of the Uniform Commercial Code states that a person whose failure to exercise ordinary care substantially contributes to an alteration of an instrument is precluded from asserting the alteration against a person who, in good faith, pays the instrument. In plain terms: if your own carelessness made it easier for someone to alter your check, you may lose the right to hold your bank responsible for paying the altered version.

Courts have interpreted ordinary care in the check fraud context to include using reasonably secure ink when writing checks. Writing a check in standard ballpoint pen that dissolves easily in common household solvents could be argued as a failure to exercise ordinary care, particularly if your bank offered you chemically reactive check stock or gel pen guidance. The burden of proving negligence falls on the bank, not you, but the argument becomes available to the bank as a defense against making you whole.

For businesses, this liability is amplified. Legal experts note that a business's failure to use adequate security features on its checks can constitute negligence in a fraud case. When a bank offers a business high-security check stock or Positive Pay and the business declines both, the bank has a strong argument that the fraud loss should fall entirely on the business rather than being shared or absorbed by the bank.

Positive Pay for Businesses

Positive Pay is the most effective active fraud prevention tool available to businesses that issue checks. It works by creating a verification layer between every check you issue and every payment that attempts to clear your account.

How Positive Pay Works

Each time your business issues checks, you transmit a file to your bank listing every check by number, dollar amount, and issue date. When a check is presented for payment, the bank compares the presented item against your file. If all fields match, the check clears. If any field does not match, the bank flags it as an exception item and contacts you to decide whether to approve or reject the payment before funds are released.

Payee Positive Pay is an enhanced version that also verifies the payee name against your issue file. Since check washing almost always changes the payee name, Payee Positive Pay catches altered checks that standard Positive Pay might miss if the check number and amount were not altered. This is the version most fraud prevention professionals now recommend as baseline for any business issuing checks regularly.

What Positive Pay Stops

Positive Pay catches counterfeit checks with a correct check number but wrong amount, altered checks where the payee or dollar amount was changed, checks written on a closed or wrong account number, and duplicate check presentment attempts. It does not catch forged drawer signatures on checks that are otherwise correctly listed in your issue file, which is why high-security check stock that makes signature forgery obvious remains important even when Positive Pay is enrolled.

The Liability Shift When You Decline Positive Pay

If your bank offers Positive Pay and you do not enroll, many bank deposit agreements shift fraud liability to your business for losses that Positive Pay would have caught. The UCC framework supports this: if an adequate fraud prevention tool was available and you chose not to use it, the argument that the bank bears responsibility for paying a fraudulent check weakens considerably. For businesses issuing more than a handful of checks per month, the cost of Positive Pay, typically under $50 per month at most institutions, is trivially small compared to the exposure.

For businesses whose check volume makes Positive Pay worthwhile, ordering business checks and QuickBooks-compatible checks from Checkomatic ensures the check number, amount, and formatting align precisely with what your Positive Pay issue file expects. Discrepancies between what your software records and what actually prints on the check can create false exceptions in Positive Pay. Checkomatic's checks are formatted to match accounting software outputs exactly, eliminating that source of error.

What Check Security Features Actually Stop Fraud

Not all check security features carry equal weight. Some deter casual copying; others prevent specific fraud methods. Here is what each feature actually does.

Chemically Reactive Paper

The most important security feature for check washing prevention. When a solvent is applied to chemically reactive paper, the paper develops visible staining or discoloration. The reaction is permanent and obvious, making the altered check visibly damaged in a way that bank tellers and processing systems are trained to reject. Every Checkomatic personal and business check is printed on chemically reactive paper as a standard feature.

Genuine Foundry Watermarks

A real watermark is created during paper manufacturing by pressing a pattern into the paper pulp before it dries. The pattern becomes part of the paper fiber structure and is visible as translucent light and dark areas when held up to light. Printed watermarks, which some low-cost check printers use, are just ink on the paper surface and can be replicated by a photocopier. Genuine foundry watermarks cannot be photocopied because they are a property of the paper thickness, not a surface marking.

Microprinting

Tiny text, typically reading "ORIGINAL DOCUMENT" or a similar phrase, printed along signature lines or borders at a scale that is readable under magnification but appears as a solid line to the naked eye. Photocopiers and desktop printers cannot reproduce microprinting at accurate scale; copies show the line as a blurred or broken smear rather than legible text. Bank tellers and fraud detection systems use magnification to verify microprinting on suspected counterfeit checks.

Heat-Sensitive Thermochromic Ink

An element on the check printed in ink that disappears when you rub it with your thumb and reappears when released. This feature is designed for quick verification at the point of cashing. A teller can verify authenticity without any equipment. Counterfeit checks printed on a desktop printer do not have thermochromic ink, so rubbing the relevant area produces no change.

Void Pantograph

A background pattern on the check that reveals the word "VOID" when the check is photocopied or scanned. The pattern is calibrated to the resolution of standard copying equipment; copying shifts pixel values in a way that makes the hidden word visible. This prevents the most basic form of counterfeiting, which is simply photocopying an existing check and trying to pass the copy.

Invisible Fluorescent Fibers

Fibers embedded in the paper during manufacturing that glow under ultraviolet light. Banks keep UV lights at teller windows specifically to verify this feature. Counterfeit checks printed on standard paper do not have these fibers and fail UV inspection. They are invisible under normal light and do not affect the printed appearance of the check.

All six of these features are standard on every personal and business check manufactured by Checkomatic. They are not optional upgrades or premium tiers; they are built into the check stock used for every order. This level of security is what the ABA considers the baseline for responsible check issuance.

Why Checkomatic Checks Reduce Your Fraud Risk

Checkomatic has manufactured personal and business checks in Monroe, NY since 1997. Every check is produced in-house on ABA-compliant security stock with all six major security features included as standard. Your banking information never passes through third-party print vendors. No setup fees. Free black-and-white logo printing on every order.

Security on Every Single Order

Whether you order personal checkbooks, business checks, QuickBooks checks, or manual payroll checks, every order uses the same high-security paper stock with chemically reactive paper, foundry watermarks, microprinting, thermochromic ink, void pantographs, and fluorescent fibers. These are not tiered options. They are on every Checkomatic check.

Correct Formatting for Positive Pay Compatibility

Checkomatic checks are formatted to align precisely with QuickBooks' default print settings and other major accounting software outputs. When what prints on your check matches exactly what your software records in the issue file you transmit to your bank for Positive Pay, false exceptions disappear and fraud detection works as intended. Formatting mismatches between your printed checks and your software output are a common operational cause of Positive Pay failures.

Blank Check Stock for MICR In-House Printing

For businesses printing MICR data in-house, Checkomatic blank checks provide the same high-security paper base. The security of the underlying paper stock does not depend on pre-printed bank information; it is inherent to the paper itself. In-house MICR printing on Checkomatic blank stock gives you both operational flexibility and the fraud resistance of professional-grade security paper.

Fast Delivery With Proof Review

Every Checkomatic order includes a digital proof step where you verify your routing number, account number, and check number before production begins. Standard orders ship in 3 to 5 business days. Rush options are available. Incorrect banking information on a printed check creates operational problems and potential Positive Pay exceptions on the very first use. The proof step eliminates that risk.

Explore Checkomatic's full range at checkomatic.com or go directly to personal checks, business checks, QuickBooks checks, or blank check stock.

The Short Version on Check Fraud Prevention

Check fraud prevention is layered by design. No single measure stops every attack. High-security check stock stops washing and counterfeiting. Gel ink makes washing harder. Secure mailing removes the most common theft opportunity. USPS Informed Delivery alerts you when expected checks do not arrive. Regular bank statement monitoring catches fraud before the reporting window closes. Positive Pay stops altered and counterfeit checks before they debit your account. And ordering from a manufacturer whose checks include all standard security features rather than treating them as upsells removes the foundation-level vulnerability that low-cost check printing creates.

The 63% of organizations that reported check fraud in 2024 were not all negligent. Check fraud is persistent and organized. But the ones who had layered defenses in place recovered faster and lost less than those who treated check security as an afterthought.

Frequently Asked Questions

How can you tell if a check is fake?

The most reliable physical indicator is a check number mismatch: the number printed in the top-right corner of the check should match the number at the far right of the MICR line at the bottom. If they differ, the check has been altered. Beyond that, verify the routing number against the ABA lookup tool to confirm it matches the bank named on the check, look for genuine watermarks by holding the check up to light, test for thermochromic ink by rubbing the designated area, and confirm the bank's existence in the FDIC BankFind Suite at fdic.gov. Never use a phone number printed on the check itself to verify it.

What is check washing and how does it work?

Check washing is a method where a criminal steals a check and applies chemical solvents including acetone, bleach, or rubbing alcohol to dissolve the oil-based ink from a standard ballpoint pen. Once the original payee and amount are removed, the criminal rewrites the check to themselves for a higher amount and deposits it. The account holder's bank information and signature remain intact. According to FinCEN, check alteration accounts for approximately 44% of mail-theft related check fraud. Using a black gel ink pen significantly resists this because gel pigment bonds with paper fibers and cannot be removed without visibly damaging the paper.

What is the best pen to use when writing a check?

A black gel ink pen is the right choice. Gel ink uses water-based pigment that bonds directly to paper fibers when dry, rather than sitting on the surface like oil-based ballpoint ink. Common household solvents that dissolve ballpoint ink in check washing schemes cannot remove gel ink without leaving obvious visible damage to the paper. Beyond the practical security benefit, the Uniform Commercial Code Section 3-406 can reduce your legal right to hold your bank responsible for a fraud loss if your own carelessness contributed to making the alteration possible. Using easily removable ink is an argument the bank can raise.

What is Positive Pay and do I need it?

Positive Pay is a bank service for businesses that compares every check presented for payment against a file of checks the business authorized. When a check is presented with a number, amount, or payee name that does not match the issue file, the bank flags it as an exception and holds it for the business to review before releasing funds. It stops counterfeit checks, altered checks, and duplicate presentment. Most banks charge under $50 per month. If your bank offers Positive Pay and you decline it, your deposit agreement may shift fraud liability to your business for losses the service would have caught. For any business issuing more than a few checks per month, enrolling is worth considerably more than it costs.

If I deposit a fake check and spend the money, am I responsible?

Yes. Banks make deposited funds provisionally available within one to two business days under Regulation CC, but the check itself takes several more days to settle through the interbank clearing system. During that window, the funds appear available but the check has not actually cleared. If the check is returned as counterfeit or fraudulent, the bank reverses the full deposit from your account regardless of whether you spent the funds. This is precisely how overpayment scams function: the fraudster sends a fake check, you deposit it and send back the supposed excess, the check bounces, and you owe the bank both the original deposit amount and lose what you wired. Never send money based on a deposited check until your bank confirms the final interbank settlement, not just provisional availability.