Check Fraud Scams: Every Type Explained and How to Avoid Them

How Big the Check Fraud Problem Actually Is

Check fraud is not a fading problem from the era of paper banking. It is accelerating. FinCEN, the US Treasury's Financial Crimes Enforcement Network, reported more than 350,000 Suspicious Activity Reports filed for check fraud in 2021, a 23 percent increase from the prior year. In 2022, that number climbed to more than 680,000 reports, nearly doubling in a single year. The FBI and US Postal Inspection Service issued a joint advisory in January 2025 confirming that mail theft-related check fraud continued rising, with SAR filings for check fraud nearly doubling from 2021 to 2023.

The reason check fraud persists as digital payments grow is that checks carry all the information needed to drain an account: your name, your bank's routing number, your account number, and your signature. Every check you write has this printed on it. Anyone who gains physical access to one of your checks has everything needed to commit fraud against you, and organized mail theft networks have made that physical access easier than ever.

According to the 2024 AFP Payments Fraud Survey, 63 percent of organizations experienced check fraud in the prior year. The same survey found 75 percent of organizations still used checks and 70 percent had no immediate plans to stop. Check fraud is not an edge case affecting only the careless. It affects the majority of businesses that still write checks, and the attack methods keep evolving.

The Federal Law That Makes Fake Check Scams Work

Understanding why fake check scams succeed requires understanding one specific piece of federal banking regulation: Regulation CC, which implements the Expedited Funds Availability Act. Regulation CC requires banks to make deposited funds available to customers quickly, typically within one to two business days for most check types. This applies to personal checks, business checks, and cashier's checks alike.

What Regulation CC does not do is verify that the check is legitimate before making the funds available. The bank extends a provisional credit to the depositor while the check works through the interbank clearing process. If you deposit a check for $3,000 today, you may be able to spend $3,000 tomorrow. But that money is not confirmed. Your bank is effectively lending it to you against the expectation that the check will clear.

The interbank verification process, where your bank confirms with the issuing bank that the account exists and funds are present, takes considerably longer than one to two days. It can take days to two weeks or longer for a fraudulent check to be identified and returned as unpaid. When that happens, your bank reverses the provisional credit. If you have already spent the money or sent it somewhere, you owe your bank the full amount. The bank will pursue you for repayment because you were the depositor who initiated the transaction. The scammer is long gone.

This is the precise mechanism that every fake check scam exploits. The scammer never needs a real check. They only need the gap between when your bank makes funds available and when the check is confirmed as fake. That window gives them all the time they need.

Check Washing: The Chemical Attack on Your Mail

Check washing is the process of stealing a legitimate signed check and chemically removing the ink so the payee name and dollar amount can be rewritten. It requires no technical background and uses chemicals available in any hardware or grocery store.

How Check Washing Works

The criminal first obtains a signed check, most commonly through mail theft. Blue USPS collection boxes, unsecured home mailboxes, apartment cluster mailboxes, and checks caught at postal sorting facilities are all documented targets. The FBI and USPIS report that organized mail theft networks systematically target blue drop boxes using master keys stolen from postal employees, often operating in the early morning hours before regular mail pick-up.

Once the criminal has a signed check, they protect the signature by taping over it. The check is then soaked or rubbed with acetone, bleach, benzene, carbon tetrachloride, or specialized ink removal solvents. Standard ballpoint pen ink and most rollerball inks dissolve readily in these solvents. The FBI notes that criminals sometimes trace the signature in pencil before washing because pencil graphite does not dissolve in common solvents, preserving a signature guide if the tape method damages the original.

After washing, the criminal is left with a blank signed check. They fill in a new payee name and a new, typically larger amount, then deposit or cash it. The check processes normally because it is a genuine document drawn on a real account with a real signature. You discover the fraud only when an unexpected debit appears on your account statement, often days or weeks after the check has cleared.

The Gel Pen Defense

The pen you use to write checks is one of the most important physical defenses against check washing. Standard ballpoint pens use oil-based dye ink that sits on top of paper fibers and dissolves readily in common solvents. Gel pens use water-based pigment ink that bonds into the paper fibers themselves. The pigment embeds physically into the paper rather than resting on the surface, resisting chemical removal far more effectively than dye-based inks. The Uniball Signo 207 is frequently recommended by security researchers and law enforcement because its Super Ink formulation is specifically engineered to resist the chemicals used in check washing. Always write checks with a black gel pen. The security benefit is real and the cost difference is minimal.

Chemically Reactive Paper as the Backup Defense

Gel ink alone does not fully protect a check printed on ordinary paper stock. Security check stock adds a paper-level defense through chemically reactive paper, which contains compounds that react visibly to acetone, bleach, and other washing solvents by producing obvious staining or discoloration. A criminal cannot wash a check on chemically reactive stock without leaving visible tamper evidence that alerts any bank teller or ATM camera review. Combined with microprinting along signature lines that breaks visibly when forged and void pantographs that activate on copying, security check stock makes check washing both harder and more likely to be caught.

Check Cooking: One Stolen Check Into Unlimited Fakes

Check cooking is the digital evolution of check alteration. Per the FBI and IC3's 2025 advisory, check cooking involves photographing or scanning a stolen check and using widely available photo editing software to alter the payee name and dollar amount. The manipulated image is then printed on blank check stock using a high-resolution printer and deposited, often through mobile deposit channels or ATMs.

The critical difference between check washing and check cooking is scale. Check washing destroys the original physical check to produce one altered instrument. Check cooking preserves the check image and can produce an unlimited number of counterfeit checks from a single stolen original. The account holder whose check was stolen may never see that original check deposited at all, because the criminals prefer to use the image rather than risk detection with the physical document.

The FBI specifically notes that check cooking fraud tends to involve smaller individual check amounts by design. Checks written for amounts below common transaction monitoring thresholds escape automated scrutiny for longer periods. A criminal producing ten checks for $800 each from a single stolen check image can collect $8,000 across ten separate deposits before any one transaction triggers a review. One Houston woman reported losing $24,000 to a combination of check washing and check cooking from a single check stolen from her mailbox.

Check cooking exploits the mobile deposit channel specifically. Mobile deposit capture systems photograph the check through a phone camera. Well-printed counterfeits with correct MICR line formatting can pass through initial mobile deposit screening. The fraud surfaces only when the account holder's bank reconciles against the issuing bank and finds checks being presented that the account holder never wrote.

The Overpayment Scam and Why It Always Wins

The overpayment scam is the most reported fake check fraud against individuals. The American Bankers Association identifies it as one of the most common instruments used to deceive consumers, and it works with near-perfect reliability against anyone who does not understand the Regulation CC mechanics described above.

The setup is typically an online sales platform. You list something on Craigslist, Facebook Marketplace, eBay, or a similar site. A buyer contacts you, agrees to your price, and then sends a check for significantly more than the agreed amount. They have a story ready: a third party is paying on their behalf, it was an accidental overpayment, the extra amount covers shipping through their carrier. They ask you to deposit the check, keep your agreed portion, and wire or send back the excess to them or to a third party.

The check looks convincing. It may bear the name of a real business or bank. It may appear to be a cashier's check or certified payment. You deposit it. Regulation CC makes the full amount available within one to two business days. The money appears real in your account. You send the excess as instructed. Days to weeks later, your bank notifies you the check was fraudulent and reverses the provisional credit. You now owe your bank the full check amount. The money you sent is gone and unrecoverable. The buyer is unreachable.

The rule that prevents this scam from working on you is unconditional: never wire money, send gift cards, transfer cryptocurrency, or use a payment app to forward funds to anyone based on a check they sent you first. Never accept a check for more than the agreed price. Any buyer who insists on sending more than you asked is running this scam regardless of how credible their explanation sounds.

Fake Job and Mystery Shopper Check Scams

Fake job check scams are an overpayment scam wrapped in an employment context. You respond to a posting for a work-from-home or mystery shopper position. The employer seems credible and communicates professionally. Shortly after accepting the role, they send a check to cover your start-up expenses, equipment purchases, or first assignment costs.

In the mystery shopper version, your assignment is to evaluate a money transfer service such as Western Union or MoneyGram, or to purchase gift cards and report on the experience. You deposit the check, keep a small amount as your pay, and use the rest to complete the assignment by wiring funds or buying gift cards and sharing the PIN numbers. The check is fake. By the time it bounces, you have sent real money that cannot be recovered, and the employer has vanished.

In the work-from-home version, the check covers equipment that must be purchased from a specific vendor, who is the scammer or a co-conspirator. You transfer money to buy the equipment. The check bounces after the transfer completes.

Legitimate employers do not send checks to new hires before their start date. Legitimate employers do not ask employees to wire money, buy gift cards, or transfer funds as part of their job duties. Any employment arrangement that involves receiving a check and then sending any portion of it anywhere is a fake job scam.

Lottery and Prize Check Scams

Lottery and prize check scams use the same Regulation CC mechanics as the overpayment scam with a different pretext. You receive a notification by mail, email, or phone that you have won a prize, lottery, or sweepstakes. A check arrives as an advance on your winnings or to cover the fees and taxes required before your full prize is released. You are instructed to deposit the check and wire the fees or taxes to a designated address.

No legitimate sweepstakes or lottery requires winners to pay fees or taxes before receiving their prize. The IRS does not collect taxes through third parties and does not require pre-payment via wire transfer or gift card. Any communication following this pattern is a scam regardless of how official the accompanying check looks or how recognizable the sponsoring organization appears to be. A specific version of this scam targets older adults using Publisher's Clearing House branding or similar well-known sweepstakes names. The check will bounce. Any fees you sent will be unrecoverable.

Check Kiting: The TikTok Trend That Is a Federal Crime

Check kiting exploits the check processing float by writing checks between accounts to create the temporary appearance of funds that do not exist. In its basic form, a person with two bank accounts writes a check from Account A to deposit into Account B, then immediately writes a check from Account B before the Account A check has cleared. Cycling transactions between accounts this way temporarily inflates available balances, allowing cash withdrawals of money that was never real.

In September 2024, a version of this scheme went viral on TikTok. Videos showed users depositing bad checks at Chase Bank ATMs and immediately withdrawing cash before the bank could identify the checks as fraudulent. The clips spread rapidly across the platform with some framing the activity as exploiting a bank glitch rather than committing fraud. Lines reportedly formed at Chase ATMs as viewers tried to replicate the scheme.

There was no glitch. Writing a bad check and withdrawing funds before it clears is check kiting, a federal crime under 18 U.S.C. Section 1344, the federal bank fraud statute. The penalties are up to 30 years in federal prison and fines up to one million dollars per count. Participants in the TikTok scheme faced immediate account closures at Chase, demands for repayment of any withdrawn funds, and in cases involving substantial amounts, referrals to federal law enforcement. The fact that a video made it look like a harmless exploit did not change what it was legally.

For businesses, organized check kiting has historically been used to inflate reported cash balances across accounts at different banks. It is detectable through consistent bank reconciliation. Banks share information about kiting patterns with each other and with law enforcement.

Mule Accounts and How Victims Become Accomplices

Most people who handle fraudulent checks in the check fraud chain are not the original criminals. They are recruited as mule account holders: individuals who allow their personal bank accounts to be used as transit points for moving stolen funds. In a check fraud context, a mule account holder may deposit a counterfeit check and then transfer the funds onward to the actual criminal's account, typically receiving a small cut of the proceeds.

Mule recruitment happens through several channels. Fake job offers promising easy remote work. Social media posts offering money for a simple favor involving a check and a transfer. Romantic relationships where the other person asks for help with a financial task. The FBI FinCEN reporting notes that stolen checks are also sold on dark web marketplaces and encrypted social media platforms for a fraction of their face value, then deposited by recruited mule account holders who may not fully grasp what they have been recruited into.

The legal exposure for a mule account holder is serious. If you deposit a check and transfer funds at someone else's direction and the check is fraudulent, you may be liable for conspiracy to commit bank fraud even if you did not steal the original check. Your account will be closed. Your bank will demand repayment of all withdrawn funds. Depending on the dollar amounts and evidence of intent, law enforcement may pursue charges.

The only protection is refusing any arrangement where someone you do not know and fully trust asks you to deposit a check and forward any portion of the money elsewhere. The only person who benefits from that arrangement is the person directing it.

Security Features That Stop Each Type of Attack

Security check stock does not prevent all fraud, but it significantly raises the effort required for each attack method and creates visible evidence of tampering that protects both check writers and the institutions processing their checks.

Against Check Washing

Chemically reactive paper is the primary physical defense. It contains compounds that react to acetone, bleach, and other washing solvents by producing visible staining or color changes that cannot be concealed. A teller handling a washed check on chemically reactive stock can see the evidence of tampering. Genuine foundry watermarks, embedded in the paper during manufacturing rather than printed on the surface, cannot be removed or replicated without destroying the check entirely. Any attempt to wash the ink from a watermarked check damages the watermark itself, providing an additional visible indicator.

Against Check Cooking

Void pantographs are the primary defense against counterfeiting by scanning and reprinting. These hidden patterns in the check background activate visibly when the check is photocopied or digitally scanned, causing the word VOID to appear across the face of any reproduction. A counterfeit printed from a scanned check will carry this VOID marker, alerting anyone who handles it. Invisible fluorescent fibers embedded in security check stock glow under ultraviolet light. Bank teller stations commonly use UV inspection for high-value checks, and embedded fibers cannot be replicated in any printed reproduction.

Against Counterfeiting Generally

Heat-sensitive thermochromic ink disappears when rubbed with a finger and reappears when released. This behavior cannot be reproduced by any printing process, making it an immediate manual verification tool for anyone suspecting a counterfeit. The MICR line at the bottom of the check, printed in genuine magnetic ink, reads distinctly different under magnetic scanning equipment than the same line reproduced with standard laser or inkjet toner. Bank processing systems flag checks whose MICR line fails the magnetic reading test, which catches most printed counterfeits at the first processing stage.

Every Checkomatic check, whether a personal checkbook or any business check format, is printed on security stock with all of these features as standard on every order.

How to Protect Your Checks Before They Leave Your Hands

Most check fraud starts with mail theft. The single most effective habit change is stopping the use of blue USPS drop boxes for outgoing checks. The USPIS has documented widespread compromise of blue box locks through stolen postal master keys. Take outgoing checks with payments directly inside a post office and hand them to a postal employee, or use USPS Informed Delivery, the free service that photographs your incoming and outgoing mail so you can verify each piece arrived without interception.

Write every check with a black gel pen. Pigment-based gel ink bonds into paper fibers rather than sitting on the surface, and resists the solvents used in check washing far better than ballpoint or rollerball ink. The Uniball Signo 207 is specifically recommended by law enforcement. The cost of switching to gel pens is negligible against the protection it provides.

Reconcile your bank account weekly rather than monthly. Both check washing and check cooking can result in unauthorized checks clearing days to weeks before you notice. Weekly reconciliation closes the detection window significantly. The full reconciliation process is covered in our checkbook management guide.

For businesses, enroll in your bank's Positive Pay service. Positive Pay requires you to transmit a file of every check you issue, including check number, date, and amount. When a check presents for payment, the bank verifies it against your issued check list. Any check that does not match exactly is held for your review before it clears. Positive Pay eliminates both check washing and check cooking fraud against business accounts for any check included in the file, because no counterfeit or altered check can match your original issued check data precisely.

Store your blank checks in a locked location. A stolen checkbook gives a criminal not just blank checks but also your routing number and account number, enough to initiate ACH debits against your account without writing a check at all. Do not leave checkbooks in your car, at your desk at work, or in any location accessible to people outside your household.

How to Report Check Fraud: The Four-Agency Guide

If you suspect check fraud or believe you have been targeted by a fake check scam, report to all four of the following agencies. Each covers a different enforcement jurisdiction, and reporting to all four maximizes the chance that the fraud is investigated and that your report contributes to pattern detection that may stop the same scammer from hitting other people.

Your bank, immediately. This is the most time-sensitive step. Contact your bank the moment you suspect fraud. Request copies of all fraudulent checks. Ask the bank to flag your account for unusual activity. Discuss whether closing the compromised account and opening a new one is appropriate. Banks may be able to reverse transactions that have not fully settled if contacted quickly enough.

The Federal Trade Commission at ReportFraud.ftc.gov or 1-877-382-4357. The FTC aggregates fraud reports nationally to identify scam patterns and pursue enforcement against large-scale operations. Your report adds data that may connect your experience to other victims and help trigger an investigation.

The FBI Internet Crime Complaint Center at ic3.gov. The IC3 is the primary federal reporting channel for internet-facilitated fraud, which includes most fake check scams originating from online marketplaces, email, or social media. The IC3 shares data with federal, state, and local law enforcement and with international partners. File here if the fraud involved online communication, wire transfers, or cryptocurrency.

The US Postal Inspection Service at uspis.gov or 1-877-876-2455. The USPIS has specific jurisdiction over all mail theft-related fraud. If your checks were stolen from a mailbox or USPS drop box, or if you received fraudulent checks through the mail, the USPIS is the agency with direct investigative authority. USPIS has significantly expanded resources for mail theft cases in recent years given the documented rise in check fraud.

For businesses qualifying as financial institutions, a Suspicious Activity Report must also be filed with FinCEN through the Bank Secrecy Act electronic filing system within 30 days of detecting suspicious activity. If no suspect can be identified at the time of detection, the filing window extends to 60 days.

Why Checkomatic Checks Reduce Your Fraud Risk

Checkomatic has manufactured ABA-compliant checks in Monroe, NY since 1997. Every order ships with a full security feature stack as standard. There is no base tier without security features. Whether you order a personal checkbook or a case of business checks, the paper includes chemically reactive compounds, genuine foundry watermarks, microprinting along signature and border areas, heat-sensitive thermochromic ink, void pantographs that activate on copying, and invisible fluorescent fibers detectable under UV light.

The Proof Step That Prevents Another Common Fraud Vector

Every Checkomatic order includes a digital proof review before printing begins. You verify your routing number, account number, business name, and check number sequence before any checks are manufactured. A routing number error on printed checks means every check you write bounces, which is operationally disruptive and can also create a fraud exposure if you hand out checks before discovering the error. The proof step eliminates this entirely. Checkomatic's in-house manufacturing means your banking information never passes through third-party print vendors where interception is possible.

Duplicate Checks for Personal Accounts

Checkomatic's personal checkbooks are available in duplicate format with a carbonless copy behind every check. The copy auto-records the check number, date, payee, and amount when you write the original. If your checkbook is stolen from the mail, duplicate copies in the book let you immediately identify exactly which check numbers are missing, which is the first step in reporting to your bank and preventing fraudulent checks from clearing. Without duplicates, most people cannot accurately reconstruct which checks were outstanding when a theft occurred.

The Full Range for Every Use Case

For personal use: personal checkbooks in standard and duplicate formats with included paper registers. For business payments: business checks in all formats including manual business checks with carbonless duplicates, QuickBooks-compatible checks for software-integrated payroll and accounts payable printing, and blank check stock for organizations printing their own MICR lines. All formats carry the identical security stack. Standard orders ship within 3 to 5 business days from proof approval.

Explore the full catalog at checkomatic.com.

The Short Version on Check Fraud Scams

Every check fraud scam exploits one or both of two realities. First, checks carry your routing number, account number, and signature on a physical object that can be stolen from your mailbox. Second, Regulation CC requires banks to make deposited funds available before a check is confirmed as genuine, creating a window that scammers exploit to get you to send real money before the fake check collapses.

The defenses are not complicated. Black gel pen. Security check stock with chemically reactive paper. No blue USPS drop boxes for outgoing checks with sensitive information. Weekly account reconciliation. Positive Pay for business accounts. Never wire money or buy gift cards based on a check someone else sent you first. Report any fraud immediately to your bank and all four relevant agencies.

Frequently Asked Questions

What is the most common check fraud scam targeting individuals?

The overpayment scam is the most reported fake check fraud against individuals. A stranger sends a check for more than an agreed amount and asks you to wire back the difference before your bank identifies the check as fraudulent. It works because Regulation CC requires banks to make deposited funds available within one to two business days while the actual interbank verification that confirms a check is genuine takes much longer. By the time the bank reverses the provisional credit, the victim has already sent real money that cannot be recovered.

What is check washing and how does it work?

Check washing is a physical fraud where a criminal steals a check, most often from a mailbox or USPS drop box, and removes the ink using household chemicals such as acetone, bleach, or benzene. The signature is protected during the process. Once the original ink is removed, the criminal rewrites the payee name and amount on the blank signed check and deposits or cashes it. Writing checks with a black gel pen, whose pigment bonds into paper fibers and resists common solvents, and using security check stock with chemically reactive paper that stains visibly when chemicals touch it, are the two most reliable countermeasures.

What is check cooking and how is it different from check washing?

Check cooking is the digital version of check alteration. A criminal photographs or scans a stolen check and uses photo editing software to change the payee name and amount. The altered image is printed on blank check stock and deposited through mobile deposit or ATMs. Unlike check washing, which alters one physical check, check cooking allows a single stolen original to generate an unlimited number of counterfeits. The FBI notes that check cooking fraudsters deliberately use smaller individual amounts to stay below transaction monitoring thresholds and extend the fraud undetected.

Is check kiting a crime and what are the penalties?

Check kiting is a federal crime under 18 U.S.C. Section 1344, the federal bank fraud statute, with penalties of up to 30 years in federal prison and fines up to one million dollars per count. Kiting exploits the check clearing float by writing checks between accounts to temporarily create the appearance of funds that do not exist. In September 2024 this scheme went viral on TikTok when users filmed themselves depositing bad checks at Chase ATMs and withdrawing cash before the checks cleared. Participants faced account closures, repayment demands, and federal fraud referrals for cases involving significant amounts.

How do you report a check fraud scam?

Report to four agencies. Contact your bank immediately to protect the account, flag unauthorized activity, and get copies of any fraudulent checks. File with the FTC at ReportFraud.ftc.gov or 1-877-382-4357. File with the FBI Internet Crime Complaint Center at ic3.gov for any fraud involving online communication or digital payments. Report to the US Postal Inspection Service at uspis.gov or 1-877-876-2455 if mail theft was involved. For qualifying businesses, a Suspicious Activity Report must be filed with FinCEN within 30 days of detecting suspicious activity, extendable to 60 days if no suspect can be identified at the time of the report.