Check Fraud
Check fraud is the use of a paper check to obtain money that is not owed — by stealing and altering a genuine check, forging a signature, counterfeiting a check on a real account, or depositing a check the writer cannot cover. It is the oldest payment fraud in common use, and it has been growing sharply while check volumes fall.
That combination is the thing to understand. Fewer checks are written every year, and more of the ones still moving are being stolen.
| Primary current driver | Mail theft, then alteration — “check washing” |
| FinCEN estimate | Roughly $21 billion in check fraud losses in 2023 |
| Mail theft reports | Up 139% between FY2019 and FY2023 |
| Regulatory response | FinCEN alert on mail theft-related check fraud, 2023 |
| Most targeted | Business checks, tax refunds, Social Security and benefit payments |
| Structural weakness | The instrument carries the account number in plain sight |
How check fraud works now
Check washing is the dominant pattern. A check is stolen — most often from a residential mailbox, a blue collection box, or from a postal carrier — and treated with common solvents that remove ink while leaving the printed elements intact. The payee and amount are rewritten; the signature, account number and routing number are genuine, because they always were.
Counterfeiting uses the account details rather than the physical check. Anyone holding a single genuine check holds the routing number, the account number and a signature sample, which is most of what is needed to produce more checks on that account.
Forgery signs someone else’s name. Check kiting exploits float between accounts. Deposit scams persuade a victim to deposit a fraudulent check and forward part of the proceeds before it is returned — a category that works because provisional availability is mistaken for a cleared payment.
Stolen checks are traded on dark web markets as commodity inventory, and what makes the market work is that mules and account holders are recruited separately from the people doing the stealing. The person who deposits the washed check is frequently not the person who took it.
Why checks are structurally weak
A check is a bearer-adjacent instrument that publishes its own credentials. Every check carries, in plain text, the routing number, the account number and an example of the signature — the three things needed to draw on that account again. No other mainstream payment method hands over reusable credentials as a condition of being used.
The verification model compounds it. Checks were designed for an era of physical presentment and human inspection, and the controls still assume it. There is no cryptographic authentication, no real-time authorization, and no equivalent of a CVV or a one-time code. The instrument is trusted because it looks right.
Timing is the third weakness. Funds availability rules require banks to make deposited funds available quickly, while the underlying check can be returned much later. That gap is not an oversight — it exists so consumers can use their money — and it is exactly the window every check scam operates in.
Why it matters for identity verification
Almost nothing can be done to make the paper more secure. The instrument is what it is, the design is decades old, and the fraud exploits properties that cannot be patched.
What can be addressed is the other end. A washed or counterfeit check has no value until it is deposited, and depositing requires an account. That account was opened by someone, at some point, presenting an identity — and that is the single moment in the entire sequence where a verifiable claim is made.
This is why check fraud concentrates on institutions with light onboarding, and why it responds to onboarding standards rather than to check-handling controls. The same dynamic covered in bank drop: accounts are opened for the purpose of receiving fraudulent funds, in volume, and sellers gravitate to whichever institution is easiest to open at.
Mobile deposit sharpens it further. Remote deposit capture removed the teller — the last human who looked at both the check and the person — and replaced it with an image. The identity check has to carry the weight the branch visit used to.
Forms of check fraud compared
| How it works | What is genuine | Where it is catchable | |
|---|---|---|---|
| Check washing | Steal and chemically alter a real check | Account, routing, signature | Deposit account and payee mismatch |
| Counterfeiting | Print new checks from real account details | The account details only | Positive pay and image analysis |
| Forgery | Sign someone else’s name | The check itself | Signature review, account monitoring |
| Kiting | Exploit float between accounts | Everything — no funds exist | Velocity and balance patterns |
| Deposit scam | Victim deposits a bad check and forwards funds | Nothing | Consumer education, hold policies |
What check fraud controls cannot do
Positive pay does not help consumers. The strongest control available — matching presented checks against a list the account holder issued — is a commercial banking product. Individuals, who are most of the mail theft victims, cannot use it.
Faster availability cannot be undone. Shortening holds is what makes deposit scams viable, and lengthening them penalizes every legitimate depositor to stop a minority of fraud.
Image analysis sees the check, not the theft. A well-washed check is genuine paper with genuine printing. The anomaly is the handwriting, which varies legitimately.
Identity verification does not stop the theft. It does not protect a mailbox. It raises the cost of converting the proceeds, which is the part of the chain a bank can actually reach.
Frequently asked questions
What is check washing?
Chemically removing the handwritten ink from a stolen check while leaving the printed elements intact, then rewriting the payee and amount. The account number, routing number and signature remain genuine, which is why the altered check passes most automated checks.
Why is check fraud increasing when fewer checks are written?
Because the remaining checks are disproportionately valuable — business payments, tax refunds, benefit payments — and because mail theft became organized. Reports of theft from mail receptacles rose 139% between FY2019 and FY2023, and the instrument’s weaknesses never changed.
Am I liable if a check I wrote is washed and cashed?
Generally the bank bears the loss on an altered or forged check, provided it is reported within the timeframes set by the account agreement and the applicable rules. Those windows are shorter than people expect, which makes prompt statement review the practical protection.
How can check fraud be prevented?
On the writing side: use a pen with permanent ink, deposit mail inside a post office rather than a receptacle, review statements promptly, and use positive pay if it is available to your business. On the banking side, the effective control is verifying the identity of whoever opens the account the funds are deposited into.
Related reading
- Bank drop — the accounts fraudulent checks are deposited into
- Money mule — how the proceeds are moved onward
- Demand deposit account fraud — the account type checks draw on
- Debit card fraud — the other major attack on the same account
