Check fraud is the deliberate use of a paper check to steal money, whether by forging a signature, altering an amount, printing a counterfeit, kiting between accounts, or depositing the same check twice. Federal law treats the most serious cases as bank fraud carrying up to 30 years in prison and a $1,000,000 fine, while lower-dollar offenses are typically prosecuted as state misdemeanors or felonies depending on the amount.1Office of the Law Revision Counsel. 18 USC 1344 – Bank Fraud The crime has surged alongside a wave of mail theft, and both the penalties for the person who does it and the rights of the person it happens to turn on details that most people never think about until they’re in the middle of it.
Common Types of Check Fraud
Most check fraud fits one of five patterns. Each exploits a different weakness in the way checks move through the banking system.
Forgery
Forgery is signing someone else’s name on a check without permission. The forger might steal a checkbook, intercept a check from a mailbox, or use a stolen identity to write checks against an account. Under the Uniform Commercial Code, an unauthorized signature is generally ineffective, meaning the person whose name was forged is not liable for the payment. The bank that pays a check with a forged drawer signature typically absorbs the loss because it is in the best position to verify its own customer’s signature.2Legal Information Institute. Uniform Commercial Code 3-104 – Negotiable Instrument
Alteration and Check Washing
Alteration means changing the dollar amount, the payee, or another material detail on a check that has already been signed. The common version is check washing: criminals steal a check from a residential mailbox or a blue USPS collection box and use chemicals to dissolve the ink, then rewrite the check to themselves for a larger amount. The U.S. Postal Inspection Service recommends dropping outgoing mail at the post office or in a blue collection box before the last scheduled pickup rather than leaving it in a home mailbox overnight.3United States Postal Inspection Service. Check Washing
Counterfeiting
Counterfeiting is creating an entirely fake check using desktop publishing software, high-resolution printers, and stolen bank routing and account numbers. Counterfeit checks can look convincing, complete with security watermarks and microprinting. Under federal law, producing a fictitious financial instrument is a class B felony punishable by up to 25 years in prison.4Office of the Law Revision Counsel. 18 USC 514 – Fictitious Obligations
Check Kiting
Check kiting exploits the float between when a check is deposited and when the funds actually clear. The schemer writes checks back and forth between two or more accounts at different banks, creating an artificial balance that does not exist. Each deposit temporarily inflates the account long enough to cover the next withdrawal. The scheme collapses as soon as the float cycle breaks, leaving one or more banks holding worthless checks.
Double Presentment
Remote deposit capture, the smartphone feature that lets you photograph a check and deposit it from home, created a newer type of fraud. A person deposits the check electronically through a banking app and then deposits or cashes the physical check at a branch or ATM. The system processes the same check twice before either deposit is flagged. Banks are supposed to catch duplicates, but the speed of mobile deposits means the second transaction sometimes clears before the first one is fully verified.
What Prosecutors Must Prove
A check fraud conviction requires more than showing that a bad check was written. Prosecutors must prove the defendant acted with intent to defraud, meaning they deliberately tried to deceive another party for financial gain. That is what separates a criminal case from an honest overdraft caused by a math error or a delayed payroll deposit.
They also have to establish that the defendant knew the check was forged, altered, or drawn on an account with insufficient funds at the time of the transaction. Courts look for evidence of a pattern: multiple bad checks in a short period, fake identification, or accounts opened with no intention of maintaining a real balance. A single bounced check rarely supports a fraud prosecution. Repeated incidents across multiple accounts build a strong circumstantial case that the conduct was calculated rather than careless.
The false information on the check must be material, meaning significant enough to influence the recipient’s decision to accept it. A trivial error that would not change the outcome does not meet this threshold. The burden stays on the government throughout.
Criminal Penalties
Penalties vary widely depending on the dollar amount, the number of victims, and whether the case is prosecuted in state or federal court.
State Penalties
At the state level, most jurisdictions draw a line between misdemeanor and felony check fraud based on the value of the fraudulent check. Lower-dollar offenses, often those under roughly $500 to $1,000 depending on the state, are typically charged as misdemeanors carrying up to a year in jail. Once the amount crosses the felony threshold, prison sentences can range from one to ten years, and fines can reach $10,000 or more per offense. The exact thresholds differ from state to state, so the same $800 forged check might be a misdemeanor in one state and a felony in another.
Federal Bank Fraud
When check fraud targets a federally insured bank or credit union, the case can be charged as bank fraud. The maximum penalty is a $1,000,000 fine, up to 30 years in prison, or both.1Office of the Law Revision Counsel. 18 USC 1344 – Bank Fraud Federal prosecutors tend to pick up cases involving large dollar amounts, organized schemes, or interstate activity. A solo forger passing one bad check at a local bank is unlikely to draw federal attention, but a ring counterfeiting checks across state lines almost certainly will.
Federal Mail Fraud
If fraudulent checks are sent through the U.S. mail or a commercial carrier, the conduct can also be charged as mail fraud. The baseline penalty is up to 20 years in prison. When the scheme affects a financial institution, the maximum jumps to 30 years and a $1,000,000 fine, matching the bank fraud statute.5Office of the Law Revision Counsel. 18 USC 1341 – Frauds and Swindles This is why stealing checks from mailboxes is particularly dangerous for the thief: the act of intercepting mail opens the door to federal prosecution even if the underlying forgery would otherwise be a state matter.
Aggravated Identity Theft
Check fraud that involves using another person’s identifying information, such as forging their signature or using their account number, can trigger an aggravated identity theft charge. Federal law imposes a mandatory two-year prison sentence on top of whatever sentence the underlying fraud carries, and the judge cannot run the two terms concurrently. Probation is not an option for this charge.6Office of the Law Revision Counsel. 18 USC 1028A – Aggravated Identity Theft A defendant convicted of bank fraud and aggravated identity theft faces at least two years before the bank fraud sentence begins. Prosecutors add this charge often because it eliminates the possibility of a light sentence.
Statute of Limitations
The general federal statute of limitations for mail fraud is five years from the date of the offense. Bank fraud carries a longer window of ten years, giving federal investigators substantially more time to build a case involving financial institutions. State statutes of limitations vary but typically run from two to six years. The clock does not always start when the check is written; in some jurisdictions it starts when the fraud is discovered, which can extend the prosecution window significantly.
Restitution, Civil Damages, and Banking Fallout
Courts routinely order restitution, requiring the defendant to repay every dollar stolen. Many states also allow victims to pursue additional civil damages, sometimes double or triple the face value of the fraudulent check, plus attorney fees and collection costs. These civil claims are separate from the criminal case, so a victim can sue for damages even if prosecutors decline to file charges or the defendant is acquitted. The civil burden of proof is lower than the criminal standard, so winning a civil judgment is often easier than securing a conviction.
Financial institutions typically close the accounts of anyone involved in check fraud as soon as they discover it. The bank then reports the activity to ChexSystems, a consumer reporting agency that tracks banking history. A negative ChexSystems record lasts five years and can prevent someone from opening a standard checking or savings account at most banks during that period. Some banks offer “second chance” accounts with limited features and higher fees, but full banking access is effectively off the table until the record clears. Even a misdemeanor conviction for a relatively small amount can leave someone functionally unbanked for years.
Your Deadlines for Reporting Unauthorized Checks
If someone forges your signature or alters one of your checks, you do not have unlimited time to notify your bank. The Uniform Commercial Code places a duty on customers to review their account statements with reasonable promptness and report anything unauthorized.7Legal Information Institute. UCC 4-406 – Customer’s Duty to Discover and Report Unauthorized Signature or Alteration
The deadlines work in layers. Once your bank sends a statement, you must examine it promptly. If you fail to catch a forged or altered check and the same wrongdoer hits your account again, you lose the right to recover on those later checks if more than 30 days passed from when the statement was available and you could have caught the first one.7Legal Information Institute. UCC 4-406 – Customer’s Duty to Discover and Report Unauthorized Signature or Alteration The logic is straightforward: if you had caught the first forgery, the bank could have stopped the ones that followed.
There is also an absolute one-year deadline. Regardless of the circumstances, a customer who does not discover and report an unauthorized signature or alteration within one year of the statement being made available is completely barred from asserting the claim against the bank.7Legal Information Institute. UCC 4-406 – Customer’s Duty to Discover and Report Unauthorized Signature or Alteration After that year, the bank owes you nothing even if the forgery is obvious. This is where people get burned most often: they don’t check their statements regularly, discover the fraud months later, and find out they’ve lost their right to recover.
One exception applies when the bank itself was negligent. If you can show the bank failed to exercise ordinary care in paying the check and that failure contributed to the loss, liability is split between you and the bank based on each party’s share of fault.
What to Do If You’re a Victim
Speed matters. The sooner you act, the better your chances of recovering stolen funds and preserving your legal rights under the deadlines above.
- Contact your bank’s fraud department immediately. Ask the bank to place a hold on your account or issue a new account number, and request written confirmation of the report and the date you made it. That documentation protects you if there is a later dispute over whether you met the reporting deadlines.
- File a police report. Many banks require one before they will process a fraud claim, and the report creates an official record that supports your claim even if your local department cannot investigate.
- Report mail theft to the U.S. Postal Inspection Service if your checks were stolen from a mailbox. File online at mailtheft.uspis.gov or call 1-877-876-2455. USPIS is a federal law enforcement agency, and a complaint can trigger a federal investigation that a local police report alone would not.8United States Postal Inspection Service. Report Mail Crime
- Report the fraud to the FTC at ReportFraud.ftc.gov. The FTC does not investigate individual cases, but it aggregates complaints to identify patterns and support enforcement against organized fraud operations.
- Request your ChexSystems report to confirm the fraud has not resulted in negative entries against your name, and dispute any that appear. Check your credit reports too, for any accounts opened using stolen information.
Preventing Check Fraud
Prevention looks different for individuals and businesses.
For Individuals
The single most effective step is to minimize how often your checks sit in a mailbox. Drop outgoing mail at the post office counter or in a blue collection box before the last daily pickup, and retrieve incoming mail promptly after delivery.3United States Postal Inspection Service. Check Washing If you are going on vacation, place a mail hold with the post office or have someone you trust pick up your mail daily.
Review your bank statements as soon as they become available. The 30-day and one-year UCC deadlines mean that catching fraud early directly affects whether you can recover the money. Set up transaction alerts through your bank’s app so you are notified whenever a check clears against your account.
For Businesses
Businesses face a higher volume of check transactions and proportionally higher fraud risk. The most widely recommended safeguard is a positive pay service offered by most commercial banks. The business uploads a file of every check it issues, including the check number, amount, date, and payee. When a check is presented for payment, the bank automatically cross-references it against the issued list, and any check that does not match is flagged for review before the bank pays. Positive pay catches altered amounts, counterfeit check numbers, and unauthorized payees before the money leaves the account. It is not free, but the cost is small compared to a single successful fraud.
Businesses should also separate check-writing duties from bank reconciliation duties whenever staffing allows. An employee who both writes checks and reconciles the statement has the access and cover to commit fraud undetected for months. Splitting those roles forces a second set of eyes onto every transaction.