Fake Check Scams Explained: Overpayment and Money Order Fraud

Security Education: This article describes cyber threats for defensive awareness and education purposes only. Understanding how attacks work helps organizations and individuals protect themselves. Never use this information for unauthorized access or malicious purposes.

Fake check scams exploit a gap in the banking system: when you deposit a check, your bank makes the funds available within one to two days, but the check takes weeks to fully clear. Scammers use this window to trick you into sending them real money before the fake check bounces. The Federal Reserve estimates that check fraud costs over $18 billion annually, and fake check scams are among the most common consumer fraud types.

How the Scam Works

You receive a check for more than the agreed amount, whether for a Craigslist sale, freelance work, a “job,” a sweepstakes prize, or a rental deposit. The sender asks you to deposit the check and send the excess back via wire transfer, Zelle, gift cards, or cryptocurrency.

The check appears to clear within a day or two. Your bank shows the funds as available. You send the “overpayment” back to the sender. Then, days to weeks later, the bank determines the check is counterfeit and reverses the deposit from your account. You are now responsible for the full amount of the fake check plus any overdraft fees. The money you sent to the scammer is gone forever.

Common Scenarios

Overpayment for online sales. You sell an item for $500. The buyer sends a check for $2,500 and asks you to wire the $2,000 difference to a “shipping company.” The check bounces, and you lose $2,000.

Mystery shopping or car wrap scams. You are recruited as a “mystery shopper” or paid to wrap your car with advertising. You receive a check for $3,000 with instructions to keep $500 as payment and wire the remainder to cover “supplies” or a “coordinator’s fee.”

Rental scams. A prospective tenant sends a check for more than the security deposit, claiming it was a mistake, and asks for a refund of the difference before moving in.

Prize and lottery scams. A check arrives claiming to be a partial prize payout. You must pay “taxes” or “processing fees” via wire transfer to release the full prize. The check is fake and the prize does not exist.

Why Banks Show Fake Funds as Available

Federal regulations (Regulation CC) require banks to make deposited funds available within specific timeframes, typically one to two business days. This availability is not verification that the check is legitimate. Actual check verification can take weeks. When a fake check is returned, the bank reverses the credit from your account regardless of whether you have already spent or transferred the funds.

Protection Rules

Never send money back from a deposited check. If a buyer or employer sends more than owed and asks for a return, it is a scam. No exceptions.

Wait for full clearance. Your bank can tell you when a check has fully cleared, not just when funds are available. For unfamiliar senders, wait the full clearance period before considering the funds real.

Be skeptical of unsolicited checks. Legitimate payments do not arrive unexpectedly in amounts larger than what is owed.

For more on payment safety, see our peer-to-peer payment scams guide. To understand the psychology behind why these scams work, explore our phishing psychology guide.

The Banking System Gap

The fundamental vulnerability exploited by fake check scams is the gap between fund availability and check verification. Federal regulations (Regulation CC) require banks to make deposited funds available within specific timeframes, but actual check verification takes longer. This gap exists because the banking system prioritizes consumer access to funds, and changing it would affect millions of legitimate transactions.

Until this gap is closed, the protection responsibility falls on consumers. The simplest rule: never spend deposited funds until your bank confirms the check has fully cleared, not just that funds are available. Your bank can tell you whether a check has completed the verification process if you ask specifically.