Checks are still legal and widely accepted, but they are one of the more exposed payment methods you can use: every check you hand out shows your bank’s routing number, your account number, your name, and your address, and federal and state law only protect you from the resulting fraud if you catch it and report it inside strict deadlines. So the honest answer to whether checks are safe to use is that they are safe enough when you write them carefully, mail them carefully, and read your bank statements the moment they arrive. They stop being safe the day you sit on a statement for a few months.
What Every Check Gives Away
The Magnetic Ink Character Recognition line at the bottom of a check contains two numbers anyone handling the paper can read: the nine-digit routing number for your bank and your individual account number. Combined with the name and address printed at the top, that is enough for a criminal to draft new checks against your account, set up unauthorized electronic debits, or start building an identity-fraud file on you.
Business checks often carry more still, including employer identification numbers, department codes, and phone numbers. Some merchants ask customers to write a driver’s license number on the face of a personal check. Refuse. A license number paired with your name and address is the exact combination identity thieves work with. Keep anything beyond your name, address, and bank details off the check.
How Check Fraud Actually Happens
Mail Theft and Check Washing
The mailbox is the most common entry point. Thieves target USPS blue collection boxes and residential mailboxes, sometimes using adhesive-coated tools to fish envelopes out. Stealing mail to get checks is a federal crime carrying up to five years in prison.{1Office of the Law Revision Counsel. 18 U.S. Code 1708 – Theft or Receipt of Stolen Mail Matter Generally}
Once a thief has the check, washing it is easy. Household chemicals like acetone or bleach dissolve most ballpoint ink, stripping the payee name and the dollar amount while leaving the pre-printed information and your signature intact. The thief writes in a new recipient and a much larger amount. Your bank sees a legitimate-looking check with your genuine signature and pays it.
Counterfeiting
A more involved method uses a scanner and editing software to build entirely new checks from stolen images, printed onto blank check stock purchased online. These reproductions can clear initial automated screening, and the fraud exploits the delay between a check being cashed and the account holder noticing.
Overpayment Scams
This one runs in reverse: someone sends you a check. A buyer contacts a seller through an online marketplace, pays with a counterfeit cashier’s check for more than the price, and asks the seller to wire back the difference. The seller’s bank provisionally credits the deposit as federal funds-availability rules require, so the balance looks real. Weeks later the bank discovers the check is counterfeit, reverses the entire deposit, and the seller is out the wire.{2Consumer Compliance Outlook. Responding to Counterfeit Instrument Scams} The lesson is worth internalizing: funds showing as available in your account does not mean the check has cleared. Those are two different events, and the gap between them is where this scam lives.
Mobile Deposit Double-Dipping
Mobile check deposit creates a risk that did not exist with traditional banking: the physical check stays in your hands after you photograph it. The same check can be deposited again at a different bank, cashed at a check-cashing store, or passed to someone else. Cross-bank detection is improving but does not catch every duplicate in real time. After a mobile deposit, keep the physical check somewhere secure for about 30 days and then shred it.
Who Absorbs the Loss
Check fraud law starts from one rule: your bank may only charge your account for payments you actually authorized. Under the Uniform Commercial Code adopted by every state, a bank may debit your account only for items that are “properly payable.” A forged or altered check is not properly payable, so the default rule puts the loss on the bank.
That default has an important exception. If your own negligence substantially contributed to the forgery or alteration, you lose the right to assert it against a bank that paid in good faith.{3Cornell Law School. Uniform Commercial Code 3-406 – Negligence Contributing to Forged Signature or Alteration of Instrument} Leaving signed blank checks in an unlocked desk is the kind of conduct that can shift some or all of the loss back onto you.
The Deadlines That Decide Everything
The UCC also imposes a duty on you: review your bank statements with reasonable promptness and report any unauthorized transactions quickly. If the bank can show that your delay in reporting caused additional losses, you bear those additional losses. This is where most victims of check fraud end up paying for someone else’s crime.
Two absolute deadlines override every other argument. You have one year from when your bank makes a statement available to discover and report a forged signature or an altered check. You have three years for an unauthorized endorsement, meaning someone signing your name on the back of a check made out to you. Miss those windows and you are completely barred from recovering the money, whether or not the bank was also careless.{4Cornell Law School. Uniform Commercial Code 4-111 – Statute of Limitations}
A separate deadline applies when your bank sends you a “substitute check,” which is the paper reproduction banks can create from a digital image under the Check Clearing for the 21st Century Act. If a substitute check was incorrectly charged to your account, you can file an “expedited recredit” claim, and if the bank finds the claim valid it must recredit the account relatively quickly. The deadline is 40 calendar days from when your bank mailed or delivered the statement showing the charge.{5Federal Reserve Board. Frequently Asked Questions about Check 21}
The pattern across all of these rules is the same. Your protection is real, but it depends entirely on you noticing quickly. Open statements the day they arrive.
Habits That Make Checks Safer
For Personal Use
Write checks with a gel pen. Pigment-based gel ink bonds with paper fibers and resists chemical washing far better than standard ballpoint ink, which dissolves readily in acetone. That single habit eliminates the easiest form of check fraud. Mail checks from inside the post office rather than leaving them in a blue collection box or in your home mailbox with the flag up. Review each bank statement the moment it arrives, because the clock on your reporting deadlines starts when the bank makes it available, whether you open it or not.
Never accept a check for more than an agreed-upon amount, no matter how plausible the story. If someone overpays you and asks you to wire back the difference, you are almost certainly holding a counterfeit. Wait until a check has fully cleared before spending any proceeds, and remember that “funds available” in your banking app is not the same as “check verified as legitimate.”
For Businesses
A business issuing checks in any volume should use its bank’s Positive Pay service. You submit a file listing every check you have written, including check number, account number, date, and dollar amount. When a check hits your account, the bank matches it against your list, and anything that does not match is flagged as an exception and held until you approve it. This catches altered amounts, counterfeit check numbers, and checks you never issued at all.
For businesses writing only a handful of checks, Reverse Positive Pay flips the process. The bank sends a daily list of checks presented for payment and you flag anything suspicious. Less automated, but you still control what clears.
Stopping a Check Before It Clears
If you have sent a check and suspect it may have been stolen, a stop payment order tells your bank to refuse the item. An oral stop payment order is valid for 14 calendar days and lapses unless confirmed in writing. A written order lasts six months and can be renewed for additional six-month periods.{6Cornell Law School. Uniform Commercial Code 4-403 – Customer’s Right to Stop Payment; Burden of Proof of Loss} Most banks charge a fee in the range of $15 to $36, which is small next to the loss you are trying to prevent.
If You Spot Fraud on Your Account
Move the same day. Every day you wait is a day the bank can argue your inaction caused additional losses, and the absolute one-year and three-year deadlines are running in the background.
- Contact your bank immediately. Report the unauthorized transaction by phone, then follow up in writing. Ask the bank to freeze the affected account or issue new account numbers, and request copies of the fraudulent checks for your records.
- File a report with the U.S. Postal Inspection Service if the fraud involved stolen mail. You can report online or call 1-877-876-2455. Postal inspectors investigate mail theft as a federal crime.{}7United States Postal Inspection Service. Report
- File a police report. Your bank may require one to process the claim, and even when it does not, the report creates an official record for disputing charges and recovering losses.
- Report identity theft to the FTC at IdentityTheft.gov. The FTC generates a recovery plan and an Identity Theft Report you can use when dealing with banks and creditors.{}8Federal Trade Commission. IdentityTheft.gov
- Place a fraud alert on your credit reports if the stolen check exposed enough personal information for identity theft. Contact one of the three major credit bureaus; a fraud alert requires creditors to verify your identity before opening new accounts.
Keep records of every call and letter: dates, names, reference numbers. If the bank denies your claim or you disagree with how it allocated liability, you may need to escalate through the bank’s formal dispute process or pursue the matter in small claims court. The documentation you build in the first few days is usually what decides whether that process works.