Check washing fraud is a form of mail theft in which criminals steal a paper check, soak it in a solvent like acetone or nail polish remover to erase the payee name and dollar amount, then rewrite both fields and cash the altered check. The sender’s original signature stays intact, which is why banks and automated scanners miss it. If it happens to you, the Uniform Commercial Code generally puts the loss on the banks rather than on you — but only if you catch the alteration quickly and report it in writing, and the window closes faster than most people realize.
How Thieves Wash a Check
The method is low-tech. A thief pulls outgoing mail from an unlocked residential mailbox or fishes envelopes out of a blue USPS collection box using adhesive on a string. Common ballpoint pens use dye-based ink that sits on the paper surface, so household solvents lift the payee and amount lines cleanly while leaving the pre-printed bank information and the signature untouched. The thief writes in a new name and a larger number, then deposits or cashes the check at a different bank. Some operations scan and reprint the washed check multiple times, turning one stolen envelope into several fraudulent instruments.1United States Postal Inspection Service. Check Washing
Two consequences follow for the victim. First, the signature on the fraudulent check is real, which changes who is liable. Second, the thief now holds your routing and account numbers, so the same account can be hit again until you close it.
Who Pays When a Washed Check Clears
The UCC, which every state has adopted in some form, decides who absorbs the loss, and the answer turns on whether the check was “altered” or “forged.” Check washing is almost always an alteration, because the sender’s signature is genuine.
Under UCC § 3-407, a fraudulently altered check discharges the sender’s original obligation to the extent of the alteration. If you wrote a $200 check and a thief turned it into $2,000, you owe $200, not $2,000. The bank that paid the inflated amount can only enforce the check on its original terms, and the depository bank that accepted the fraudulent deposit is generally stuck with the difference, because it was in the best position to catch the tampering.2Legal Information Institute. Uniform Commercial Code 3-407 – Alteration
That protection narrows if you were careless. UCC § 3-406 says a customer whose own negligence substantially contributes to the alteration cannot assert the alteration against a bank that paid in good faith. Leaving large blank spaces on the payee or amount lines is the textbook example. If both sides were negligent — you left gaps and the bank missed obvious signs of tampering — the loss is split in proportion to each side’s fault.
Forgery is different. If the signature itself is fake, the payor bank bears the loss, because verifying its own customer’s signature is its job. For you as the account holder, the practical point is the same either way: your bank must recredit your account for the unauthorized amount, and the banks sort out among themselves who ultimately pays.
What to Do the Day You Discover It
Speed is the single biggest factor in whether you get your money back. Every day you wait raises the chance the thief hits your account again or that you miss a reporting deadline.
- Call your bank’s fraud department the same day. Ask them to flag the account, stop payment on any further checks, and send you high-resolution images of the cleared check so you can document the alteration.
- Close the compromised account and open a new one. The thief has your account and routing numbers. Move your direct deposits and automatic payments over immediately.
- File a police report. The incident number is almost always required before your bank will process a fraud claim. Bring the check images, the relevant statement, and a record of when and where you mailed the check.
- Report the mail theft to the U.S. Postal Inspection Service through its online portal. The report feeds into federal investigations tracking theft patterns in your area.3United States Postal Inspection Service. Report – United States Postal Inspection Service
- If any personal information was exposed — Social Security number, full account details, identification — file an identity theft report at IdentityTheft.gov. The site produces an official FTC Identity Theft Report that carries legal weight when disputing fraudulent accounts opened in your name.4Federal Trade Commission. IdentityTheft.gov Helps You Report and Recover From Identity Theft
Deadlines That Can End Your Claim
UCC § 4-406 requires you to review bank statements with “reasonable promptness” and report any unauthorized alteration as soon as you spot it. Courts and banks typically treat 30 days from the date the statement is made available as the outer edge of reasonable. Miss that window, and you lose the right to assert the alteration against your bank for any additional checks the same thief washes before you finally report.5Legal Information Institute. Uniform Commercial Code 4-406 – Customers Duty to Discover and Report Unauthorized Signature or Alteration
One year is the hard cutoff. Regardless of fault on either side, if you don’t discover and report the alteration within one year of the statement being made available, you are permanently barred from making a claim against the bank. This is how people who don’t reconcile their statements lose everything.
Your account agreement may impose a shorter deadline, sometimes 15 or 20 days. Read the terms of your specific account. The contractual deadline controls when it is tighter than the UCC default.
How the Bank Processes Your Claim
Your bank will require a signed Affidavit of Alteration, a sworn statement that you wrote and authorized the original check but did not authorize the changes. The fraud department or online portal provides the form, and some banks require notarization, which generally costs between $2 and $15.
Submit the affidavit along with the cleared check images, your police report number, and a written timeline showing the date you wrote the check, where you mailed it, the intended payee, and the original amount. Specific documentation speeds up verification.
If the bank cannot complete its investigation within 10 business days, it is generally required to issue a provisional credit for the disputed amount while the review continues. The full investigation typically takes 45 to 90 days as the bank pursues the depository bank for recovery. At the end, the bank makes a final determination. If it concludes your own carelessness contributed — erasable ink, blank spaces, a check mailed from an unsecured box — it may reduce the recovery or deny the claim.
Where to Report It
Multiple agencies handle different pieces of a check-washing case, and filing with all of them strengthens both your bank claim and the odds of criminal prosecution.
The U.S. Postal Inspection Service is the lead federal agency for mail-related check theft and tracks organized theft rings across jurisdictions.6United States Postal Inspection Service. ABA and U.S. Postal Inspection Service Announce Partnership to Combat Check Fraud Your local police department handles the incident report your bank will require. For large-scale operations hitting many victims across state lines, the FBI’s white-collar crime division may become involved when the losses justify federal attention.7Federal Bureau of Investigation. White-Collar Crime
Criminal Penalties for the Thief
Check washing typically triggers several stackable federal charges. Bank fraud under 18 U.S.C. § 1344 carries up to 30 years in federal prison and a fine of up to $1,000,000.8Office of the Law Revision Counsel. 18 USC 1344 – Bank Fraud Mail theft under 18 U.S.C. § 1708 is a separate felony punishable by up to five years.9Office of the Law Revision Counsel. 18 USC 1708 – Theft or Receipt of Stolen Mail Matter When the thief also uses the victim’s personal information, identity fraud under 18 U.S.C. § 1028 adds up to 15 years, or 20 years when tied to drug trafficking or violence.10Office of the Law Revision Counsel. 18 USC 1028 – Fraud and Related Activity in Connection With Identification Documents
Business Accounts Are Treated Differently
If a business account is washed, the rules tilt harder against the account holder. The UCC expects businesses to maintain internal controls over check issuance, including segregated duties, prompt reconciliation, and restricted access to blank check stock. When those controls are missing, banks argue the business’s own negligence substantially contributed to the loss, and courts frequently agree.
The consumer-side cushion of Regulation E does not help here. Regulation E caps consumer liability for unauthorized electronic fund transfers at $50 when reported within two business days, but it applies only to electronic transfers and only to consumer accounts.11Consumer Financial Protection Bureau. 1005.6 Liability of Consumer for Unauthorized Transfers12eCFR. 12 CFR Part 1005 – Electronic Fund Transfers (Regulation E) It does not cover checks and does not cover business accounts at all. For a business facing check washing, the UCC is the only legal backstop.
Positive pay significantly reduces that exposure. The business uploads a daily file to the bank listing every check issued, including number, amount, and payee. When a check is presented, the bank matches it against the file and flags anything that does not match for review before clearing. For any business writing checks regularly, it is the most effective single defense.
How to Keep It From Happening Again
No method is airtight, but a few habits make your checks substantially harder to wash and your mail substantially harder to steal.
Use the Right Ink
Gel pens with pigment-based ink bond with the paper fibers rather than sitting on the surface, which makes chemical erasure far harder than it is with a standard ballpoint. Security pens sold specifically for check writing go further, with some formulations that stain the paper visibly on contact with solvents. Permanent markers are not a reliable substitute: wash resistance varies, and the ink can bleed or interfere with bank scanners.
Control How Your Mail Moves
The Postal Inspection Service recommends depositing outgoing mail in a blue collection box before the final scheduled pickup of the day, or handing it to a clerk inside the post office.1United States Postal Inspection Service. Check Washing Never leave outgoing mail in a home mailbox with the flag up overnight. Retrieve incoming mail the day it is delivered, and hold your mail at the post office when you travel.
USPS Informed Delivery is a free service that emails you grayscale previews of each letter headed to your address that day. If you see a preview of a check you were expecting and it never arrives, you know within hours that something was intercepted, instead of discovering it on next month’s statement.
Write Fewer Checks
The most effective prevention is removing the paper document from the equation. Electronic payments, bank bill pay, and person-to-person transfer apps eliminate the physical check that makes washing possible. For payments where a check is unavoidable, fill every field completely, draw a line through any unused space on the payee and amount lines, and never mail from an unsecured location.