Deposit account fraud is any scheme that uses deception to steal money from or through a bank checking or savings account. Federal law treats it as a serious crime, with penalties under 18 U.S.C. § 1344 reaching $1,000,000 in fines and up to 30 years in prison, and states add their own charges on top.1Office of the Law Revision Counsel. 18 USC 1344 – Bank Fraud The schemes run from old-fashioned check washing to sophisticated electronic transfers, but they share one thread: someone manipulates an account, or the banking system around it, to get money they have no right to.
How Federal Law Defines It
The main federal statute, 18 U.S.C. § 1344, makes it a crime to knowingly carry out any scheme to defraud a federally insured financial institution or to obtain money or property from one through false pretenses.1Office of the Law Revision Counsel. 18 USC 1344 – Bank Fraud The language is deliberately broad. Prosecutors do not need to prove a specific technique. They need to show the defendant knowingly participated in a scheme built on deception and that a federally insured bank was the target or the vehicle.
A conviction carries a maximum $1,000,000 fine and up to 30 years in federal prison.1Office of the Law Revision Counsel. 18 USC 1344 – Bank Fraud Those are statutory ceilings. Actual sentences depend on the amount stolen and the defendant’s history, but the ceiling is high enough that even a first offense involving a modest amount can mean years of incarceration.
Charges That Often Travel With Bank Fraud
These cases rarely result in a single charge. When a scheme uses phone calls, emails, or electronic communications, prosecutors often add wire fraud under 18 U.S.C. § 1343. Wire fraud normally carries up to 20 years, but when the scheme affects a financial institution the penalties jump to the same $1,000,000 fine and 30-year maximum as bank fraud.2Office of the Law Revision Counsel. 18 USC 1343 – Fraud by Wire, Radio, or Television If the person used a stolen or fabricated identity to open or access an account, federal identity fraud charges can stack on as well. Each count carries its own potential sentence, and federal sentences often run consecutively.
Ten-Year Statute of Limitations
Federal bank fraud has a 10-year statute of limitations, twice the standard five-year window for most federal crimes. Under 18 U.S.C. § 3293, the extended period applies to § 1344 bank fraud and to wire fraud when it affects a financial institution.3Office of the Law Revision Counsel. 18 USC 3293 – Financial Institution Offenses A kiting scheme from 2020 can still produce an indictment in 2030.
State Charges Layered on Top
States prosecute these cases too, usually under statutes covering bad checks, forgery, or theft by deception. Whether a charge is a misdemeanor or a felony typically turns on the dollar amount. In most states, writing a check you know will bounce is a misdemeanor at smaller amounts and a felony above a set threshold. Many states also let the victim recover civil damages of double or triple the check’s face value. The specific thresholds and ranges depend on where the crime happened.
Common Schemes to Watch For
The methods have evolved alongside banking technology, but several patterns come up over and over.
Check Kiting
Kiting exploits the delay between depositing a check and the bank actually collecting the funds. Someone writes a check from an account that lacks the money to cover it, deposits that check into a second account, and withdraws cash from the second account before the first check bounces. To keep the loop alive, they write another check from the second account back to the first, creating circular phantom balances. The float period between deposit and clearance is what makes it work.4FedPaymentsImprovement.org. The Anatomy of Check Kiting These schemes collapse once the bank detects the pattern or a check is held long enough to clear, and the person owes every dollar withdrawn.
Forged and Counterfeit Checks
Forged checks are legitimate checks that have been altered: the payee name, the amount, or the signature is changed. Counterfeit checks are fabricated from scratch, often using commercial check stock and routing numbers taken from real accounts. Modern printing has made counterfeits hard to distinguish from authentic checks by eye, which is why banks lean on automated verification rather than visual inspection.
Check Washing
Check washing is surprisingly low-tech. Someone steals a check from a mailbox, then uses household chemicals to dissolve the ink. With the original payee and amount erased, the thief rewrites the check to themselves for a larger amount and deposits it. The U.S. Postal Inspection Service has flagged washing as a growing problem tied to mail theft.5United States Postal Inspection Service. Check Washing The FBI’s Internet Crime Complaint Center has noted that mail-theft-related check fraud, including washing, has been rising steadily.6Internet Crime Complaint Center. Mail Theft-Related Check Fraud is on the Rise
Mobile Deposit Fraud
The same technology that lets you deposit a check by phone has created a new fraud vector. In a duplicate presentment scheme, someone deposits a check through a mobile app at one bank, then deposits the physical check at a different bank or cashes it in person, collecting the funds twice before either institution catches the duplication. Fraudsters also use mobile deposit to submit stolen, forged, or counterfeit checks without ever setting foot in a branch.
Unauthorized ACH and Wire Transfers
With your account and routing numbers, a fraudster can initiate ACH debits that pull money directly from your account. Those credentials are often harvested through phishing emails, spoofed websites, or keystroke-logging malware. Wire transfers are another target. In a business email compromise, a criminal impersonates a company executive or vendor and instructs an employee to wire funds to a fraudulent account. Wire transfers settle quickly and are difficult to reverse, so the money is often gone before anyone notices.
Empty Envelope Deposits
This older ATM scheme involves depositing an empty envelope, or one filled with worthless paper, while claiming it holds cash or a check. The depositor then withdraws real money against the phantom balance before the bank opens the envelope. Many banks have curbed the fraud by moving to ATMs that scan each item immediately rather than accepting sealed envelopes, but the scheme still surfaces at machines using the older system.
New Account Fraud
Instead of compromising an existing account, some fraudsters open new ones with stolen or synthetic identities. A synthetic identity blends real data, like a legitimate Social Security number, with fabricated details to create a person who doesn’t actually exist. The account builds a brief history of normal-looking activity, then runs a large fraudulent transaction before disappearing. Using their own accounts lets criminals skip the money mules and makes the fraud harder to trace back to a real person.
Your Liability Limits as a Victim
If someone makes unauthorized electronic transactions on your account, federal law caps how much you can lose, but only if you report the fraud quickly. The Electronic Fund Transfer Act sets up a tiered liability system tied to how fast you notify your bank.
- Within 2 business days of learning of the loss: maximum liability of $50, or the amount of unauthorized transfers before you notified the bank, whichever is less.7Office of the Law Revision Counsel. 15 USC 1693g – Consumer Liability
- After 2 business days but within 60 days of your statement: liability rises to a maximum of $500 for transfers that occurred after those first two days.7Office of the Law Revision Counsel. 15 USC 1693g – Consumer Liability
- After 60 days: potentially the full amount of any unauthorized transfers that occur after the 60-day window closes, with no cap.8Consumer Financial Protection Bureau. Regulation E 1005.6 – Liability of Consumer for Unauthorized Transfers
Those deadlines are the single most important thing to know as a victim. The difference between calling your bank on day two and waiting until day sixty-one can be the difference between losing $50 and losing everything.
Check fraud follows a different rulebook: the Uniform Commercial Code. You have a duty to review your bank statements with reasonable promptness and report any forged or altered checks. If you miss a problem and the same person forges another check, you lose the right to challenge that second check once more than 30 days have passed since the bank sent the statement showing the first. And there is an absolute one-year outside limit: if you do not discover and report a forged signature or alteration within one year of receiving the statement, you cannot hold the bank responsible.9Legal Information Institute. UCC 4-406 – Customer’s Duty to Discover and Report Unauthorized Signature or Alteration
What to Do If You Find Fraud on Your Account
Speed matters more than anything else. The liability limits above all hinge on when you notify your bank, so the first step is always the same: contact your bank or credit union immediately. Once you report the problem, the bank generally has 10 business days to investigate and must correct any confirmed error within one business day of completing that investigation.10Consumer Financial Protection Bureau. How Do I Get My Money Back After I Discover an Unauthorized Transaction or Money Missing From My Bank Account
Beyond calling the bank:
- File a police report. Many banks require one before they will process a fraud claim, and you will need it if the case is later prosecuted.
- Document everything. Screenshot unauthorized transactions, save emails, and note the dates and times of every call you make to your bank.
- Change your credentials. Update your online banking password, PIN, and security questions. If your debit card number was compromised, ask for a new card.
- Place a fraud alert on your credit reports. If personal information was involved, an alert with any one of the three major credit bureaus automatically extends to the other two and makes it harder for someone to open new accounts in your name.
- File a complaint with the CFPB if your bank is not responding appropriately. A complaint creates an official record and often speeds the bank’s response.
How Banks Detect and Report It
Banks do not just investigate when a customer complains. Federal regulations require them to monitor for suspicious activity and file Suspicious Activity Reports with the Financial Crimes Enforcement Network. The reporting threshold is triggered by any transaction or pattern of transactions over $5,000 that the bank suspects involves fraud, money laundering, or other Bank Secrecy Act violations. The bank must file within 30 calendar days of detecting the activity, extendable to 60 days if no suspect has been identified.11Office of the Comptroller of the Currency. Suspicious Activity Report (SAR) Program
Banks are prohibited from telling the customer that a SAR has been filed. You could be the subject of an investigation without knowing it, and the bank is legally barred from tipping you off. For victims, the flip side is that your bank may already be tracking the fraud before you report it.
Restitution for Victims
When a case ends in a federal conviction, the court is required to order the defendant to pay restitution. The Mandatory Victims Restitution Act applies to all property offenses committed by fraud, including bank fraud, and makes restitution mandatory rather than discretionary. The court must order compensation for any identifiable victim who suffered a financial loss as a direct result of the crime, and both individuals and institutions qualify.12Office of the Law Revision Counsel. 18 USC 3663A – Mandatory Restitution to Victims of Certain Offenses
Collecting it is harder than ordering it. Many fraud defendants have already spent or hidden the money by the time they are sentenced. A restitution order becomes a judgment the government can enforce through wage garnishment and asset seizure, but if the defendant has no assets, the victim may recover little or nothing.
How It Differs From Related Crimes
Deposit account fraud overlaps with several other financial crimes, and the distinctions affect which laws apply and which remedies are available.
Identity theft is often the first step in a deposit account fraud scheme, supplying the stolen credentials used to access or open an account. On its own, though, it is a separate offense. Someone who steals your Social Security number and never touches a bank account has committed identity theft, not deposit account fraud. The bank account manipulation is the distinguishing act.
Credit card fraud targets a credit line rather than deposited funds. The liability rules are different: federal law caps credit card fraud losses at $50 regardless of when you report. The investigation process and the institution’s exposure also differ. A fraudster draining your checking account takes money you already have, while credit card fraud creates a debt on a credit line.
Loan fraud involves lying on a loan application to borrow money you wouldn’t otherwise qualify for. The deception happens during origination, not through manipulation of an existing deposit account. Someone who fabricates income documents to get a mortgage is committing loan fraud, even though both crimes involve deceiving a financial institution.