Finance Index
How does check fraud actually happen, and who bears the loss?
Reference guide to check fraud prevention, including payment timing, method choices, control points, reconciliation, and vendor communication.
Check fraud happens through check washing (chemically erasing and rewriting a stolen check), counterfeiting (printing fakes from captured MICR data), mail theft (intercepting checks in transit), and mobile-deposit duplicates. Mailed paper checks are the single most-targeted payment instrument, which is why check fraud remains the most-reported B2B payment fraud type despite declining check volume.
At a Glance
| Aspect | Short Answer | Why It Matters |
|---|---|---|
| Check fraud actually happen | Check fraud happens through check washing (chemically erasing and rewriting a stolen check), counterfeiting (printing fakes from captured MICR data), mail theft (intercepting checks in transit), and mobile-deposit duplicates. | Keeps vendor records and payment decisions reliable. |
| Who bears the loss on | Under the UCC, banks generally bear losses for forged endorsements and material alterations - but only if you report promptly and maintained ordinary care (positive pay is increasingly treated as ordinary care). | Reduces payment errors, timing issues, and reconciliation cleanup. |
| Risk check | Industry fraud surveys consistently identify checks as the payment method most targeted by fraud, year after year - the volume of checks falls while the fraud rate against them rises, because thieves concentrate on the most vulnerable rail. | Reduces payment errors, timing issues, and reconciliation cleanup. |
| A check we mailed was | Report it to your bank immediately as an altered/forged item; with prompt notice and (ideally) payee positive pay in place, the bank generally bears it. | Reduces payment errors, timing issues, and reconciliation cleanup. |
| What is the ucc's rule | The paying or depositary bank is generally liable for forged endorsements and alterations, provided the customer reports within the deposit-agreement window and exercised ordinary care - comparative fault can shift loss if you ignored available controls. | Keeps evidence clear and reduces control risk. |
Who bears the loss on a forged or altered check?
Under the UCC, banks generally bear losses for forged endorsements and material alterations - but only if you report promptly and maintained ordinary care (positive pay is increasingly treated as ordinary care). Miss your deposit-agreement reporting window, or skip available fraud controls, and liability can shift to you. The practical rule: reconcile fast, report immediately, and use payee positive pay.
How bad is the check fraud trend?
Industry fraud surveys consistently identify checks as the payment method most targeted by fraud, year after year - the volume of checks falls while the fraud rate against them rises, because thieves concentrate on the most vulnerable rail.
A check we mailed was intercepted, washed, and cashed for a different payee - who bears the loss and how do we recover?
Report it to your bank immediately as an altered/forged item; with prompt notice and (ideally) payee positive pay in place, the bank generally bears it. File an affidavit, provide your issued-check records, and escalate to postal inspectors for mail theft.
What is the ucc's rule on forged endorsements and altered checks?
The paying or depositary bank is generally liable for forged endorsements and alterations, provided the customer reports within the deposit-agreement window and exercised ordinary care - comparative fault can shift loss if you ignored available controls.
What's the time limit for reporting fraudulent checks before we lose recovery rights?
Your deposit agreement sets it - often as short as 30 days from statement availability for some claims, with outer statutory limits; the shorter your reconciliation cycle, the safer you are. Treat "report within 24 hours of discovery" as the operating standard.
Does secure check stock and micr control still matter, or is eliminating checks the only real fix?
Both: secure stock, controlled MICR toner, and locked signature plates reduce in-house exposure today, but they don't stop mail-theft washing - the durable fix is converting vendors to electronic payment and using payee positive pay on whatever checks remain.
Our outgoing checks keep getting stolen from the mail - what immediate changes?
Stop using outdoor/unsecured mailboxes, switch high-value and high-frequency vendors to electronic immediately, use an outsourced print/mail service that drops closer to delivery, enable payee positive pay, and reconcile daily to catch theft fast.
What is a holder in due course claim and why might we pay even on a stopped check?
A party who took a check in good faith, for value, without notice of problems, can sometimes enforce payment despite your stop order - which is why a stop payment is not absolute protection and why verifying the original truly hasn't been negotiated matters before reissuing.
Stampli perspective
Stampli's position is that payment controls work best when the payment is tied to the invoice, the vendor record, and the approval trail that made the liability payable. That connection gives finance a clearer way to review who approved the spend, which payment method is being used, and what changed before money moves.