Fake Check & Overpayment Scam
A buyer sends you a cashier’s check for more than the asking price. Your bank makes the funds available. You wire back the overage. Days later, the bank reverses the deposit — the check was counterfeit. The wire transfer is gone. The bank holds you liable for every dollar. This scam works because most people believe available funds means a check has cleared. It doesn’t.
What Is the Fake Check Overpayment Scam?
The fake check overpayment scam exploits a gap in how US banking regulations handle check availability versus check verification. When you deposit a check, federal law (Regulation CC) requires banks to make funds available within one to two business days for most check types — regardless of whether the check has been confirmed as legitimate. This availability window exists to serve legitimate customers, but scammers exploit it as the core mechanism of the fraud.
The scam is elegantly simple: send a counterfeit check for more than the agreed amount, request that the recipient wire back the difference, and disappear before the bank discovers the check is fake. The recipient, having seen the funds appear in their account, feels confident the check was good. By the time the check returns as fraudulent — sometimes a week later — the wire transfer they sent has already been withdrawn and moved beyond recovery.
The FTC consistently ranks this among the most reported check fraud types in the United States. It appears in private marketplace sales, online job postings (where a new “employer” overpays on a first check), sweepstakes wins, mystery shopper recruitment, and even rental deposits. Any scenario involving an incoming check from a stranger followed by a request to return a portion via wire or Zelle is a structured fraud attempt.
How the Fake Check Scam Works — Step by Step
Making Contact With a Plausible Pretext
The scammer responds to your online listing — a car for sale, a rental, a job posting, or a freelance service. They express enthusiastic interest and reach agreement quickly. Then they explain they need to pay by cashier’s check and apologize that it will be for more than the agreed amount — they have the check already made out, a payment was combined with another, or a foreign currency conversion created the overage. The explanation is always slightly awkward but plausible enough to seem like an honest mistake.
The Check Arrives
A cashier’s check arrives in the mail. It looks professional — correct bank formatting, security features, watermarks. The amount is $500 to $3,000 more than agreed. The scammer contacts you with urgency: they need the item shipped immediately and ask you to wire back the overpayment via Zelle, wire transfer, or money order to cover their “other expense” or “shipping fee.” They are friendly and apologetic about the inconvenience.
Funds Appear Available
You deposit the check. Within one to two business days, the funds appear in your account as available. You interpret this as confirmation the check cleared. It has not — the bank has simply made provisional credit available as required by law. The actual verification process — contacting the issuing bank and confirming the check is genuine — has not yet completed.
You Send the Overpayment Back
Believing the check has cleared, you wire or Zelle the overpayment amount to the buyer. The buyer immediately withdraws or moves the funds. Within days to a week, the issuing bank notifies your bank that the check is counterfeit and returns it. Your bank reverses the provisional credit. You now have a negative balance equal to the full check amount — and the wire transfer you sent is entirely unrecoverable.
The Bank Holds You Liable
Under banking law, the account holder who deposits a bad check bears the liability when it is returned. Even though you were defrauded and acted in good faith, the bank’s position is that you authorized the deposit and the subsequent wire transfer. Some banks may show compassion and work with you, but there is no legal obligation for them to absorb the loss. You owe the full amount.
Red Flags in Every Overpayment Scenario
- Any overpayment of any amount for any reason — a buyer who overpays and asks for money back is always running a structured fraud attempt, with no legitimate exceptions.
- A buyer insists on paying by cashier’s check or money order rather than cash or a verifiable digital payment — in private sales, these instruments are specifically chosen to exploit the availability window.
- You are asked to wire, Zelle, or send money order back before the check fully clears — urgency to return the overpayment before clearing is the operational heart of the scam.
- The buyer cannot meet in person for a local transaction — insisting on mailing a check removes the verification that in-person cash exchange provides.
- The check amount is notably higher than agreed — the overage is the mechanism, not an honest mistake.
- In a job context, the first paycheck is for more than agreed and you are asked to forward a portion for “supplies” or “equipment” — this is the employment variant of the same fraud.
💡 The Banking Reality Every Seller Must Know
Funds being “available” in your account does not mean a check has cleared or been verified. For personal and cashier’s checks, the full verification process can take up to 10 business days. The only safe rule: never spend, wire, or return any money from a deposited check until you have independently verified the check is genuine by calling the issuing bank directly — using a number you looked up yourself, not one printed on the check. For private sales, the only truly safe payment is cash on in-person pickup.
Common Overpayment Scam Variants
Private marketplace sales (Craigslist, Facebook Marketplace)
The most common context: a seller of a vehicle, furniture, or other high-value item receives a check from a buyer who cannot meet in person. The overpayment story varies — combined payments, currency conversion errors, check already issued at a higher amount. The request to return a portion follows immediately after the check’s deposit.
Rental deposit overpayment
A prospective tenant sends a check for first and last month plus deposit — intentionally over the total — and asks the landlord to return the difference via wire or Zelle. The landlord, having received what appears to be a large secured payment, transfers back the “excess.” The original check bounces and the “excess” is gone.
Mystery shopper and work-from-home job
A “new employer” sends a check as an advance on your first assignment — more than agreed. You are asked to use a portion to purchase gift cards (for “testing retail”) and return the codes, keeping the remainder as your fee. The check bounces days later, leaving you liable for the full amount while having already surrendered the gift card codes.
Sweepstakes and lottery prize delivery
A check arrives claiming to be an advance on lottery winnings — you are instructed to deposit it and wire a “processing fee” before the remaining prize is delivered. The check is fake and the prize does not exist.
Check Fraud Often Comes With Identity Theft on the Side
Scammers who run fake check operations frequently collect more than your bank details — they build profiles that can be used for full identity fraud. If you were targeted, it’s worth knowing what else may be exposed about you online right now.
Check Your Data Broker Exposure Free →What To Do If You Deposited a Fake Check and Sent Money
- Contact your bank immediately — the faster you act, the more options may be available. Explain that you deposited a fraudulent check and made a wire transfer before discovering it was fake.
- Request that your bank attempt to recall the wire transfer — there is a narrow window in which domestic wire recalls are sometimes possible, though success is not guaranteed.
- File a police report with your local department — banks often require a police report number to open a fraud investigation and to consider any hardship accommodation.
- Report to the FTC at reportfraud.ftc.gov and to the FBI at ic3.gov with all details including the check, any contact information, and the wire transfer details.
- Report to the US Postal Inspection Service at postalinspectors.uspis.gov if the check arrived by mail — mail fraud involving counterfeit financial instruments is a federal offense they investigate actively.
- Report to the platform where you met the scammer — Craigslist, Facebook Marketplace, and similar sites have fraud teams that can identify patterns across victims.
- Going forward, for all private sales: accept cash only for in-person transactions, or use PayPal Goods & Services for any transaction where a paper check would have been the alternative.