Fake check and overpayment scams: why "the check cleared" doesn't mean what it sounds like

This one doesn't arrive as a threatening call. It arrives as good news: a buyer for the dining set your mother listed online, a work-from-home "mystery shopper" assignment, a prize notification, a first paycheck from a new remote job. A real, physical check arrives — good paper, a real bank's name, sometimes a convincing cashier's check. She deposits it. A day or two later the money shows in the account. As far as anyone can reasonably tell, the check cleared.

Then comes the ask that defines the entire category: send some of it back, or send some of it onward. The buyer "accidentally" wrote the check for $2,400 instead of $400 — just refund the difference. The mystery-shopper job is to test a money-transfer service by wiring most of the deposit to another name. The prize requires "taxes and fees" paid from the winnings. Whatever the story, the shape is identical: real money leaves, because fake money appeared to arrive.

The gap the scam lives in: "available" is not "verified"

Banking rules require banks to make deposited funds available quickly — often within a business day or two. That speed is a convenience feature, not a verdict on the check. Actually discovering that a check is counterfeit can take days or sometimes weeks, and when it happens the bank removes the deposit from the account. The account holder — not the bank — is out whatever was already spent or sent onward from it.

That's the whole trick, and it's worth saying to a parent in exactly one sentence: the bank showing you the money is not the bank vouching for the check. Everything else in the script — the urgency, the friendly explanations, the official-looking cashier's check — exists to get money moving during that gap.

The bank showing you the money is not the bank vouching for the check.

One rule covers every version

The stories rotate — buyer, employer, prize committee, charity — but the mechanical core never changes, which means one family rule covers all of it:

And the payment method gives it away, exactly as it does in every other scam on this site. The "difference" is always requested by wire transfer, gift cards, a payment app, or cash — the channels that don't come back. The FBI is explicit that demands for payment by gift card, wire, or cash kiosk are the signature of fraud, and the FTC's gift-card rule has no exceptions: no real business asks to be paid that way. The gift-card article covers why those channels in particular.

The versions worth naming for a parent

• The marketplace buyer. Responds instantly to an online listing, doesn't haggle, "accidentally" overpays or adds a "shipping agent" fee to pass along. Real buyers argue about price; scam buyers argue about refund logistics.
• The mystery-shopper or "payment processing" job. The first assignment is depositing a check and wiring money onward — which is the entire job, because the job is being the person whose account launders the loss.
• The prize or grant. Winnings that require taxes or fees paid up front, from a sweepstakes never entered. Real prizes deduct; they don't invoice.
• The romance-adjacent favor. An online friend or love interest needs a check deposited "because my bank is frozen." This is one of the standard money-movement asks inside romance scams, and it can additionally expose the account holder to legal trouble for moving stolen funds.

If the check is sitting on the kitchen table

Don't deposit it. Take it to a branch and ask them to look at it, or simply stop contact with the sender. A parent embarrassed about "wasting the bank's time" can be given the framing tellers actually hold: catching a counterfeit before deposit is a good day at the branch, not a nuisance.

If it already happened

Skip blame — these are professional scripts, engineered to feel like ordinary commerce — and move the same day:

• Call the bank's fraud line first — the number on the back of the card or the statement, never one from the emails. Explain the deposit and any money sent onward. The sooner the bank knows, the more options exist.
• Stop all contact with the sender, and keep everything: the check, the envelope, every message. It's evidence.
• Report it at ReportFraud.ftc.gov. If any part touched the mail — the check arrived by post, or money was mailed — report it to the U.S. Postal Inspection Service as well.
• If gift cards were bought, call the issuer immediately with cards and receipts; if money moved by wire or app, run the full first-10-minutes drill.
• Expect the second act: "recovery" callers offering to get the money back for a fee. That call is a scam every time.

Why this belongs in the family playbook

Fraud against older adults keeps growing because the money at stake is real: in 2025, adults 60 and older reported $7.75 billion in losses to the FBI across more than 200,000 complaints. The fake-check script earns its place in that total by being the least alarming thing on this site — no threats, no panic, just a piece of paper that looks like every check your parent has deposited for fifty years. Which is exactly why the defense has to be a rule agreed on in advance, not alertness in the moment: money that just arrived doesn't leave — not until the bank confirms the deposit is verified, and never back toward the person who sent it.