Check fraud is, surprisingly, more common today than it was twenty years ago. The Federal Reserve's most recent payments fraud study found that checks remain the single most-frequently-targeted payment method for US businesses — partly because checks are still the highest-dollar B2B payment instrument, and partly because the controls used to detect fraud are voluntary and many businesses have not turned them on.
This guide is written for small US businesses (under 500 employees) and focuses on practical, low-cost defenses you can implement this week.
1. Turn on Positive Pay (free or cheap, very effective)
Positive Pay is a service nearly every commercial bank offers. The way it works: every time you write checks, you upload an "issue file" to your bank listing the check number, date, amount, and (optionally) payee. When a check arrives at the bank for payment, the bank automatically compares it against the issue file. If the check is not on the file, or if the amount or payee doesn't match, the bank holds it and notifies you for a pay/no-pay decision.
Positive Pay catches the two most common check fraud patterns: counterfeit checks (fraudster prints checks using your routing/account numbers) and altered checks (real check, payee or amount changed). Costs vary from free at credit unions and community banks to $30–50/month at large commercial banks. For a business writing more than five checks a month, this is the highest-leverage anti-fraud spend you can make.
2. Use security check stock
If you print your own checks, buy stock with at least these features: a watermark visible at certain angles, chemical-reactive paper that stains brown when treated with check-washing solvents, microprinting on the signature line that smears when photocopied, and a holographic strip or void pantograph background that produces a "VOID" pattern when copied. These don't prevent fraud, but they make alterations obvious after the fact and provide evidence for a prosecution.
3. Restrictive endorsements on checks you receive
The moment a customer hands you a check, stamp the back with "For deposit only — <your business name> — <account #>". This restricts what anyone else can do with the check if it's lost or stolen between your office and the bank. A pre-inked endorsement stamp costs about $25.
4. Dual signatures above a threshold
For checks above a meaningful threshold ($5,000 is a common starting point), require two signatures from your account's authorized signers. This forces a second person to look at the payee, amount, and underlying invoice before the check is signed. Many banks will enforce this in their Positive Pay rules; if yours doesn't, enforce it as a written internal policy and review your monthly bank statement to verify it was followed.
5. Reconcile your bank statement promptly — within 30 days
Federal Regulation CC and Uniform Commercial Code Article 4 give you a limited window to dispute fraudulent checks, typically 30 days from the statement date. After that window, the bank's liability shifts to you. Reconciling promptly is the difference between getting your money back and absorbing the loss.
6. Lock down the physical checks
Blank business checks should be stored in a locked drawer, in a locked office, and signed-out one batch at a time to whomever is preparing payments. The single most common source of check fraud at small businesses is an employee or family member who stole a single blank check from the back of the booklet — often months before they used it.
7. Consider lockbox banking for incoming checks
If your business receives many incoming checks (subscriptions, dues, monthly invoicing), consider a bank lockbox service. Customers mail their checks to a PO box controlled by the bank; the bank opens the mail, deposits the checks, and emails you a daily file with the deposit details. This eliminates the in-house workflow of opening mail and walking checks to the bank, and removes the temptation/opportunity for an employee to redirect a check.
What to do if a fraudulent check clears your account
- Notify your bank in writing the same day. Ask them to immediately freeze the account if there's reason to believe more fraudulent checks are in flight.
- File a police report with your local jurisdiction.
- If the loss exceeds your bank's reimbursement, file a claim with your business insurance — many commercial general liability policies include a check fraud rider.
- Open a new account and have new checks printed with new account numbers. Update Positive Pay against the new account immediately.