← All guides

How to Spot a Fake Check Sent Through Email

Got a check by email from a job, buyer, or 'mystery shopper' with instructions to deposit it and send money back? That's the fake check scam. Here's how to spot it before the check bounces.

Short answer: if someone emails you a check — or a photo of one — and asks you to deposit it and then send part of the money back, buy gift cards, or wire funds to a "vendor," it's a scam. The check is fake. It may clear at first, but days later your bank claws the money back and you're on the hook for everything you sent on.

This is the fake check scam, and the email twist makes it faster and cheaper for fraudsters to run at scale. The mechanics never change, which is exactly why it's easy to spot once you know the shape.

Quick check: No legitimate job, buyer, prize, or "mystery shopper" program ever sends you a check and asks you to send money back. The "send part of it back" step is the entire scam — full stop.

In this guide

Why emailed checks are a trap

A real check is a paper instrument backed by a real account. A check sent as an email attachment — a PDF or a photo to "mobile deposit" — costs the scammer nothing to produce and can be blasted to thousands of targets. They can fake any bank's logo, any routing number, and any signature.

The danger isn't the image. It's the instruction that comes with it: deposit this, then move money. Once you wire funds or buy gift cards with money that turns out to be fake, that money is gone and irreversible — while the fake check is reversed against your account.

The most common fake check scams

The disguise changes; the move ("deposit, then send money") never does.

  • The overpayment scam. A "buyer" for something you're selling sends a check for more than the price and asks you to refund the difference, or to forward extra to their "shipper."
  • The fake job / "first paycheck" scam. A remote job you barely applied for sends a check to "buy equipment" or set up your "home office," then has you pay a vendor with it. Covered more fully in fake job offer scams.
  • The mystery shopper scam. You're "hired" to evaluate a store or a money-transfer service. Step one: deposit this check and wire most of it to test the service.
  • The prize or grant scam. "You won — here's a check to cover the taxes and fees. Just deposit it and send the fees back."
  • The rental or deposit scam. A "tenant" or "landlord" overpays a deposit and wants the balance returned.

If your situation matches any of these, stop at the words "send some back."

How a check can clear and still be fake

This is the part that fools good, careful people, so it's worth understanding precisely.

When you deposit a check, your bank makes the funds available within a day or two — that's the law (banks must give you quick access to deposits). But "available" is not the same as "the check is good." The bank hasn't actually collected the money from the other bank yet.

Days or weeks later, the check bounces as counterfeit. The bank reverses the deposit and pulls that money back out of your account. Anything you already wired or spent is your loss. So:

Seeing the money in your balance is not proof the check is real. A scammer's entire timing strategy depends on you believing it is.

The red flags

  • You're asked to send money back after depositing — by wire, gift card, crypto, or payment app.
  • The check is for more than expected, with a tidy explanation for the extra.
  • Pressure to act fast — "deposit today, the vendor needs paying by tonight."
  • You barely know the sender — a job you don't remember applying to, an out-of-state buyer, a "client" you've only met by email.
  • The story routes money through you to a third party ("my shipper," "the agency," "the testing service").
  • The check arrives by email as a PDF or photo, or by overnight mail from a name you don't recognize.

What a fake check email looks like

From: Hiring Team <onboarding.payroll7@gmail.com>
Subject: Welcome aboard — your setup check is attached

Hi,

Congratulations on joining the team! Attached is your first
check ($2,850) to cover your home-office equipment.

Please mobile-deposit it today, keep $350 as your first-week
pay, and send the remaining $2,500 to our approved equipment
vendor via Zelle so your gear ships on time. Reply once done!

Every tell is here: a personal Gmail for "payroll," a check attached to an email, a deposit-then-send instruction, a same-day deadline, and money routed to a "vendor" by an irreversible app. The $350 "keep this" is the bait that makes it feel like a real paycheck.

When a check, an offer, or a "client" email like this lands and something feels off, don't deposit anything to find out. Forward the message and the check image to FraudRoom first — you'll get a clear read on whether it's a fake check setup before your account is ever exposed.

How to verify a check before you trust it

  1. Never send money back against a check you deposited. If that step exists, the answer is already no.
  2. Wait for the check to truly clear — not just "available." Ask your bank specifically: has this check fully cleared and collected, and could it still be returned? Funds can be reversed for weeks.
  3. Verify the issuing bank independently. Find the bank's real phone number yourself (not a number on the check or in the email) and ask if the check and account are legitimate.
  4. Question the whole arrangement. Why is a stranger sending you money to forward? Legitimate business doesn't run that way.
  5. Confirm the sender exists. For a "job," check the company's official careers page and contact them through it — not the email that messaged you.

If you already deposited it

Move quickly:

  1. Don't send any of the money on. If you haven't wired or bought gift cards yet, stop — you've avoided the loss.
  2. Call your bank now. Tell them you may have deposited a fraudulent check. They can flag the account and advise on the returned-deposit fee and timeline.
  3. If you already sent funds: contact the wire service, gift-card issuer (number on the back), or payment app immediately to try to stop or recall it. Speed is everything.
  4. Report it. File with the FTC at reportfraud.ftc.gov. Fake checks received by mail can also be reported to the U.S. Postal Inspection Service.
  5. Keep everything — the check, the email, the instructions — as evidence.

For the broader money-recovery steps, see what to do if you clicked a phishing link.

FAQ

Can a check clear and then bounce later?

Yes. Banks make deposited funds available within a day or two by law, but that doesn't mean the check is genuine. A counterfeit check can be returned days or weeks later, at which point the bank pulls the money back from your account — and any money you forwarded is your loss.

How do I know if an emailed check is real?

Treat any check sent by email with an instruction to deposit it and send money back as fake. To verify a check you weren't expecting, find the issuing bank's real phone number yourself and ask if the check and account are legitimate — and never act on a number printed on the check or in the email.

Someone overpaid me and wants the difference back — is that a scam?

Almost certainly. The overpayment-and-refund pattern is one of the most common fake check scams. The original check bounces after you've refunded real money. Don't refund anything until the check has fully and permanently cleared, and be suspicious of any buyer who "accidentally" overpays.

I deposited a fake check. Am I in trouble?

Depositing it isn't a crime, but you're responsible for the returned amount and may owe a fee. Call your bank right away, stop any money you were about to send, and report it to the FTC. Acting fast is what limits the damage.

Key takeaways

  • A fake check can look real and even show as "available" before it bounces.
  • "Deposit this and send some back" is the scam in one sentence — always.
  • Overpayment, fake job, mystery shopper, and prize stories are the usual disguises.
  • Money you wire or load onto gift cards is gone; a fake check is reversed against you.
  • Wait for a check to fully clear, verify the bank yourself, and never forward funds.

Not sure about a message?

Forward it to check@fraudroom.com and get a plain-English scam check in minutes.

Try it free — 5 checks, no card