Rental Fraud · Fake Check & Overpayment Scams

Fake Check & Overpayment Scams: A Landlord’s Guide

A counterfeit cashier’s check clears “available” in days, then bounces weeks later. If you refunded the “overpayment” in between, the money is gone. Here is exactly how the scam works and how to defeat the entire category in 2026.

A fake check or overpayment scam is a fraud in which someone posing as an applicant or tenant pays you with a counterfeit instrument made out for more than they owe, then pressures you to refund the difference before the fake is discovered. Your bank makes the funds available within a day or two, which feels like the check has cleared – but availability is not settlement. When the issuing bank later refuses to pay, your bank reverses the credit, and any refund you sent in the meantime comes straight out of your own pocket. The single rule that defeats every version: never refund an overpayment from any instrument until the issuing bank has confirmed it truly cleared.

This guide walks through how the fraud actually works, the six variants landlords see most, the red flags, how to inspect a suspicious check, the cashier’s-check verification workflow, the safe payment instruments that remove the risk, and where to report it if you have already been hit. It pairs naturally with our step-by-step guide to how to screen tenants, since the same rigor at intake catches the fraud profile before any check changes hands.

▶

Video: a plain-language walkthrough of fake check and overpayment fraud – how the float window works, the red flags, and the safe payment instruments that defeat it.

Key Takeaways: Fake Check and Overpayment Scams

• “Funds available” is not “check cleared.” Federal rules make your bank release funds fast, but the issuing bank can reverse a counterfeit weeks later – and you owe back anything you spent or refunded.
• The overpayment-refund ask is the tell. A payment for more than is owed, plus an urgent request to wire the difference back, is the dominant fraud pattern – not a banking mishap.
• Verify, do not trust, cashier’s checks and money orders. Modern counterfeits pass teller and mobile-deposit review; only a call to the issuing bank on an independently looked-up number confirms them.
• Use safe payment instruments. ACH through a platform, a tenant-initiated wire, or a certified rent-payment service moves the clearing risk off you and removes the fraud surface entirely.

How Does Fake Check and Overpayment Fraud Actually Work?

The mechanics have been stable for decades even as the instruments and pretexts evolve. The fraudster hands you an instrument your bank will provisionally credit but eventually reverse when the issuing bank refuses to pay. During the window between that provisional credit and the final reversal – days to weeks, depending on the instrument – the fraudster invents an urgent reason for you to send some of the money back: an overpayment refund, a relocation stipend, a canceled-deal deposit return, or a payment to a “vendor.” You send real money; the original instrument was never real.

The fraud survives because the consumer-facing experience of banking hides the clearing process underneath it. A check deposited at a United States bank is governed by the Federal Reserve’s Regulation CC, which implements the federal Expedited Funds Availability Act and sets the schedule by which your bank must make deposited funds available – often the next business day, within two business days, or within a few business days depending on the item and your account history. But funds available for your use is not the same as funds actually paid by the issuing bank. The issuing bank can take meaningfully longer to decide whether to honor or reverse the item, and if it declines, your bank claws the credit back and you are on the hook for anything already withdrawn or refunded.

Modern variants add sophistication on top of the classic counterfeit cashier’s check. Mobile deposit widened the window in many cases, because physical inspection of the paper is partial or absent and better forgeries slip through image review. Forged wire confirmations let a fraudster claim a payment happened when no money ever entered the system. Counterfeit money orders, certified business checks, and even forged escrow-disbursement documents all circulate. The common thread never changes: you are induced to release value before the underlying instrument has been confirmed-cleared with the institution that supposedly issued it. The same social-engineering playbook drives related schemes such as fake rental listing scams and forged-document and fake-identity fraud.

The Six Overpayment Fraud Variants Landlords See

Six variants account for most landlord-targeted fake-check losses. The defense in every case is identical – never refund an overpayment from a not-confirmed-cleared instrument – but naming the variant helps you catch it at the pretext stage, before any money moves.

• Relocation or bonus overpayment (the classic). A “cashier’s check from the employer” arrives for much more than first month plus deposit. The applicant asks for the difference back by wire or instant transfer. Weeks after deposit the check proves counterfeit; the refund is unrecoverable.
• Mobile-deposit float. The applicant pays by mobile deposit of a counterfeit check, then quickly requests a small refund – or wires off the equivalent – before the issuing bank rejects the item. Mobile deposit lengthens the float window by removing physical inspection of the paper.
• Counterfeit money order. A fake money order passes quick visual inspection, sometimes even at a teller window, but is reversed when it reaches the issuing post office or money-order service. The pretext is often a small “the application fee my employer added” overpayment.
• Forged wire confirmation. The applicant produces a “wire confirmation” – realistic letterhead, a confirmation number, an amount – showing money has already been sent. No wire was ever sent; the document is the entire fabrication.
• Canceled move-in refund. An applicant who paid by check claims circumstances changed and asks for the deposit and rent back by wire before the original check clears. The original was counterfeit; the wired refund leaves you doubly exposed.
• Escrow-disbursement forgery. On larger or commercial leases, a forged “escrow disbursement” document purports to show funds released to you and requests an immediate counter-payment. The escrow account is fictitious or never disbursed.

“Funds Available” vs. “Check Has Cleared”: The Two Distinctions

Two distinctions sit at the operational core of every fake-check fraud. Internalize them and act on them in your leasing workflow, and you close the fraud surface on your side no matter how the scam is dressed up.

Distinction 1: Provisional credit vs. final settlement

When a check is deposited, your bank applies provisional credit on the Regulation CC schedule. That credit is provisional – it can be reversed if the issuing bank declines to pay. Final settlement, the moment the funds become irrevocable in your account, happens only after the issuing bank has actually paid. The gap between the two is the float window the fraud exploits. Tellers and phone reps often will not volunteer the difference, so you must ask explicitly: “Is this final, or is it still provisional?”

Distinction 2: Deposit accepted vs. issuing bank verified

“My bank accepted the deposit” tells you only that your bank did not refuse the item at intake. It says nothing about whether the issuing bank will pay. The only way to confirm a cashier’s check is real is to call the issuing bank directly, using contact information you look up independently from the bank’s own website – never the number printed on the check – and ask it to verify the specific check number, payee, and amount. Legitimate banks perform this on request. Without that call, treat every cashier’s check as potentially counterfeit until proven otherwise.

What Are the Red Flags of a Fake-Check or Overpayment Scam?

Most fake-check losses are preventable because the setup carries the same warning signs. Any one of these should stop the transaction until you have verified the payment independently; two or more together are close to conclusive.

Other signals worth weighting heavily: a payment amount that is oddly specific or suspiciously round for a “mistake”; a cashier’s check or money order offered by someone you have never met; a check drawn on an out-of-area or unfamiliar bank; a sudden change of story once you ask to verify; and an account name or address that does not match the applicant’s identity documents. As an illustration of the math the fraud runs on, a scammer might send a cashier’s check for five thousand dollars when only two thousand dollars is actually due, then ask you to wire back the three-thousand-dollar “surplus” – the surplus is the entire point of the scheme, and it is your real money.

How Do You Spot a Counterfeit Check or Money Order?

Physical inspection is a useful first filter, but it is never a substitute for verification with the issuing institution – counterfeits are engineered to survive a glance. Still, several tells routinely give away a fake, and it costs nothing to look before you deposit.

• Paper feel. Genuine checks are printed on slightly textured, cotton-heavy stock; many counterfeits feel unusually smooth, glossy, or flimsy, like ordinary printer paper.
• Security features. Legitimate checks carry security features such as microprinting, a watermark, or a security thread, and often a padlock icon indicating a security-screen border. Blurry microprint, a missing watermark, or absent security markings are warning signs.
• Perforated edge. Many real business and bank checks have at least one perforated edge where they were separated from a pad or sheet; a check cut clean on all four sides can indicate home printing.
• Routing number and bank region. The routing number should correspond to a real bank whose location makes sense; a check from a bank in a state unrelated to the payer, or a routing number that will not verify, is a red flag.
• Amount and formatting. Look for mismatches between the numeric and written amounts, misaligned or fuzzy printing, an altered payee line, or a check number that seems too low for an established account.

Because sophisticated fakes defeat all of the above, treat a “clean” visual inspection as necessary but not sufficient. The reliable test is still the verification call to the issuing bank, and for postal money orders, the U.S. Postal Service operates a money-order verification line you can use to confirm authenticity. When identity itself is in doubt, a full applicant check – the kind of income and identity verification you run before a lease – often surfaces the mismatch behind the payment.

The Cashier’s Check Verification Workflow

For any cashier’s check or money order tied to a leasing transaction, apply this as a standard intake step – before keys are released, before any refund is processed, and ideally before the deposit is even made.

1. Identify the issuing bank. Read the bank name off the check. If it is unfamiliar or generic, treat the check as suspect from here forward.
2. Look up the verification number independently. Use the bank’s official website or a published industry directory – never the phone number printed on the check itself.
3. Call the bank’s verification line. Give the check number, payee, and amount, and ask plainly: “Was this cashier’s check actually issued by your bank, and is it currently outstanding?”
4. Document the verification. Note the date and time of the call, the representative’s name, and the result, and keep it in the leasing file.
5. Wait for final settlement. Provisional credit is not final. Ask your own bank explicitly when the deposited check has actually settled – not when the funds became available.
6. Never refund an overpayment from a not-yet-settled instrument. If an applicant asks for any portion back, the answer is “after the original instrument settles,” not “after the funds appear.” This one rule defeats every overpayment variant.

Safe Payment Instruments That Defeat the Fraud

The most efficient defense is to refuse the instruments fraudsters rely on. Three categories are functionally fraud-resistant in landlord-tenant transactions, and substituting them for cashier’s checks and money orders removes most of the exposure described here.

• ACH through a property management platform. The platform pulls the transfer from the tenant’s verified bank account to yours, with both sides identified. Returned-payment risk exists but is structured and time-bound, and counterfeit paper never enters the flow.
• A wire transfer the tenant initiates from a verified bank account. Wires are functionally final once received; reversing one is difficult and rare outside fraud against the sender. As the receiver, your reversal exposure on a properly received wire is very low – but verify the money actually arrived, rather than trusting a “confirmation” document.
• A certified payment through a recognized rent-payment service. Established rent-payment platforms structure the flow so that funds released to you have already cleared the underlying source; the service bears the clearing risk and you receive final funds.
• An in-person certified instrument with same-day verification. If a cashier’s check must be accepted, do it only when the issuing bank can be reached to verify it while the tenant is still present, and only after the verification confirms it. Document the call and outcome.

For multi-property landlords, standardizing on a single payment platform across the portfolio simplifies operations and hardens fraud resistance at the same time. An applicant who insists on paying by cashier’s check or money order despite a clearly stated platform policy is more often signaling a fraud attempt than a banking inconvenience – the platform requirement is a low-friction filter that catches a meaningful share of fraud at intake, right alongside a thorough tenant screening process.

What Do You Do If You’ve Already Been Hit?

If you have deposited a check that appears counterfeit, or issued a refund and then learned the original instrument reversed, act fast in the first day but plan for the reality that full recovery is uncommon – much of the work is reporting, documenting, and limiting secondary damage.

Call your bank’s fraud department immediately. Give every detail: the check, the deposit timing, any refund issued, all communications from the depositor, and the bank’s reversal notice. Some banks can place a fraud hold or freeze the affected account, and your bank’s fraud team will tell you whether any wire-recall or compliance steps apply. If you refunded by wire, request a fraud-related wire recall right away; recovery is unlikely once funds are received and withdrawn, but timely action sometimes retrieves money still sitting in the recipient account.

Report the fraud to the right agencies. File with the FBI’s Internet Crime Complaint Center at ic3.gov and with the Federal Trade Commission at ReportFraud.ftc.gov. For counterfeit or mailed money orders, report to the U.S. Postal Inspection Service and use the U.S. Postal Service money-order verification line. Notify your state consumer-protection office or attorney general, and file a local police report – a report number helps with bank and insurance claims. The Consumer Financial Protection Bureau also accepts complaints about a bank’s handling of the matter.

Preserve everything. Keep the original check if your bank returns it, plus every message, envelope, and confirmation document. If application materials exposed identity data such as a driver’s license or Social Security number, file an identity-theft report with the FTC and consider a credit freeze. If a fraudster obtained possession of a unit on the strength of a bad payment – for example after a forged wire confirmation – removing them generally requires the formal eviction or unlawful-detainer process in your state, which is one more reason to confirm real, settled funds before handing over keys.

Real-World Fraud Scenarios

The “relocation package” overpayment

A polished applicant signs a lease and arrives at lease execution with a cashier’s check made out for substantially more than first month plus deposit. They explain that their employer issued the check directly for a relocation package that included moving expenses they meant to handle separately, and they ask you to deposit it, keep the rent and deposit, and wire the difference back later that week. You deposit the check, see funds available within three business days, and wire the refund. Two weeks later your bank reverses the deposit because the cashier’s check was counterfeit. The wired refund is gone and the “deposit” never existed. The rule that would have prevented the loss: never refund any portion of an instrument that has not been confirmed-cleared with the issuing bank.

The mobile-deposit float

An out-of-state applicant pays first month and deposit by mobile deposit of a cashier’s check. The next day they ask you to refund a small portion by Zelle, citing a “calculation error.” The amount is small, the funds already show in your account, and you send it as a goodwill gesture before lease signing. Three weeks later the bank reverses the original mobile deposit. The original payment is gone, the Zelle refund is gone, and the applicant has vanished. Because you never physically handled the check, nothing looked wrong – and modern counterfeits pass mobile-deposit image review routinely.

The forged wire confirmation

An applicant for a higher-end lease sends a “wire confirmation” document showing first month and deposit already wired to you, complete with realistic bank letterhead, a confirmation number, an amount, and timing. Trusting the confirmation, you sign the lease and release keys. Two business days later no funds have arrived, and your bank confirms no wire was ever received. The confirmation was fabricated, the lease is signed, and the applicant is in physical possession – requiring formal eviction to remove. The structural defense: never release keys on a wire-confirmation document; verify with your own bank that the money actually landed in your account.

Fake Check and Overpayment Scams: FAQ

What is a fake check or overpayment scam in a rental transaction?

It is a fraud in which a supposed applicant or tenant pays with a counterfeit check, cashier’s check, or money order made out for more than they owe, then asks you to refund the difference by wire, Zelle, or another irreversible method. Your bank makes the funds available quickly, so the refund goes out before the bank discovers the instrument is fake and reverses it – leaving you out both the refund and the phantom deposit.

What is the difference between funds available and a check that has cleared?

Funds available is provisional credit your bank applies under the federal availability schedule set by Regulation CC. A check has cleared only when the issuing bank has actually paid it and the funds become irrevocable, which can take days to weeks longer. During that window your bank can reverse the credit if the issuing bank declines, and you are responsible for anything you withdrew or refunded against it.

Can a cashier’s check or money order be counterfeit?

Yes, routinely. Modern counterfeits are good enough to pass a quick visual inspection, including by bank tellers in some cases, and to pass mobile-deposit image review. The only reliable check is to call the issuing bank or money-order service using a number you look up independently, never the number printed on the instrument, and confirm the specific serial number, payee, and amount.

What are the red flags of a rental overpayment scam?

An applicant who sends more money than owed and asks for the difference back; pressure to refund quickly; a refund demanded by wire, Zelle, gift card, or cryptocurrency; someone who will not view the unit or meet in person, often citing a relocation or overseas job; a check whose account name differs from the applicant’s; and any payment that arrives before you have discussed the lease.

Should I ever accept or refund an overpayment from a tenant?

Treat any overpayment as a fraud signal. The safest practice is to return or void the instrument and ask for the exact amount due through a traceable method. If you must accept an overpayment, hold the entire amount until the original instrument has fully settled – typically several weeks beyond the date funds appear available – and never refund any portion before then.

What is the safest way to accept rent and deposits from a tenant?

ACH through a property management platform, a wire the tenant initiates from a verified bank account, or a certified payment through a recognized rent-payment service. Each shifts the underlying clearing risk away from you and delivers final-settlement funds with very low reversal exposure. Standardizing on one platform also filters out applicants who insist on cashier’s checks or money orders.

How long should I wait before treating a deposited check as cleared?

Long enough for the issuing bank to either pay or reverse the item – often two to four weeks beyond the date funds became available, and longer for some instruments or out-of-area banks. Do not rely on the calendar alone; call your bank and ask whether the specific deposited check has actually settled, not merely when funds were made available.

How do I verify a cashier’s check is real before I accept it?

Read the issuing bank’s name off the check, look up that bank’s verification line independently through its official website or a published directory, and call it with the check number, payee, and amount to confirm the check was issued and is outstanding. Never use the number printed on the check, and hold the check – and the keys – until verification is confirmed and the funds have settled.

Where do I report a fake check or overpayment scam?

Report it to your bank’s fraud department first, then to the FBI’s Internet Crime Complaint Center at ic3.gov and the Federal Trade Commission at ReportFraud.ftc.gov. For a counterfeit or mailed money order, contact the U.S. Postal Inspection Service and use the U.S. Postal Service money-order verification line. Also notify your state consumer-protection office or attorney general, file a local police report, and preserve every document, including the check itself.

Related Rental Fraud Guides

• Forged document and fake-identity fraud – fabricated pay stubs, IDs, and references.
• AI deepfake application fraud – synthetic identities and doctored documents.
• Fake rental listing scams – the tenant-facing side of rental fraud.
• Section 8 voucher fraud – forged vouchers and subsidy scams.
• Utility phishing scams – fake utility and payment demands.
• Squatter and holdover scams – possession obtained by deception.
• How to screen tenants – the full step-by-step screening workflow.

Catch the Fraud Profile Before Any Payment Changes Hands

The strongest defense against overpayment fraud is rigorous screening paired with safe payment instruments. We have verified United States renters since 2004 – credit, criminal, eviction, and identity checks with no monthly fees – so you can flag the fraud profile at intake, before a single check is exchanged.

Start Tenant Screening Compare Report Options

About the Author

Published by Tenant Screening Background Check · Editorial Team

Established 2004. Our editorial team has spent two decades helping landlords and property managers screen applicants and avoid rental fraud across all 50 states. We translate real fraud mechanics and federal guidance into processes you can actually follow.

Updated 2026

Legal Disclaimer

This guide is for general informational purposes only and is not legal advice, nor banking or financial advice. Federal banking rules such as Regulation CC and the Expedited Funds Availability Act, check-clearing mechanics, and reversal timing are technical and can change; any timing windows here are illustrative, so confirm current rules with your own bank. If you have been targeted by check or overpayment fraud, consult a licensed attorney in your jurisdiction and report the matter to your bank, the FBI’s Internet Crime Complaint Center, the Federal Trade Commission, and, for mail-related fraud, the U.S. Postal Inspection Service. Reading this page does not create an attorney-client relationship. Browse free landlord forms and resources.