The Foresight Lab
Issue 02Check fraud & mail theft

The check that cleared, then didn't

Check fraud came roaring back — powered by stolen mail, washed checks, and mobile deposit. The window to catch it is measured in hours.

Jun 22, 2026 3 min read

What we're seeing

Paper checks were supposed to be dying. Instead, check fraud has surged — fueled by mail theft, 'check washing' (lifting the ink off a stolen check and rewriting the payee and amount), and the speed of mobile remote deposit.

The modern version doesn't even need a physical handoff. A stolen check is washed, re-imaged, and deposited from a phone into a freshly opened account — then the funds are pulled out via instant transfer before the item ever clears.

Why your current stack misses it

  • Funds-availability rules and float windows were designed for a slower world. By the time a washed check is returned, the money has often already left.
  • A single deposit, viewed in isolation, looks ordinary. The fraud lives in the relationship between the deposit, the account's age, and how fast someone moves the money back out.

The signal pattern

  • A recently opened account receiving a large check deposit as one of its first transactions.
  • Deposit images with payee/amount inconsistencies, mismatched fonts, or signs of alteration.
  • An immediate attempt to withdraw or instant-transfer against uncollected funds.
  • Odd timing (overnight deposits) and device/geography that don't match the holder.

What you'd do Monday morning

  • Tighten instant-availability on large deposits into accounts younger than ~60 days.
  • Score the deposit and the cash-out attempt together, not as separate events.
  • Flag deposit images for alteration review when payee or amount fields look reworked.
Now you try

Spot the Fraud

Read the case. Make the call. See how you score against The PreCogs.

Spot the Fraud
FL-02

A mobile check deposit lands overnight, followed within hours by an instant-transfer request against the funds. The check image looks clean at a glance. Clear it, or hold it?

Deposit$9,800 check, mobile remote deposit
Time02:14 local
Account ageopened 11 days ago
Prior activityone $50 opening deposit
Check imagepayee font differs from amount line, faint erase shadow
Makerbusiness account, different bank, 600 mi away
Next actioninstant transfer of $4,000 requested 40 min after deposit
Devicenew device, geolocation not equal to account address
Your call?
No noise. One sharp briefing a week.

Get the Foresight Lab in your inbox.

One fraud pattern, decoded, every week — plus the Spot the Fraud challenge. Built for fraud, BSA, and risk teams. Unsubscribe any time; we read every reply.

One email a week. No spam. Or email us at info@digsfact.com.