A check can leave your office correctly issued and still become a problem before it reaches the bank. Mail theft, counterfeit production, payee alteration, and payment-redirection scams have made business check fraud trends a day-to-day accounts payable concern, not just a bank-security issue. For small and midsize businesses, the practical response is tighter control over the entire check process: ordering, storage, approval, mailing, reconciliation, and exception handling.
Checks remain useful for vendor payments, rent, refunds, payroll adjustments, and transactions where a paper trail matters. The goal is not necessarily to stop using them. It is to use the right controls for the amount of check volume, the value of payments, and the risk tolerance of your organization.
Why Business Check Fraud Trends Still Matter
Electronic payments have expanded, but check fraud has not disappeared. Criminals often favor checks because a single item contains useful information: the business name, bank routing number, account number, authorized signature style, check number, and sometimes address or phone details. A stolen check can be altered, copied, or used as a template for a counterfeit item.
The most costly cases are not always the most obvious. A fraudster may change the payee name and amount on one mailed check. In other cases, criminals create a batch of counterfeit checks that appear to come from a legitimate business account. A finance team may not spot the loss until routine reconciliation, when the funds have already cleared.
Risk also varies by operating model. A contractor that mails supplier payments weekly faces different exposure than a professional firm that writes a few high-value checks each month. Businesses with multiple locations, shared mailrooms, remote approvers, or frequent staff turnover need more defined procedures because more hands and handoffs create more opportunities for errors or misuse.
The Fraud Patterns Finance Teams Are Seeing
Mail theft and altered checks
Checks sent through outgoing mail can be stolen before delivery. Criminals may wash or alter check details, replacing the intended payee with another name and increasing the amount. They may also use information from the original check to produce counterfeits.
This is one reason payment mailing practices matter. Leaving outgoing checks in an unsecured mailbox after business hours creates unnecessary exposure. Deposit tickets and incoming checks need the same attention. A check received for deposit can be diverted, deposited improperly, or used to obtain account information.
Counterfeit business checks
Counterfeit checks are created to resemble legitimate company checks but are issued without authorization. Fraudsters may use details taken from a genuine check, a compromised vendor record, or an image obtained through a scam. They can then produce items with different check numbers, payees, and amounts.
Counterfeit activity makes daily account review more valuable. Waiting until month-end to reconcile can turn a manageable exception into a larger cash-flow issue. Designated employees should know how to identify a check number outside the current sequence, an unfamiliar payee, or an amount that does not match the accounting system.
Business email compromise and check diversion
Not every check-fraud incident starts with a paper check. A fraudulent email may instruct accounts payable to change a vendor mailing address, cancel an approved payment, or issue a replacement check. The message can appear to come from a known vendor, executive, or employee.
The control is simple, but it needs to be consistently followed: verify changes to vendor payment instructions using a known phone number or established contact method. Do not rely on the contact details in the email requesting the change. The same verification should apply to urgent requests for a new check, a higher payment amount, or a change in delivery method.
Duplicate presentment and delayed discovery
Some businesses also face duplicate-payment risks when a check is deposited through a mobile or remote process and later presented again. Bank systems and controls have improved, but internal recordkeeping still matters. Once a check is voided, replaced, or reported lost, that status should be recorded promptly and communicated to the people who approve payments and reconcile accounts.
A clean audit trail helps distinguish a real payment issue from a fraud event. Keep check registers current, retain copies of high-value checks where appropriate, and document who approved stop-payment requests or replacements.
Build Controls Around the Check Lifecycle
Fraud prevention works best when it is built into ordinary work rather than treated as a separate annual project. Start with the point where blank checks enter the business. Receive check stock through a controlled process, confirm the sequence, and store it in a locked cabinet or restricted-access area. Blank checks should never sit in an open supply room, on a shared printer tray, or in a vehicle.
Limit access to the people who need it. The employee who prepares checks should not be the only person who can approve payments, sign checks, release them for mailing, and reconcile the bank account. Full separation of duties is not always possible in a small office, but even a second review of payments above a set dollar amount can reduce risk.
For check-printing workflows, control the software, printer access, and blank stock together. Keep unused laser checks in a secure location. Restrict template changes and user permissions. If your business uses preprinted checks, periodically compare the account information and check-number sequence against your records before a new order is placed.
Outgoing mail also deserves a defined routine. Use a secure handoff for mailed payments, and avoid placing checks in an exposed location overnight. When payment amounts are significant or timing is sensitive, consider whether an electronic payment, tracked delivery option, or bank-issued payment method is more suitable. The right choice depends on cost, vendor preference, processing time, and the level of control your team needs.
Use Bank Controls That Match Your Payment Volume
Bank-provided services can catch suspicious items before payment, but they require accurate setup and consistent maintenance. Positive Pay is one of the most useful controls for organizations that issue checks regularly. Your business sends the bank a file of authorized check details, typically including check number, date, and amount. The bank compares checks presented for payment against that file and flags exceptions for a decision.
Payee Positive Pay can add another layer by comparing the payee name as well. It may be worthwhile for businesses issuing higher-value checks or managing frequent vendor payments, though availability, pricing, and setup vary by bank.
The key trade-off is operational discipline. A Positive Pay system only works when the issue file is transmitted on time and exceptions are reviewed before the bank deadline. Assign a primary reviewer and backup reviewer. If an exception is ignored because the only authorized employee is out of the office, a good control can fail at the moment it is needed.
Additional account alerts can help finance teams respond faster. Consider alerts for checks above a threshold, unusual debit activity, address changes, wire or ACH setup changes, and low balances. Alerts do not replace reconciliation, but they shorten the time between a suspicious event and a response.
Choose Check Stock With Security and Compatibility in Mind
Check design is not a substitute for process controls, but it can make alteration and counterfeiting more difficult. When ordering business checks, look for security features suited to your bank and printing process. Common options include chemically reactive paper, visible or hidden security indicators, microprint elements, warning bands, and features intended to show alteration attempts.
Compatibility matters just as much. A check that does not align correctly with your accounting software or laser printer can create misprints, skipped numbers, and extra manual handling. That creates confusion during reconciliation and can make it harder to identify an unauthorized item. Match the check format to your software, printer type, voucher needs, and envelope configuration.
For businesses that use window envelopes, confirm that the check and remittance details appear correctly through the window. A properly matched laser check and compatible check envelope reduce folding, relabeling, and handling steps. Fewer manual steps generally mean fewer opportunities for a check to be misplaced or sent to the wrong recipient.
Form Technology supplies business checks, deposit tickets, compatible envelopes, and related business forms for organizations that need dependable paper workflows without buying routine operational supplies from multiple sources.
What to Do When You Spot a Suspicious Check
Time matters. Contact your bank immediately and ask what documentation is needed to report the item, return it if possible, or place a stop payment on related outstanding checks. Preserve the check image, transaction details, email messages, vendor communications, and internal approval records. These details help the bank investigate and help your team identify where the control failed.
Next, review other recent activity on the account. A single fraudulent check can indicate compromised account information or a broader counterfeit attempt. Consider whether to close the affected account, change account details, notify impacted vendors, and update your Positive Pay instructions. Your bank can advise on its specific reporting deadlines and account-protection options.
Finally, turn the incident into a process improvement. If a check was altered in the mail, revise the mailing handoff. If a vendor address was changed after an email request, strengthen callback verification. If an unknown item was caught late, move reconciliation and alert review closer to daily operations. Small, specific changes are easier to maintain than a policy nobody uses.
A well-controlled check process does not need to slow down accounts payable. Secure stock, clear approval roles, compatible forms, prompt reconciliation, and bank-level review give your team a practical way to keep paper payments useful while making fraud much harder to carry out.
