Blog
Fake check scams: car wraps and settlement overpayments
Why a fake check can show as available cash before it fails, how the car-wrap and claim-overpayment scripts work, and what to do if you already deposited one.
A fake check scam works because your bank must make deposited money available quickly, but the bank cannot know the check is bad until it travels back to the bank that supposedly issued it. The scammer needs that gap. You deposit the check, the money appears in your account, you send part of it onward as instructed, and days or weeks later the check fails. The bank takes the full deposit back from you, and what you sent is gone. A real advertiser, insurer or buyer never needs you to forward part of a payment, which is why that request alone is enough to treat the check as fake.
Why a bad check can show up as spendable money
Two different events get confused, and the scam lives in the space between them. Funds availability is the date by which your bank must let you withdraw money you deposited. Clearing is the point at which the bank that actually holds the issuer's account has paid the check and the transaction is final. Federal rules set availability deadlines. They do not promise the check is good.
The deadlines come from Regulation CC, the federal rule that implements the Expedited Funds Availability Act. In the version of 12 CFR 229.12 I read in November 2026, a bank must generally make funds from a local check available no later than the second business day after deposit, and from a nonlocal check no later than the fifth business day. Under 12 CFR 229.10, cashier's, certified and teller's checks deposited in person into an account held by the payee generally must be available the next business day. The first $275 of other check deposits on a given day is also available the next business day. Those dollar amounts are adjusted from time to time, so treat them as a snapshot.
Notice what that means for a counterfeit cashier's check. The rule that makes a real cashier's check fast to access also makes a fake one fast to access. Your bank is following a deadline, not vouching for the paper.
The rule has exceptions that let a bank hold money longer. Under 12 CFR 229.13, a bank may extend the hold for a new account (during its first 30 calendar days, with only the first $6,725 of a day's deposits covered by the faster schedule), for deposits above $6,725 in a day, for accounts that have been repeatedly overdrawn, and when it has "reasonable cause to believe that the check is uncollectible." That last exception requires facts, not a hunch about a class of customers, and the bank must give you a written notice stating the reason and the date the funds will be available. Many fake checks still slip through because nothing on the face of the check gives the teller reasonable cause.
Meanwhile the check itself takes a slower path. The depositing bank sends it back toward the bank named on the check, and if that account does not exist, has been closed, or never had the money, the check comes back unpaid. The Federal Trade Commission's consumer guidance on fake check scams says it can take weeks for a bank to discover that a check is fake, and that having the money in your account "doesn't mean it's a good check." Some fake checks are copies of real checks drawn on a victim's stolen identity, and some bear the names of real financial institutions, so a professional-looking check proves nothing.
The two scripts drivers run into
The mechanics are identical in both scripts. A stranger sends a check for more than the job or the claim is worth, then asks you to send the difference to someone else. Only the cover story changes.
The car-wrap offer
The car-wrap script targets people with a vehicle and a need for cash. The FTC's December 2019 consumer alert describes offers by email or text to "get paid" $250 to $350 a week to drive a car, truck or motorcycle wrapped in advertising. After you reply, a check arrives. You are told to deposit it and use some of the money to pay a specialist who will apply the wrap, by money order, a retailer's money services counter or a cash deposit. The check is fake, the bank reverses the deposit, and no wrap or installer ever appears. The FTC's general fake-check page lists the same pattern, with "decal installers" who do not exist.
Real vehicle-advertising programs exist, but the legitimate version looks different in its mechanics: the advertiser or its agency arranges and pays the installer directly, and nothing requires you to front money from a deposit. If a program asks you to move money to a third party before you have a wrap on your car, you are being used as the pipe for a fake check.
The settlement overpayment
The second script reaches people who have recently been in a crash or whose information appears in a public listing. A check arrives that is larger than the amount you expected, or you are told that a "clerical error" produced an overpayment, and you are asked to return the difference by wire, gift card, payment app or cryptocurrency. The sender may pose as an insurer, an adjuster, a body shop, a buyer of your old car, or the other driver's company.
The FBI's Internet Crime Complaint Center defines this category in its 2025 annual report as a case where an individual is sent a payment and "instructed to keep a portion of the payment and send the remainder to another individual or business." In that report the IC3 recorded 2,194 overpayment complaints in 2025 with reported losses of $22,898,075. Those figures count only what victims reported to the IC3 and only this category. They understate the problem, and they are not a count of insurance-related cases specifically, because the report does not break overpayment out by industry.
What the timeline looks like: a worked example
Say you are offered a wrap deal and receive a check for $2,400. The instructions are to keep $500 as your first pay and send $1,900 to the installer by money order and wire. The numbers below are invented to show the sequence.
| Day | What you see | What is really happening |
|---|---|---|
| 0 | You deposit the $2,400 check. | The bank logs a provisional credit. The check has not reached the issuing bank. |
| 1-2 | The balance shows $2,400 available. | The bank is meeting an availability deadline. Nobody has confirmed the check. |
| 2 | You send $1,900 to the "installer." | You are spending money you do not yet have. Wire transfers and money orders are very hard to pull back. |
| Days 3 and after | Nothing happens; the "company" urges you to hurry. | The check is working through the system or sitting at a bank that is investigating it. |
| Some days later (varies) | The bank returns the check unpaid and reverses the deposit. | Your account falls by $2,400. |
Run the balance. Say you had $300 of your own money in the account. After the deposit it shows $2,700. After you send $1,900 it shows $800. When the bank reverses the $2,400, the account sits at negative $1,600. Your real loss is the $1,900 you sent: your original $300 is gone and you now owe the bank $1,600. The bank can pursue you for the negative balance, add overdraft or returned-item fees, and close the account. The FTC's staff, answering readers beneath its car-wrap alert, said that people who deposit a fake check must repay the bank when it bounces and may face a fee or account closure. Your deposit agreement is the document that spells out exactly what your bank can do, and you can ask for a copy.
The scammer is the only party who comes out ahead. The $500 "pay" you thought you kept was never yours.
Why a real insurer, advertiser or buyer would not ask for money back
Look at the request from the sender's side. If a real company paid you too much, the cheapest and safest fix for it is also the simplest: it stops payment on the original check or voids it, then issues a correct one. It does not need you to send cash to a stranger. It also does not need you to deposit the check first, because it knows exactly how much it owes you.
In an auto claim specifically, a few features of ordinary practice make an out-of-the-blue overpayment request implausible:
- The amount is in writing before the check exists. A settlement, a total-loss valuation or a repair estimate comes with a document stating the figure. A check that does not match any document you were sent deserves a call before a deposit.
- The payee and the paper trail match the claim. Claim payments carry your claim number, the insurer's name and often a lienholder or repair shop as a co-payee; see who gets the claim check: you, the shop or your lender. A check from an unfamiliar company, with no claim reference, is a warning.
- Corrections run through the adjuster of record. If a payment really was wrong, the claims adjuster handling the file can see it, tell you the correct amount and explain how it will be corrected. That conversation happens on the phone number and portal you already used for the claim, not through a new contact who appeared after the check.
- You do not owe the money back to a third party. Even in a real overpayment, repayment goes to the insurer through a channel it can document, such as a replacement check or a credit against the claim. It does not go to a person at a different company by gift card.
The common thread is that legitimate payers have records, and the scammer's version has to avoid creating any. That is why scripts insist on speed. A message urging you to deposit right away and move the money before anything can be verified is a signal in itself.
A short script for checking a payment before you deposit it
Call the insurer, not the sender. Use the number printed on your policy, your claim letter from before the payment arrived, or the insurer's official website that you reach by typing the address yourself.
- Give the claim number and ask whether a payment of that exact amount was issued, on what date, and to whom it is payable.
- Ask who the payee names and any co-payees should be, and whether a lienholder is listed.
- If the check differs from what you were told, ask the insurer to put in writing what it is paying and why.
- Ask whether the insurer ever asks claimants to return part of a payment, and how an overpayment is corrected. Listen for the answer that it voids and reissues.
- For a check that arrived with a call, text or email you did not expect, ask whether anyone at the company contacted you. If the answer is no, you have your answer.
Keep the notes. A written record of the time, the name of the person you spoke with and what they said helps if you later need to dispute anything; see keeping a claim diary to protect yourself.
If you already deposited the check
Acting quickly does not undo a bounced check, but it can limit how much you lose, and it protects your account. Steps, in order:
- Stop sending money. Further payments, even "to fix the problem," are part of the script. Do not spend any of the deposit.
- Call your bank's fraud line and tell them you believe the check is counterfeit. Ask them to confirm with the issuing bank whether it is genuine, ask what happens to the deposit and how it will treat any overdraft or fees, and ask whether they will place a note on the account. Do not assume that showing as available means safe.
- Try to stop what you sent. The FTC's guidance is channel specific. For a gift card, tell the card issuer and the store right away that it was used in a scam. For a wire transfer, call the wire company at once, file a complaint and ask for a reversal. The FTC lists MoneyGram at 1-800-666-3947 and Western Union at 1-800-325-6000, and notes that reversal is unlikely but worth requesting. For a money order, contact the issuer to try to stop payment, and if it went through the U.S. mail, the U.S. Postal Inspection Service at 877-876-2455. For cryptocurrency, tell the company that sent it and ask for a reversal.
- Report it. Use reportfraud.ftc.gov, the FBI's ic3.gov, the Postal Inspection Service if mail was involved, and your state attorney general. If the sender claimed to be an insurer or adjuster, also tell the real insurer and your state's state department of insurance; the guide on how to report insurance fraud covers the channels.
- Watch your accounts and credit. Fake check senders often have your name, address and bank details. Review statements, consider a fraud alert or freeze, and change passwords if you shared any logins.
Do not try to "string along" the scammer to trap them, and do not send anything to the person who contacted you. Their next step is usually a request for a second payment to fix the first.
Warning signs, in one list
- A check for more than the agreed amount, with instructions to send back or forward the difference.
- Payment by cashier's check, certified check or money order from someone you have never met.
- Pressure to deposit and move money fast, or a "pay" that arrives before any work.
- A request for payment by wire, gift card, cryptocurrency, payment app or a retailer's money transfer counter.
- A contact who refuses to talk by an independently verified phone number.
- A "company" with a free email address, no business registration you can confirm, or a name that is close to a real insurer's.
Common questions
Can my bank refuse to release the money until the check clears?
Sometimes. Regulation CC lets a bank extend a hold in defined cases, including a new account, a large deposit, repeated overdrafts, or reasonable cause to doubt the check can be collected. When the bank uses an exception, it must give written notice with the reason and the date the funds will be available. Without an exception, the bank must follow the standard schedule, which is why a fake check can be spendable before it fails.
Is a cashier's check safe to deposit and spend?
A cashier's check is more reliable than a personal check when it is genuine, but counterfeit cashier's checks are a staple of this scam, and the next-business-day availability rule applies to them just as it does to real ones. If you cannot verify one, hold the funds. Verification means calling the bank named on the check at a number you found yourself, not the number printed on the check.
The bank said the check "cleared." Am I in the clear?
Not necessarily. The FTC states that available funds do not make a check good, and that it can take weeks for a bank to discover that a check is fake. A teller or an app saying a deposit "posted" or "cleared" usually reflects availability. Ask your bank directly whether the check is final, and ask about the risk of a later return.
Do I have to pay the bank back if I was tricked?
Expect that you may. The FTC's consumer guidance says you may have to repay the bank when a fake check is discovered, and its staff has said the bank may charge a fee or close the account. Whether a particular bank can pursue you, and how, depends on your deposit agreement and state law. If the balance is large, a licensed attorney or your state banking regulator is the place for specifics.
What if the insurer actually did overpay me?
Then the insurer, once it confirms the error, will tell you how it wants to correct it, usually by voiding and reissuing the check or adjusting a later payment. Make sure that you are speaking to the insurer through a number you verified, and ask for the correction in writing. If the check is real, it will still be real after you have taken a day to verify it.
Key takeaways
- Funds availability is a legal deadline; clearing is the check being final. A fake check can sit in your account as spendable money for days or weeks before it is returned.
- Anyone who sends a check and asks you to return or forward part of it by wire, gift card, payment app or crypto is running the script, whether the story is a car wrap or a claim overpayment.
- You, not the scammer, bear the loss: the bank reverses the deposit and the money you sent is typically unrecoverable.
- Verify any insurance payment with the insurer through a phone number you found yourself, using your claim number, before you deposit it or act on it.
- If you deposited a fake check, call your bank first, try to stop what you sent, and report to the FTC, the IC3 and your state authorities.