Yes, someone can use a check to access your bank account, but the method and your protection depend on what information they have

A check is a written instruction to your bank to move money from your account. If someone has a blank check from your checkbook, your routing number and account number, or a cancelled check you threw away, they can write a check in your name and cash it at their bank or deposit it into their own account. Your bank will process it if the signature looks close enough or if the amount is small enough to slip past automated screening. You won't know until you see the transaction on your statement—sometimes days or weeks later.

The good news: you have legal protection against fraudulent checks, and your bank is required to reimburse you for unauthorized transactions. The bad news: the reimbursement process takes time, and you have to catch the fraud and report it. During that window, the money is gone from your account, and if other checks or payments bounce as a result, you may face overdraft fees.

Key Takeaways

  • A check only requires your routing number, account number, and a signature—all of which can be found on a cancelled check or stolen checkbook.
  • Your bank must reimburse you for fraudulent checks under federal law, but you have to report the fraud within a specific timeframe to protect yourself.
  • Checks take days to clear, which means fraudulent checks may not show up on your statement for a week or more after they are deposited.
  • Stopping payment on a check costs money and only works if you catch the fraud before the check clears.
  • The best protection is monitoring your account regularly, keeping blank checks secure, and shredding old statements and cancelled checks.

What information a scammer needs to write a check on your account

Your routing number and account number are printed at the bottom of every check you write. If someone has access to a single check—whether it is a blank one from your checkbook, a cancelled check you mailed to a creditor, or one you threw in the trash—they have both numbers. They also need your name as it appears on the account, which is printed on the check itself.

The signature is the weakest link. Bank tellers and automated check-processing systems do not compare signatures closely, especially on small amounts. A rough approximation of your signature, or even a completely different signature, may pass through. Large checks or checks to unfamiliar payees get more scrutiny, but a $200 check to "Cash" often does not.

Someone who has access to your mail, your trash, or your physical checkbook can gather all of this in minutes. A data breach at a company that stores your banking information could expose your routing and account numbers to criminals who buy and sell them on the dark web.

How long it takes for a fraudulent check to show up on your statement

Checks do not clear instantly. When someone deposits a check at their bank, that bank sends it through the clearing system, which can take one to three business days. Your bank receives notice of the check and deducts the money from your account. You typically see the transaction on your online statement within one to two business days of deposit, though some banks post pending transactions faster.

The problem: if the check is deposited on a Friday, you may not see it until Monday or Tuesday. If you do not check your account daily, you might not notice until a week has passed. By then, the scammer has already withdrawn the money or transferred it elsewhere, and your account is overdrawn if the fraudulent check was large.

Some banks offer early fraud detection services that flag unusual activity, but these are not may provide to catch every fraudulent check. Your best defense is logging into your account at least twice a week and reviewing all transactions, including pending ones.

Your legal protection against fraudulent checks

Under the Uniform Commercial Code and federal banking regulations, your bank is responsible for verifying that checks are legitimate. If a check is forged—meaning someone signed your name without permission—your bank must reimburse you for the full amount, even if you did not report it immediately. However, there are limits and conditions.

You must report the fraud within a reasonable time, which federal law defines as 30 days from when your statement is mailed or made available to you. If you wait longer than 30 days, the bank may deny your claim, especially if the delay allowed the scammer to commit additional fraud. Some banks have shorter windows in their account agreements, so check your terms.

If your negligence contributed to the fraud—for example, you left blank checks lying around or wrote your account number on the outside of an envelope—the bank may reduce or deny your reimbursement. However, banks rarely pursue this defense unless the negligence was extreme.

What to do if you spot a fraudulent check on your account

Call your bank immediately, even if it is after hours. Most banks have a fraud hotline that operates 24/7. Tell them the check number, amount, date it posted, and the name of the payee (if one is written). Do not wait for a statement to arrive in the mail.

Your bank will place a fraud hold on your account while they investigate. This means they will not allow you to withdraw the disputed amount, but they will also prevent the scammer from accessing it further. The investigation typically takes 10 business days, though complex cases can take longer. During this time, the bank will contact the bank that cashed or deposited the check and request the cancelled check and deposit slip to compare signatures and handwriting.

Follow up your phone call with a written statement. Send a letter to your bank's fraud department describing the fraudulent check, the date you reported it, and the name of the person you spoke with. Keep a copy for your records. This creates a paper trail and protects you if the bank later claims you never reported the fraud.

Stopping payment on a check you wrote versus a fraudulent check

If you wrote a check yourself and want to cancel it before it clears, you can place a stop payment order with your bank. This costs between $25 and $35 per check and only works if the check has not already cleared. You must provide the check number, amount, payee name, and the date you wrote it. The bank will flag the check in their system, and if it comes through, they will reject it and return it to the depositing bank.

Stop payment does not work on fraudulent checks because you did not write them. Instead, you report the fraud directly, and the bank investigates and reverses the transaction. You do not pay a fee for reporting fraud.

The distinction matters because stop payment is a preventive tool for checks you control, while fraud reporting is a recovery tool for checks you do not. If you are unsure whether a check on your statement is one you wrote, check your checkbook register or your records before calling the bank.

How to reduce the risk of check fraud

Order checks only from your bank or a reputable check printer. Avoid ordering from third-party websites that offer cheap checks, as these are sometimes intercepted or altered in transit. When your checks arrive, count them and inspect them for printing errors or signs of tampering.

Store blank checks in a secure location, not on your desk or in an unlocked drawer. If you lose a checkbook or suspect checks are missing, contact your bank immediately and ask them to flag your account. Do not assume the missing checks will not be used.

Shred all cancelled checks, bank statements, and documents that contain your routing number and account number. Do not throw them in the trash or recycling bin. A shredder costs $20 to $50 and eliminates this risk entirely.

Use checks only for bills and payments to people or organizations you trust. For online payments, use your bank's bill pay system or a payment app instead. For peer-to-peer transfers, use Venmo, Zelle, or your bank's transfer service. These methods leave an electronic trail and offer better fraud protection than checks.

Monitor your account at least twice a week. Set up account alerts through your bank's app or website so you receive a notification whenever a check is deposited or a large transaction occurs. Many banks allow you to set the dollar threshold for alerts, so you can be notified of any check over $100, for example.

What happens if your account is overdrawn because of a fraudulent check

If a fraudulent check causes your account to go negative, you may be charged overdraft fees by your bank. These fees typically range from $25 to $35 per overdraft, and if multiple checks bounce as a result of the fraudulent check, you could face multiple fees.

When you report the fraud and the bank reverses the transaction, the overdraft fees should also be reversed—but you have to ask. Call your bank's customer service line and explain that overdraft fees resulted from the fraudulent check. Most banks will waive these fees as a courtesy, especially if this is your first fraud claim. If the bank refuses, ask to speak with a supervisor or file a complaint with your state's banking regulator.

To protect yourself going forward, consider opting into your bank's overdraft protection program, which links your checking account to a savings account or credit line. If a check bounces, the bank will transfer funds from the linked account instead of charging an overdraft fee. This costs nothing if you never use it, and it can save you hundreds in fees if fraud occurs.

Frequently Asked Questions

Can someone use just my account number and routing number to write a check?

Yes. These two numbers are all a scammer needs to write a check on your account. They will also need your name as it appears on the account, which is usually printed on the check itself. The signature is the weakest verification, so a rough approximation often passes through the banking system.

How long does it take to get my money back after I report a fraudulent check?

Your bank must complete an investigation within 10 business days and reimburse you if the check is confirmed as fraudulent. In practice, reimbursement often takes two to three weeks because the bank must contact the other financial institution and obtain the cancelled check. During the investigation, your account may be on hold, so you cannot withdraw the disputed amount.

What if the bank says the check looks like my signature?

Banks are not handwriting experts, and signature verification is subjective. If you did not write the check and did not authorize anyone else to write it, it is fraudulent regardless of how similar the signature appears. Provide your bank with a sample of your actual signature and explain the differences. If the bank still refuses to reimburse you, file a complaint with your state's banking regulator or the Consumer Financial Protection Bureau.

Can I prevent someone from cashing a check if I report it stolen before they deposit it?

Not directly. Once a check is stolen, you cannot stop it from being deposited unless you place a stop payment order with your bank—but this only works if you know the check number and amount. If you discover a blank check is missing from your checkbook, contact your bank immediately and ask them to monitor your account for fraudulent activity. Some banks can flag your account to reject checks below a certain amount or to certain payees.

Is check fraud common, and am I at high risk?

Check fraud is less common than credit card fraud or identity theft, but it still happens. Your risk is highest if you receive mail at an unsecured mailbox, throw documents in the trash without shredding them, or order checks from unreliable sources. Using checks infrequently and monitoring your account regularly reduces your risk significantly.