A single blue mailbox on a quiet street corner can hold dozens of outgoing checks at any given moment — payroll, vendor payments, rent, tax deposits. To a fraud ring, it looks less like a mailbox and more like an unlocked cash register. Between fiscal years 2019 and 2023, reports of mail theft from mail receptacles surged 139%, and the checks stolen inside them have fueled a resurgence of one of the oldest tricks in financial crime: check washing.
If you run a small business and still cut paper checks — for vendors, contractors, rent, or payroll — this isn't a consumer problem you can safely ignore. It's an accounts-payable problem, and in 2026 it's an expensive one.
What Check Washing Actually Is
Check washing is exactly what it sounds like. A criminal steals a check you've already written — usually straight out of a mailbox or a stolen mail carrier's satchel — then uses chemicals (acetone, bleach, or specialized solvents) to strip the ink from everything except your signature. The payee name and dollar amount dissolve away, leaving a blank, pre-signed check that the thief simply refills with a new payee and a much larger amount.
The technique isn't new. What's new is the scale and sophistication:
- Organized rings, not lone opportunists. Federal investigators increasingly link check theft to organized criminal networks that treat it as a low-risk, high-reward business line — steal in bulk, wash in bulk, deposit through networks of money mules before banks can flag the pattern.
- Better forgeries. High-quality printers and check-stock paper mean washed or counterfeited checks can pass a teller's visual inspection, and increasingly can fool automated deposit-capture systems too.
- Faster laundering. Mobile deposit and instant-transfer rails let stolen funds move and disappear before a business even reconciles its bank statement.
The Numbers Behind the Surge
The scale of this problem has caught banks, the FBI, and FinCEN off guard:
- Check fraud losses hit roughly $21 billion in 2023 across the U.S. financial system.
- Suspicious activity reports tied to check fraud nearly doubled between 2021 and 2023, according to FinCEN and FBI data.
- An estimated 90% of mail theft incidents go unreported, which means the real losses are almost certainly higher than the official figures suggest.
- Both the FBI and the Internet Crime Complaint Center (IC3) issued specific alerts flagging mail-theft-related check fraud as an active, growing threat heading into 2026 — not a legacy crime on the decline.
For a small business, that context matters because you're not defending against a single bad actor who might get caught once. You're defending against professionalized crews that specifically target business mail because business checks tend to clear for larger amounts with less individual scrutiny than a personal check.
Why Small Businesses Are Especially Exposed
Consumers have started shifting away from paper checks for exactly this reason — but plenty of small businesses still run their accounts payable almost entirely on checks, for a few practical reasons: some vendors and landlords only accept checks, check runs are easy to batch once a week, and switching an entire AP process to electronic payments feels like a project nobody has time for.
That combination — meaningful check volume, thinner internal controls than a large corporate treasury team, and (often) a single person who both writes and reconciles checks — is exactly the profile fraud rings look for. A few specific exposure points worth checking today:
- Outgoing mail sitting in an unlocked or curbside mailbox overnight or over a weekend, especially payroll or rent checks written on a predictable schedule.
- Pre-signed check stock kept in a drawer for "convenience," which turns a stolen blank check into an instantly usable one.
- No positive pay or similar bank-side matching, meaning a washed check with a plausible amount will simply clear.
- Bank statements reconciled monthly (or less), which widens the window between a fraudulent check clearing and someone noticing.
The Accounts-Payable Controls That Actually Work
The good news: the fixes here are well understood and mostly inexpensive relative to a single successful fraud loss, which can run into the thousands or tens of thousands of dollars per incident and is often unrecoverable once funds are washed through mule accounts.
1. Enroll in Positive Pay. This is the single most effective tool available to a business, and most banks offer it for a modest monthly fee. Every time you issue checks, you send your bank a file listing the check number, payee, and dollar amount. When a check comes in for payment, the bank matches it against that file and flags anything that doesn't line up — including a washed check with an altered payee or amount — before it pays out. ACH Positive Pay does the same thing for electronic debits, letting you pre-authorize specific originators (your payroll processor, your insurer) and block everything else by default.
2. Get outgoing mail off the predictable path. Don't drop payment mail in a residential or curbside mailbox, especially not with the flag up, which signals "mail here" to anyone casing the street. Use a post office collection box, hand mail directly to a carrier, or — better — stop mailing checks for large or recurring payments entirely.
3. Move recurring payments to ACH or a payments platform. Rent, payroll, and regular vendor invoices are the easiest expenses to convert to electronic payment, and they're also the ones criminals target because they're predictable. Every check you eliminate from your AP process is one less check that can be intercepted in the mail.
4. Use gel or indelible ink, and never pre-sign blank checks. Gel ink resists the chemical solvents used in washing far better than standard ballpoint ink; it's not foolproof against a sophisticated ring with a scanner and color printer, but it stops the low-effort attacks. Pre-signed blank check stock should never leave a locked drawer — or exist at all.
5. Reconcile weekly, not monthly. UCC Article 4-406 gives a business a limited window — generally understood as up to 30 days — to review its bank statement and report an unauthorized or altered check. Miss that window on the first fraudulent item from a given wrongdoer, and you can lose the right to hold your bank liable for that item and subsequent items by the same fraudster. Weekly reconciliation shrinks your exposure window dramatically and gets you inside the reporting deadline with room to spare.
6. Separate check-writing from reconciliation. If the same person cuts checks, signs them, and reconciles the bank statement, there's no second set of eyes to catch either fraud or errors. Even in a two- or three-person office, splitting these duties — or having an owner spot-check the register weekly — closes a real gap.
Why Your Bookkeeping Setup Matters Here
Fast fraud detection depends on fast, accurate reconciliation — and that's much easier when your books are structured to make anomalies visible instead of buried in a spreadsheet or a bank app you only open once a month. A ledger that records every check by number, payee, and amount at the moment it's issued gives you an immediate, queryable source of truth to match against your bank feed, rather than reconstructing what you meant to pay after the fact.
This is one of the quieter advantages of plain-text, version-controlled accounting: every transaction is a discrete, timestamped, diffable entry, so a washed check that clears for the wrong payee or a wrong amount stands out the moment you reconcile — not thirty days later when your UCC window has already closed.
Simplify Your Financial Management
Catching fraud fast starts with books you can actually reconcile fast. Beancount.io offers plain-text accounting that's transparent, version-controlled, and easy to audit line by line — no black boxes, no waiting on a monthly statement to spot a problem. Get started for free and see why developers and finance-savvy business owners are switching to plain-text accounting.