A stubborn old fraud keeps resurfacing in new disguises, and it turns a bank’s own convenience rules against the people it targets. The setup sounds like good fortune: a payment arrives for more than the amount owed, and the sender politely asks for the difference to be returned.
What looks like a simple refund is actually the entire mechanism of the con. By the time the paper clears and the fraud surfaces, the returned money is long gone and the account holder is on the hook for every dollar the deposit represented.
How the fake-payment setup works
The scheme usually begins with a plausible transaction. A buyer responds to an online listing, an employer hires a remote worker, a landlord accepts a prospective tenant, or a stranger offers a prize, a grant, or a work-from-home role. A check or money order then arrives written for several hundred or several thousand dollars more than the agreed figure. The sender explains the excess with a tidy story and asks the recipient to deposit the full amount, keep the portion they are owed, and send the rest back, often by wire transfer, payment app, gift cards, or cryptocurrency.
Each of those return channels is chosen for the same reason: once the funds are pushed out, retrieving them is nearly impossible. The recipient becomes an unwitting courier moving real money to a criminal on the strength of a worthless instrument.
The banking rule that springs the trap
The danger lives in a gap between two banking timelines. Federal rules require banks to make deposited funds available quickly, frequently within a day or two, so a balance appears to rise almost immediately. Confirming that a check is legitimate, however, can take days or weeks, and a forged or altered check may travel a long way before it bounces. Consumer guidance from the Federal Trade Commission stresses that available funds are not the same as cleared funds, and the account holder remains responsible for the full value of any deposit that later proves fraudulent.
When the check finally fails, the bank reverses the deposit. The money forwarded to the scammer, though, has already vanished, leaving the victim to repay the institution and often to cover overdraft penalties on top of the loss.
The cover stories that make it feel legitimate
Fraudsters lean on a rotating cast of explanations to justify the overpayment and the urgency. A buyer may claim a shipping company or agent needs paying from the surplus. A supposed employer might frame the extra as funds for equipment, supplies, or software to be purchased from a designated vendor. A prize notice may describe the excess as advance coverage for taxes or processing fees. In every version, the demand is the same: deposit now, act fast, and send part of the money back before the check has genuinely cleared.
The instruments themselves can look convincing. Fraudsters use checks that carry real bank names and routing numbers, sometimes stolen from legitimate business accounts, and cashier’s checks or money orders that appear more trustworthy than a personal check. A teller may not spot a forgery at the counter, and the professional appearance of the paper is part of what lulls a recipient into treating the deposit as safe.
Who gets targeted and where it surfaces
The con adapts to whatever transaction a person is already engaged in. Sellers on classified sites and marketplace apps are approached by “buyers” who overpay and ask for the balance to be forwarded to a mover. Job seekers are hired for phantom mystery-shopping or reshipping roles and sent a first “paycheck” to fund supplies. Freelancers, tutors, pet sitters, and childcare providers receive advance payments padded far beyond the agreed rate. The common thread is an unsolicited or newly formed relationship in which a stranger’s first substantive act is to hand over a check for too much money.
Warning signs the FTC tells people to heed
A handful of signals appear in nearly every case. Any arrangement in which a stranger sends a check for more than an agreed amount and asks for a portion back is treated by regulators as a near-certain fraud. The agency’s consumer advice is blunt on the point: only a scammer will hand over a check and then instruct the recipient to wire money back or repay through gift cards or cryptocurrency. Pressure to move quickly, insistence on hard-to-trace repayment methods, and a check tied to a job, sale, or windfall that arrived unsolicited all warrant a full stop before any money changes hands.
Waiting until a bank confirms a check has truly cleared, rather than relying on the funds simply showing up, remains the single most effective safeguard against the whole maneuver.
What to do when a suspect check appears
Anyone handed an overpayment and asked to return the difference is best served by refusing outright and never depositing the instrument. If a deposit has already been made, contacting the bank promptly can clarify whether the check has genuinely settled and can flag the account before further damage. Reporting the attempt to the FTC and to postal or law-enforcement authorities helps investigators track the operations behind the paper. The core lesson holds across every variation: a request to send back part of an overpayment is not a courtesy, it is the trap itself.
This article was produced with the assistance of AI and reviewed by Morning Overview editors prior to publication.
More from Morning Overview
