The Fake Check Overpayment Scam: That First Paycheck Is Paper

Also filed under: fake check scam · overpayment scam · fake job check scam · check clearing scam

No real employer overpays you and asks for change, so yes, the first paycheck that arrived early, too big, with instructions to wire back the difference, is a scam. The check is a forgery. The 'extra' money you would send back is not the employer's money passing through you; it is your own money leaving, because the check behind it is going to bounce.

What makes this one cruel is that your own bank unintentionally plays the accomplice. The deposit shows up in your available balance within a day or two, which feels exactly like the check clearing. It has not cleared. You are about to learn the difference between 'available' and 'real,' a distinction banking has helpfully kept obscure since forever.

How the con runs

It usually starts with a job, often remote, often a little too easy to get: an interview by chat, an offer letter with a real company's logo, sometimes weeks of plausible onboarding. The scammer is not hiring you, they are casting you. The role exists to justify one prop, a check, and one request, a payment. Variants skip the job entirely: overpaying for something you sold online, or a 'mystery shopper' gig, same skeleton, different costume.

Then the check arrives, and it is wrong in your favor. First paycheck before you have done real work, or triple the agreed amount 'by accounting error,' or padded with funds to buy equipment from a designated vendor. You are asked to deposit it, keep your share, and immediately send the excess back by wire, Zelle, gift cards, or crypto. Note the asymmetry: they pay in paper, you refund in methods that cannot be pulled back.

Here is the gear that makes it turn. Federal rules require banks to make deposited funds available quickly, often within one to two business days, but actually verifying a check with the issuing bank can take a week or two. Your balance updates long before the forgery is detected. Inside that gap, you wire away real money against imaginary money, and the gap is not a flaw the scammer found, it is the entire machine.

One to three weeks later, the check comes back counterfeit, and your bank reverses the deposit. The wired money is long gone, the 'employer' has evaporated along with the job listing, and you owe the bank the full amount of a check you never really had. You are out the money, the job, and about two weeks of believing things were finally going well.

Play defense

• Never send money to get money, from an employer, a buyer, or anyone else. A check that needs change made is counterfeit; there is no legitimate version of this transaction.
• Learn the gap: 'funds available' means the bank fronted you the money, not that the check verified. Ask your bank when a check has actually cleared before spending a cent of it, and expect the honest answer in weeks, not days.
• Treat overpayment plus urgency as a two-part confession. Real accounting errors are fixed slowly, through payroll, with apologies, not through same-day wires to a stranger's account.
• Vet the employer independently: look up the company's official site and call its listed number, not the one in your offer letter. Real firms know their own hires, and scammers rent their logos.
• Be extra wary of jobs that pay before you have done meaningful work, or that involve receiving and forwarding money or packages in any form. That is not a job description, it is a money-laundering flowchart with a salary line.

Already got hit?

1. Call your bank the moment you suspect it, and if you wired money, ask for a wire recall immediately. Reversals are rare but happen most in the first hours, and the bank also needs to know the deposit is counterfeit before it detonates.
2. Stop all contact with the 'employer' and send nothing more, no matter what follow-up story arrives. Save every email, chat log, check image, and receipt instead.
3. Report it at reportfraud.ftc.gov and ic3.gov, and report the fake listing to the job platform where it appeared so the posting stops recruiting the next victim.
4. If the check came by mail, report it to the US Postal Inspection Service at uspis.gov or 1-877-876-2455. Mailing counterfeit checks is federal mail fraud, and postal inspectors actively work these rings.
5. If the deposit was reversed and your account is negative, talk to your bank about the situation and a repayment plan. You are typically responsible for checks you deposit, which is infuriating and true, but banks deal with this scam constantly and documentation of the fraud helps.

Questions people ask at 2 a.m.

All case files →