Loading...
Loading...
Credit card fraud occurs through payment card skimmers at gas pumps and ATMs, card-not-present online theft from breached databases, and card testing schemes, while check fraud involves stealing mail and using chemical techniques to erase payee information and rewrite amounts. These are among the most common fraud types, with credit card fraud remaining the leading identity theft vector and check washing representing a growing threat to personal finances. Unlike many scams requiring victim interaction, card skimmers and check theft are passive crimes.
Annual Losses
$199.9 million (IC3); broader payment fraud in billions
Avg Loss / Victim
$1,500-$5,000 per skimming incident; check amounts vary widely but can exceed $5,000
Primary Vector
Card skimmers (gas pumps, ATMs), card-not-present fraud from breaches, check washing (mail theft and chemical alteration)
Peak Season
Year-round for card fraud; check washing spikes during tax season and holidays when mail volume is high
Credit card and check fraud represent two distinct but equally damaging patterns. Credit card fraud occurs when payment card data is compromised through physical skimming devices installed on gas pumps and ATMs, through stolen card numbers from large data breaches, or through card-not-present fraud where criminals use card details for online purchases. Criminals test compromised cards with small $1-5 charges before escalating to larger purchases. Check fraud, by contrast, involves stealing physical mail from residential mailboxes and USPS collection boxes, then using household chemicals like acetone to wash away the ink while preserving the signature, allowing the criminal to rewrite the check payee and amount. Both patterns exploit the payment system's delays—card fraud often goes undetected for days or weeks, and check fraud can take three weeks or longer to clear, allowing criminals to withdraw funds before detection.
Hover or tap the highlighted text to see why each element is a red flag.
Fraud Alert: Your debit card ending in 4829 was used for a $2.99 purchase at a store in NevadaRed flag: The location is far from where you normally shop, indicating card fraud. However, this could be a legitimate fraud alert or a scam impersonating your bank—call the number on your card instead.. Did you authorize this? Reply YES or NO immediately.
We detected a purchaseRed flag: Real fraud alerts use your bank's branded language and reference account details only when absolutely necessary. Scammers are often vague or overly official-sounding. of $899.99 charged to your Wells Fargo card for electronics. If you did not make this purchase, call 1-888-555-0147 immediately.
Tax Refund Alert: Your refund of $1,250 could not be deposited because we need to verify your information. Update your deposit details hereRed flag: Legitimate financial institutions never ask you to update sensitive details through email links or texts.: [suspicious link]
Multiple small unauthorized charges ($1-5) on your statement within a short time period
Criminals use a 'testing' strategy to verify stolen card data before escalating to larger purchases. Any unauthorized charge, no matter how small, indicates your card may be compromised. Report it immediately.
Card reader at a gas pump or ATM appears loose, bulky, or visibly different from surrounding machines
Skimmers are often placed over legitimate readers. Check that the card slot isn't wobbly, and look for a gap between the reader and the pump body. If something feels off, use a different pump or ATM.
Your phone detects an unfamiliar Bluetooth signal near a card reader
Modern skimmers transmit data wirelessly. If your Bluetooth settings show an unknown device near a payment terminal, do not use that terminal and alert the business.
Checks taking unusually long to clear (beyond the typical 3-5 business days)
This may indicate the check was altered or deposited at a different bank. Contact your bank and the recipient to confirm the check was received as written.
Mail appears tampered with, is missing, or arrives much later than expected
This suggests mail theft. If you're expecting checks or sensitive documents, monitor mail arrivals closely. Consider switching to online bill pay.
You receive a check that has been rewritten—payee or amount has been altered but the signature appears intact
This is a sign of check washing. Contact your bank immediately, and file a report with the US Postal Inspection Service if mail was stolen.
Legitimate fraud alerts from your bank come from a phone number you recognize on your card statement and ask simple questions: 'Did you make this transaction? Reply YES or NO.' They do not ask for your full card number, expiration date, CVV, PIN, or Social Security number—your bank already has this information. Real alerts may ask you to confirm a specific transaction amount or location, but never ask you to 'update' or 'verify' sensitive details through email links or phone numbers provided in the message. If you receive a fraud alert email, ignore any links and call the number on the back of your card using a phone number you independently verify. Your bank's fraud department will never ask you to call a number provided in an unsolicited message.
Federal law requires banks to provisionally credit your account within 10 business days if fraud is confirmed, though many banks credit immediately. Full investigation and permanent credit typically take 60-90 days. For debit cards, you have stronger protections if you report within 2 business days of discovering the fraud. Always report fraud immediately to minimize delays.
It depends on timing and documentation. If you catch it before the altered check clears, contact your bank immediately and they may be able to stop payment. If it has already cleared, your bank may be able to reverse it if you file a fraud claim and provide evidence. Report it to the US Postal Inspection Service as mail theft, which can help with investigation.
Use gel pens (such as Uni-ball 207 or similar gel-based pens) that are resistant to check washing chemicals. Never leave outgoing mail in an unsecured mailbox; drop it inside the post office or use USPS Informed Delivery to track incoming mail. Use online bill pay whenever possible. Consider a locking mailbox for incoming mail.
Do not use that terminal. Immediately inform a store manager or bank representative and provide a detailed description of the suspected skimmer. Consider calling local police to report it. Use a different pump or ATM, and monitor your account closely for unauthorized charges.
Fraudulent charges may appear within hours or days as the criminal tests the card, or they may wait weeks or months before selling the data or using it themselves. Check your statements regularly—at least weekly—and set up mobile banking alerts for any transaction over a certain amount (e.g., $50) to catch fraud early.
Paste it in and get an instant analysis — free, private, no account needed.
Analyze a Message