A buyer for an item listed online sends a check or money order for more than the agreed price, then asks the seller to wire back the difference as a refund. The Consumer Financial Protection Bureau flags this as a common scam: the check or money order is counterfeit, and the money wired back to make things right is real cash leaving the seller’s own bank account. A bank can let a seller withdraw deposited funds before confirming a check is genuine, so the loss only surfaces once the payment is reversed and the seller has already sent money to a stranger.
The Script: A Check Written for More Than the Sale
The setup follows a consistent pattern across online marketplaces, classified sites, and direct sales of a used car, a piece of furniture, or a collectible. A buyer expresses interest, agrees to a price, and then sends payment in the form of a check or money order for an amount noticeably higher than what was agreed. The excess gets explained away with a plausible-sounding reason: a shipping company that needs to be paid separately, a moving fee, an agent’s commission, or a stated mistake in writing the check. The seller is asked to deposit the payment and wire the extra amount back before the buyer arranges pickup or shipping.
The CFPB confirms this exact pattern in its own consumer guidance: a buyer who sends a counterfeit money order or bad check for more than the price of an item, then asks for the difference back, is running one of the most common scams tied to online sales. If the deposited check or money order turns out to be fake, the seller does not receive any real funds at all, and if a bank has already released the money for withdrawal, the seller has to repay it even after that money has already been spent or wired away.
The reason the scheme works is timing, not carelessness. A counterfeit check can look and feel identical to a genuine one, and a bank’s process for confirming a check is authentic can take substantially longer than the window in which a seller is pressured to act. By the time the forgery is caught, the wired-back “difference” is already gone, sent through a channel that is difficult or impossible to reverse. The CFPB’s advice on this exact question is blunt: alert the bank or credit union and the marketplace where the item was listed, and do not send any money to the buyer in the meantime.
Free retirement updates: Keep more of your Social Security and savings with plain-English updates on the changes, deadlines, and costly mistakes retirees miss. Subscribe free.
Wiring the “Difference” Can Turn a Seller Into a Money Mule
Sending money on behalf of someone else, even money that looks like a refund from a buyer’s own overpayment, fits the CFPB’s definition of a money mule: someone who receives and moves money that came from a fraud victim, whether or not that person set out to help commit a crime. The seller in this scam is not just losing money; the wired-back funds move a scammer’s proceeds one step further from the original theft, which is exactly the function a money mule serves inside a larger fraud operation.
The payment method scammers request for the “refund” reinforces the pattern. Fraud schemes generally ask for money in forms that are hard to trace or recover, such as wire transfers, gift cards, mobile apps, or cryptocurrency, rather than a method that can be reversed once the fraud is discovered. A wire transfer sent to an unfamiliar buyer fits that description precisely, moving real funds out of the seller’s account through a channel that offers little recourse once the transfer clears.
Acting as a money mule, even unknowingly, carries consequences beyond the immediate financial loss. Transferring money on a scammer’s instructions can leave a person’s own bank account frozen or closed, and the CFPB warns it can expose the account holder to law enforcement scrutiny, since a suspicious pattern of transfers looks the same to a bank or investigator whether the person moving the money understood the scheme or was simply following a buyer’s instructions after an ordinary sale.
Who Absorbs the Loss When the Check Bounces
The financial exposure in this scam sits entirely with the seller once the check or money order is exposed as fake. A bank making deposited funds available for withdrawal within a few business days is not the same as confirming the payment is genuine; verifying an out-of-town or unfamiliar check can take considerably longer than that availability window. When the check ultimately bounces, the bank reverses the deposit and the account holder owes the full amount, even funds already withdrawn, spent, or wired away as the requested “refund.”
Anyone who suspects they received a counterfeit check or sent money in response to this kind of scam has several official channels for reporting it. The CFPB directs victims to the FTC, the FBI, a state attorney general, or local police, specifically pointing toward a report filed through the Federal Trade Commission’s fraud-reporting site or the FBI’s Internet Crime Complaint Center, alongside a state attorney general’s office found through the National Association of Attorneys General or a local police department’s non-emergency line. None of those steps guarantees recovery of money already wired, since a wire transfer is built to be difficult to reverse once it clears.
The scam persists because two banking realities move in opposite directions. Deposited funds can become available to spend well before a check is confirmed authentic, while a wire transfer sent in response becomes nearly impossible to claw back once it clears. A seller who understands that gap, and who refuses to wire money to a buyer under any pretext before a check or money order fully clears, closes the exact window this scheme depends on.
This article was researched and drafted with the assistance of artificial intelligence.
More Financial Reading
