Multi-state Bank Fraud and Money-Laundering Scheme

On October 5, 2026 

Four Charged in Multistate Bank Fraud ​ and Money-Laundering Scheme​

The U.S. Department of Justice announced that four individuals (known as Daniel, Sims; Ducan, Hill) were charged in an eight-count federal indictment involving a scheme to steal and alter corporate vendor-payment checks, deposit them into accounts they controlled, and withdraw or transfer the proceeds through multiple transactions.

Scheme Methodology used:

• The Underlying crime include Checks issued by a multinational corporation to legitimate vendors were allegedly obtained and altered.
• As part of the Fraud technique used by the criminal, the intended payees’ names were removed and replaced with the names of the fraudsters, or an identity-theft victim.
• The Banking channel used: The altered checks were deposited into personal accounts or accounts opened using another person’s identity.
• The Proceeds movement involved funds withdrawn through ATMs, transferred between accounts, paid to a business, and moved through electronic transactions.
• The activity involved individuals associated with Connecticut, Florida, Missouri, and Iowa, with ATM withdrawals reportedly made in several cities.
• The specific amounts reported for those individuals, is not a confirmed total loss for the entire scheme. One defendant allegedly withdrew and laundered more than $45,000. Another defendant allegedly handled more than $34,000 in proceeds.

THE BANKS SHOULD WATCH FOR THE FOLLOWING RED FLAGS:

1. Check and deposit red flags

• Altered, inconsistent, or suspicious payee information.
• Corporate checks deposited by individuals unrelated to the issuing company or named vendor.
• Check amounts, endorsements, or account details inconsistent with expected payment activity.
• Multiple corporate checks deposited into newly opened or previously inactive personal accounts.

2. Network and cross-channel red flags

• Multiple accounts receiving checks from the same corporate issuer or payment source.
• Common devices, contact details, beneficiaries, or withdrawal patterns linking apparently unrelated accounts.
• Related transactions spanning branches, ATMs, digital channels, and multiple jurisdictions.

3. Customer and identity red flags

• Possible discrepancies between the account holder, check payee, and intended beneficiary.
• Indicators of identity theft or inconsistent identity documentation.
• Accounts receiving business-related payments despite having a personal-use profile.
• Unexplained connections between accounts belonging to different individuals.

4. Transaction monitoring red flags

• Large or unusual cash withdrawals shortly after check deposits.
• Funds transferred rapidly to other accounts or used for unrelated business payments.
• ATM withdrawals across multiple cities inconsistent with the customer’s known activity.
• Repeated deposits followed by rapid depletion of available balances.
• A mismatch between the source of funds, transaction purpose, and customer’s expected activity.

SOME RECOMMENDED CONTROL ENHANCEMENTS

• Strengthen check verification – Use available check-image analysis, payee and endorsement validation, positive-pay services where appropriate, and verification procedures for suspicious corporate checks.
• Monitor the full transaction lifecycle – Link deposits to subsequent withdrawals, transfers, payments, and related accounts. Assess whether the combined activity fits the customer’s expected behavior.
• Improve identity and beneficiary checks – Investigate inconsistencies between the check’s named payee, account ownership, customer identity, and transaction purpose.
• Connect activity across channels and locations – Use linked-account analysis and behavioral monitoring to identify coordinated patterns that individual transaction alerts may miss.
• Establish clear escalation procedures – Promptly refer suspicious activity to fraud operations and AML investigators, preserve supporting records, consider applicable reporting obligations, and assess whether lawful measures are available to prevent further loss.