Three charged in Florida over alleged $2 million Treasury check theft using fake IDs
IRS Criminal Investigation says a federal indictment charges two Brooklyn residents and a Tampa resident with intercepting mailed US Treasury checks and using counterfeit driver's licences to open bank accounts and deposit them.
On 13 October 2026, IRS Criminal Investigation (IRS-CI) announced that three people had been arrested for attempting to steal more than $2 million in US Treasury checks. A federal indictment charges Stanley Richardson Joseph and Kallie Nicole Valerie Halliday, both of Brooklyn, New York, and Kristy Marie Bochecchio of Tampa, Florida, with conspiracy, theft of government money or property, and aggravated identity theft. U.S. Attorney Gregory W. Kehoe announced the case.
According to the indictment, the three intercepted US Treasury checks that had been placed in the mail to be delivered to the intended recipients. They allegedly made counterfeit driver's licences in the names of those recipients and used them to open new accounts at various financial institutions, where they deposited the checks. The indictment also gives notice that the United States intends to forfeit proceeds traceable to the offences.
These are allegations. The release states that an indictment is only a formal charge and that every defendant is presumed innocent unless proven guilty.
The case was investigated by IRS-CI and the Treasury Inspector General for Tax Administration, with help from the US Postal Inspection Service and Homeland Security Investigations, New York.
Why it matters to AML professionals
Stolen government checks are often cashed through new accounts opened with forged identity documents in the payee's name. AML professionals in onboarding and fraud teams can stop this kind of scheme by checking identity documents carefully and watching new accounts that receive large government check deposits soon after opening.
Red flags in this case
- A newly opened account receives a large US Treasury check deposit soon after opening
- The identity document used at account opening has a different address or details from other records for the same name
- Several accounts opened at different branches or institutions in a short period, each funded by a government check
- Funds from a deposited government check are withdrawn or transferred out quickly after the check clears
If this landed in your queue
- Re-verify the customer's identity document and compare its details with independent records
- Check whether the payee name on the deposited check matches a customer with a long and consistent history
- Look for other accounts linked by device, phone number, address or branch to the same opener
- Place a hold where policy allows, contact the issuing agency if fraud is suspected, and escalate for suspicious activity reporting
Key terms
- Aggravated identity theft
- A US federal offence of using another person's identity while committing certain other crimes, such as fraud or theft.
- Indictment
- A formal charge approved by a grand jury; it is an accusation, not a finding of guilt.
- Forfeiture
- A legal process in which the government takes property or proceeds connected to a crime.
Interview angle
What checks would you run on a new account that receives a large government check soon after opening?
Explain that you would re-check the identity document against independent data, confirm the payee is the genuine account holder, look for links to other new accounts, and escalate if funds move out quickly or details do not match.
Sources
Go deeper on AMLift
Every fact in AMLift News Desk stories comes from an official source: a regulator, court, government gazette or the company's own filing.
Report an error
Every report is checked against the official source. If we got something wrong, the story is corrected.