Answer:
Under UCC 4-406 in most states, it's one year from delivery of the statement reflecting the payment of a fraudulent or unauthorized check. Some states (notably Florida and Georgia) shorten that period considerably, so check your state's UCC wording.
Your deposit agreement/contract may also make the reporting "window" smaller than whatever your state's UCC provides for.