A convincing invoice, receipt, statement, certification, letter, or contract can now be produced in seconds. Generative tools, document templates, editing software, and synthetic content have made plausible document fraud easier to create than ever.
The cost of producing a professional-looking document has collapsed.
The cost of proving where that document came from has not.
Most people and organizations still have no verification procedure. They look at the document, decide that it appears right, and file it. Years later, when the document matters in a dispute, audit, insurance claim, employment matter, or courtroom, nobody can explain who created it, how it was received, or whether the issuer ever confirmed it.
That is the missing procedure.
A document is not evidence because it looks right. It becomes useful evidence when its origin can be demonstrated.
Start With Four Questions
For any document that matters, ask these questions in order:
-
Who issued it?
Is the issuer a real, identifiable, verifiable entity, and is it the kind of entity that would actually issue this document? -
Did they actually issue it?
Has the issuer independently confirmed that the document came from them? -
How did it reach me?
Was it emailed, mailed, handed over, downloaded, or retrieved from a portal? Who had it before you? -
Does anything independent confirm it?
Can a separate source corroborate the important facts stated in the document?
If a document fails any one of these questions, classify it as unverified. That classification is not an accusation. It does not prove document fraud. It simply means the document’s origin or contents have not been sufficiently confirmed.
This is the foundation of how to verify a document properly.
Examine the Document Carefully
Visual review is useful, but it is only a starting point. You are not trying to identify one dramatic flaw. You are checking whether the details are internally consistent and consistent with the claimed issuer.
Look for:
- Fonts or type sizes that change without a reasonable explanation.
- Alignment that drifts from one section to another.
- Uneven margins or spacing.
- A letterhead, address, or phone number that does not match the issuer’s published information.
- A logo that is outdated, stretched, blurry, or inconsistent with the rest of the document.
- A signature style that does not match known examples from the issuer.
- A job title or department that does not exist at the organization.
- Reference numbers, invoice numbers, or account numbers that do not follow the issuer’s normal format.
- Dates that conflict with one another.
- Dates that fall on a weekend or holiday when the business would normally be closed.
- Totals that do not add up.
- Tax calculations that do not match the stated jurisdiction.
- Currency, units, spelling, or formatting conventions from the wrong country.
- A PDF’s metadata showing an author, software program, or creation date inconsistent with the document’s claimed origin.
Metadata can be useful, but it is easily changed. Treat it as supporting information, not decisive proof.
Scanned documents deserve their own review. A purported scan may show perfectly straight digital edges, uniform lighting, no paper texture, or an unusually clean appearance when the rest of the document suggests it should have been physically handled. Those signs may indicate digital re-creation, but they do not prove fabrication by themselves.
The discipline matters: look for patterns of inconsistency, not a single flaw.
Make the Independent Callback
This is the highest-value step in the process.
Do not verify a document using the phone number, email address, website, QR code, or link printed on the document itself. Those details may have been created specifically to support the document.
Instead, look up the issuer independently:
- Use the organization’s official website.
- Find a phone number yourself.
- Use a trusted business directory.
- Contact a known representative through an established channel.
- Compare the company’s real domain with the domain shown on the document.
Be cautious of near-miss domains, such as a minor spelling change, an added word, or a different top-level domain. A website that exists only for the document should be treated carefully.
Then ask a specific question:
“Did your organization issue this document? Can you confirm the reference number?”
Specific questions are more useful than asking whether a person or company is “legitimate.” Ask the issuer to confirm the document number, date, amount, account, certification, or transaction described.
A fake document can imitate a logo, format, signature, email address, and website. It cannot create an independent confirmation from the real issuer.
If the person answering cannot confirm the document, record that fact accurately. Do not exaggerate it. “The issuer could not confirm the reference number” is stronger and more defensible than “the document is definitely fake.”
Record the Chain
Documents arrive with a history. Record it.
In plain language, chain of custody means documenting who possessed an item, when they possessed it, how it was transferred, and what happened to it afterward.
As soon as a document becomes important, record:
- The date and time it was received.
- How it arrived.
- Who sent it.
- What the sender said about it.
- The original file name and format.
- Any reference, invoice, account, or tracking number.
- Who first opened or received it.
- Where the original was stored.
The most common failure is not always a sophisticated forgery. It is an organization that cannot say where the document came from or who first handled it.
Preserve the original file exactly as received. Work from copies. If you crop, convert, redact, or re-save a document for presentation, keep the original unchanged and label the derivative clearly.
For digital documents:
- Keep the native file format when possible.
- Preserve email headers when the document arrived by email.
- Avoid unnecessary conversion or re-saving of PDFs.
- Do not rely on a screenshot as the only record.
- Record when and how the file was received.
Apply Digital Evidence Discipline
Digital evidence authentication requires more than opening a file and checking whether it appears complete.
When an original image, recording, or document must be preserved, a forensic image may be created so the source material can be retained without alteration. A hash is a digital fingerprint calculated from a file. If even one character changes, the hash changes.
A hash recorded when a file is acquired can later be recalculated and compared. A matching value supports the conclusion that the file has not changed since the earlier value was recorded. A different value shows that the file is not identical to the earlier version, although it does not by itself explain why.
Where appropriate, a disciplined process may also document:
- Write-blocking during acquisition.
- The original media or file location.
- The acquisition date and time.
- The person who acquired the material.
- The tools and methods used.
- The separate working copy used for analysis.
- Any conversion, enhancement, compression, or redaction.
This is not a substitute for confirming who created the document or whether its contents are true. It addresses integrity, whether the file changed after a known point. Authenticity and integrity are related, but they are not the same.
When Verification Fails
Sometimes an issuer cannot be reached. Sometimes the records no longer exist. Sometimes the company confirms that a document format is familiar but will not confirm the specific document in writing.
When you cannot verify a document:
- Do not pay, sign, approve, or rely on it solely because it looks professional.
- Hold the document rather than destroying it.
- Preserve the original file and related communications.
- Record your attempts to verify it.
- Document what the issuer said and who provided the response.
- Escalate the issue to a supervisor, counsel, insurer, or law enforcement if there is a reasonable basis to believe a crime occurred.
An unverified document is not proof of wrongdoing. The professional response is to state, in writing, that the document remains unverified and explain what was checked.
Mistakes That Cost People
Most document failures are process failures rather than detection failures.
Avoid these common mistakes:
- Calling the number printed on the document.
- Accepting a screenshot as the original record.
- Trusting a caller who supplies their own credentials.
- Skipping the callback because the document “looks fine.”
- Relying on one source with a financial interest in the outcome.
- Deleting or re-saving the original file.
- Assuming a professional format proves authenticity.
- Failing to record who received the document and when.
- Treating repeated statements from the same source as independent corroboration.
The question is not whether the document feels credible. The question is whether you can show how its credibility was tested.
Build Verification Into the Workflow
Organizations should not leave document verification to chance.
For high-value or high-consequence documents:
- Assign one person to own the verification step.
- Require verification before payment, signature, or approval.
- Record who made the callback and what was confirmed.
- Keep originals in one controlled location.
- Treat unusually convenient documentation as a risk indicator.
- Separate fact-gathering from final approval when practical.
- Require independent confirmation for material claims.
- Preserve the verification record with the document.
Verification takes time. It can slow a process. It will not prevent every bad outcome.
Its value is that it changes what you can say afterward. You can explain what was checked, what was not checked, who confirmed it, what remained uncertain, and why the organization acted as it did.
That is what makes a record more defensible.
The Principle Holds
A document you cannot trace is not evidence. It is a claim on paper.
The organizations and professionals who can show where a document came from will be better prepared when their records are examined in a contract dispute, audit, insurance claim, employment matter, or courtroom.
If a document is headed to litigation, the lawyer decides how it should be authenticated and used. A private investigator or other professional may assist with factual research, preservation, documentation, and independent verification, but no professional can guarantee that a court will admit or accept a particular document.
For a confidential consultation about document verification, digital evidence authentication, or a high-stakes provenance question, request a consultation.
Frequently Asked Questions
How can I tell if a document is fake?
You usually cannot determine authenticity from appearance alone. Identify the issuer, independently contact that issuer, document how the document reached you, preserve the original, and look for independent confirmation of its important contents.
Is a PDF metadata check enough to verify a document?
No. Metadata can support a verification process, but it can be edited, removed, or changed during ordinary file handling. Independent issuer confirmation, provenance, preservation, and corroboration are more important than metadata alone.
What if the company confirms the document but will not put it in writing?
Record who confirmed it, when the conversation occurred, how you reached the person, and exactly what was confirmed. A verbal confirmation may be useful, but the absence of written confirmation should remain part of your verification record.
Should I keep a screenshot of a document?
You may keep a screenshot as a reference copy, but it should not replace the original file. Preserve the native file, related email or message history, headers where available, and any information showing when and how the document was received.
Do I need a professional to verify a document, or can I do it myself?
Most basic verification is a procedure you can perform yourself. A professional is appropriate when the stakes are high, the document must hold up in court, the source will not cooperate, the file may have been altered, or the verification requires specialized evidence handling.
About Alaska Investigations Group
Alaska Investigations Group provides confidential investigative research, documentation, digital intelligence, and litigation support for individuals, attorneys, businesses, insurers, and other organizations. The firm has more than 10 years of professional investigative experience and handles each assignment according to its circumstances.
Licensed Private Investigations Agency in Anchorage, Alaska. License 1126. Serving statewide except Fairbanks.
Contact: (907) 232-4731 | mrrems@protonmail.com
Disclaimer
This article is provided for general informational purposes only. It is not legal advice, forensic advice, technical advice, or a guarantee that a document will be proven authentic, proven fraudulent, admitted into evidence, or given a particular weight.
Evidence rules, privacy laws, data-access restrictions, recording laws, professional obligations, and court procedures vary by jurisdiction and circumstance. Where a document is headed to litigation, the responsible lawyer determines how the document is authenticated and used. Alaska Investigations Group does not provide legal advice and does not warrant that the information in this article is complete, current, or applicable to every situation.