Almost every fake bank statement now starts as a real PDF that someone edited — a balance retyped, a transaction removed, a name swapped. The paper looks perfect because it was never printed. What gives it away is the arithmetic, the fonts, and the file's own record of being changed.
Statement fraud clusters into a small number of techniques, and each leaves a different kind of trace. Knowing which one you are looking at tells you which check will find it.
Run these before you accept a statement as evidence of income or funds. The first two need nothing but the document itself.
Work down the column and confirm every running balance equals the one above it plus or minus that row's amount. Whoever edits a statement almost never recomputes the rest of the column — so a single broken row is often the whole case. Check the opening and closing balances against the summary box too; forgers frequently update one and forget the other.
A bank's statement generator sets every figure in the same font, at the same size, on the same baseline. Zoom to 400% on the amount you doubt and compare its digits with an amount you trust. Different glyph shapes, a hair of extra weight, or a figure sitting a pixel off the column baseline means that value was typed in afterwards.
A genuine statement is written once by the bank's reporting software and never touched again. If the producer string names a consumer PDF editor, or the modification date is later than the creation date, someone opened and re-saved the file. Our free PDF X-ray reads this without an account.
PDFs can be saved incrementally, which leaves earlier versions inside the same file. That is the strongest evidence there is: recover the previous revision and you can put the before and after side by side and read off exactly which figure changed. A statement carrying two revisions when the bank only ever wrote one is a finding on its own.
Banks deliver statements as digitally generated PDFs with a real text layer. A statement that arrives as a flat image has had that text layer destroyed — often deliberately, because rasterising an edit hides it from checks two through four. A genuine scan carries sensor noise and an off-white background; a fabricated one is noiseless and pure white.
A constructed example — not a real customer file — showing the kind of finding Docurensic surfaces.
The closing figure is set in a different embedded font from every other amount on the page and lives in its own appended revision. The recovered earlier revision carries $4,180.00 in the same position.
Forensics · font + revision · strongThe final row's balance is $38,000.00 above the sum of the preceding transactions.
Validation · arithmetic · definitiveA fake bank statement is not a bad photocopy. It is the bank's own PDF with two characters changed, which means everything a human reviewer checks — the logo, the layout, the disclaimer text, the sort code — is genuine, because none of it was touched. Reviewers are being asked to spot the one field that is wrong out of several hundred that are right, usually in under a minute, usually against a deadline.
The evidence that settles it is not visible at all. It is in the file: which software wrote it, how many times it was saved, which fonts each figure uses, whether an earlier version is still recoverable inside the same document. Docurensic reads that layer, checks the arithmetic, and reports what changed and where — with the earlier revision attached as evidence when one survives.
Five layers, one verdict. Every document runs through security, forensics, reasoning, validation, and external lookups — see how the engine works.
Often, yes — and specifically. If the file was saved incrementally, the earlier revision is still inside it and can be recovered and compared, which shows exactly which values changed. Failing that, mismatched fonts, an inconsistent text layer, and metadata that names a consumer PDF editor are strong indicators the file was opened and re-saved after issue.
Rasterising a statement destroys the text layer, the fonts and the revision history — which is exactly why forgers do it. That is itself a finding, because banks issue digitally generated PDFs. The checks then move to the pixels: a genuine scan carries sensor noise and an off-white background, while a fabricated one is typically noiseless and pure white.
No. Docurensic is a forensic analysis of the document you were given — it establishes whether that file was altered after it was created, not whether the account exists. It pairs well with open banking or a direct bank confirmation, which answer the other half of the question.
Seconds for a typical multi-page statement. You upload the PDF and get a plain-English verdict with each finding located on the page it appears on, so a reviewer can see the evidence rather than take the score on trust.
Other document types
Pay stubs & payslips · Invoices · Utility bills · All document fraud detection
Free to start. No install, no sales call.