Home / Document fraud detection / Lease agreements
Lease agreements · Proof of address · Tenant screening · KYC

How to spot a fake lease or rental agreement.

A fake lease used for tenant screening, address verification, or a loan application is almost always a real template with the rent, the dates, or the landlord’s name changed — or a signature page pulled in from somewhere else entirely. The paperwork looks right because most templates are public. What gives it away is the numbers, the fonts, and whether the signature actually covers the bytes it claims to.

§01 / WHAT GETS FAKED
The ways they are made

What a forged lease actually looks like.

Lease fraud clusters into a small number of techniques, and each leaves a different kind of trace.

§02 / HOW TO CHECK
Do this first

Five checks, in the order that catches the most.

Run these before treating a lease as proof of address, income context, or tenancy. A signed lease adds one more check the others don’t have.

1. Reconcile the numbers

Rent, deposit, and any prorated first-month figure should agree with each other and with the lease’s own stated policy — a deposit that isn’t the “1.5x rent” the document itself specifies, for instance, is a tell on its own.

2. Compare the typography on the changed fields

Property-management software (AppFolio, Buildium, a landlord’s own boilerplate) sets every field in one font. A retyped rent figure or a shifted date stands out against the rest of the document under zoom.

3. Read the file’s metadata

A lease produced by property-management software carries that system’s producer string. A consumer PDF editor, or a save date after the document was supposedly signed, means it was opened and changed after execution.

4. Check for appended revisions and verify any signature

An incrementally saved PDF can hide an earlier, differently worded version. If the lease carries a digital signature, that signature has to actually cover the bytes you’re looking at — Docurensic checks whether it was appended after signing rather than assuming a signature block means the document is intact.

5. Ask whether it should be a scan at all

A lease delivered as a flat image, or a “signed and scanned” copy with none of the sensor noise a real scan produces, has been rasterized — often to hide exactly the edits the previous four checks would catch.

§03 / IN PRACTICE
Illustrative example

What an appended signature page looks like.

A constructed example — not a real customer file — showing the kind of finding Docurensic surfaces.

Exhibit · illustrative

Residential lease · 1420 Birchwood Ave, Unit 3B

TenantS. Whitfield
LandlordBirchwood Realty Group
Term12 mo · 1 Jun 2025 – 31 May 2026
Monthly rent$1,450.00
Structure9 pages · unsigned appended page
Review recommendedForensic axis · document altered
Signature page appended, not part of the original

The final page carrying the signature block was saved in a later revision than the other eight pages, and its font for the landlord’s typed name doesn’t match the rest of the lease.

Forensics · revision + font · strong
No property-management producer trace

The document carries no trace of lease-generation software; it was built from a generic template in a consumer PDF editor.

Provenance · metadata · corroborating
§04 / WHY EYEBALLING FAILS

Why looking at it never works.

A fake lease built this way isn’t a bad forgery — it’s a real, public template with a name, a date, or a signature swapped in, which is why the layout, the boilerplate clauses, and the formatting all look completely normal. A reviewer checking those things is checking the one part of the document that was never touched.

The evidence is in the file: whether the numbers reconcile with the lease’s own terms, whether the signature actually covers the current bytes, and whether an earlier revision is still recoverable. Docurensic checks all three and reports exactly what changed.

Five layers, one verdict. Every document runs through security, forensics, reasoning, validation, and external lookups — see how the engine works.

§05 / FAQ
Questions

Frequently asked.

Can you tell if a lease PDF was edited?

Often, yes — and specifically. If the file was saved incrementally, an earlier revision is still inside it and can be recovered and compared, which shows exactly which figure or field changed. Failing that, a font mismatch on the rent or dates, metadata naming a consumer editor, or a signature that doesn't cover the current version of the document are all strong indicators.

What if it's a scanned, physically signed lease?

A genuine scan of a signed paper lease carries sensor noise and a consistent origin across every page. A lease that arrives as a flat, noiseless image where a real scan is claimed — or where only the signature page has different pixel characteristics from the rest — is a finding on its own.

Do you verify the landlord or the property?

No. Docurensic is a forensic analysis of the document you were given — it establishes whether that file was altered, not whether the landlord or the tenancy exists. It pairs well with directly contacting the property manager or checking public property records.

How fast is a check?

Seconds for a typical lease. You upload the PDF and get a plain-English verdict with each finding located on the page it appears on, so a reviewer can see the evidence rather than take the score on trust.

Other document types

Bank statements · Pay stubs & payslips · Invoices · Utility bills · W-2s · IDs & driver’s licenses · Diplomas & certificates · All document fraud detection

Check a lease in the next minute.

Free to start. No install, no sales call.