TL;DR: Document fraud is the creation, alteration or misuse of a document to pass false information off as genuine. In the ACFE's Occupational Fraud 2026 report, creating fraudulent physical documents was the most common way fraudsters hid their schemes, used in 39% of more than 2,400 cases. Prevention works when the issuer makes every document checkable at the source: a TRUE Original document is anchored on a public blockchain, and anyone can check it in TRUE Verify, free and without an account.
Digital credential platforms prevent certificate fraud by making every certificate checkable against the issuer's own record: a fingerprint written to a public blockchain at issue, and a page of its own with a QR code. A copy that was invented or edited then fails the check. TRUE Original does both for every document, on the issuer's own domain, and anyone can check one in TRUE Verify, free and without an account. Paper offers no such check: in the ACFE's 2026 study of more than 2,400 fraud cases, altered physical documents helped hide a third of the frauds.
Document fraud is the creation, alteration or misuse of a document to make someone accept false information as genuine. A diploma from a university that never existed is document fraud. So is a real payslip with a new salary typed into it. Document fraud is a criminal offence in most jurisdictions.
Europol draws the line wider than forgery. In its 2017 Serious and Organised Crime Threat Assessment, Europol wrote that "Document fraud entails the production and use of counterfeit documents as well as the use of genuine documents obtained by means of deception or misrepresentation." A genuine passport issued to the wrong person on the strength of a false birth certificate counts, even though every stamp in it is real.
Europol's verdict on why the crime matters is blunt: "Document fraud is a key enabler of all types of criminal activity as well as terrorism." A forged document is rarely the goal. It is the key that opens a bank account, a border, a job or a loan.
The United Nations Office on Drugs and Crime uses a shorter definition: "Fraudulent documents are those that have been created, altered or obtained by deception." (UNODC, July 2025) UNODC also lists the misuse of valid documents, which "happens when real documents are used by someone who is not their owner, such as an impostor or a look-alike." A TRUE Original document closes the first two routes: a created copy has no fingerprint on the blockchain, and an altered one no longer matches the fingerprint its issuer anchored, which TRUE Verify checks in seconds.
A fake document is fabricated from nothing and was never issued by anyone, while a forged document is a genuine document that someone has altered. Both fail the same test: the person holding the paper cannot prove where the paper came from.
| Type | Definition | Example |
|---|---|---|
| Fake document | Fabricated from scratch, with no legitimate origin and no real issuer. | A diploma from a non-existent university |
| Forged document | A genuine document that has been altered or manipulated. | A real ID card with a swapped photograph |
| Fraudulently obtained document | A genuine document issued on the basis of false information. | A real passport obtained with a false birth certificate |
| Misused genuine document | A real document used by someone who is not its owner. | A real passport presented by a look-alike |
| AI-generated document | Created with generative AI, sometimes paired with stolen or invented personal data to build a synthetic identity. | A driving licence image made with GenAI |
The third row is the hardest to catch by looking. A fraudulently obtained document passes every visual check, because the issuer made it.
The most common types of document fraud involve identity documents, academic credentials, financial documents, corporate documents, medical documents and certificates of authenticity. Each type serves a different purpose, and each lands on a different desk.
Passports, national ID cards, driving licences and residence permits are forged or altered to cross borders, open bank accounts and assume false identities. Europol's 2017 threat assessment reported that "Fraudulent IDs are in high demand and are the most commonly traded type of fraudulent document." Europol estimates that 30% of document fraud cases in the EU involve identity documents.
Diplomas, transcripts, degree certificates and professional qualifications are sold online. Some come from diploma mills, operations that print certificates in the name of an institution that does not exist. Others are forged copies of documents from real, accredited universities. The buyer's goal is admission, a scholarship or a job that requires the degree. The UK's Higher Education Degree Datacheck (HEDD) service identifies thousands of fraudulent degree claims annually.
Bank statements, payslips, tax returns, invoices and insurance documents are falsified to secure loans, inflate creditworthiness, claim insurance or get an invoice paid. Financial document fraud is one of the most costly categories, directly enabling monetary theft. Fake invoices are the version most businesses meet first, and the section on fake invoices below covers them.
Contracts, certificates of incorporation, board resolutions and compliance certificates are forged to misrepresent a company's status, win business under false pretences or slip past a regulator.
Medical licences, training certificates, prescriptions and vaccination records are forged. A forged medical licence puts patients in front of someone who never qualified to treat them.
Certificates of authenticity for luxury goods, art, wine, watches and collectibles are faked to pass off imitations as genuine. In these markets the certificate often carries much of the value, so a fake certificate turns a copy into a sale.
Document fraud is part of most fraud cases. According to the ACFE's Occupational Fraud 2026: A Report to the Nations, which studied more than 2,400 cases from over 140 countries and territories, the most common concealment method was creating fraudulent physical documents (39%), followed by altering physical documents (33%).
"As shown in Figure 10, the most common concealment method in the frauds in our study was creating fraudulent physical documents (39%), followed by altering physical documents (33%). Creating or altering electronic documents or files were also involved in more than a quarter (28%) of the cases. Only 11% of the frauds in our study did not involve any concealment."
Association of Certified Fraud Examiners, Occupational Fraud 2026: A Report to the Nations
The same ACFE 2026 report puts the cases at more than $3.4 billion in total losses. Certified fraud examiners in the ACFE survey estimate that organisations lose 5% of revenue to fraud each year. The typical case ran for 12 months before anyone found it.
Document fraud costs organisations billions every year. According to the Association of Certified Fraud Examiners (ACFE), the median loss from fraud cases involving falsified documents is $150,000 per incident.
Detection is slow because people catch fraud, not paperwork. The ACFE 2026 report found that 43% of frauds were detected by tips, nearly three times as many as the next most common method. Billing schemes, which run on invoices, appeared in 21% of the cases, with a median loss of $90,000.
National figures point the same way. Sweden's Crime Prevention Council (Brå) reports that over 230,000 fraud offences were reported in Sweden in 2025. The Swedish Police Authority's National Fraud Centre estimates that reported frauds in Sweden generated about SEK 5.7 billion in criminal proceeds in 2025, of which fake invoices sent without prior contact accounted for SEK 105 million, up 67% on 2024.
Document forgery works in three ways: freehand simulation, tracing and digital manipulation. Digital manipulation is the most common method today and the hardest to see.
The forger copies text, signatures and design elements by hand. Skilled forgers still make mistakes in spacing, pressure and proportion that a trained reviewer can catch.
Light tables, carbon paper or digital overlays let a forger trace a signature, seal or line of text from a genuine document. Traced lines often look slow and even, with alignment that is slightly off.
Image and PDF editors let a forger change a document without leaving a mark on paper. The usual edits:
Digital manipulation is increasingly sophisticated. With AI tools, a convincing fake PDF can be created in under 5 minutes. This makes prevention, not detection, the only reliable strategy. For organisations that need to prove file integrity retrospectively, TRUE Vault provides blockchain-anchored proof that any document existed in its original state at a specific moment.
A digital edit leaves no ink to analyse. Europol's 2017 threat assessment added that "Increasingly, fraudulent documents are traded online", which puts the finished forgery one search away from the buyer. For a longer look at how AI changes this, read how blockchain stops AI-generated fake certificates.
Template fraud starts from a blank copy of a real document's layout, bought or downloaded, and fills it in with false details. Generative AI removes even that step. The US Treasury's Financial Crimes Enforcement Network wrote in an alert dated 13 November 2024: "Beginning in 2023 and continuing in 2024, FinCEN has observed an increase in suspicious activity reporting by financial institutions describing the suspected use of deepfake media in fraud schemes targeting their institutions and customers." FinCEN added that "These schemes often involve criminals altering or creating fraudulent identity documents to circumvent identity verification and authentication methods." An AI-made copy of a TRUE Original document still has no matching fingerprint on the blockchain, so it fails the check in TRUE Verify.
Document fraud in practice follows patterns that repeat across industries: diploma mills, fake health certificates and counterfeit certificates of authenticity. In each pattern the fraud succeeds because the person receiving the document cannot check it with the issuer, instantly.
A diploma mill sells academic credentials with little or no study behind them, sometimes under the name of a fictitious institution and sometimes as copies of a real university's diploma. A paper or PDF diploma carries no built-in check, so the fraud often surfaces only after the holder is already in the job.
The COVID-19 pandemic exposed the scale of medical document fraud: fake vaccination certificates were available online within weeks of vaccine rollouts. A certificate that cannot be checked at the door proves nothing at the door.
Buyers in second-hand markets for watches, art and wine rarely have a line to the original issuer. A convincing certificate of authenticity is often all that stands between a copy and a full price.
The famous fraud cases in TRUE's companion article follow the same pattern, at a larger scale.
You detect fraudulent documents by checking a document against its issuer, not against its own appearance: confirm the document with the issuing organisation, scan its QR code or verification link, and use visual inspection only as a first filter. The more a check depends on the document's looks, the easier it is for a good forgery to pass.
Many forgeries still contain visible errors. A reviewer looks for these:
Visual inspection is a first filter and nothing more. A careful digital forgery passes it.
One red flag is a reason to look closer. Two or more together are a reason to verify before accepting the document.
| Red flag | What it suggests |
|---|---|
| No verification link or QR code | The document cannot be checked independently |
| Document number missing or wrongly formatted | Likely fabricated, not issued by a real authority |
| Fonts or logos that differ from the issuer's template | Altered or simulated |
| Editing marks around photos, signatures or seals | Digital manipulation |
| Dates or institution names that do not add up | Anachronistic forgery |
| Issuer cannot confirm the document on request | Treat as unverified |
Digital checks compare the document with a record the forger cannot reach. A QR code or verification link opens the issuer's own record of the document. A verification portal confirms a document ID against the issuer's register. PDF metadata can show the software and the date of the last edit. A cryptographic hash, a fingerprint calculated from the file, changes completely if a single character in the document changes.
The strongest detection method available. Blockchain verification compares the fingerprint of the document in front of you with the fingerprint the issuer wrote to a public blockchain on the day of issue. If the two match, the document is unchanged. If they differ, someone has altered it. The answer is yes or no, and it does not depend on the reviewer's eye.
Forensic examiners analyse ink with spectral light, study paper fibres and print methods under a microscope, and compare handwriting. The work is thorough, slow and expensive, and it is usually reserved for court cases and criminal investigations.
Many sectors keep registers that confirm a credential: licensing boards, professional bodies and national degree registers. A registry check is as good as the register, and every check costs a request and a wait for an answer.
You spot a fake invoice by checking it against your own records before paying: did anyone in your organisation order the goods or service, is the supplier one you already pay, and do the bank details match the ones you hold? The Swedish Police Authority describes the most common case plainly: invoice fraudsters send "fakturor på sådant du inte beställt", invoices for things you never ordered.
A fake invoice usually looks like a real one. It copies a familiar layout, uses a supplier name close to a real one, or presents an offer in small print so that the reader takes it for a bill. Another variant replaces the bank details of a real supplier, so a genuine invoice is paid into the wrong account.
The Swedish Police Authority's advice to anyone who receives a fake invoice is to dispute the invoice first, by letter or email, and then report the crime. Do not pay an invoice for something you did not order. Keep the original invoice, because the police may need it as evidence. Call the supplier back on the number you already hold, never on the number printed on the invoice.
You prevent document fraud by making documents checkable at the source, so that the receiver confirms a document with the issuer instead of judging its appearance. Detection catches forgeries after they arrive; prevention means a forged document fails the first check anyone runs.
An HR team, an admissions office or an accounts payable desk can close most gaps with a written verification policy:
Issuers carry the strongest lever, because only the issuer can make a document provable. Every forged copy of a diploma or licence borrows the issuer's name. An issuer that publishes each document with its own verification, on its own domain, gives every receiver a way to tell the original from the copy in seconds.
Ask the organisation that issued your diploma or certificate for a verifiable digital version, and share the verification link instead of a scanned copy. Report any fake copy of your credential to the issuer.
Blockchain verification stops forged documents by recording a fingerprint of each genuine document on a public blockchain at the moment of issue, so that any later change to the document no longer matches the record. The record sits on a ledger that no single company controls, and nobody can quietly edit it afterwards.
The fingerprint is a SHA-256 hash, a 64-character code calculated from everything in the document. Change one letter of the holder's name and the code changes completely. A forger can copy the look of a document; a forger cannot make the altered document produce the issuer's fingerprint. A longer explanation is in what blockchain certificates are, and the method behind it in how to make a document tamper-proof.
Permanent availability: Documents remain accessible and verifiable forever. No lost certificates, no replacement requests, no verification delays.
TRUE Original prevents document fraud by issuing every document as a blockchain-secured TRUE document that anyone can check in TRUE Verify, free and without an account. The check compares the document with the fingerprint anchored on a public blockchain at issue, so a forged or altered copy fails it.
TRUE Original creates, issues and verifies certificates, diplomas, licences, memberships, awards and other documents. Each TRUE Original document carries a QR code and a verification link, and it opens on the issuer's own domain, so the receiver checks the document where the issuer lives. TRUE is blockchain-agnostic: TRUE Original uses several public blockchains, among them Ethereum and Polygon, and a customer who wants a specific chain can have it.
A receiver who gets a TRUE document has two ways to check it. Scan the QR code, or paste the document link, document ID or PDF into TRUE Verify. TRUE Verify returns the result in seconds, and nobody has to phone the issuer.
Issuers send TRUE Original documents from the dashboard, through a REST API connected to their learning platform or CRM, or by structured email. TRUE Original is Cyber Hygiene Certified by OneMore Secure. TRUE is trusted by 200+ issuers across 15+ countries, including educational institutions, certification bodies, professional associations, government agencies, and luxury brands. TRUE Original has issued over 900,000 documents. The difference from a paper or PDF document is the check: a TRUE document proves itself.
"By incorporating blockchain technology into document verification processes, industries can greatly improve their ability to prevent document fraud. Whether in education, compliance, or the realm of high-end products, the security provided by blockchain ensures that documents retain their authenticity and trustworthiness."
Patrik Slettman, co-founder, TRUE Original
Organisations that want to issue documents this way can book a demo with TRUE Original.
Document fraud is the creation, alteration or misuse of a document to make someone accept false information as genuine. Europol's definition also covers genuine documents obtained by deception or misrepresentation.
You detect fraudulent documents by confirming them with the issuer: scan the QR code or verification link, check the issuer's register, or ask the issuer directly. Visual red flags such as wrong document numbers, mismatched fonts and editing marks are a first filter only.
You prevent document fraud by issuing documents that anyone can check at the source and by accepting no document without independent confirmation. A TRUE Original document is anchored on a public blockchain and can be checked by anyone in TRUE Verify, free and without an account.
Document fraud is part of most fraud cases. In the ACFE's Occupational Fraud 2026 report, creating fraudulent physical documents was the most common concealment method (39% of more than 2,400 cases), followed by altering physical documents (33%).
Do not pay an invoice for something you did not order. The Swedish Police Authority advises disputing the invoice first, by letter or email, then reporting the crime, and keeping the original invoice as evidence.
Scan the QR code on the TRUE Original document, or paste its link, document ID or PDF into TRUE Verify at trueoriginal.com/verify. TRUE Verify is free, needs no account, and compares the document with the fingerprint anchored on a public blockchain when the document was issued.
According to UNODC, fraudulent documents are created, altered or obtained by deception: counterfeit documents made from scratch, forged documents altered from genuine ones, fraudulently obtained documents and genuine documents misused by someone else. Generative AI adds documents created from a prompt. A created or altered copy of a TRUE Original document fails the check in TRUE Verify.
Every organisation we work with started with the same question. Give us thirty minutes and we will show you what your own documents would be worth.
Book a callNot sure where to start? Let us help!
Trusted by leading organisations worldwide
