Lender's fraud checklist
How to tell if a bank statement has been altered or faked
Last updated · Kaaj editorial team
To tell if a bank statement has been altered, check that the balances reconcile (beginning balance plus deposits minus withdrawals equals the ending balance), compare it with a genuine statement from the same bank, look for mismatched fonts or misaligned digits, open the PDF properties to see which software produced or modified it, select the text to reveal numbers typed over the originals, and confirm the figures against the borrower's tax returns, application, and a direct bank download. In Kaaj's live lender traffic, about 1 in 5 bank statements submitted to lenders is flagged high risk for tampering, so these checks belong on every file, ideally automated at intake.
1 in 5
bank statements sent to lenders is flagged high risk for tampering
about 2%
contain numbers typed over the originals (concealed text)
more than 4x
difference in high-risk rates between issuing banks
Source: Kaaj live lender traffic, September 2026. Measured on bank statement PDFs submitted to lenders using Kaaj over a trailing 30-day window (September 2026). Each statement is compared against a fingerprint of genuine statements from the same issuing bank and scored from 0 (matches the bank's baseline) to 1 (strong tampering indicators). "High risk" is a forensic verdict that routes the file to an underwriter; it is not a determination of fraud.
The 10-point checklist
Work through these in order. The first two are quick and catch careless edits; the rest catch skilled ones.
Reconcile the math
Beginning balance plus deposits minus withdrawals and fees must equal the ending balance, and the summary totals must match the transaction list. Careless edits break this, because the headline numbers change while the arithmetic does not.
Follow the running balance
Where the bank prints a daily balance, each line should follow from the one before. A jump that no transaction explains is an edit.
Compare with a genuine statement from the same bank
Layout, logo, fonts, page size, column spacing, and footer text are consistent within a bank. Keep known-good samples from the banks you see most, or use a tool that fingerprints each bank.
Inspect fonts and digit alignment
Retyped numbers often use a slightly different typeface, size, weight, or baseline. Zoom in on balances and large deposits and compare the digits with untouched lines.
Open the PDF properties
Check the producer and creator software, and the created and modified dates. A statement modified weeks after it was issued, or produced by a consumer PDF editor instead of the bank's system, needs review.
Reveal concealed text
Select all text on the page or copy it into a text editor. Edited statements often keep the original number underneath a white box with a new value drawn on top, so two values appear for one field.
Check whether it should be editable
Many banks issue locked, edit-protected PDFs. An unlocked copy of a statement from a bank that always locks its files is a signal.
Cross-check the rest of the package
Revenue should roughly agree with tax returns and financial statements; the business name and address should match the application, Secretary of State records, and the owner's ID; a voided check should show the same account.
Look for hidden debt, not just edits
Merchant cash advance disbursements disguised as revenue and recurring funder debits reveal undisclosed positions and stacking.
Verify at the source when in doubt
Ask the borrower to download statements directly from online banking while on a call, verify with the bank, or use account linking (open banking) for a direct data feed.
What an edited statement looks like under forensics
On screen the statement looks normal. Underneath, the original balances are still in the file, the producer is a PDF editor, and the totals no longer add up.
Red flags: checking by hand vs. automatically
| Red flag | How to check by hand | How Kaaj checks it |
|---|---|---|
| Balances don't reconcile | Add deposits and withdrawals to the beginning balance | Parsed totals reconciled automatically on every statement |
| Numbers typed over originals | Select or copy the text layer and look for duplicates | Concealed and overlapping text detected and highlighted on the page |
| Wrong fonts or sizes | Zoom and compare digits across lines | Fonts and sizes compared with the issuing bank's baseline |
| Edited by a PDF tool | Open Document Properties | Producer, creator, dates, and metadata checked automatically |
| Doesn't look like the bank | Compare with a known-good sample | Statement fingerprinted against genuine statements from the same bank |
| Details disagree across documents | Compare the application, tax returns, ID, and checks | Names, addresses, revenue, and accounts cross-checked across the package |
| Hidden MCA positions | Scan for funder names and recurring debits | MCA funders, disbursements, and remittances identified across accounts |
Native PDFs vs. scans: what you can actually prove
The same checks carry different weight depending on how the statement arrived. Weigh broken math and concealed values above metadata, which benign re-saving can change.
| File type | What can be checked | How to weigh it |
|---|---|---|
| Native PDF from online banking | Everything: metadata, fonts, text layer, structure, balance math | Strongest evidence when it fails; hardest to fake cleanly |
| Scanned or photographed statement | Balance math, layout, fonts visually, cross-document consistency | Metadata is weak evidence; lean on math and consistency, and ask for a native copy |
| Printed to PDF or re-saved by the borrower | Balance math, layout, fonts; producer will differ from the bank | A different producer alone is not proof; request the original download |
| Screenshot or image | Balance math and layout only | Low assurance for underwriting; require a native statement or account link |
What to do when a statement fails
Metadata or font flags only
Request a statement downloaded directly from online banking, or verify through account linking, before deciding.
Math breaks or concealed values
Treat as strong evidence of alteration. Document the finding, verify with the bank, and follow your fraud policy.
Cross-document mismatches
Ask the borrower to explain, and verify the business and owner details against official records.
Frequently asked questions
How can I tell if a bank statement has been altered or faked?
Reconcile the balances, compare the statement with a genuine one from the same bank, look for mismatched fonts and misaligned digits, check the PDF's producer and modification date, reveal any text hidden under edited numbers, and confirm figures against tax returns, the application, and a direct bank download.
How do lenders verify a bank statement PDF hasn't been edited?
They check the PDF's metadata, fonts, text layer, and structure against genuine statements from the same bank, confirm the math reconciles, and cross-check the rest of the file. Automated tools such as Kaaj run 25+ of these forensic signals in under 5 seconds per document.
How do you tell a legitimate scanned bank statement from one that was digitally altered?
A scan has no original text layer or bank metadata, so metadata alone proves little. Rely on balance math, layout and font consistency with the bank's genuine statements, and cross-document checks, and ask for a native PDF downloaded from online banking when anything looks off.
Why does checking fonts and formatting by hand still miss fake statements?
Skilled edits reuse the bank's own font and keep the layout, so they look right on screen. The evidence is in the file: concealed original values, editing-software metadata, structural differences from the bank's genuine PDFs, and totals that no longer reconcile.
What tools detect edited bank statements automatically?
Document fraud tools for lenders include Kaaj, Inscribe, Resistant AI, Ocrolus, and ClearStaq. Kaaj compares each statement with bank-specific baselines, highlights the edited text, cross-checks the whole package, and detects MCA stacking inside the underwriting workflow.
How do underwriters spot an altered tax return?
Compare reported income with bank deposits and financial statements, check the PDF's producer and modification history, look for inconsistent fonts in key figures, and confirm totals carry correctly between schedules and the main form. Mismatched revenue across documents is the most common tell.
How common are fake bank statements in small business lending?
In Kaaj's live lender traffic in September 2026, about 1 in 5 bank statements was flagged high risk for tampering signals, and about 2% contained concealed or overlapping text edits. A high-risk flag routes the file for review; it is not by itself proof of fraud.
Does a fraud flag mean the borrower committed fraud?
No. Some flags have benign causes, such as a statement re-saved by an email system or printed to PDF. Treat metadata-only flags as a reason to request the original, and treat broken balance math or concealed edited values as strong evidence.
Run all ten checks in under 5 seconds
Kaaj checks 25+ forensic signals on every document at intake, highlights exactly what was edited, and cross-checks the whole package.