Short answer: a PDF of a bank statement, pay stub or ID photo is no longer good evidence on its own, because AI tools can produce ones that look right and add up. Lenders, landlords and employers are better served by getting the document or the data from the issuer. Applicants are better served by keeping the original file exactly as downloaded, and a dated record of it.
Last checked 12 November 2026. General information, not legal, immigration or lending advice. TimeBinder does not detect AI or prevent fraud, and a dated record is not proof of authorship, ownership or that a document is genuine.
Table of Contents
Why a good-looking PDF proves less than it did
For years, a simple sanity check caught many forged statements: the running balance did not add up, the fonts were off, the logo was blurry. Generative tools have weakened those checks. A model can keep a running balance, copy a bank’s layout and invent plausible transactions. Visible quality is now the baseline for a forgery, not a sign of a real document.
The US Treasury’s FinCEN said in November 2024 that it had seen an increase in suspicious activity reports describing deepfake media in fraud schemes, often to get past identity-verification and due-diligence checks. In February 2026 a man pleaded guilty in New York to running “OnlyFake”, a site that US prosecutors say sold more than 10,000 AI-generated images of identity documents, mostly to get past know-your-customer checks at banks and crypto exchanges. He was sentenced to time served on 26 June 2026, according to the court’s order, and agreed as part of his plea to forfeit $1.2 million.
If you are the one reviewing documents
The most reliable step is to stop treating the PDF as the source. Prefer, in this order:
- Data from the issuer. Consent-based bank-data connections, direct confirmation from the bank, or a verification form sent straight from the institution to you. US mortgage guidance (Fannie Mae’s Selling Guide) lets lenders ask the depository institution directly for a signed verification of deposit, and sets out what a borrower-supplied statement must show.
- Documents you can check with the issuer. Call the employer or bank on a number you found yourself, not one printed on the document.
- Cross-checks. Does the pay stub fit the tax record, the bank deposits and the stated employer? Forgers usually fake one document at a time, and inconsistencies between documents are a common red flag, including in FinCEN’s list.
- Triage tools last. Metadata, font and layout checks, and AI-document scanners can flag a sloppy fake. They cannot show that a clean-looking file is genuine, and metadata can be edited or stripped. Treat the result as a reason to look closer, never as approval or proof.
Whatever you decide, write down what you checked, with whom and when. If the decision is questioned later, that record matters more than the PDF.
If you are the applicant and your real document gets doubted
Genuine documents get doubted too, especially once reviewers know fakes are common. These habits help:
- Download it yourself, from the source. Log in to your bank, payroll or employer portal and download the statement directly. Do not re-save it through a converter, a print-to-PDF step or a screenshot, because each step changes the file.
- Do not edit it. Not to hide an account number, not to crop a margin. If something must be redacted, keep the untouched original as well and say which is which.
- Keep the original and a record of when you got it. A SHA-256 fingerprint of the original lets anyone check that the file you later hold is the same one. You can make one in your browser with our hash checker; the file stays on your device. A TimeBind then records that those exact bytes existed no later than a recorded time. See how to prove a file existed before a date.
- Offer verification. Tell the reviewer they can confirm it with your bank or employer, or give consented access to your bank data if they offer it.
- Keep the surrounding trail. The email or portal message that delivered the document, the date you downloaded it and your own notes. A chain-of-custody log is a tidy way to do this.
What a TimeBind does and does not show here
A TimeBind is a dated, checkable record that an exact file existed no later than a recorded time and still matches. If you downloaded a statement on 3 March and made a TimeBind that day, you can later show that the file you hold is the same one you had then.
It does not show that the statement is genuine, that the bank issued it, or that its figures are true. If someone fakes a statement and then timestamps it, the timestamp will be real and the document still false. That is why issuer verification comes first and the dated record is a supporting layer. For the legal side of AI-made evidence see our guide for lawyers and the screenshots guide.
Limits
This page summarises public reports and general good practice. It is not lending, compliance or legal advice. Rules on document checks differ by country, regulator and lender, and some firms must follow specific verification standards. Ask your compliance team or adviser. Never submit an altered or invented document: doing so can be a crime and can sink an application.
Tools that can help
There is no affiliate link on this page: nothing here depends on a paid third-party tool. Our affiliate disclosure explains when we do use them.
Frequently Asked Questions
-
Can AI really make a convincing fake bank statement?
Yes. Public reports and fraud-prevention vendors say current tools can produce statements whose layout looks right and whose running balances reconcile. That is why an apparently perfect PDF is no longer good evidence on its own.
-
How can a lender or landlord check a bank statement?
The strongest checks come from the issuer: a consented bank-data connection, a direct confirmation from the bank, or a verification form sent from the institution straight to the reviewer. Metadata and layout checks are useful for triage, but they cannot confirm a clean forgery.
-
What should I do if my genuine statement is questioned?
Offer to have it verified with the bank, show the original file you downloaded yourself, and keep the email or portal trail that delivered it. A dated record of the original file can show it has not changed since you downloaded it.
-
Does a blockchain timestamp prove a bank statement is real?
No. A TimeBind records that an exact file existed no later than a recorded time and still matches. It does not show that the bank issued it or that the contents are true.
-
Can I edit a statement to hide private details?
Keep the unedited original as well, and be open about which version is which. Never change figures, dates or names. Altering a document you submit can be treated as fraud.
Sources checked
- FinCEN, Alert on fraud schemes involving deepfake media targeting financial institutions (FIN-2024-Alert004), November 2024.
- BleepingComputer, Ukrainian man pleads guilty to running AI-powered fake ID site, and Biometric Update, Guilty plea in OnlyFake digital ID scheme, 27 February 2026. Both read in full (10,000+ fake identity documents, mostly used to get past know-your-customer checks; $1.2 million forfeiture agreed). The 26 June 2026 time-served sentence is from the court’s order in United States v. Nazarenko, S.D.N.Y. 1:24-cr-00634, read as reproduced by a legal database.
- Fannie Mae, Selling Guide B3-4.2-01, Verification of Deposits and Assets.
- VerifyDoc, How can lenders detect AI-generated bank statements? A vendor’s own blog, used only for the point that clean fakes can reconcile and that issuer checks are the conclusive step; its statistics are not repeated here.
Keep a dated record of the original you downloaded
Your first Pooled TimeBind is free, with no credit card required. After that, TimeBinds start from US$5, and an ASAP TimeBind is US$15. Click here to start, or see plans and pricing.
