Forged Certificates of Currency: Detecting Fraud in Australia

In Australia, the document most procurement and site teams call a "certificate of insurance" is more precisely a certificate of currency: a one-page summary a broker issues in minutes, confirming a named policy existed, with stated limits, at the moment it was produced. That gap between "proof it existed" and "proof it still applies" is what a forged certificate exploits during onboarding. This article covers the certificate itself — how the insurer name, policy number, limits, expiry date and letterhead get fabricated or altered, and how a risk team catches it — not licensing and tax compliance documents, which our guides to forged vendor compliance certificates and subcontractor compliance documents already cover.

What a Genuine Certificate of Currency Actually Proves

A certificate of currency confirms a policy's insurer, number, limits and expiry as they stood on the day it was issued, and nothing about whether that position still holds later. The Tasmanian Consumer, Building and Occupational Services describes it as proof a policy is currently in force, not the policy itself and not a guarantee of continued cover (CBOS, What is a Certificate of Currency?). Unlike a company search on ASIC's register, no single public database lets an onboarding team confirm every insurer's active policies in real time, which is why the certificate carries so much unearned weight in a vendor file. A certificate can be entirely genuine when submitted and still misrepresent a contractor's position weeks later, because the policy lapsed at renewal, was cancelled for non-payment, or was amended without a fresh certificate being issued. Forgery is a distinct problem: a document that misstates the insurer, policy or limits from the outset, produced to pass a paperwork check, not to summarise a genuine placement.

Six Ways Fraudsters Forge a Certificate of Currency

Forged certificates cluster around a handful of edits, since the goal is clearing a document review, not creating a binding record. A fabricated insurer name is the crudest version — invented, or a real insurer misspelled just enough to survive a quick read but fail a search of ASIC's registers. A fake or reused policy number follows the same logic: plausible in format but matching no policyholder, or the wrong one, once the insurer confirms it directly.

Altered coverage limits and expiry dates are the most common edits, since changing a few characters on a genuine-looking layout is faster than fabricating a document from nothing — a $5 million public liability limit typed over as $20 million, or an expiry date pushed six months forward on a lapsed certificate. Cloned broker letterhead extends the same tactic to provenance: a logo copied from a real brokerage, sent from a domain one character off, so a distracted reviewer reads the name and skips the address. The last category is the doctored PDF itself, edited rather than recreated from scratch, which is why mismatched fonts or a rescanned-looking photocopy are often the first visible tell.

Manual document review across all fraud types catches only around 37% of cases, with a median detection delay of 87 days, according to the ACFE's 2024 Report to the Nations (ACFE, 2024 Report to the Nations) — long enough for a forged certificate to sit unchallenged through onboarding and well into an active contract before anyone checks it against the issuing insurer.

Red Flags in a Suspect Certificate of Currency

The strongest indicators sit in the fields a fraudster edits under time pressure, not in the document's overall polish, since a competent forger can make a certificate look professional while leaving inconsistencies in the details that matter.

How to Verify a Certificate Rather Than Trust It

Verification means confirming the certificate's contents with a party that has no reason to lie, not re-reading the document more carefully. The channels available differ in speed, reliability and scalability, and one — a public register — is a genuine point of difference for Australian residential construction.

Anyone can search the free public HBC Check register by property address, certificate number or licence number to confirm a NSW builder or tradesperson has current Home Building Compensation Fund cover, according to SIRA (Verify NSW, Home Building Compensation Check) — a check that does not exist for most commercial liability policies, where a broker or insurer contact remains the only route. Before calling any number, confirm the broker or insurer holds an Australian Financial Services (AFS) Licence through ASIC's registers, since a number printed on the certificate proves nothing when the same fraudster can staff it (ASIC, AFS Licensees).

Legal Exposure for Accepting a Forged Certificate

Accepting a forged certificate does not just leave a business exposed on paper — it sits inside a regulatory structure where APRA and ASIC split responsibility, and several states layer compulsory, project-specific insurance on top of general liability cover. APRA supervises insurers' financial soundness so a claim can actually be paid, while ASIC regulates how insurance is sold, disclosed and administered, including licensing the brokers who issue certificates (ASIC, the ASIC-APRA relationship). Neither maintains a public, real-time database of certificates, so direct verification with the issuing party remains necessary.

Workers compensation insurance is the closest Australian analogue to the UK's compulsory employers' liability cover. Under section 155 of the Workers Compensation Act 1987 (NSW), an employer that fails to hold the required policy faces a maximum of 500 penalty units — up to $55,000 at the current $110 unit value — or six months' imprisonment, or both (NSW Workers Compensation Act 1987, s155); every other state runs an equivalent scheme with its own penalty. Whoever produced the forged certificate also risks a forgery charge: making a false document to obtain a financial advantage carries up to ten years' imprisonment under section 253 of the Crimes Act 1900 (NSW) (NSW Crimes Act 1900, s253), with Victoria's equivalent offence carrying the same maximum (Victoria Crimes Act 1958, s83A). A contractor who engaged an uninsured subcontractor on a forged certificate can still face the underlying liability if a claim arises and no genuine policy responds.

Where Certificate Checks Fit Into Wider Vendor Pre-Qualification

Certificate verification on Australian residential construction sits inside something the UK's CDM 2015 framework has no equivalent for: a mandatory, state-run home warranty scheme layered on top of ordinary contractor liability cover. In NSW, licensed contractors taking on residential work over $20,000 must hold Home Building Compensation Fund cover through icare before starting work or taking a deposit (icare, What is icare HBCF?). Queensland runs a parallel Home Warranty Scheme through the QBCC, compulsory on most residential work over $3,300, while Victoria requires Domestic Building Insurance through the VMIA on work over $16,000 (QBCC, Queensland Home Warranty Scheme; VMIA, Domestic Building Insurance). These schemes cover homeowner losses if a builder becomes insolvent or is deregistered — a different risk to the liability cover a certificate of currency evidences — so a head contractor may need to verify both, not assume one covers both.

What to Do When a Certificate Looks Wrong

Pause onboarding or payment before raising the concern with the supplier, since an early confrontation can prompt evidence destruction or a hastily produced second forgery that is harder to disprove. Teams often ask whether calling the number printed on a certificate counts as verification — it does not, since that number is exactly what a fraudster controls; the reliable route is a contact sourced independently, through ASIC's AFS licensee register, the NSW HBC Check register where it applies, or a prior trusted communication. A related question is what happens if a certificate was genuine when submitted but the policy lapsed mid-contract unnoticed — periodic re-verification, not a one-off check at onboarding, is what catches that gap.

Preserve the original file and its metadata rather than a screenshot, since edit history is often the clearest evidence a PDF's text layer was altered after issue. Report suspected misconduct to ASIC, report the forgery through ReportCyber or the Australian Federal Police, and notify the broker or insurer whose identity was cloned, since they have a commercial and regulatory interest in a fraudster using their name.

Building Systematic Verification Into Onboarding

Manual checking does not scale once a business manages renewals across dozens or hundreds of subcontractors, since every expiry date and new supplier needs an independent call, letter or register lookup, not a five-second read. Platforms such as CheckFile apply structural, metadata and cross-document analysis to submitted certificates, flagging inconsistent fonts, edited PDF layers, and mismatches against previously seen broker templates. CheckFile's methodology combines structural, metadata and cross-document analysis, described as high detection coverage rather than a fixed percentage, and contextual scoring keeps false-positive handling low, distinguishing a broker's legitimate template changes from genuine signs of tampering.

An additional AI-generation signal layer is deployed as a complement to those structural checks, depending on client configuration, not a replacement for verifying the policy directly with the insurer or broker. For document sets where AI-generated fraud is a specific concern, see CheckFile's AI-generated document detection, used alongside the checks above, not instead of them.

For the construction and facilities sector, see CheckFile's solutions for construction and BTP. Teams evaluating a platform can review CheckFile's security architecture or get in touch, and the document compliance guide sets out the wider framework this fits into.

Frequently Asked Questions

How can I tell if a certificate of currency is forged without contacting the insurer?

Visual checks alone are unreliable: mismatched fonts, inconsistent formatting, or a certificate that looks rescanned are useful clues but not proof. The only conclusive check is confirming the insurer, policy number and limits directly with the broker or insurer, contacted through an independently sourced number or ASIC's AFS licensee register.

Does a certificate of currency guarantee the coverage is still active?

No. A certificate reflects the policy's status when issued and carries no guarantee it remains in force, per the Tasmanian CBOS definition. A policy can lapse, be cancelled for non-payment, or be amended after the certificate was sent, which is why periodic re-verification matters as much as the initial check.

Is the NSW HBC Check register useful outside residential building work?

No, its scope is limited to Home Building Compensation Fund cover for licensed residential builders and trades in NSW, on work generally over $20,000. It does not cover commercial public liability, professional indemnity, or other states' home warranty schemes, each with its own register or verification channel.

What penalty applies for not holding compulsory workers compensation insurance?

It depends on the state, since each jurisdiction runs its own scheme. In NSW, section 155 of the Workers Compensation Act 1987 sets a maximum of 500 penalty units — up to $55,000 — or six months' imprisonment, or both, separate from any liability the employer still carries if an injury occurs while uninsured.

Should a single red flag on a certificate be enough to reject a supplier?

Not automatically, but it should always trigger direct verification with the insurer, broker, or relevant state register before onboarding continues. Two or more inconsistencies on the same certificate — a mismatched font alongside an unverifiable policy number, for example — is reasonable grounds to pause the relationship pending confirmation.

---

This article is for informational purposes only and does not constitute legal, insurance, or regulatory advice. Consult a solicitor or insurance broker for guidance specific to your organisation and state or territory. Legislation and guidance referenced are current as of 30 July 2026.