Detecting a Forged or Copy-Pasted Signature on a Document (Australia)

A forged signature is exposed by cross-checking three signals: the absence of natural stroke dynamics (pressure, speed, fluidity), a signature that is pixel-for-pixel identical across two separate documents — proof of copy-paste — and a compression or layer break around the signed area, detectable through forensic image analysis. For an Australian lender, conveyancer or insurer, this check matters at every stage of a file: a document signed by hand and then scanned can be edited in a few clicks, with the signature from one genuine contract photographed, isolated, and pasted onto an entirely different form.

According to the ACFE 2024 Report to the Nations, only 37% of document fraud is caught by manual controls, with an average detection delay of 87 days — a gap explained in large part by how hard it is to visually tell a genuine signature from one that has simply been moved between documents, source: ACFE, Occupational Fraud 2024: A Report to the Nations.

What counts as a forged or copy-pasted signature on a document

A forged signature is an unauthorised reproduction of someone's handwritten mark, applied to a document to suggest their consent or presence. Document fraud typically falls into four categories, from the crudest to the most industrialised.

In Australia, forgery of a signature is prosecuted mainly under state and territory Crimes Acts, which commonly set a maximum penalty of ten years' imprisonment for making or using a false document with intent to induce acceptance as genuine. Where the false document relates to a Commonwealth matter — a Medicare document, a passport, a document intended for a Commonwealth entity — section 144.1 of the Criminal Code Act 1995 (Cth) applies instead, also carrying a maximum of ten years' imprisonment, with a further ten years available under section 145.1 for knowingly using a forged document to induce a public official to accept it as genuine.

7 signals that expose a suspicious signature by eye

A careful review often catches a copy-pasted signature before any forensic tool is needed. Teams handling finance, tenancy or claims files should check these points as routine.

• Lack of fluidity: strokes that hesitate, stop abruptly, or change thickness unevenly point to a hand imitating rather than a hand signing naturally.
• Uniform pressure: a genuine signature varies in stroke width with the speed of the gesture; a perfectly even line is suspicious.
• Identical signature across several documents: two signatures that overlay pixel-for-pixel cannot come from the same repeated gesture — no one signs identically twice.
• A visible edge around the signature block: a halo, resolution shift or background colour change around the signature suggests an element pasted over the original image.
• Inconsistent scale or tilt: a signature that is slightly larger, sharper or angled differently from the rest of the document's text.
• No overlap with surrounding elements: a genuine signature sometimes crosses a line, a stamp or a box border; a pasted signature stays strictly inside its own bounding area.
• JPEG compression mismatch: the noise level around an edited area differs from the rest of the image — a signal picked up by error level analysis (ELA).

Forensic techniques that catch a copy-pasted signature

Beyond visual review, several technical methods confirm a forgery. Copy-Move Forgery Detection (CMFD) searches for statistically identical pixel regions within a single image or across several documents in the same file — a signature found identical on two separate agreements is a strong signal. Scan-Edit-Print (SEP) analysis identifies copy-paste and font-imitation forgeries from intrinsic properties of the scanned document, such as paper texture or the source scanner's grain. Character-level analysis measures the height, orientation and stroke thickness of handwriting inside bounding boxes to flag irregularities invisible to the eye.

A multi-layer approach combining visual forensics, structural consistency and cross-document validation remains the most reliable methodology for telling a genuine signature apart from a copy-pasted one, an approach reflected in academic research on copy-move forgery detection applied to identity documents.

On a purely digital file, metadata review completes the analysis: a recent modification timestamp on a document that should be old, or a distinct layer sitting around the signature in the source file, are major red flags — see our full EXIF metadata analysis guide for the methodology.

AI-generated signatures: a new category of fraud

Documents produced by generative models can now include a synthetic signature: a stroke that visually mimics handwriting without originating from any real gesture or from pasting an existing image. These signatures show no JPEG compression mismatch and no layer edge detectable by classic forensic methods, because they are generated directly within the final image. They require a separate detection layer focused on generative-model artefacts rather than traces of a manual montage. CheckFile's AI detection treats this class of forgery separately, as a complement to existing structural and forensic controls — without claiming to cover every possible generation technique on its own.

What Australian law says about a forged signature

Forgery of a signature typically falls under state and territory Crimes Acts, most carrying a maximum penalty of ten years' imprisonment, alongside the Commonwealth offence under section 144.1 of the Criminal Code Act 1995 for documents relating to Commonwealth matters. Regulated entities reporting suspicious transactions operate under AUSTRAC guidance issued pursuant to the AML/CTF Act 2006, which expects identity and document verification procedures to keep pace with evolving forgery techniques. Personal information handled during that verification falls under the Privacy Act 1988 and the Australian Privacy Principles, enforced by the Office of the Australian Information Commissioner. A properly executed electronic signature, recognised under the Electronic Transactions Act 1999 (Cth) and equivalent state legislation, carries a presumption of reliability that a copy-pasted signature image cannot claim, since it identifies no signer and proves no verifiable intent to sign.

Electronic signatures: prevention beats detection

The strongest defence against a copy-pasted signature is preventive: replacing the scan-sign-send cycle with an electronic signature, which binds each signature to an identity certificate and a timestamp that cannot be duplicated from one document to another. For documents already signed by hand and received on paper or as a scan — leases, powers of attorney, vendor contracts — forensic verification remains the only option available.

How CheckFile complements checks on signed documents

Law firms, real estate agencies and banking compliance teams handle signed documents every day whose authenticity determines whether an agreement is enforceable. CheckFile applies structural analysis, metadata review and cross-document consistency checks to every submitted file, complemented — according to client configuration — by an additional AI-generation signals layer for synthetic-signature cases. This approach sits within our full document verification guide and complements existing checks for forged stamps and seals, a fraud type often found alongside copy-pasted signatures in the same fraudulent file. The platform integrates via API into existing workflows — see our security posture and our pricing.

Frequently Asked Questions

Does a scanned, copy-pasted signature have legal value in Australia?

Not on its own. A signature image pasted into a word processor or PDF does not identify its author or carry verifiable intent to sign. In a dispute, the document can be held unenforceable, and whoever produced it risks a forgery charge under state or Commonwealth law if fraudulent intent is established.

How do you prove a signature was forged on a PDF document?

Proof usually rests on two complementary pillars: a forensic document examiner's handwriting comparison against verified reference signatures, and digital forensic analysis of the file itself (metadata, layers, compression level) revealing the traces of a montage. Both are admissible as evidence in Australian courts.

What is the difference between a blind forgery and a traced signature?

A blind forgery is a free imitation made without a model in view, often recognisable by its lack of confidence. A traced signature faithfully copies the outline of a real model by tracing or light-table, making it visually closer to the original but betraying itself through the total absence of the natural variation found in genuine, repeated signing.

Can AI generate a convincing fake handwritten signature?

Yes. Current image generators can produce a stroke that convincingly mimics handwriting without originating from any real gesture. These synthetic signatures bypass classic copy-paste detection methods and require a dedicated analysis layer focused on AI-generation artefacts.

What are the penalties for using a forged signature in Australia?

Signature forgery could land you up to ten years in jail under most state and territory Crimes Acts, with an equivalent ten-year maximum under the Commonwealth Criminal Code Act 1995 where a Commonwealth document or entity is involved. The actual sentence depends on the amount gained and the harm caused.