Document Fraud-as-a-Service: AI Fake Generators in Canada

Document fraud-as-a-service is a business model in which fraudsters sell ready-made, AI-generated fake documents — pay stubs, bank statements, ID documents, invoices, proof of address — through websites and Telegram channels. Buyers need no design skill: they pick a template, enter a name and figures, and receive a convincing file within minutes for a few dollars. This industrializes forgery in a way isolated Photoshop edits never could, because the same infrastructure serves thousands of buyers at once, from Vancouver to Halifax.

This article is provided for informational purposes. Regulatory requirements evolve — consult FINTRAC guidance or a qualified compliance adviser for your specific situation.

What is document fraud-as-a-service?

Document fraud-as-a-service is the commercial packaging of forgery tools and templates into a paid product, sold on demand regardless of technical skill. Instead of a single forger manually editing one file, an operator builds a catalogue — pay stub layouts for major Canadian employers, bank statement formats matching the Big Five banks, ID templates for dozens of countries — and lets customers self-serve.

The model mirrors legitimate software-as-a-service: pick a document type and issuer, submit the details to print on it, pay by card or crypto, and receive the file near-instantly. Prices are low enough to make the transaction disposable, which removes cost as a natural deterrent.

Sites such as Doc Juicer illustrate the scale of the approach, offering more than 200 ready-made pay stub templates, according to resistant.ai. A buyer does not need to know what a genuine pay stub from a given employer looks like — someone else already built and tested the template. The same pattern repeats for bank statements, proof-of-address letters and identity documents, sold through websites and closed Telegram groups that increasingly target Canadian institutions alongside American and European ones.

How AI generators and Telegram kits work technically

The pipeline behind these services combines several generative techniques, each suited to a different part of the document. Large language models produce coherent text and figures: job titles matching a stated employer, addresses resolving to real Canadian postal codes, transaction narratives reading like a genuine bank statement rather than placeholder text. Template PDFs — often reverse-engineered from genuine documents — provide the visual scaffold: logos, fonts, layout grids, security-style watermarks. Generative adversarial networks and diffusion models handle the hardest part for identity documents: synthesizing a photorealistic face and micro-print on a driver's licence or passport page belonging to no real institution.

The most consequential case study is OnlyFake, a fake-ID generator that used exactly this combination to produce convincing driver's licences and identity cards. US federal authorities shut the site down in February 2026 and pursued a criminal case against its operator — background from resistant.ai. The takedown did not end the market: a near-identical service reopened within weeks as MacDoc, reusing the same templates — evidence that shutting one storefront barely dents the underlying supply, a dynamic reflected in RCMP-led investigations into cross-border fraud rings.

Telegram is the preferred distribution channel: encrypted messaging, easy payment handling, searchable group discovery. Researchers identified 22 public Telegram channels and groups, in Chinese, Vietnamese and English, openly advertising tools to bypass know-your-customer checks at major institutions including Binance, BBVA and Revolut, according to tech-insider.org. These toolkits go beyond static documents: virtual webcam software injecting a synthetic video feed, stolen biometric templates, and deepfake video generators built to defeat liveness checks — expanding fraud-as-a-service from document forgery into live-verification evasion, a materially harder problem for Canadian banks, credit unions and money services businesses.

Document types, techniques and detection signals

The table below summarizes the main document categories sold through these services, the generation technique used, indicative pricing, and the detection signal verification systems look for.

None of these signals is decisive alone — fraud-as-a-service templates are built to satisfy the checks a busy reviewer runs informally. Detection depends on several signals together.

Why manual and visual review no longer works

A document produced by a fraud-as-a-service template is designed to pass a glance: the logo is correctly placed, the font is close enough, the numbers add up on first inspection. That is the point of selling a template rather than a one-off forgery — it has already been tuned to defeat the review process most organizations use.

According to the ACFE 2024 Report to the Nations, only 37% of document fraud is caught through direct human review. That gap matters at a national scale: Canadians reported more than 108,000 fraud cases in 2024, with total losses exceeding $638 million CAD — the highest on record, according to canadianlenders.org.

A reviewer trained to spot amateur Photoshop work — misaligned text, mismatched fonts, cloning artifacts — is not equipped to catch a document generated end-to-end by a model trained on thousands of genuine examples. See our explainer on how generative tools produce convincing fake paperwork for more on the underlying methods.

What compliance teams are asking

Compliance teams at Canadian banks, credit unions and mortgage lenders often ask how to keep pace when new templates, generators and storefronts appear faster than any checklist can be updated. A recurring frustration is that a document can pass every visual check a junior reviewer knows to run, yet still be entirely synthetic.

Property managers and leasing agents raise a related concern: with pay stubs and proof-of-address letters among the most requested documents in a tenant application, several ask whether a document upload alone is still reasonable. Onboarding teams at fintechs and money services businesses ask a version of the same question about live verification — given that some fraud-as-a-service kits now include virtual webcam and deepfake tools aimed at KYC video checks, is a liveness check still reliable on its own.

The shared thread is process, not any single tool: teams want automated signals layered under human judgment, so a decision rests on structural and forensic checks rather than how a document looks. Our checklist of signs a document may be AI-generated gives reviewers concrete indicators.

Multi-layer detection: beyond the visual check

Effective detection against templated fraud combines several independent layers, so a document has to pass all of them, not just one.

Metadata analysis examines the file itself — creation and modification timestamps, software signatures embedded in the PDF, inconsistencies between a claimed issue date and the actual production history. A pay stub supposedly issued eighteen months ago carrying metadata showing it was created yesterday is an immediate red flag.

Cross-document validation checks a submitted document against other available data points: does the employer named on a pay stub actually exist, does an address match records held elsewhere, do the figures on a bank statement reconcile internally. This catches errors template generation tends to introduce when the underlying data was invented rather than pulled from a genuine source.

Machine-learning forensic signals look for the statistical fingerprints generative models leave behind — artifacts in font rendering, unnatural pixel-level patterns around security features, structural inconsistencies invisible to the eye but detectable computationally. This is where platforms like CheckFile fit into an existing verification stack: CheckFile adds detection of synthetic content as a complement to the structural and consistency checks compliance teams already run, rather than replacing them. No single layer catches every forgery, and no vendor should claim otherwise — the value comes from stacking independent checks so a document engineered to pass one test still has to clear the others.

CheckFile's approach to document security and verification infrastructure supports banking and KYC workflows and real estate and leasing screening.

The Canadian legal and regulatory framework

Entities in scope of the Proceeds of Crime (Money Laundering) and Terrorist Financing Act (PCMLTFA) are expected by FINTRAC to apply risk-based customer due diligence, meaning identity and supporting documents must be verified as genuine, not merely present. A reporting entity that accepts an AI-generated pay stub or bank statement without adequate checks can be found non-compliant even where the fraud was not detected, because the regulatory expectation concerns the adequacy of the control, not the outcome of any single case.

FINTRAC's own research underscores the urgency: at the second Financial Industry Forum on Artificial Intelligence (FIFAI II), co-hosted with the Global Risk Institute in late 2025, the resulting report explicitly flagged that "sophisticated deepfakes, synthetic identities, and automated fraud-as-a-service tools are eroding traditional controls," and that misuse by criminals is accelerating faster than most institutions can adapt, according to globalriskinstitute.org.

On the criminal side, submitting a fabricated document to obtain a benefit — a lease, a loan, an account, a job — typically falls under the fraud and forgery provisions of Part XII.2 of the Criminal Code of Canada (sections 366 to 368), covering forgery, uttering a forged document and possession of instruments for forging documents. This applies both to the person submitting the document and, in some circumstances, to an operator running the platform that supplied it.

Privacy obligations layer on top of anti-fraud duties: organizations handling the personal information embedded in these documents — names, addresses, SINs, financial details — must comply with PIPEDA, and, in Quebec, the more stringent Loi 25. Firms operating across multiple provinces should also account for variation in provincial regimes, since a control adequate in one jurisdiction is not automatically adequate everywhere in Canada.

None of this removes the need for proportionate, well-evidenced verification — regulatory expectations and criminal liability both assume firms apply reasonable, documented checks rather than relying on a document simply "looking right." Adding AI-generation signals as a complement to your existing controls is one practical way to close that gap — see CheckFile's deepfake and AI document detection capability.

Frequently Asked Questions

What is document fraud-as-a-service?

A business model where fraudsters sell ready-made, AI-generated fake documents — pay stubs, bank statements, ID cards, invoices — through websites or Telegram channels, delivered within minutes for a small fee and requiring no design skill from the buyer.

How is this different from someone editing a document in Photoshop?

A Photoshop edit is a one-off effort limited by the skill of the person doing it. Fraud-as-a-service packages the forgery into a reusable template sold to many buyers, scaling the same quality bar to thousands of transactions.

Can these AI-generated documents be detected?

Many can be, but not through visual review alone. Metadata analysis, cross-document validation and machine-learning forensic checks each catch signals a human eye typically misses.

What should a Canadian business do if it suspects it received a fraudulent document?

Follow the internal escalation process, retain the file and metadata as evidence, and report to local police (or the RCMP for cross-border or organized activity) and the Canadian Anti-Fraud Centre. Reporting entities under the PCMLTFA should also review whether the incident points to a gap in existing FINTRAC-mandated due diligence controls.

Does using a detection tool like CheckFile guarantee fraud will be caught?

No tool can guarantee every forgery will be caught, and any vendor claiming otherwise should be treated with caution. CheckFile adds AI-generation detection signals as a complement to a firm's existing controls, strengthening a layered process rather than replacing human judgment.

This article is for general informational purposes and does not constitute legal or regulatory advice. For a broader overview of the fraud data landscape, see our fraud data guide, and consult FINTRAC guidance or a qualified compliance adviser for guidance specific to your organization.