Skip to content
Case studiesPricingSecurityCompareBlog

Europe

Americas

Oceania

Industry14 min read

Fake Police Information Check Detection AI: Spotting Forged Criminal Record Checks

How Canadian employers detect fake police information checks and AI-forged criminal record checks: security features, CPIC verification, and automated document checks.

CheckFile Team
CheckFile Teamยท
Illustration for Fake Police Information Check Detection AI: Spotting Forged Criminal Record Checks โ€” Industry

Summarize this article with

A police information check is one of the few background-check documents that lets a Canadian employer make a legal, high-stakes decision โ€” hire, reject, place someone in a role involving children or vulnerable adults โ€” based on a document the employer usually cannot independently query. Unlike some national systems built around one issuing body, Canada has no single agency that prints a standardized certificate: checks are requested through a local police service, an RCMP detachment, or an accredited third-party screening provider, all searching the same national Canadian Police Information Centre (CPIC) database behind the scenes. That mix of one shared database and dozens of local issuing formats is exactly what forged checks exploit, and generative AI has made producing a convincing fake faster than ever.

This article is provided for informational purposes only and does not constitute legal or regulatory advice.

What a Fake or Forged Police Information Check Actually Looks Like

A fake police information check falls into three categories: a document fabricated from nothing, a genuine check with one or more fields altered, or a check that was accurate at issue but is now stale โ€” a new charge has been added since โ€” and is being passed off as current. Fabrication means copying a police service's letterhead, crest, and standard wording without ever applying for a real check. Alteration starts from a genuine document, often the applicant's own from an earlier role, and changes "record found" to "no record," swaps a basic Criminal Record Check for a Vulnerable Sector Check, or edits the issue date to look recent.

The newest variant does not touch a physical document at all: a generative-AI tool produces a convincing image of a police service's letterhead and result page, correctly formatted text and all, submitted as a PDF or photo upload rather than requested through the issuing service. Under Ontario's Police Record Checks Reform Act, 2015, a genuine police record check must clearly identify which of the three permitted check types was conducted โ€” criminal record check, criminal record and judicial matters check, or vulnerable sector check โ€” using the police service's standard template, and similar identifying detail is expected elsewhere even without a comparable provincial statute. None of that formatting discipline survives a digital upload built purely to look right on screen, which is exactly the gap an AI-generated image is built to fill.

Why Police Information Checks Are a Specific Fraud Target

Police information checks get forged because they sit at a legal chokepoint: certain roles cannot lawfully begin without one, and the applicant, not an independent registry, is usually the one presenting the result. Roles involving children or vulnerable persons generally require a Vulnerable Sector Check, which searches CPIC and local records for convictions and, in narrow circumstances, discloses record suspensions (formerly pardons) tied to sexual offences, per RCMP guidance on vulnerable sector checks โ€” most other roles are only eligible for a standard Criminal Record Check, which shows nothing sealed under a suspension. A candidate who knows a suspension would only surface on a Vulnerable Sector Check has a direct incentive to alter a standard check into a clean Vulnerable Sector result, betting a hiring manager will not know the difference.

The absence of any renewal mechanism compounds the problem. A check is a snapshot at issue; there is no Canadian equivalent of a subscription service that flags new charges automatically, so an employer cannot know whether new information has since been added without requesting a fresh check. Care providers, schools, and staffing agencies processing dozens of checks a week are most exposed, because volume makes an appearance-only check the practical default. Jobseekers are also targeted in the opposite direction: the Canadian Anti-Fraud Centre has documented scams charging candidates upfront fees for a fake police check as a condition of a fake job offer, with reported job-scam losses climbing from roughly $7 million in 2022 to more than $49 million in 2024.

Signs of a Forged or Altered Police Information Check

A forged check rarely fails on one obvious point; the tell is usually a combination of a missing verification feature and a detail that does not match the surrounding paperwork.

Signal Genuine police information check Common forgery indicator
Issuing authority Local police service, RCMP detachment, or accredited provider, with matching letterhead or crest Letterhead for a service that does not operate in the applicant's jurisdiction, or no issuer identified
Check type disclosed States which check was conducted โ€” criminal record, criminal record and judicial matters, or vulnerable sector Ambiguous or missing check-type field, or a vulnerable sector result claimed for a different check type
File or reference number Unique, verifiable by contacting the issuing service Missing, reused across candidates, or unrecognized by the issuer
Verification feature Signature, seal, or (for provider-issued checks) a tamper-evident PDF with an integrity code Absent, or a generic seal unrelated to the issuer's actual design
Result vs role requirements Consistent with what the role is legally entitled to request Vulnerable Sector result shown for a role only eligible for a basic check
Issue date vs role start date Consistent with when the application was made Presented as recent but the date is stale or visibly altered
File format Original document or verified digital delivery from the issuer Photocopy, screenshot, or re-typed PDF with no verifiable source

A candidate who only ever sends a screenshot or re-typed PDF, and who cannot produce a reference number the issuing police service recognizes, is presenting exactly the submission type that defeats every check in the table above.

Why "the check looks clear" is not the same as "the check is current"

A check can show no record and still be unreliable months later, since it never updates itself and Canada has no centralized service that pushes new information to an employer automatically. A charge laid after the check was issued will not appear on a document the employer still relies on. Roles involving ongoing contact with children or vulnerable adults are most exposed to this gap, which is why organizations engaging volunteers or long-tenured staff in those roles often request a fresh Vulnerable Sector Check annually rather than treating one check as valid indefinitely.

Ready to automate your checks?

Free pilot with your own documents. Results in 48h.

Request a free pilot

Verifying a Check the CPIC Way, Not Just by Appearance

CPIC itself is not a public lookup: it is restricted to police services and partner agencies such as Immigration, Refugees and Citizenship Canada, not to employers directly. An employer confirming a specific check has two practical routes: contacting the issuing police service directly, with the applicant's consent and the file or reference number printed on the document; or using an accredited screening provider that processes requests with police partners and issues a tamper-evident result an employer can re-verify, rather than accepting a document with no independent path back to the issuer. For Vulnerable Sector Checks specifically, RCMP policy requires fingerprint verification through its Canadian Criminal Real-Time Identification Service whenever a name and date of birth match an existing sexual-offence record suspension โ€” a safeguard a fabricated document cannot replicate.

Making a false document knowing it to be false, with intent that it be acted on as genuine, is an offence under section 366 of the Criminal Code of Canada, and knowingly using or dealing with a forged document as if it were genuine separately engages section 368. Both are hybrid offences: summary conviction carries up to two years less a day and a $5,000 fine, while conviction on indictment carries up to ten years, with no mandatory minimum. Both apply regardless of how serious the underlying record concealed by the forgery was, since the offence lies in the act of fabrication and use, not what was hidden.

Vulnerable Sector Checks, Record Suspensions, and Provincial Variation

Whether a role can lawfully trigger a Vulnerable Sector Check, and what it can disclose, depends on rules combining federal and provincial sources, and getting that wrong is a compliance issue independent of any forgery. The federal Criminal Records Act governs record suspensions, setting ineligibility periods of five or ten years depending on the offence and generally sealing a suspended record from disclosure โ€” with the narrow exception that a Vulnerable Sector Check can surface a sexual-offence suspension where a strict statutory test is met. In Ontario, the Police Record Checks Reform Act, 2015 sets that test out explicitly: non-conviction information can only appear on a vulnerable sector check, and only if the offence is on a prescribed list, the alleged victim was a child or vulnerable person, and the police service has reasonable grounds to believe the individual presents a risk. An employer that accepts non-conviction information outside that framework has a compliance problem even if the document itself is genuine.

Provincial variation is a genuine Canadian complexity a single-issuer system does not have to contend with. Ontario's statute standardizes categories and templates province-wide; other provinces and territories rely on individual police-service policy and RCMP guidance without equivalent legislation, so wording and turnaround time for a check can differ meaningfully by province. A check formatted for a jurisdiction the applicant has never lived in is itself worth querying before any forgery analysis begins. Federally regulated employers and RCMP-issued documentation are also subject to bilingual English/French requirements โ€” a check available only in English for a bilingual, federally regulated role is a mismatch worth a second look, separate from the distinct Quebec screening landscape.

Manual Review vs Automated Verification

Approach What it catches What it misses
Visual inspection of the document Crude fabrications, wrong letterhead, missing seal or signature AI-generated digital images, data-level alterations that preserve correct formatting
Tamper-evident PDF / integrity code check Whether a provider-issued document was altered since delivery Only covers checks routed through that provider, not documents supplied directly by the candidate
Direct query to the issuing police service Authoritative confirmation for a specific, doubted check Slow relative to volume hiring; not a routine first-pass check
Automated document verification Structural inconsistencies, tampered data, AI-generation artefacts, cross-checks against other submitted documents Cannot substitute for direct confirmation with the issuing service

Canadian organizations reported experiencing fraud, corruption, or other economic crime at a rate of 60%, against a 51% global average, according to PwC's 2022 Global Economic Crime and Fraud Survey for Canada. Separately, only 37% of occupational fraud is detected through active controls such as document review, with an average detection delay of 87 days, according to the ACFE 2024 Report to the Nations. Neither figure is specific to police checks, but together they describe the exposure a busy HR team creates by treating a check as verified once glanced at, rather than confirmed systematically at intake.

A recurring HR-forum question is whether a scanned or re-typed copy of a check is acceptable if the original is "still in the mail" โ€” screening providers consistently say no, since a copy cannot be traced to a verifiable file number. A second thread concerns candidates presenting a check obtained for a previous employer, on the assumption that a police check is portable rather than employer-specific and dated โ€” it generally is not, particularly for Vulnerable Sector Checks, which many organizations require renewed annually.

How CheckFile Complements CPIC-Based Checks

Contacting the issuing police service, where practical, confirms whether a specific check was genuinely issued; it does not confirm the document a recruiter is looking at is unaltered, correctly formatted, or free of AI-generation artefacts, which is the layer document verification adds ahead of that step. That methodology combines OCR extraction, metadata analysis, and cross-document business rules that validate multiple fields per document against each other, rather than relying on a single visual check. For agencies processing police information checks alongside work-authorization documents, references, and credential records, this catches mismatched issue dates, check types inconsistent with the role, and formatting inconsistent with the stated issuing service before a confirmation request goes out, or in the many cases where no fast confirmation channel exists at all.

AI-generation signals are available as an additional layer on top of those structural checks, depending on a client's configuration, and are designed to complement existing controls rather than replace them. That framing matters here, since the authoritative source of truth remains the issuing police service or CPIC itself: automated verification narrows down which checks warrant a direct confirmation request; it does not substitute for that request. Our guide to background check documents employers need to verify covers the work-authorization and credential checks that typically accompany a police information check, and our checklist of signs a document was AI-generated sets out cues that apply across document types.

The CheckFile security page has details on infrastructure and audit logging, and volume-based plans for agencies processing checks at scale are on the pricing page. For how AI-generated document detection fits alongside police-information-check verification, see CheckFile's AI and deepfake detection page โ€” the platform surfaces AI-generation signals as a complement to the checks an HR or compliance team already runs, not a replacement for direct confirmation with the issuing police service. For document verification requirements across sectors, see the industry verification guide, or get in touch to discuss a background-check volume specifically.

Frequently Asked Questions

How can I tell if a police information check is fake

Start with the issuer: a genuine check identifies the local police service, RCMP detachment, or accredited provider that issued it, states which of the three check types was conducted, and carries a signature, seal, or verifiable file number. Reject any screenshot, photocopy, or re-typed PDF submitted in place of a verifiable original, and confirm the file number directly with the issuer where practical.

Can employers check a police information check against CPIC directly

No. CPIC is restricted to police services and a limited set of federal and partner agencies โ€” there is no general public or employer lookup by name or file number. Employers can confirm a specific check only by contacting the issuing police service with the applicant's consent, or by using an accredited screening provider whose results are tamper-evident and verifiable.

Is using a fake or altered police information check a criminal offence in Canada

Yes, on two connected bases under the Criminal Code of Canada. Fabricating or altering the document is forgery under section 366, and knowingly using the forged document as genuine separately engages section 368. Both are hybrid offences carrying up to ten years on indictment, and both can apply even where the underlying record concealed was relatively minor.

Can a Criminal Record Check be legally treated as a Vulnerable Sector Check without reapplying

No. A Vulnerable Sector Check involves a distinct process, sometimes including fingerprint-based identity verification, and can disclose information โ€” such as sexual-offence record suspensions under a strict statutory test โ€” that a standard Criminal Record Check cannot show. A check displaying a higher disclosure level than requested should be treated as a red flag, not a bonus.

What should an employer do if a check looks genuine but its details cannot be confirmed with the issuing service

Pause the hiring decision and contact the issuing police service or accredited provider directly rather than accepting the document on appearance alone. A reference number the issuer has no record of, or a check type that does not match what the issuer confirms was requested, is a specific signal worth escalating before any conditional offer becomes final.

Stay informed

Get our compliance insights and practical guides delivered to your inbox.

Ready to automate your checks?

Free pilot with your own documents. Results in 48h.