Fake Employment Contract Detection: Canadian Lending Fraud Guide

A fake employment contract is a fabricated, altered, or AI-generated version of a permanent contract, fixed-term contract, or job offer letter, submitted to a lender to misrepresent an applicant's employment status, tenure, or income stability. Unlike a pay stub, which mainly evidences pay, an employment contract proves the type of employment — permanent versus fixed-term, probationary versus confirmed — which directly affects how a lender scores affordability risk under Canada's debt-service ratio rules. This article covers what makes contract fraud distinct from fake pay stub detection and fake tax notice fraud, covered elsewhere in this series, and sets out the forensic signals and regulatory obligations specific to this document type in the Canadian market.

This article is provided for informational purposes only and does not constitute legal or regulatory advice. Regulatory references are accurate as of the date of publication.

Why Employment Contracts Are Now a Primary Fraud Target

Employment contracts are targeted because they let an applicant convert a precarious job into an apparently stable one without falsifying an income history. Equifax Canada's fraud data shows financial misrepresentation present in more than 76% of detected mortgage fraud applications in 2025 (an 8% year-over-year increase), with first-party fraud — an applicant knowingly misstating their own financial information — up 31%. Employment letters rank alongside pay stubs, bank statements and tax slips among the most commonly manipulated documents in Canadian mortgage files (Equifax Canada).

A specific and under-reported pattern is contract-type misrepresentation: an applicant on a genuine but fixed-term or probationary contract submits a document altered to read "permanent" — a single word change that can shift a marginal application from decline to approval under a lender's Gross Debt Service (GDS) and Total Debt Service (TDS) calculations. Because the underlying employer and salary are real, this fraud is harder to catch, and it rarely appears in pay-stub-only checks since pay stubs do not usually state contract type.

Three applicant profiles account for most contract fraud referred to lenders: those inside a probationary period who remove the probation clause, those on genuine fixed-term contracts who change the end date or type, and those with a verbal job offer who fabricate a formal letter before their actual start date.

How Fraudsters Fabricate Employment Contracts

Fabrication ranges from a copy-paste edit of a real document to a fully AI-generated contract with no underlying employment. Four techniques dominate cases referred to Canadian lenders in 2026.

Template and word-processor editing of a genuine document. The applicant opens their real contract in a PDF editor and changes specific fields — contract type, end date, job title, salary band — leaving surrounding text and letterhead untouched. This is the most common method: it requires no technical skill and defeats visual review.

Full AI generation with cloned employer branding. Generative tools can reproduce a named employer's letterhead, logo, HR signature block and standard clauses from public job postings, producing a contract for a relationship that does not exist. These documents are typically internally consistent but fail external cross-checks.

Fabricated or borrowed corporation numbers. Contracts reference a company name and sometimes a corporation or business number, checkable against Corporations Canada's federal registry or the relevant provincial registry. Fraud rings either invent a number, transpose digits from a real one, or copy the registration details of an unrelated dormant or shell corporation.

Forged or scanned-and-pasted signatures. Genuine e-signed contracts (DocuSign, Adobe Sign, HelloSign) embed a certificate and audit trail; a forged contract typically shows a signature image with different compression artefacts or resolution than the surrounding text — evidence it was pasted in from a separate source rather than applied by the signing platform.

Forensic Signals That Expose a Fake Contract

These signals fall into four categories: structural, cross-referential, cross-document and behavioural.

Cross-validating the contract against the applicant's pay stubs and bank deposits is the single strongest counter-measure, because a fabricated contract describing a permanent role at $62,000 cannot be reconciled with three months of bank credits consistent with a lower, irregular fixed-term wage. This is the same principle underlying AI document fraud detection techniques applied across pay stubs, bank statements and tax documents — no single document is assessed in isolation. A bare registry existence check is not sufficient alone, since fraudsters increasingly borrow a real, active corporation's registration details; a NAICS business-activity consistency check is also required.

What Borrowers and Brokers Ask on Finance Forums

On mortgage and personal finance forums, two recurring questions expose both borrower misunderstanding and a genuine verification gap that lenders have to close.

On threads on r/PersonalFinanceCanada around "borrowing more" on a mortgage by altering a job offer, posters have asked whether editing a contract to show permanent status before submission would realistically be noticed — with other members correctly pointing out that this constitutes fraud under section 380 of the Criminal Code, regardless of whether the underlying job and salary are genuine.

On RedFlagDeals forums, applicants have separately asked why a lender requests a full contract of employment in addition to pay stubs and bank statements, when the pay stubs alone appear to demonstrate income. The answer is regulatory: OSFI's Guideline B-20 requires federally regulated lenders to make reasonable inquiries to verify a borrower's underlying income, including employment status and history — not rely on a pay stub alone — and a contract is the independent, employer-issued evidence that a pay stub cannot establish (OSFI, Guideline B-20).

Regulatory Obligations for Canadian Lenders

Canadian lenders operate under overlapping federal duties — and, in Quebec, an additional provincial layer — requiring employment evidence to be independently verified, not merely collected.

A lender that grants credit on an employment contract never independently checked against Corporations Canada, metadata forensics or cross-document consistency is exposed to supervisory criticism under OSFI's B-20 expectations and, for federally regulated banks, a possible breach of Bank Act s.418. Supervisory findings of inadequate verification can lead to directed remediation, with FINTRAC penalties for related compliance failures reaching up to $500,000 per violation.

Quebec-specific note: Outside Quebec, personal information in a loan file is governed by PIPEDA, enforced by the Office of the Privacy Commissioner of Canada. In Quebec, the Loi 25 applies instead for intra-provincial activity and imposes stricter consent and accuracy requirements — including a Privacy Impact Assessment for automated decisions. Federally regulated lenders operating in Quebec remain subject to PIPEDA as well, so both regimes can apply in parallel.

Multi-Layer Detection in Practice

A layered protocol lets underwriting teams check every contract without extending processing times: OCR extraction of employer name, contract type, dates and salary; a live registry lookup; PDF metadata and signature-layer forensics; font and layout consistency checks around commonly-edited fields; and cross-document reconciliation against pay stubs and bank deposits.

AI-generation signal detection complements these existing structural controls rather than replacing them. According to the ACFE 2024 Report to the Nations, manual review methods identify only 37% of document fraud, with an average detection delay of 87 days — a gap that, in mortgage lending, often means funds have already been advanced before the fabrication is found.

CheckFile applies this layered approach across employment contracts, pay stubs and supporting income documents for lending and KYC teams. For consumer credit and asset finance workflows, see financing and leasing document verification; for retail banking onboarding, see banking KYC verification. Deployment options are covered in the document security overview, and current packages are on the pricing page.

Criminal Penalties for Fabricated Employment Documents

Submitting a fabricated employment contract to obtain credit exposes the applicant, and anyone who helped produce the document, to criminal liability. Fraud under Criminal Code s. 380 carries up to fourteen years' imprisonment where the value exceeds $5,000, and forgery or uttering a forged document under Criminal Code ss. 366-368 also carries up to fourteen years; a service that knowingly sells fabricated contracts can be prosecuted as a party to the offence. A discovered fabrication typically leads to immediate withdrawal of the credit offer, a fraud alert recorded with Equifax Canada or TransUnion Canada, and, for existing lending, acceleration of the facility. Suspected fraud should be reported to the Canadian Anti-Fraud Centre and, where money-laundering indicators are present, to FINTRAC.

For a broader view of document verification obligations across regulated sectors, see our industry document verification guide. For a closer look at how AI-generation signals apply specifically to forged and synthetic documents, our deepfake and AI document detection page sets out how this complements — rather than replaces — existing manual and structural checks.

Frequently Asked Questions

Can a genuine employer's letterhead be used on a fake contract?

Yes. Fraudsters commonly copy a real employer's logo, address and HR signature block onto a fabricated contract for a role the applicant does not hold. Corporate registry cross-checks confirm the company exists, but only cross-document validation against pay stubs and bank deposits reliably exposes that no genuine employment relationship supports the figures claimed.

Is changing "fixed-term" to "permanent" on a real contract still fraud?

Yes. Even where the employer, salary and role are genuine, altering the stated contract type to misrepresent job security to a lender is fraud by false representation under Criminal Code s. 380, because it is a material change made to influence a lending decision. The underlying employment being real does not remove liability for the alteration.

Why do lenders ask for a contract as well as pay stubs and bank statements?

A pay stub evidences pay, not the type or security of employment. A contract is the independent, employer-issued document that establishes permanent, fixed-term or probationary status, which materially affects a lender's Gross Debt Service and Total Debt Service calculations. OSFI Guideline B-20 requires federally regulated lenders to verify income and employment status through reasonable inquiries, making a verified contract part of a compliant income evidence file.

Does a contract with your own corporation count as employment evidence?

Generally not on its own. Lenders classify income from a corporation where the applicant is sole or majority shareholder as self-employment, and typically require a CRA Notice of Assessment, filed T2 returns, or accountant confirmation instead of a self-issued contract, because that document is not independent of the applicant.

What should a lender do if a submitted contract is suspected to be forged?

The lender should preserve the document and its metadata, decline or pause the application pending verification, and record the suspicion through internal fraud reporting. Where money laundering indicators are present, a Suspicious Transaction Report may be required under the PCMLTFA, and suspected fraud should be reported to the Canadian Anti-Fraud Centre or local police.