Question 1

What is document fraud-as-a-service?

Accepted Answer

A business model where fraudsters sell ready-made, AI-generated fake documents — payslips, bank statements, ID cards, invoices — through websites or Telegram channels, delivered within minutes for a small fee and requiring no design skill from the buyer.

Question 2

How is this different from someone editing a document in Photoshop?

Accepted Answer

A Photoshop edit is a one-off effort limited by the skill of the person doing it. Fraud-as-a-service packages the forgery into a reusable template sold to many buyers, so the same quality bar scales to thousands of transactions.

Question 3

Can these AI-generated documents be detected?

Accepted Answer

Many can be, but not through visual review alone. Metadata analysis, cross-document validation and machine-learning forensic checks each catch signals a human eye typically misses, particularly when templates are built to pass a casual check.

Question 4

What should a UK business do if it suspects it received a fraudulent document?

Accepted Answer

Follow the internal escalation process, retain the file and metadata as evidence, and report through the UK's Report Fraud service, which is replacing Action Fraud from 2026. Regulated firms should also review whether the incident points to a gap in existing due diligence controls.

Question 5

Does using a detection tool like CheckFile guarantee fraud will be caught?

Accepted Answer

No tool can guarantee every forgery will be caught, and any vendor claiming otherwise should be treated with caution. CheckFile adds AI-generation detection signals as a complement to a firm's existing controls, strengthening a layered process rather than replacing human judgement.

Question 6

Can landlords verify my tax return with HMRC directly?

Accepted Answer

No — landlords and letting agents cannot query HMRC databases directly to verify an SA302 or Self Assessment tax return. HMRC's RTI system, which enables real-time income verification, is available only to specified authorised users (primarily DWP and certain mortgage lenders participating in specific schemes). A landlord requesting an SA302 as proof of rental affordability is relying entirely on the document's own internal consistency and their own visual assessment. This is why automated document forensics — checking metadata, arithmetic, and formatting — is the only reliable verification method available to private-sector landlords and letting agents.

Question 7

How do banks check my Self Assessment documents?

Accepted Answer

Mortgage lenders and banks verify Self Assessment documents through a combination of methods. For self-employed borrowers, lenders typically request SA302s for the past two to three tax years alongside the corresponding HMRC Tax Year Overviews (downloadable from the HMRC government gateway, which confirms the figures are lodged with HMRC). Some lenders participate in the HMRC Income Verification scheme, which provides a more direct confirmation channel. Automated document platforms — including CheckFile and specialist lender fraud systems — additionally apply metadata forensics, arithmetic verification and cross-document reconciliation to the submitted documents before underwriting proceeds.

Question 8

What is an SA302 and why is it commonly forged?

Accepted Answer

An SA302 is HMRC's Self Assessment tax calculation document, issued (or downloadable) after a Self Assessment return is processed. It summarises total income from all sources, allowable deductions, and the resulting income tax and National Insurance liability. It is the primary income proof accepted by mortgage lenders for self-employed borrowers — which makes it a high-value forgery target. Because there is no real-time public verification channel for SA302 figures, a convincing forgery can pass through a manual review process without detection.

Question 9

What HMRC documents are most commonly forged?

Accepted Answer

The most frequently forged HMRC documents in 2026 are the SA302 (Self Assessment tax calculation), the P60 (end-of-year certificate showing total pay and tax deducted from an employer), and the Notice of Coding (which specifies the PAYE tax code). The P11D (benefits in kind return) is also targeted where applicants are attempting to inflate total remuneration for mortgage affordability calculations. For further detail on AI-based fake payslip detection alongside tax documents, see our dedicated guide for consumer lenders.

Question 10

What should an organisation do if it suspects a submitted tax document is forged?

Accepted Answer

Any organisation that suspects a submitted HMRC document is forged should preserve the document and all associated metadata, record the verification steps taken and their outcomes, and report the suspected fraud to Action Fraud (actionfraud.police.uk) with a reference copy of the document. If the document was submitted as part of a mortgage application, the lender must report to the FCA under its GABRIEL reporting obligations. AML-regulated entities must also consider whether a Suspicious Activity Report (SAR) is required under the Proceeds of Crime Act 2002. Document the entire process — the adequacy of the verification methodology will be scrutinised in any subsequent regulatory review.

Data

Document Fraud-as-a-Service: AI Fake Document Generators

Fake Tax Notice Fraud: AI Detection Guide for 2026

Can Your KYC Vendor Detect AI-Generated Documents? What OCR Misses

Build vs Buy: In-House AI Document Fraud Detection or a Specialized Solution?

AI Document Fraud Detection Software: How to Choose in 2026

Digital Identity Trends 2026: The Future of Online Verification and e-ID

Biometric Verification: Fingerprint, Facial and Voice

RegTech 2026: Regulatory Technology Guide

Compliance Automation ROI: Benchmarks by Industry

Document Fraud in France 2026: Data & Trends

Document verification ROI calculator: TCO analysis and payback period

Document Fraud and Validation Costs: The Data

AI vs Manual Document Verification: ROI Comparison

Document Fraud Statistics and Trends 2026: Key Data

Compliance Fines and Penalties: UK Penalties by Sector

Cost of Compliance: True Cost of Manual Checks

Manual Document Validation: True Cost (TCO)

Document Fraud 2026: Statistics and Detection