Detecting a Forged or Copy-Pasted Signature on a Document

A forged signature is exposed by cross-checking three signals: the absence of natural stroke dynamics (pressure, speed, fluidity), a signature that is pixel-for-pixel identical across two separate documents — proof of copy-paste — and a compression or layer break around the signed area, detectable through forensic image analysis. A document signed by hand and then scanned can be edited in a few clicks: the signature from one genuine contract is photographed, isolated, and pasted onto an entirely different document using basic image-editing software, often invisible to the naked eye at first glance.

According to the ACFE 2024 Report to the Nations, only 37% of document fraud is caught by manual controls, with an average detection delay of 87 days — a gap explained in large part by how hard it is to visually tell a genuine signature from one that has simply been moved between documents, source: ACFE, Occupational Fraud 2024: A Report to the Nations.

What counts as a forged or copy-pasted signature on a document

A forged signature is an unauthorised reproduction of someone's handwritten mark, applied to a document to suggest their consent or presence. Document fraud typically falls into four categories, from the crudest to the most industrialised.

Under UK law, applying a forged signature is a forgery offence under section 1 of the Forgery and Counterfeiting Act 1981: making a false instrument with intent that it, or a copy of it, be used to induce someone to accept it as genuine and, by doing so, act to their own or another's prejudice. Forgery under the Act carries a maximum sentence of ten years' imprisonment on indictment.

7 signals that expose a suspicious signature by eye

A careful review often catches a copy-pasted signature before any forensic tool is needed. Teams handling finance, tenancy or insurance files should check these points as routine.

• Lack of fluidity: strokes that hesitate, stop abruptly, or change thickness unevenly point to a hand imitating rather than a hand signing naturally.
• Uniform pressure: a genuine signature varies in stroke width with the speed of the gesture; a perfectly even line is suspicious.
• Identical signature across several documents: two signatures that overlay pixel-for-pixel cannot come from the same repeated gesture — no one signs identically twice.
• A visible edge around the signature block: a halo, resolution shift or background colour change around the signature suggests an element pasted over the original image.
• Inconsistent scale or tilt: a signature that is slightly larger, sharper or angled differently from the rest of the document's text.
• No overlap with surrounding elements: a genuine signature sometimes crosses a line, a stamp or a box border; a pasted signature stays strictly inside its own bounding area.
• JPEG compression mismatch: the noise level around an edited area differs from the rest of the image — a signal picked up by error level analysis (ELA).

Forensic techniques that catch a copy-pasted signature

Beyond visual review, several technical methods confirm a forgery. Copy-Move Forgery Detection (CMFD) searches for statistically identical pixel regions within a single image or across several documents in the same file — a contract signature found identical on an amendment is a strong signal. Scan-Edit-Print (SEP) analysis identifies copy-paste and font-imitation forgeries from intrinsic properties of the scanned document, such as paper texture or the source scanner's grain. Character-level analysis measures the height, orientation and stroke thickness of handwriting inside bounding boxes to flag irregularities invisible to the eye.

A multi-layer approach combining visual forensics, structural consistency and cross-document validation remains the most reliable methodology for telling a genuine signature apart from a copy-pasted one, an approach reflected in academic research on copy-move forgery detection applied to identity documents.

On a purely digital file, metadata review completes the analysis: a recent modification timestamp on a document that should be old, or a distinct layer sitting around the signature in the source file, are major red flags — see our full EXIF metadata analysis guide for the methodology.

AI-generated signatures: a new category of fraud

Documents produced by generative models can now include a synthetic signature: a stroke that visually mimics handwriting without originating from any real gesture or from pasting an existing image. These signatures show no JPEG compression mismatch and no layer edge detectable by classic forensic methods, because they are generated directly within the final image. They require a separate detection layer focused on generative-model artefacts rather than traces of a manual montage. CheckFile's AI detection treats this class of forgery separately, as a complement to existing structural and forensic controls — without claiming to cover every possible generation technique on its own.

What the law says about a forged signature

Under UK law, forgery of a signature falls under the general forgery framework: section 1 of the Forgery and Counterfeiting Act 1981 makes it an offence to create a false instrument intending it be accepted as genuine, punishable by up to ten years' imprisonment on indictment. On the civil side, the Law Commission's 2019 report on the electronic execution of documents confirms that valid execution requires the signatory to intend to authenticate the document — a condition a copy-pasted signature image cannot meet, since no authentication intent can be verified behind it. A qualified electronic signature, governed by the retained UK eIDAS framework, benefits instead from a presumption of reliability equivalent to a handwritten signature, precisely because it relies on a cryptographic certificate that cannot be copy-pasted.

Electronic signatures: prevention beats detection

The strongest defence against a copy-pasted signature is preventive: replacing the scan-sign-send cycle with an electronic signature, which binds each signature to an identity certificate and a timestamp that cannot be duplicated from one document to another. For documents already signed by hand and received on paper or as a scan — tenancy agreements, powers of attorney, supplier contracts — forensic verification remains the only option available.

How CheckFile complements checks on signed documents

Law firms, estate agencies and banking compliance teams handle signed documents every day whose authenticity determines whether an agreement is valid. CheckFile applies structural analysis, metadata review and cross-document consistency checks to every submitted file, complemented — according to client configuration — by an additional AI-generation signals layer for synthetic-signature cases. This approach sits within our full document verification guide and complements existing checks for forged stamps and seals, a fraud type often found alongside copy-pasted signatures in the same fraudulent file. The platform integrates via API into existing workflows — see our security posture and our pricing.

Frequently Asked Questions

Does a scanned, copy-pasted signature have legal value?

No. A signature image pasted into a word processor or PDF does not authenticate its author and carries no verifiable intent to sign. In a dispute, the document can be held invalid, and whoever produced it risks a forgery charge if fraudulent intent is established.

How do you prove a signature was forged on a PDF document?

Proof usually rests on two complementary pillars: a handwriting expert comparison against verified reference signatures, and digital forensic analysis of the file itself (metadata, layers, compression level) revealing the traces of a montage. Both are admissible as evidence in UK courts.

What is the difference between a blind forgery and a traced signature?

A blind forgery is a free imitation made without a model in view, often recognisable by its lack of confidence. A traced signature faithfully copies the outline of a real model by tracing or light-table, making it visually closer to the original but betraying itself through the total absence of the natural variation found in genuine, repeated signing.

Can AI generate a convincing fake handwritten signature?

Yes. Current image generators can produce a stroke that convincingly mimics handwriting without originating from any real gesture. These synthetic signatures bypass classic copy-paste detection methods and require a dedicated analysis layer focused on AI-generation artefacts.

What are the penalties for using a forged signature in the UK?

Using a forged instrument is punishable under the same Forgery and Counterfeiting Act 1981 framework as forgery itself, carrying a maximum sentence of ten years' imprisonment on indictment, alongside potential fraud charges under the Fraud Act 2006 where the signature was used to obtain money, property or a service.