Fake Articles of Incorporation: Detecting KYB Fraud

Fake articles of incorporation (or, for LLCs, articles of organization) are a company's founding filing — naming the incorporator, registered agent, authorized shares, and registered office — that has been fabricated, tampered with, or obtained through a fraudulent state filing to pass a KYB (Know Your Business) check. Unlike a certificate of good standing, which only confirms a company is currently compliant with state filing requirements, articles of incorporation carry evidentiary weight about who controls the entity and who is authorized to sign on its behalf. That is why bank onboarding teams, equipment lessors, and vendor risk desks rely on them, and why fraudsters target them.

This article is provided for informational purposes only and does not constitute legal, financial, or regulatory advice. Regulatory references are accurate as of the publication date. Consult a qualified professional for guidance specific to your situation.

Why Articles of Incorporation Are a High-Value Fraud Target

There is no single national company registry in the United States. A business is formed under the law of one specific state — commonly Delaware, Nevada, or Wyoming for their historically light disclosure requirements — and its articles of incorporation are filed and held by that state's Secretary of State, Division of Corporations, or Department of State, not by any federal agency. That fragmentation is the structural weakness fraudsters exploit: a KYB reviewer who checks the wrong state's registry, or does not check one at all, has no way to catch a fabricated or altered filing.

A document that establishes who is legally entitled to act on a company's behalf is more dangerous to forge than a bank statement, because a convincing fake misrepresents legal control of the entity itself — a risk the California Secretary of State has flagged after identifying more than 18,000 corporations and LLCs formed in 2022 and 2023 that the office presumes were created using stolen personal information (California Secretary of State, Business Identity Theft Resources). Most states publish a free entity search, but the underlying filing itself usually must be ordered or verified separately — the gap a forged document is built to exploit.

Four Ways Fraudsters Fake US Formation Documents

Fabrication from scratch recreates a state's certificate layout, seal, and articles format in a design tool, then invents a file number, registered agent, and share structure with no match on the real registry. It is the crudest method and the easiest to catch — it fails the moment anyone searches the invented entity number, such as on Delaware's Division of Corporations entity search — but it still passes a reviewer who confirms a document "looks official" without checking it.

Registry-level identity hijack is the most dangerous variant, because the resulting document is entirely genuine. A fraudster files a fake statement of information, officer change, or registered-agent update against a real company, waits for the state to process it, then presents the now-altered filing as legitimate. State filing agencies generally do not verify what is submitted: a national survey of state business filing offices found that once an unauthorized filing is made against an existing entity, the Secretary of State's office frequently lacks authority to unilaterally correct the record, leaving the victim to obtain a court order (NASS, Business Filing Fraud: A Report for State Business Filing Agencies).

Partial field tampering downloads a genuine filing and edits one or two fields — an officer's name, share count, or registered office — leaving the entity number untouched. This survives a reviewer who confirms the entity number exists but does not compare every field individually, the same gap CBS News documented in California, where victims' names were added as officers of companies they had never heard of (CBS News, Hundreds of California businesses registered with Secretary of State may be fraudulent).

Full generative-AI synthesis produces a complete, plausible certificate of incorporation or good standing from a short prompt, matching a state's typography and seal without touching a real filing. FinCEN's alert on generative-AI fraud schemes warns synthetic content increasingly defeats identity verification and due diligence controls, and recommends layered detection over visual review alone (FinCEN, FIN-2024-Alert004: Fraud Schemes Involving Deepfake Media Targeting Financial Institutions).

What This Fraud Enables

A forged or hijacked formation document is rarely the fraud itself — it is the credential that gets a fraudster through a door that would otherwise stay shut.

• Shell companies for money laundering. Plausible-looking formation documents clear an initial KYB threshold, after which the entity moves funds through business accounts that look legitimate on paper.
• Vendor impersonation and CEO fraud. A forged document lets a fraudster present as a trusted supplier's authorized representative, redirecting payment to an account they control.
• Equipment financing and leasing fraud. Lessors relying on articles of incorporation to confirm signing authority are exposed when the named officer is fabricated or substituted, a pattern that recurs in equipment financing and leasing onboarding.
• Hostile bank account takeover. A registry-level hijack that changes the officer or registered agent on file can convince a bank that new signatories have legitimate authority, particularly where bank KYC onboarding relies on the state filing rather than an independent identity check.

Detecting Fake Articles of Incorporation

The single most effective control is comparing every material field — entity number, officers, registered agent, share structure — against the relevant state's own business entity search, not trusting the PDF a counterparty has sent. Because formation is state-by-state, this means confirming which state the entity claims incorporation in and checking that state's registry specifically: Delaware's Division of Corporations, Wyoming's Secretary of State business search, or the equivalent office named on the document.

Filing history review is the second layer: an unexplained officer change or registered-agent update shortly before the document was presented is visible on the state's filing history where one is published. PDF metadata — creation software, author field, last-modified timestamp — can reveal a document dated years ago was actually edited or generated weeks ago. For AI-generated documents, look for an entity number with no registry match, inconsistent typography against a genuine template, and the absence of verification features such as Wyoming's online certificate validation tool, which confirms whether a certificate ID was actually issued by that state.

The Corporate Transparency Act Rollback Changes the Calculus

The Corporate Transparency Act originally required most US companies to report beneficial ownership information (BOI) to FinCEN starting January 1, 2024, under 31 U.S.C. § 5336, to make it harder to hide behind shell companies formed with forged or borrowed identities. That obligation has since narrowed sharply: FinCEN suspended enforcement against domestic companies in March 2025, then on August 11, 2026 issued a final rule, effective August 14, 2026, permanently exempting all US-formed entities and their beneficial owners from BOI reporting; only entities formed under foreign law and registered to do business in a US state remain subject to it (FinCEN, FinCEN Permanently Ends Beneficial Ownership Reporting Requirements for Millions of Small Business Owners).

That rollback puts the weight of catching a forged or hijacked US formation document back almost entirely on state-level and document-level verification, since a federal beneficial ownership registry is no longer a fallback check for most domestic entities (FinCEN, Beneficial Ownership Information Reporting). A bank, lessor, or vendor onboarding a US-formed counterparty cannot lean on a federal BOI filing to confirm who controls that business; it depends on the state filing and independent document verification. Bank Secrecy Act due diligence obligations, enforced by FinCEN under 31 U.S.C. § 5311, still apply to regulated institutions regardless of the rollback, and presenting a forged formation document to induce a bank to open or maintain an account can constitute bank fraud under 18 U.S.C. § 1344, carrying up to 30 years' imprisonment and a $1,000,000 fine.

A Layered Approach to Detection

Manual document review catches only around 37% of occupational fraud cases, with a median detection delay of 87 days, which is why a single visual pass on a formation document is not a sufficient control on its own (ACFE, 2024 Report to the Nations). CheckFile's approach combines structural checks, metadata analysis, and cross-validation against official state and federal registries as one layer among several, not a replacement for a live Secretary of State lookup. That includes an AI-generation detection layer deployed as a complementary signal alongside structural checks, not a standalone verdict — a hijacked filing that is technically genuine still needs a filing-history and outreach check no document-level analysis alone can replace.

For a full onboarding workflow, our complete guide to business entity verification covers the wider process, and our industry verification guide breaks down sector-specific checks across financing, construction, and regulated services. This article is the companion piece to our analysis of forged certificates of incorporation, which focuses on the formation certificate itself rather than the governing document filed alongside it. See CheckFile's security page, pricing, and homepage for more on how the platform fits into a broader onboarding stack.

If your review process still relies on a visual read of a PDF a counterparty has sent, CheckFile's AI-generated document detection adds AI-generation signals as a complement to your existing controls — not a guarantee of catching every forgery, but a meaningful layer alongside state registry cross-checks and filing history review.

Frequently Asked Questions

Can genuine articles of incorporation still be fraudulent?

Yes, when they result from a registry-level identity hijack — a fraudulent officer change filed against a real company. The document is technically authentic, so the only way to catch this is reviewing the filing history for unexplained recent changes.

What is the fastest way to check if articles of incorporation are genuine?

Identify the state of incorporation, then search the entity number on that state's free Secretary of State business search and compare officers, registered agent, and share structure against the document received. This catches fabricated, tampered, and most AI-generated documents.

Does the Corporate Transparency Act still require US companies to report beneficial ownership?

No. Since FinCEN's August 2026 final rule, US-formed entities and their beneficial owners are permanently exempt from BOI reporting; only entities formed under foreign law and registered to do business in a US state must still report. State-level filing verification is now the primary defense against forged US formation documents.

How is a fake articles of incorporation different from a fake certificate of good standing?

A certificate of good standing only confirms a company is currently compliant with state filing and tax requirements; articles of incorporation set out who controls it. A forged good-standing certificate misrepresents current compliance, while forged or hijacked articles misrepresent who is legally entitled to act on the company's behalf.

Is presenting forged formation documents a crime in the United States?

Yes. Using a forged document to induce a bank to open or maintain an account can constitute bank fraud under 18 U.S.C. § 1344, carrying up to 30 years' imprisonment. Most states also criminalize filing false information with the Secretary of State.