Fake Professional Certifications and Licenses: How US Employers Detect Them

Fake professional certifications and license numbers are increasingly used to pass vendor onboarding, recruitment and healthcare credentialing checks, because a screenshot of a license lookup or a laminated card is easy to alter and rarely checked against the issuing body's live database. In the United States, verification is complicated by a structural fact the UK does not share: there is no single national register for most of these professions. A financial adviser is checked through FINRA BrokerCheck, an insurance producer through a state insurance department via the NAIC's National Insurance Producer Registry, a physician through a state medical board or the cross-state DocInfo.org lookup, a nurse through the NCSBN's Nursys database, and a contractor through whichever state or municipal board issued the license. Detecting fraud means knowing which register applies and checking the number against it directly.

This article is for informational purposes only and does not constitute legal, financial, or regulatory advice. Regulatory references are accurate as of the publication date but vary by state. Consult a qualified professional for guidance specific to your situation.

Why License Fraud Is a Different Problem From Fake Diplomas or Training Certificates

A professional license or registration number is checkable against a public database in under a minute, yet almost nobody checks it before signing a contract or issuing an offer letter. That gap, not the sophistication of the forgery, is what makes license fraud so persistent.

This article is deliberately narrow. It does not cover degree or resume fabrication, addressed in our guide to detecting AI-generated resumes and forged diplomas, or forged training-course paperwork, which is its own category. This piece covers credentials that let someone legally practice a regulated profession or qualify as a vendor: FINRA registration and state insurance licensing for financial intermediaries, state medical and nursing board licensure for healthcare practitioners, and state or municipal licensing for electricians, plumbers, HVAC technicians and general contractors.

Practicing a licensed profession without genuine authorization is typically a state-law offense independent of any deception used to obtain the role, and knowingly using a fabricated or borrowed license number to secure work can separately trigger federal fraud statutes when mail, wire or interstate communications are involved (U.S. Code, 18 U.S.C. §1343, wire fraud) — materially different exposure than exaggerating a job title on a resume. For a sector-by-sector breakdown of which documents matter most, see our industry verification guide.

How Fraudsters Fabricate and Alter License Numbers With AI

Most license fraud does not involve a forged card design at all; it involves a genuine-looking number attached to the wrong person or firm, since cloning a reference number is far cheaper than replicating a physical security feature and it defeats a visual check completely.

Broker imposter scams, where a fraudster copies a real, FINRA-registered representative's name, CRD number and firm details but supplies a different phone number or email, are common enough that FINRA publishes standing guidance on spotting them (FINRA, Avoid Fraud and Scams). Scammers have also circulated doctored copies of genuine BrokerCheck reports, splicing a real CRD number onto an unregistered firm — a check that stops at "the report looks official" misses this entirely. Generative AI accelerates the same pattern elsewhere: an inpainting model can lift a genuine state medical board certificate or contractor pocket card found online, swap the name and photograph, and preserve the letterhead well enough to pass a visual review, only caught once the number is checked against the licensing authority itself.

Verifying Financial and Insurance Intermediaries

Unlike the UK's single FCA register, the US splits financial licensing by product type. Broker-dealer representatives are checked on FINRA's public BrokerCheck at brokercheck.finra.org, searchable by name or CRD number, showing registration status and any disclosed actions. Investment adviser representatives are checked instead through the SEC's Investment Adviser Public Disclosure database, since not every adviser surfaces on BrokerCheck.

Insurance is a separate track, licensed state by state. The practical solution is the National Insurance Producer Registry (NIPR), a nonprofit NAIC affiliate aggregating producer licensing data from all 50 states, DC and the US territories into one searchable database. A National Producer Number (NPN) looked up at nipr.com shows every state where an individual or agency holds an active license and which lines of authority they can sell (NIPR, Look Up a National Producer Number). An agent selling into a state without a non-resident license there is unlicensed, whatever their home-state credential shows.

This mirrors the UK's clone-firm problem: many fraudulent brokers and agents cite a genuine CRD or NPN belonging to a real, licensed person. The record looks correct because it is correct, but the trading name, phone number or email given to the onboarding team will not match FINRA's or the state insurance department's file.

Verifying Healthcare Practitioners: State Boards, DocInfo.org and Nursys

Physician licensure is issued and disciplined at the state level — more than 70 state medical and osteopathic boards each run their own lookup. Checking one state tells you nothing about a license held, or lost, elsewhere, which is the gap DocInfo.org, run by the Federation of State Medical Boards, was built to close. DocInfo.org aggregates licensure and disciplinary data reported by state medical boards nationwide, letting an employer search a physician by name and see status across every state where they have been licensed, not just the one currently claimed (FSMB, DocInfo). A physician disciplined in one state who quietly reapplies in another is exactly the pattern a single-state check misses.

Nursing licensure is ahead of the medical-board model here: the National Council of State Boards of Nursing (NCSBN) operates Nursys, fed directly by most participating state boards, so a single search confirms whether a nurse holds a current license and, under the Nurse Licensure Compact, multistate practice privileges — a genuine structural difference from physician licensing.

For staffing agencies placing locum physicians and travel nurses, the check needs to happen before each placement, not once at agency registration — a license can lapse after a worker first joins the roster. Our interim staffing solutions and healthcare verification tools are built around this repeat-check requirement.

Verifying Tradespeople: State and Municipal Licensing Boards

Skilled-trades licensing has no national equivalent to Gas Safe Register, NICEIC or CSCS; authority sits with state boards, and in some trades the city or county instead. California's Contractors State License Board (CSLB) is a well-established example: its public lookup confirms a contractor's classification, bond and workers' compensation status, and disciplinary history before a contract is signed (CSLB, License Check). Other states split licensing further, with a separate board for electrical or plumbing trades — there is no substitute for identifying the right authority before relying on any card presented at onboarding.

Contracting without a required license, and fraudulently using someone else's license number, are both offenses where states license contractors, though classification varies — in California, unlicensed contracting on a job worth $1,000 or more is a misdemeanor under Business and Professions Code §7028, while fraudulently using a license number is a wobbler under §7027.3, chargeable as a misdemeanor or felony (California Business and Professions Code §7027.3). Verification through the issuing board's lookup, not the pocket card handed over, closes this gap. Our construction and trades verification tools are built around frequent, high-volume license checks.

Cross-Checking Every License Type in One Table

The verification channel differs by profession and state, but the principle is identical: check the number against the issuing authority, not the document presenting it.

Questions Compliance and Recruitment Teams Keep Asking

Is a broker imposter scam the same as a fake CRD number? Not quite. The CRD is usually genuine and belongs to a real representative, but the scammer has attached a different phone number or firm name to it, banking on the check stopping at "the CRD is on BrokerCheck" rather than confirming the contact details match.

Does a license need to be checked in every state where a worker operates? Yes for most professions here, since a license issued in one state generally has no authority in another — the main exception is the Nurse Licensure Compact. A contractor or producer licensed in State A working in State B without a State B license is unlicensed there.

Is a contractor license showing "active" on a state lookup enough on its own? No. Active status confirms the license has not been revoked, not that the person in front of you is the actual holder rather than someone using that number without authorization — a distinct offense in states like California. Cross-check name, license number and bond details, not the status flag alone.

Legal Consequences of Fake Licenses and Registrations

A false license is rarely prosecuted alone; state licensing offenses usually sit alongside federal fraud law. Knowingly transmitting a false license number by email, wire or interstate call to secure work engages federal wire fraud under 18 U.S.C. §1343, and doing so by mail engages mail fraud under 18 U.S.C. §1341 — both carrying up to 20 years' imprisonment per count (U.S. Code, 18 U.S.C. §1341, mail fraud).

Unlike the UK's Economic Crime and Corporate Transparency Act, the US has no single federal "failure to prevent fraud" corporate offense; exposure instead comes through negligent-hiring claims and the absence of reasonable verification once a fraud surfaces, a theme covered in our guide to forged vendor compliance certificates. Report suspected fraud to the state licensing board, and to the FBI's Internet Crime Complaint Center at ic3.gov when it crossed state lines.

Building License Verification Into Onboarding and Hiring

A documented, repeatable verification step at onboarding is what separates a defensible due-diligence record from a token one: capture the license number at application stage, check it against the issuing authority's database before start date, and repeat periodically, since licenses lapse and a worker moving between states can trigger a new licensing requirement altogether.

CheckFile applies multi-layer analysis, structural, metadata and cross-document checks, to the certificates, ID cards and license documents submitted during onboarding, giving compliance teams broad detection coverage without replacing the register check itself. Contextual analysis distinguishes ordinary variation, such as a name change or a renewed card design, from genuine fraud signals, keeping false positives manageable. Depending on client configuration, an additional AI-generation signal layer flags certificates and ID documents showing signs of generative editing, complementing rather than replacing the primary-source register check. The platform supports 3,200+ document types across 24 OCR languages and 32 jurisdictions.

Detect Forged Certificates Without Replacing Your Register Checks

No detection platform, including CheckFile, replaces the register check that only FINRA, the SEC, a state insurance department, or a state medical, nursing or contractor licensing board can perform — the single source of truth is the issuing authority's own database, not the document presented. What automated analysis adds is a forensic pass on the certificate or ID card itself, catching alterations and AI-generated edits a visual check misses, as a complement to register checks, not a substitute for them.

Explore CheckFile's approach to AI-generated and forged document detection to see how this signal layer fits alongside the primary-source verification your compliance process already requires.

Frequently Asked Questions

Is it illegal to work using a fake or altered professional license in the United States?

Yes, though the exact charge depends on the state and profession. Practicing without genuine state authorization is typically a misdemeanor or felony under the relevant state licensing statute, and knowingly transmitting a false license number to secure work can separately trigger federal wire fraud (18 U.S.C. §1343) or mail fraud (18 U.S.C. §1341) charges, regardless of whether the person was ultimately competent to do the work.

How do I check if a FINRA CRD number is genuine and not being used by an imposter?

Search the CRD number or name on FINRA's BrokerCheck at brokercheck.finra.org, then compare the firm name, phone number and email shown against what the person gave you. If the CRD is genuine but the contact details do not match, you are likely dealing with an imposter, not the registered representative.

How can I verify a physician's or nurse's license before a locum or travel assignment starts?

For physicians, search DocInfo.org (FSMB) or the specific state medical board. For nurses, search Nursys through the NCSBN, which confirms status and, under the Nurse Licensure Compact, multistate privileges. Confirm the license is current and unrestricted, since a suspended license still returns a result.

Does an insurance producer licensed in one state automatically have authority to sell in another?

No. Licensing is issued state by state, so a producer needs a non-resident license in every additional state where they sell. Looking up their National Producer Number on nipr.com shows every state where they hold an active license and which lines of authority it covers — a state not listed means unauthorized selling there.

What should a business do if it discovers it accepted a fake license during onboarding?

Stop any work or payment connected to that individual or firm, and verify directly with the issuing authority using your own search tool, not contact details the person supplied. Preserve the document and correspondence, report it to the licensing board and, where state lines were crossed, to the FBI's Internet Crime Complaint Center (ic3.gov), and review whether the same gap let other fraudulent credentials through.