How to Detect a Fake Bank Statement Used as Proof of Income

A fake bank statement submitted as proof of income or solvency is a different problem from a fake bank details document used to redirect a payment — the latter is covered in our guide to mandate and bank-detail fraud. A bank details document only needs to look convincing for seconds; a fabricated statement has a harder job, sustaining a coherent balance and transaction history across two or three months that agrees with the payslip or reference sitting alongside it. Mortgage brokers, lenders and real estate agents all rely on this one document to answer the same question — can this applicant afford what they are asking for — which is why it is targeted so often.

This article is for informational purposes only and does not constitute legal, financial, or regulatory advice.

What Counts as a Fake Bank Statement in This Context

A fake bank statement is either a genuine document altered after issue — a closing balance inflated, a large deposit inserted, an overdraft entry deleted — or an entirely synthetic document generated to mimic a real bank's layout without ever existing as a real account record. Both versions serve the same purpose: making an applicant's income or available funds look larger or less risky than they are, whether the request is a personal loan, a home loan, or a residential tenancy.

Fabricated and altered bank statements sit at the centre of Australia's rising credit-application fraud problem. Equifax's Fraud Index 2025 Year in Review recorded a 25.5% year-on-year increase in first-party fraud — applicants manipulating their own loan applications — including a 14.3% uptick in false-document credit listings concentrated in mortgages, personal loans and car loans, according to Equifax's 2025 fraud reporting. The same document recurs in tenancy applications, since it is the one record an applicant can produce or edit unilaterally.

Why Bank Statements Are the Document of Choice for This Fraud

Bank statements are targeted because they demonstrate an ongoing financial reality rather than a single point-in-time claim, which makes them unusually persuasive when not questioned closely. A single payslip shows one period's figure; a two- or three-month statement appears to show a pattern, and reviewers tend to trust patterns more than isolated numbers.

The scale of the exposure has drawn regulatory attention. AUSTRAC has been assessing suspected large-scale mortgage fraud after a syndicate allegedly used falsified documents to help book close to A$1 billion in home loans through a major bank, and has urged lenders to lift verification standards, according to reporting on AUSTRAC's mortgage fraud probe. Self-employed applicants are disproportionately represented, since a bank statement often substitutes for evidence a salaried employee would supply through an ATO income statement.

How a Bank Statement Gets Fabricated or Edited

Fraudsters use two broadly different techniques, each caught by a different detection method.

Manual editing of a genuine statement

The simplest approach starts from a real statement the applicant already holds and edits it in a PDF or image tool: raising a closing balance, changing a salary credit, or deleting an overdraft fee. The classic failure mode is an edited line whose change does not propagate to the running balance on every subsequent row, since recalculating a full page of arithmetic by hand is easy to get wrong.

AI-generated and fully synthetic statements

Generative tools remove that failure mode. A fraudster can scan a genuine statement, extract its layout and branding, and prompt a model to produce a new transaction history that respects running-balance arithmetic and plausible salary dates, while showing a different account holder or balance. The proliferation of generative AI has added synthetic statements that replicate bank formatting without using any real document as a source, markedly harder to catch through visual inspection because there are no editing artefacts to find, as detailed in Resistant AI's analysis of fake bank statement techniques. Arithmetic checks that used to expose manual edits no longer reliably distinguish a synthetic document from a genuine one.

Red Flags That Point to a Fabricated Bank Statement

A fabricated statement rarely fails one obvious check; it typically fails several quieter ones at once, which is why structured review outperforms a quick read.

Manual review alone catches roughly 37% of fraud cases, with an average detection delay of 87 days, according to the ACFE 2024 Report to the Nations — a figure that applies wherever detection depends on a reviewer's read rather than a systematic check of every row.

A Verification Protocol Before You Approve

A short, consistent sequence closes most of the gap that manual edits and AI-generated statements exploit.

Step 1 – Request the original file, not a screenshot. A native PDF exported from online banking preserves metadata that a screenshot or photo destroys; its absence should itself raise the review threshold.

Step 2 – Check arithmetic across every line, not a sample. Confirm the opening balance plus each transaction produces the closing balance for the full period, since a single unreconciled row is still the most common tell even in convincing forgeries.

Step 3 – Cross-check dates against the banking calendar. Salary credits and direct debits should fall on working days consistent with the applicant's employer, not weekends or public holidays.

Step 4 – Compare against every other submitted document, then prefer direct data where possible. Employer, salary and address should agree with the payslip or tenancy reference; where the applicant consents, a connection under Australia's Consumer Data Right (Open Banking) retrieves account data directly from the institution.

Schemes uncovered through active methods such as systematic data monitoring run for a shorter duration and cause lower losses than those found by accident, per the ACFE 2024 Report to the Nations — the case for running this sequence on every file, not only doubtful ones.

The Australian Regulatory Framework Around Falsified Financial Documents

Firms conducting due diligence on financial documents operate under statutory obligations, regardless of whether a forgery causes a measurable loss.

The Anti-Money Laundering and Counter-Terrorism Financing Act 2006 requires reporting entities to verify a customer's identity and, in higher-risk scenarios, their financial position using documents from a reliable, independent source — a statement supplied and potentially altered by the applicant is neither. AUSTRAC's indicators of suspicious activity for non-bank lenders and financiers and its parallel guidance for the banking sector both list falsified financial documents as a red flag warranting a suspicious matter report. Credit licensees carry a separate obligation: under the National Consumer Credit Protection Act 2009, lenders must take reasonable steps to verify a consumer's financial situation, and ASIC's Regulatory Guide 209 on responsible lending conduct treats accepting statements at face value as inconsistent with that duty.

Submitting a fabricated statement to obtain a loan, mortgage, or tenancy can constitute an offence under the false and misleading document provisions of the Criminal Code Act 1995 (Cth), and under obtaining-financial-advantage-by-deception provisions in the equivalent state and territory Crimes Acts. Handling the personal and financial information a statement contains falls under the Privacy Act 1988 and the Australian Privacy Principles. Suspected fraud should be reported through Scamwatch or, for cybercrime and identity-theft components, through ReportCyber.

What Brokers, Lenders and Property Managers Ask About This Fraud

Australian property and lending forums raise a consistent set of questions, usually after a document that looks right but feels slightly off.

Can a reviewer tell a PDF has been edited, or only that it looks wrong? Editing software leaves timestamps and font substitution traces invisible on screen but visible to metadata analysis, so a statement can look flawless and still fail this check.

What can a lender or property manager do once a fake statement is discovered? Beyond declining the application, reporting through Scamwatch or ReportCyber creates a reference for any later civil claim, and where funds or a tenancy have started, the matter typically proceeds as a fraud referral to police.

Do property managers check bank statements as carefully as mortgage lenders? Rental referencing varies by agency size and state, part of why fabricated-document fraud is harder to catch consistently in tenancy applications than in regulated lending, where the National Consumer Credit Protection Act imposes a stricter minimum. The National Anti-Scam Centre recorded 481,523 scam reports across Scamwatch, ReportCyber, AFCX, IDCARE and ASIC in 2025, with losses up 7.8% year-on-year to A$2.18 billion, according to the ACCC's 2025 Targeting Scams report — a scale that extends into document-based application fraud reported through other channels.

How CheckFile Complements Manual Bank Statement Review

Cross-checking arithmetic, dates and cross-document consistency by hand remains sound, but it depends on a reviewer catching a well-made forgery in the time a single application allows. CheckFile applies multi-layer analysis — structural checks, metadata forensics, and cross-document consistency validation — to bank statements submitted as proof of income or solvency, alongside AI-generated content detection deployed as a complementary layer to existing structural document controls, configured according to each client's risk profile. This does not replace the steps above; it gives the reviewer a structured signal before a manual line-by-line check.

The CheckFile banking KYC solution applies this pipeline to onboarding and lending documents, and the CheckFile financing and leasing solution covers affordability evidence collected during credit assessments. The CheckFile security infrastructure documents how these layers are structured, and plans are on the CheckFile pricing page.

Bank statement forgery frequently appears alongside forged payslips and tax records in mortgage underwriting — covered in our guide to affordability document fraud in mortgage lending — and separately in tenancy referencing, where our guide to rental applicant documents sets out checks for property managers. For obligations across regulated sectors, see our industry verification guide, and for a dedicated detection approach, see AI-generated and forged document detection — a complement to existing controls, not a replacement for them. Teams with onboarding questions can reach us through the CheckFile contact page.

Frequently Asked Questions

Is checking a bank statement by eye still worthwhile?

A visual check still catches obviously poor forgeries, but it is not reliable against current manual edits or AI-generated documents alone. Pair it with metadata review and, where the applicant consents, Consumer Data Right (Open Banking) data.

What happens if a lender or property manager discovers a fake bank statement after approval?

The loan or tenancy can be terminated once fraud is confirmed, and the case reported to Scamwatch or ReportCyber for a reference number supporting any later civil claim. Submitting the false document can itself be an offence under the Criminal Code Act 1995 or the relevant state Crimes Act, so the applicant carries legal exposure regardless of loss.

Do property managers have the same legal obligations as mortgage lenders to verify documents?

No. Credit licensees operate under the National Consumer Credit Protection Act's responsible lending obligations and, where they are reporting entities, the AML/CTF Act 2006, while property managers generally follow industry best practice and state-based tenancy law rather than an equivalent statutory regime.