Fake Bills of Lading and Certificate of Origin Fraud Detection

This article is provided for informational purposes only and does not constitute legal or regulatory advice. Legislative and regulatory references are accurate as of the publication date. Consult a qualified professional for guidance tailored to your situation.

Editorial disclosure: CheckFile provides document fraud detection solutions. Internal analyses and benchmarks cited in this article come from CheckFile platform data and are identified as such.

A fake bill of lading is a shipping document that looks genuine but describes a cargo, vessel or voyage that does not exist, or that misstates weight, value or origin to support a fraudulent payment. A forged certificate of origin performs the same trick for country-of-origin claims, letting sanctioned or tariff-restricted goods cross a border under a false flag. Both are detected the same way: by cross-checking the document against independent third-party records — vessel tracking data, customs valuation history, chamber of commerce registries — rather than reviewing the PDF on its own.

What a bill of lading and a certificate of origin actually do

A bill of lading performs three legal functions simultaneously: it is a receipt confirming goods were loaded onto a named vessel, evidence of the contract of carriage between shipper and carrier, and, in its negotiable form, a document of title that lets ownership of the cargo transfer by endorsement before the goods physically arrive. A certificate of origin (CoO) is a separate document, usually issued or stamped by a chamber of commerce or a government-designated body, attesting the country where goods were produced, manufactured or substantially transformed. Banks financing the transaction, customs authorities assessing duty, and buyers claiming preferential tariff treatment under a trade agreement each rely on these two documents independently corroborating the same shipment.

Under Australia's free trade agreements, importers claiming a preferential rate of customs duty must hold evidence that the goods actually meet the relevant rules of origin, and keep that evidence on file for at least five years from the date of importation, ready to produce to the Australian Border Force (ABF) on request (Australian Border Force, Free Trade Agreements — Origin Advice). When that evidence is fabricated rather than genuine, the importer, the bank financing the deal and the ABF assessing the duty concession are all exposed — often without knowing it until an audit, an origin verification request or a sanctions screening flags the shipment.

How trade document fraud works in practice

Trade-based money laundering (TBML) moves value through the trade system itself rather than through a bank account, and forged shipping documents are what makes the mechanism function. The FATF's report Trade-Based Money Laundering: Trends and Developments sets out the core techniques compliance teams still see today: over- and under-invoicing, over- and under-shipment, multiple invoicing of the same cargo, and falsely described goods or shipments (FATF, Trade-Based Money Laundering: Trends and Developments).

In practice this breaks down into a handful of repeatable patterns. A phantom bill of lading references a container or vessel voyage that never took place, used to draw down a letter of credit or justify a cross-border payment against a shipment that does not exist. Over- or under-invoicing shifts value between counterparties by pricing goods far outside their normal range, a discrepancy that only surfaces when the invoice is cross-checked against the declared weight, volume or unit count on the bill of lading and packing list. Falsified certificates of origin misstate where goods were actually made, either to dodge anti-dumping duties on a specific country of manufacture or, more seriously, to disguise the true origin of goods produced in a sanctioned jurisdiction. Counterfeit chamber-of-commerce stamps and signatures — copied from a genuine certificate and reused on unrelated shipments — are the common thread linking most of these schemes together.

AUSTRAC's own financial crime guide on trade-based money laundering flags a comparable set of red flags for the Australian market, and lists recycled textiles, sugar, cement, precious gemstones, bullion, tobacco, liquor, scrap metals, solar panels, luxury vehicles, mobile phones and meat products among the goods categories at heightened risk of being used to move criminal value through trade transactions (AUSTRAC, Preventing trade-based money laundering in Australia). A single mismatched figure on one document rarely proves fraud on its own, but a pattern of mismatches across a supplier's transaction history, layered against these known high-risk goods categories, is what typically triggers escalation.

Why generative AI has raised the bar for document review

Generative AI tools let a fraudster produce a bill of lading with a plausible carrier letterhead, a correctly formatted IMO vessel number and a chamber-of-commerce stamp that visually matches the genuine article, in minutes rather than the hours a manual template edit used to take. Image generation and inpainting models can now replicate embossed stamps, watermarks and signature textures well enough to defeat a visual check by someone working through a stack of PDFs at speed. The tells that used to give away a forgery — mismatched fonts, pixelated logos, an obviously copy-pasted signature — are becoming less reliable as the tooling improves.

What generative AI cannot do is fabricate an entry in a vessel-tracking database, a chamber of commerce's own issuance register, or a carrier's internal booking system. A document can look flawless and still fail the moment it is checked against a source the fraudster does not control. That is why cross-referencing against independent third-party records remains the most reliable control, with AI-generation signals functioning as a complement to existing controls rather than a replacement for them — a distinction worth keeping in mind when evaluating any vendor claim, including ours.

Detection signals compliance teams should check first

A handful of checks catch a disproportionate share of forged trade documents, and none of them require exotic tooling. Cross-document consistency comes first: does the cargo description, weight and value on the bill of lading match the commercial invoice, packing list and certificate of origin, field for field. Transit-time plausibility follows: a bill of lading claiming a fifteen-day crossing from a route whose typical vessel schedule takes twenty-two days is worth a second look. The vessel's IMO number should resolve to a real, active ship when checked against a public vessel-tracking source such as MarineTraffic or Equasis — a document referencing a vessel that was scrapped, renamed or simply never existed under that IMO number is an immediate red flag. The issuing chamber of commerce on a certificate of origin should be traceable in official registries; a stamp attributed to a chamber that cannot be found, or that denies issuing the document when contacted, is close to conclusive. PDF metadata — creation software, author fields, edit timestamps inconsistent with the claimed issue date — often survives casual tampering even when the visible content has been altered. Finally, stamps or signatures that appear identical, pixel for pixel, across documents purportedly issued by different companies or on different dates point to a template being reused across multiple fraudulent filings.

Manual review alone catches a limited share of this activity: the ACFE's 2024 Report to the Nations found that internal controls detect only 37% of occupational fraud cases, with an average detection delay of 87 days — a lag most trade finance transactions, typically settled within weeks, cannot absorb before the funds have moved.

Fitting document verification into a KYB and Know Your Supplier workflow

Trade document checks work best when they sit inside onboarding and ongoing monitoring rather than as a one-off review triggered by suspicion. At onboarding, a supplier or counterparty's registered activity, jurisdiction and historical trade patterns should be established as a baseline — the Know Your Supplier discipline exists precisely to catch a mismatch between what a company claims to trade and what its ASIC filings and shipping history actually show. Ongoing monitoring then applies the same cross-document checks transaction by transaction, flagging deviations from that baseline rather than treating every shipment as a fresh, unconnected review.

For Australian banks and financial institutions financing trade, this sits within the wider customer due diligence obligations set out in the AML/CTF Act 2006, which AUSTRAC-regulated reporting entities are expected to apply when assessing money laundering risk in a trade finance relationship (AUSTRAC, Preventing trade-based money laundering in Australia). Where the true origin of goods is in question, guidance from the Australian Sanctions Office at the Department of Foreign Affairs and Trade sets out the due diligence steps expected of importers and exporters before a payment or shipment proceeds, including screening counterparties against the DFAT Consolidated List of designated persons and entities (DFAT, Consolidated List). Several of the mechanics described above — phantom shipments, invoice manipulation, disguised beneficial ownership of the trading counterparty — map directly onto the broader money laundering typologies that Australian reporting entities are required to screen against under existing AML/CTF obligations, and onto the reporting duties covered in our AUSTRAC Suspicious Matter Report guide.

Our own review method rests on structural checks, metadata inspection and cross-document validation across several fields per document, rather than a read of any single PDF in isolation, with an additional layer of AI-generation signals, deployed according to client configuration, that complements these structural checks rather than replacing them. CheckFile's platform is built to handle verification across more than 3,200 document types and 32 jurisdictions, which in a trade context means bills of lading, certificates of origin, commercial invoices, packing lists and ASIC company extracts can be checked against each other inside the same workflow used for standard KYC document verification in banking. Document handling for trade files, which often carry commercially sensitive pricing and counterparty data, runs under the same controls described on our security page. For a broader view of how document checks fit across a compliance programme, our document compliance guide covers the wider set of obligations beyond trade finance specifically. Pricing for teams evaluating a trade-document workflow is set out on our plans page.

What compliance teams actually ask about this

Compliance professionals on specialised trade finance and AML forums tend to ask narrower, more practical questions than the regulatory literature covers. A recurring one: how do you verify a bill of lading without simply calling the carrier every time, given the volume most trade finance desks process. Another: is under-invoicing always a laundering signal, or can it reflect a legitimate transfer-pricing arrangement between related entities — the honest answer is that price alone is rarely conclusive, and it is the combination with other indicators (unusual routing, a counterparty with no verifiable trading history, payment structured to avoid reporting thresholds) that moves a file from anomaly to suspicious activity. A third, increasingly common question centres on whether AI-generated forgeries can pass a visual check convincingly enough to fool an experienced document reviewer — the practitioner consensus is that they increasingly can, which is precisely why cross-referencing against external, fraudster-independent records has become the control that matters most.

Frequently Asked Questions

How can I verify a bill of lading is genuine without contacting the carrier every time?

Start by checking the vessel's IMO number and stated voyage against a public AIS tracking source such as MarineTraffic or Equasis, and compare the transit time against the carrier's known routing. If those checks are consistent, cross-reference the cargo description and weight against the commercial invoice and packing list before escalating to a direct carrier confirmation, which should be reserved for files that fail the earlier checks or carry other risk indicators.

Is under-invoicing always a sign of money laundering?

No. Price alone can reflect a legitimate volume discount, a related-party transfer-pricing arrangement, or normal commercial negotiation, and treating every low invoice as suspicious would overwhelm a compliance team with false positives. It becomes a red flag when combined with other indicators — a counterparty with no verifiable trading history, routing that adds unexplained transit points, or payment structured to sit just under a reporting threshold.

Can generative AI produce a certificate of origin that passes a visual check?

Increasingly, yes. Current image generation and editing tools can replicate embossed stamps, watermarks and signature textures well enough to defeat a visual review carried out at normal processing speed. That is why verification against an external source the fraudster does not control — the issuing chamber of commerce's own register, in the case of a certificate of origin — remains more reliable than inspecting the document's appearance alone.

Where should Australian firms report suspected trade document fraud?

Suspicious activity connected to money laundering, including forged trade documents, should be reported to AUSTRAC as a Suspicious Matter Report (SMR) under section 41 of the AML/CTF Act 2006, generally within three business days of forming the suspicion (or 24 hours where terrorism financing is suspected), consistent with the reporting obligation set out in FATF Recommendation 20 (AUSTRAC, Suspicious matter reports). A false or misleading statement made to the Australian Border Force in connection with an import or export declaration, such as a fabricated certificate of origin, can separately constitute an offence under the Customs Act 1901 (Cth) and should be reported to the ABF alongside any SMR lodged with AUSTRAC (Customs Act 1901, Federal Register of Legislation).

Does checking a vessel's IMO number against AIS data actually catch fraud?

It catches a specific and common category: bills of lading referencing a voyage, vessel or shipping window that never happened. It will not catch a forgery built around a real vessel and a real, legitimate voyage used to cover a mispriced or misdescribed cargo, which is why the check needs to sit alongside invoice benchmarking and certificate-of-origin verification rather than standing in for them.

Forged bills of lading and certificates of origin are built to survive a quick visual check, not a cross-reference against records the person who forged them does not control. Building that cross-referencing into a KYB and trade finance workflow, rather than treating each document as a standalone review, is what turns an occasional catch into a repeatable control. If AI-generated forgeries are a growing concern in your onboarding or trade finance pipeline, our AI-generated document and deepfake detection capability is designed to sit alongside your existing checks — offering AI-generation signals as a complement to your existing controls, not a replacement for the cross-document and third-party verification described above.