Fake Professional Certifications and Licences: How Australian Employers Detect Them

Fake professional certifications and licence numbers are increasingly used to pass vendor onboarding, recruitment and healthcare credentialing checks in Australia, because a screenshot of a register entry or a laminated card is easy to alter and is rarely checked against the issuing body's live database. Detecting them means verifying every licence or registration number directly against ASIC, AHPRA or the relevant state licensing authority, not the document a candidate or supplier hands over, and layering document forensics on top to catch the growing share that are altered or AI-generated.

This article is for informational purposes only and does not constitute legal, financial, or regulatory advice. Regulatory references are accurate as of the publication date and may vary between states and territories. Consult a qualified professional for guidance specific to your situation.

Why Licence Fraud Is a Different Problem From Fake Diplomas or Training Certificates

A professional licence or registration number is checkable against a live public register in under a minute, yet in practice almost nobody checks it before signing a contract or issuing an offer letter. That gap, not the sophistication of the forgery, is what makes licence fraud so persistent across regulated hiring and vendor onboarding in Australia.

This article is deliberately narrow. It does not cover degree or CV fabrication, which we address in our guide to detecting AI-generated CVs and forged diplomas, or forged training-course paperwork, which sits in its own category entirely. This piece covers the credentials that let someone legally practise a regulated profession or qualify as a vendor: an Australian Financial Services Licence (AFSL) or authorised-representative status for financial and insurance intermediaries, AHPRA registration for healthcare practitioners, and state licensing for building, plumbing, electrical and gas trades.

A person practising a regulated profession or trade without genuine authorisation commits a criminal offence independent of any deception used to obtain the role, which is a materially different legal exposure than exaggerating a job title on a CV (Health Practitioner Regulation National Law, section 116; Corporations Act 2001 (Cth), section 911A). For a sector-by-sector breakdown of which documents matter most across regulated industries, see our industry verification guide.

How Fraudsters Fabricate and Alter Licence Numbers With AI

Most licence fraud does not involve a forged card design at all; it involves a genuine-looking number attached to the wrong person or firm. Fraudsters favour this route because cloning a reference number is far cheaper than replicating a physical security feature, and it defeats a visual check completely.

Clone-firm fraud, where a scammer copies a genuine AFS licensee's name, licence number and branding onto a fake website while supplying different contact details, has become common enough that ASIC now collects and displays licensees' principal web addresses alongside their register entry, specifically to help onboarding teams spot the mismatch (ASIC, scam alert on impersonation of financial services businesses). Generative AI accelerates the same pattern elsewhere: an inpainting model can lift a genuine AHPRA registration certificate found online, swap the name and photograph, and preserve the letterhead well enough to pass a quick visual review. A scanned state trade licence card can be edited the same way, and the forgery is only caught when the number is checked against the issuing register rather than read off the card.

Verifying Financial Advisers on the ASIC Register

Every individual authorised to provide personal financial advice must appear on ASIC's Financial Advisers Register, searchable by name, registration number or the AFS licensee they act for, either directly through ASIC or via the consumer-facing version at moneysmart.gov.au. The register shows current and past licensees, qualifications, training, and any banning orders — a firm or adviser who does not appear at all, or whose entry carries a warning, should not be onboarded regardless of what documentation is presented.

Carrying on a financial services business, including giving personal financial advice, without holding an AFSL or acting as an authorised representative of one is an offence under section 911A read with section 1311 of the Corporations Act 2001 (Cth) (AustLII, Corporations Act 2001, section 911A). The practical complication mirrors clone-firm scams elsewhere: many fraudulent intermediaries clone a genuine licence number rather than fabricate one. The register entry looks correct because it is correct — it belongs to a real, licensed business — but the website, phone number or trading name presented to the onboarding team does not match what ASIC has on file for that licensee.

Verifying Healthcare Practitioners: AHPRA's Single National Register

Unlike financial services and trades, healthcare registration in Australia runs through one national system rather than a patchwork of separate bodies. AHPRA supports 15 National Boards covering 16 registered health professions — including medicine, nursing and midwifery, physiotherapy, paramedicine, psychology and pharmacy — inside a single public register searchable at ahpra.gov.au by name or registration number (AHPRA, Registers of practitioners). That is a genuine structural advantage over jurisdictions where medical, nursing and allied-health registration sit in three or more separate systems: one search, against one authoritative source, covers any of the 16 professions.

A man who had never been registered as a medical practitioner and never completed a medical degree was successfully prosecuted for holding out as a doctor and using the title "MD" (AHPRA, successful prosecution of fake doctor). Section 113 of the Health Practitioner Regulation National Law makes it an offence to use a protected title such as "doctor," "nurse," "midwife" or "physiotherapist" without matching registration, and section 116 separately criminalises holding out as registered or claiming qualifications not held (AustLII, Health Practitioner Regulation National Law, section 113). A registration number alone proves nothing unless checked directly, since registration can lapse or be suspended between renewal cycles without any notification reaching the employer.

For staffing agencies placing locums, the register check needs to happen before each placement, not once at initial agency registration. Our interim staffing solutions and healthcare verification tools are built around this repeat-check requirement.

Verifying Tradespeople: State-Based Licensing Across Australia

Trades licensing does not follow AHPRA's national model — it runs separately in each state and territory, so the correct register depends on where the work is done. In New South Wales, Fair Trading requires a licensed contractor for building work over $5,000 and for all electrical, plumbing and gas work regardless of value, and its public licence check (via Service NSW) returns the holder's name, categories, expiry date, and any cancellations, suspensions or prosecution history (Service NSW, check a builder or tradesperson licence). In Victoria, the Victorian Building Authority (VBA) registers building practitioners such as builders and surveyors, and licenses plumbers and gasfitters through its own plumbing register, while electrical work sits with a separate state electrical safety regulator (Victorian Building Authority). A licence valid in one state carries no automatic authority to do the same work in another.

Carrying out licensable building, plumbing, gas or electrical work while unlicensed, or presenting a licence number that does not match the work class actually held, exposes the individual to fines and licence cancellation under state legislation, independent of whether the work itself was competently done. On construction sites, induction and safety cards (the "White Card" and its state equivalents) serve a similar function without being a licence — a valid card confirms safety induction training was completed, not that every later skill claim is accurate. Our construction and trades verification tools are built around this pattern of frequent, jurisdiction-specific checks rather than a one-off onboarding check.

Cross-Checking Every Licence Type in One Table

The verification channel differs by profession and by state, but the principle is identical throughout: check the number against the issuing body, not the document presenting it.

Questions Compliance and Recruitment Teams Keep Asking

On forums frequented by compliance officers and staffing agencies, the same handful of questions recur, usually phrased less formally than regulatory guidance.

Is a cloned AFSL the same thing as a fake one? Not quite. In a clone scam the licence number is genuine and belongs to a real, authorised business, but the scammer has attached a different website, phone number or trading name to it, banking on the check stopping at "the number is on the register" rather than continuing to "and do these contact details match ASIC's file for that licensee."

Does the registration date on a candidate's certificate have to match the register exactly? Not always — a name change, a historic entry, or a specialty registration added later are all common — so a mismatch should trigger a direct check against the register rather than an automatic rejection.

Does an active licence on a state register guarantee the underlying training was genuine? No. A "current" status confirms the licence has not been cancelled or suspended, but it does not retroactively verify that the qualifying exam or apprenticeship behind an older licence was actually completed. Treat a valid register result as one input alongside broader onboarding checks, not a complete answer on its own.

Legal Consequences of Fake Licences and Registrations

A false licence is rarely prosecuted alone; sector offences under the Health Practitioner Regulation National Law, the Corporations Act 2001 or state trade licensing legislation usually sit alongside general fraud and dishonesty law. Fraudulently obtaining work, a contract or payment from a private employer typically engages state criminal law — in New South Wales, section 192E of the Crimes Act 1900 makes obtaining property or a financial advantage by deception an offence carrying up to ten years' imprisonment. Where the same conduct targets a Commonwealth entity or program, such as a government tender or Medicare-funded service, the dishonesty and financial-advantage-by-deception offences in sections 134.2 and 135.1 of the Criminal Code Act 1995 (Cth) can apply instead, each carrying up to ten years.

Australia has no broad "failure to prevent fraud" corporate offence equivalent to the UK's — its recent failure-to-prevent corporate offence is limited to foreign bribery. That makes documented onboarding checks a matter of directors' duties rather than a dedicated fraud-prevention statute: a director who signs off on onboarding without any licence check can struggle to show the "reasonable care and diligence" the Corporations Act expects, a theme discussed further in our guide to forged vendor compliance certificates. Report suspected licence fraud to the relevant regulator directly, and to police or via Scamwatch for suspected criminal fraud.

Building Licence Verification Into Onboarding and Hiring

A documented, repeatable verification step at onboarding is what separates a genuine governance practice from a token one: capture the licence number at application stage, check it against the issuing body's register before start date, and repeat the check periodically, since registrations lapse and licences get cancelled mid-engagement.

CheckFile applies multi-layer analysis, structural, metadata and cross-document checks, to the certificates, ID documents and licence records submitted during onboarding, giving compliance teams broad detection coverage without replacing the register check itself. Contextual analysis distinguishes ordinary variation, such as a name change or a renewed card design, from genuine fraud signals, keeping false positives manageable. Depending on client configuration, an additional AI-generation signal layer flags certificates and ID documents showing signs of generative editing, complementing rather than replacing the primary-source register check. The platform supports 3,200+ document types across 24 OCR languages and 32 jurisdictions.

Detect Forged Certificates Without Replacing Your Register Checks

No detection platform, including CheckFile, replaces the register check that only ASIC, AHPRA or the relevant state licensing authority can perform — the single source of truth for whether a licence is genuine is the issuing body's own database, not the document presented. What automated analysis adds is a forensic pass on the certificate or ID document itself, catching alterations and AI-generated edits that a quick visual check misses, complementing rather than substituting for the register check.

Explore CheckFile's approach to AI-generated and forged document detection to see how this signal layer fits alongside the primary-source verification your compliance process already requires.

Frequently Asked Questions

Is it illegal to work using a fake or altered professional licence in Australia?

Yes. Practising a regulated health profession without genuine AHPRA registration is an offence under sections 113 and 116 of the Health Practitioner Regulation National Law, providing a financial service without an AFSL is an offence under section 911A of the Corporations Act 2001 (Cth), and state trade licensing legislation carries its own penalties for unlicensed work. Knowingly presenting a false licence number to secure work separately engages state fraud or deception offences, or the Commonwealth's general dishonesty provisions where a Commonwealth entity is involved.

How do I check if an AFSL or financial adviser is genuine and not cloned?

Search the adviser's name or licence number on ASIC's Financial Advisers Register, either directly through ASIC or via moneysmart.gov.au, then compare the website, phone number and trading name shown against what the business has given you. If the licence number is genuine but the contact details do not match ASIC's records, you are likely dealing with a clone scam rather than the authorised business itself.

How can I verify a doctor's or nurse's AHPRA registration before a locum shift starts?

Search AHPRA's national register at ahpra.gov.au by the individual's name or registration number, and confirm the registration is current and unrestricted, not just present, since a suspended registration or one with conditions attached will still return a search result. Because the register covers all 16 regulated health professions in one place, this is a single check regardless of whether the practitioner is a doctor, nurse, midwife or allied health professional.

Does a current state trade licence guarantee the tradesperson's underlying qualification is genuine?

No. A licence check on NSW Fair Trading, the VBA or another state register confirms the licence is current and has not been cancelled, but it cannot retroactively verify that every unit of competency behind an older licence was genuinely completed. It also only covers the state where the licence was issued — a licence valid in one state does not automatically authorise the same work in another.

What should a business do if it discovers it accepted a fake licence during onboarding?

Stop any work or payment connected to that individual or firm immediately, and verify directly with the issuing regulator using your own search tool rather than contact details supplied by the person in question. Preserve the original document, report the matter to the regulator and, where criminal fraud is suspected, to police or via Scamwatch, and review whether the same gap let other fraudulent credentials through your onboarding process.