Detecting Forged Vendor Compliance Certificates in Australia

A forged ATO "Statement by a Supplier," a doctored ASIC company extract, or a workers compensation Certificate of Currency that no longer matches the insurer's record can all pass a quick visual check during vendor onboarding. Catching them means checking every reference number against the issuing body's own system — ABN Lookup, ASIC's registers, and the relevant state workers compensation authority — rather than trusting the PDF a supplier hands over. From 1 July 2026, superannuation must be paid every payday rather than quarterly under the Payday Super reform, so a business relying on a forged declaration to misclassify a worker as a contractor now faces director penalty exposure far more often than before.

This article is deliberately narrow: it is not a guide to obtaining an ABN, an ASIC extract, or a labour hire licence — those are covered in our guides on construction subcontractor compliance documents and vendor compliance certificate verification. This piece covers the opposite problem: how these documents get faked, and what a procurement team should do the moment one looks wrong.

Why Forged Compliance Certificates Are Appearing in Supplier Onboarding

Forged certificates surface most where margins are thin and onboarding is fast, since fabrication is cheaper for a non-compliant subcontractor than fixing the underlying tax, insurance, or licensing problem. Construction, cleaning, and labour-supply sectors see this disproportionately, combining tight tender pricing with multi-tier subcontracting chains that dilute oversight of who is doing the work.

Illegal phoenix activity — dumping a company's debts into a new entity while the business continues trading — is estimated to cost the Australian economy around $4.89 billion a year, with construction accounting for a large share (ASIC, Illegal phoenix activity), the same sector where forged onboarding paperwork most often keeps a non-compliant supplier trading.

How Forgers Fabricate ABN, ASIC and Workers Compensation Documents

A genuine ABN "certificate" barely exists in the form fraudsters fabricate it. The Australian Business Register confirms whether an ABN is active, cancelled, or GST-registered through a free public search, not a downloadable certificate (ABN Lookup, Australian Business Register). Where a supplier claims an exemption from the 47% no-ABN withholding rate, the only document the ATO recognises is its own Statement by a Supplier form (NAT 3346) — and a payer who accepts a statement despite reasonable grounds to believe it is false remains liable to withhold 47% regardless (ATO, Statement by a supplier not quoting an ABN). Forgers copy an ATO form or invoice layout, invent an ABN that is well-formed but unregistered, or attach a real ABN belonging to an unrelated business.

ASIC records are forged differently, since the underlying company data is genuinely public and free to search. Fraudsters typically alter a screenshot or PDF export of a real extract — registered office, director details, company status — since editing an existing document is faster than fabricating one. A company shown as registered when it has been deregistered, or an extract listing a director who resigned months earlier, is a common target because few reviewers cross-check the live register.

A workers compensation Certificate of Currency is a frequent forgery target in construction because site access often depends on presenting one. Under section 163A of the Workers Compensation Act 1987 (NSW), a person who fraudulently alters a certificate of currency is guilty of an offence, and each state regulator can independently confirm whether the policy shown is current (AustLII, Workers Compensation Act 1987 (NSW) s163A). A certificate showing a lapsed policy, or one for a different ABN than the subcontractor actually engaged, is a mismatch any reviewer can catch against the insurer's lookup tool.

Labour hire licences follow the ABN pattern: forgers reuse a licence number rather than fabricate the licence itself, since the goal is passing an onboarding checklist. A number copied from a genuine licensee and attached to a different provider fails the moment it is checked against the relevant register.

Red Flags in Forged ABN Declarations

The strongest red flag is the document format itself: an ABN is confirmed through a free register search, so a "certificate" with letterhead and a signature block for something ABN Lookup shows in seconds is presenting a document type the register does not generate. A genuine ABN is an 11-digit number; anything shorter, longer, or failing the register's check digit validation is invalid and should stop onboarding immediately.

Payers must withhold 47% of a payment where a supplier fails to quote an ABN and no valid exemption applies, and the ATO can impose a penalty equal to the full amount that should have been withheld if the payer relied on a doubtful statement (ATO, Withholding if ABN is not provided). A subcontractor whose ABN shows as cancelled, or whose GST registration date postdates invoices already quoting GST, has presented a document with no real record behind it. Other red flags include resistance to a joint call with the payer's own tax agent, an ABN returning no match, and pricing conspicuously below market rate.

Spotting a Forged ASIC Extract or Deregistered Company

The cross-check for any ASIC record is fast and inexpensive, which is why an unchecked forged extract is inexcusable in an onboarding file. Search the company name or ACN on ASIC's registers and compare every field on the supplier's document — registered office, director names, organisation status — against what ASIC shows; any mismatch means the document does not reflect the company's real record.

Every company director must hold a Director Identification Number, a permanent identifier designed to curb illegal phoenix activity by making it harder for a director to walk away from one failed entity and quietly resurface as director of another (ASIC, Combating illegal phoenix activity). A freshly incorporated supplier whose sole director has no verifiable trading history, or whose extract shows an address matching a company recently deregistered for non-lodgement, warrants extra scrutiny — the live register, not the PDF sent, is the source of truth.

Detecting Fake Certificates of Currency and Labour Hire Licences

A Certificate of Currency check is only meaningful if run against the insurer's own lookup tool rather than read off the PDF a subcontractor hands over on site. Workers compensation is state-based — icare in New South Wales, WorkSafe in Victoria and Queensland, ReturnToWorkSA in South Australia, and separate schemes elsewhere — so a certificate for the wrong state's scheme is itself a red flag on a multi-state project.

Any business in Victoria, Queensland or South Australia that hosts workers through an unlicensed labour hire provider can be penalised regardless of whether it knew the provider was unlicensed — Victorian penalties alone can exceed $650,000 for a corporation, and the authority need not prove the host's knowledge (Labour Hire Authority Victoria, Check a provider's licence status). The onus sits with the host to check the register before engaging a provider and keep checking through the contract, since a licence can be cancelled mid-contract.

Legal and Liability Exposure for the Hiring Business

Presenting a forged compliance document is a criminal offence in its own right, independent of any underlying tax, insurance, or licensing breach. Under section 144.1 of the Criminal Code Act 1995 (Cth), making a false document intending it be used to dishonestly induce another person carries a maximum penalty of ten years' imprisonment, and using such a document to secure a contract can also expose the maker to comparable state fraud and deception offences.

The exposure is not limited to the party who forged the document. A hiring business relying on a forged ABN declaration risks its own PAYG withholding and superannuation shortfalls, with directors personally exposed to a Director Penalty Notice once Payday Super takes effect on 1 July 2026. Labour hire hosts face direct statutory penalties for engaging an unlicensed provider regardless of intent, and a contractor that let an uninsured subcontractor onto site on a forged Certificate of Currency can face its own workers compensation liability if that worker is injured. Security of Payment legislation adds a further, state-specific layer — Victoria's regime had its biggest reform since 2006 in April 2026 — so obligations vary by state.

What to Do When You Suspect a Forged Certificate

Stop onboarding or payment immediately and do not confront the supplier before the document is independently verified, since an early warning can prompt evidence destruction or a hurried second forgery. Verify directly with the issuing body using your own search or login — ABN Lookup, ASIC Connect, the relevant workers compensation insurer's lookup tool, or the applicable labour hire licence register — never a contact number printed on the suspect document.

Preserve the original file, including its metadata, rather than a screenshot or re-saved copy, since modification history is often the clearest evidence of tampering. Suspected tax fraud, phoenix activity, or shadow economy behaviour can be reported confidentially to the ATO's Tax Integrity Centre on 1800 060 062 or via its online tip-off form (ATO, Report fraud, phoenix, tax evasion, shadow economy activity, or unpaid super), and suspected licensing fraud should go to the relevant state labour hire authority or workers compensation regulator. One red flag should trigger verification; two or more on the same document is a strong basis to pause the relationship pending confirmation from the issuing authority.

Building Systematic Verification Into Supplier Onboarding

Manual, ad hoc checking does not scale once a procurement team manages more than a handful of subcontractors, since every renewal and every new tier-two supplier creates another document needing verification against a register. Platforms such as CheckFile apply structural, metadata and cross-document analysis to onboarding files, giving compliance teams high coverage across the document set, while contextual analysis keeps false-positive rates low by distinguishing normal variation from genuine fraud signals.

Manual fraud detection methods, including routine document review, catch only around 37% of occupational fraud cases, with a median delay of 87 days before detection (ACFE, 2024 Report to the Nations). CheckFile also deploys an additional AI-generation signal layer, depending on client configuration, as a complement to these checks, not a replacement — a forged ABN still has to be checked against ABN Lookup, and a cloned labour hire licence against the relevant register. For a broader defence against synthetic paperwork, see CheckFile's AI-generated document detection.

Teams comparing platforms can review CheckFile's security architecture and pricing overview, or get in touch to discuss a specific supplier base. For the wider onboarding checklist beyond fraud detection, see our guides on know your supplier due diligence and verifying a company registration certificate against the register, or the document compliance guide for the full framework.

Frequently Asked Questions

Does the ATO issue a downloadable ABN certificate that can be checked for authenticity?

No. ABN status, GST registration, and entity details are confirmed through a free search on ABN Lookup, not a downloadable certificate. A supplier presenting a formal "ABN certificate" PDF should be verified against the ABN Lookup result, not assessed on appearance.

How is a workers compensation Certificate of Currency verified without contacting the subcontractor?

Each state's workers compensation insurer offers a lookup tool confirming whether a policy is currently in force — for example, icare's Employer Lookup in New South Wales. Because the scheme is state-based, the correct channel depends on where the work is performed, and a certificate for the wrong state's scheme is itself a red flag.

What penalty applies to a business that accepts a forged compliance certificate without checking it?

The forger faces criminal liability under section 144.1 of the Criminal Code Act 1995 (Cth), up to ten years' imprisonment, plus potential state fraud offences. Separately, the hiring business can face its own exposure — PAYG and superannuation shortfalls with personal director liability, penalties for an unlicensed labour hire provider, or workers compensation liability if an uninsured worker is injured.

Can a labour hire licence be verified without contacting the provider?

Yes. Victoria, Queensland and South Australia each maintain a public labour hire licence register searchable by licence number, business name, or ABN, and a host business must check the register before engaging a provider and periodically thereafter, since a licence can be cancelled mid-contract.

---

This article is for informational purposes only and does not constitute legal, tax, or regulatory advice. Consult a solicitor or registered tax agent for guidance specific to your organisation. Legislation and guidance referenced are current as of 7 July 2026.