Fake Mortgage Documents: How Canadian Lenders Detect Fraud in 2026

Fake mortgage application documents are forged or AI-generated pay stubs, bank statements and tax records submitted to make a borrower's income or affordability look stronger than it really is. In Canada, this ranges from a pay stub with an inflated gross figure to a fully fabricated Notice of Assessment, exposing both applicant and lender to consequences under the Criminal Code of Canada and the Proceeds of Crime (Money Laundering) and Terrorist Financing Act (PCMLTFA). Detecting it now requires more than a visual check: current-generation forgeries are arithmetically consistent and built specifically to clear OSFI's mortgage stress test.

This article is provided for informational purposes only and does not constitute legal, financial or regulatory advice. Regulatory references are accurate as of the date of publication.

What Counts as Fake Mortgage Documentation

Fake mortgage documentation is any pay stub, bank statement, employment letter or tax record altered or invented to change how a lender assesses income, employment status or affordability. It ranges from mild exaggeration — rounding up a bonus, hiding a second job's true hours — to fabricating an entire three-month pay stub history for an employer that does not exist.

Equifax Canada data reported by Canadian Mortgage Trends puts the mortgage fraud rate at roughly 0.19% of applications in Q3 2025, with falsified financial documents present in a large majority of confirmed fraud cases and over three-quarters of fraud applications involving some financial misrepresentation. That is a small share of the overall application pool, but on a national mortgage market it represents a meaningful volume of falsified pay stubs, bank statements and tax slips reaching underwriters.

The three document types named in most lender fraud policies are pay stubs (to inflate salary or hide a probation period), bank statements (to show down payment funds or supporting spending patterns), and CRA tax documents — the Notice of Assessment (NOA) and T4 slip for employees, or the T1 General for self-employed applicants.

Why Mortgage Applications Attract Document Fraud

Mortgage applications attract document fraud because loan amounts are large, the qualifying threshold is a hard affordability line, and the documents involved are ones applicants can produce themselves. A borrower who falls short of qualifying has a strong incentive to adjust a single figure, and in Canada that threshold is set unusually explicitly.

Under OSFI's Guideline B-20, federally regulated lenders must qualify most residential mortgage borrowers at the greater of the mortgage contract rate plus 2%, or a floor of 5.25% — the minimum qualifying rate, commonly called the mortgage stress test. Because that floor is published and fixed, both sides know in advance exactly what income figure clears it, turning the stress test into a precise target for document fraud rather than a vague affordability judgment. The rate generally applies to mortgages insured by the Canada Mortgage and Housing Corporation (CMHC) for down payments under 20% too, so a falsified CMHC-insured file also exposes a federal Crown corporation, and by extension taxpayers, if the loan later defaults.

Self-employed applicants, whose income is harder to verify against a single pay stub, lean on the NOA and T1 General — documents that carry an assumed authority lenders rarely question closely, even though CRA correspondence is itself straightforward to template.

How Fraudsters Forge Pay Stubs, Bank Statements and Tax Documents

Fraudsters forge mortgage documents using manual template editing and, increasingly, AI generation tools that produce arithmetically correct output without the errors that used to give forgeries away. The technique differs by document, but the goal is the same: pass a five-minute visual review.

Forged and AI-generated pay stubs

Pay stub fraud typically starts from a genuine template — either the applicant's own pay stub with figures changed, or a cloned template from a well-known employer whose branding is public. Investigators flag rounded gross and net figures, malformed Social Insurance Number fields, inconsistent font weights between fields, and pay dates falling on weekends or statutory holidays, alongside misspelled employer or municipality names, as recurring tells. Pay stub templates for Canadian employers circulate widely enough online that a name-brand logo alone carries little assurance.

Fabricated bank statements

Bank statement forgery usually involves editing a PDF to inflate a closing balance or insert deposit-supporting transactions for a down payment, or generating a synthetic statement from a cloned layout of one of Canada's major banks. A failure mode reviewers still catch is an amended transaction that does not carry through to the running balance for subsequent lines, since manual edits rarely recalculate every downstream figure. AI-assisted generation closes this gap, producing statements where balances, transit numbers and transaction sequencing are internally consistent.

Altered Notices of Assessment and T4 slips

Self-employed applicants who lack a pay stub rely on the CRA Notice of Assessment and matching T1 General, both obtainable through the CRA My Account portal, while salaried applicants may be asked for a T4 slip alongside recent pay stubs. Fraud here typically means editing the total income figure on a genuine NOA PDF, or presenting an NOA for a tax year that does not reconcile against the accompanying T1 General or T4 — a mismatch that is easy to catch once a reviewer knows to look, but is regularly missed under processing volume. Canada has no single centralized lender-to-CRA verification channel, so lenders lean on the applicant's own CRA My Account printouts, which puts more weight on document forensics at intake.

Our related coverage of fake pay stub fraud in consumer lending and fake tax notice fraud sets out the generation techniques for each document type in more depth.

Red Flags by Document Type

Verifying Documents Under OSFI, CRA and FINTRAC Frameworks

Canadian lenders have no single formal document-verification channel; obligations sit across prudential regulation, tax administration and anti-money-laundering law, none of which replaces first-line document forensics.

OSFI's Guideline B-20 sets the underwriting standard federally regulated banks must follow, including sound income verification behind the stress test calculation, but OSFI supervises institutions rather than adjudicating individual documents. Provincially regulated lenders and brokers instead fall under regulators such as the Financial Services Regulatory Authority of Ontario (FSRA) or the Autorité des marchés financiers (AMF) in Quebec, so enforcement varies by province.

Where a lender or broker suspects falsified income documents, the applicant may have committed fraud under the Criminal Code of Canada, and entities regulated under the PCMLTFA must apply due diligence based on documents from a reliable, independent source — a standard a self-submitted forged pay stub does not meet. Where staff suspect money laundering or fraud, a Suspicious Transaction Report must be filed with FINTRAC before the transaction proceeds, while criminal investigation is typically a matter for the RCMP or provincial and municipal financial crime units. Once a mortgage closes, the loan and registered charge are recorded with the provincial land registry or land titles office, leaving a durable public record tied to the property title. Privacy obligations also vary: PIPEDA governs applicant financial information federally, while Quebec applications are additionally subject to the stricter Loi 25.

Detection Technology for Mortgage Document Fraud

A pay stub, bank statement and Notice of Assessment submitted together should tell the same financial story; the strongest signal is often a contradiction between two documents, not a flaw in one.

Our analysis of mortgage fraud cases points to multi-layer document analysis — combining structural checks, metadata forensics and cross-document consistency — as the current methodological baseline for catching forged pay stubs, fabricated bank statements and altered tax documents before they reach underwriting. Contextual scoring that accounts for legitimate income variation — bonuses, overtime, seasonal self-employed earnings — reduces false positives compared with rigid rule-based checks applied to a single document in isolation. AI-generation signals are increasingly deployed as an additional layer alongside these structural and metadata checks, not as a replacement for them.

According to the ACFE 2024 Report to the Nations, organizations relying on manual or targeted controls detect only around 37% of fraud, with an average detection delay of 87 days — a gap that, in mortgage lending, means a fraudulently obtained loan can close long before the discrepancy surfaces. The CheckFile banking KYC solution applies these layered checks to pay stubs, bank statements and tax documents submitted during underwriting, and the CheckFile security approach covers how metadata forensics and cross-document validation are structured within the pipeline. Pricing for lenders and brokers is on the CheckFile plans page.

Fake mortgage documents should not be confused with fake proof of funds used to secure a closing position — the distinction between affordability fraud and proof-of-funds fraud in property deals matters because the former concerns ongoing repayment ability, the latter a one-off deposit or closing sum. Bank statement forgery techniques overlap between the two, covered in our piece on AI-forged bank statements.

Questions Buyers and Brokers Ask on Mortgage Forums

Threads on r/PersonalFinanceCanada raise the same questions repeatedly, usually from people worried about a document already submitted, or a broker wondering how far checks actually go.

Can a lender tell if a pay stub PDF has been edited, or only if it looks visually wrong? Editing software leaves metadata traces — creation timestamps, authoring application, font substitutions — invisible to a visual review but visible to forensic document analysis. A pay stub can look flawless and still fail a metadata check, and there is no safe threshold of exaggeration: exposure under the Criminal Code of Canada applies regardless of whether a lender catches it at underwriting, through a CRA mismatch, or after the mortgage has already closed.

Frequently Asked Questions

What is the most common type of mortgage document fraud in Canada

Altered or forged pay stubs and T4 slips are among the most frequently reported forms, followed by bank statements edited to overstate down payment funds. Equifax Canada data cited by Canadian Mortgage Trends shows falsified financial documents present in the large majority of confirmed mortgage fraud cases, with self-employed applicants more often linked to altered Notice of Assessment or T1 General submissions.

Can mortgage fraud be discovered after the loan has closed

Yes. A CRA income mismatch, a routine post-closing audit, or an unrelated tax investigation can all surface a discrepancy years after closing. Because the mortgage and any related charge are recorded at the provincial land registry or land titles office, a fraudulently obtained loan remains traceable to the property for as long as the charge is registered.

Does using a mortgage broker reduce the risk of document fraud being detected

No. Brokers are subject to provincial licensing and, where PCMLTFA applies, anti-money-laundering due diligence obligations, and must report suspected fraud rather than pass documents straight to the lender. A broker who knowingly submits, or fails to query, an obviously falsified document risks their own licence with regulators such as FSRA in Ontario or the AMF in Quebec.

Reviewing every pay stub, bank statement and tax document manually does not scale for a lender processing volume applications, and visual review alone is no longer a reliable safeguard against current AI-generated forgeries. See AI-generated and forged document detection for how AI-generation signals can be layered alongside existing verification controls — a complement to, not a replacement for, the checks your team already runs. For a broader view of document verification requirements across regulated sectors, see our industry verification guide.