Question 1

Can landlords verify my tax return with HMRC directly?

Accepted Answer

No — landlords and letting agents cannot query HMRC databases directly to verify an SA302 or Self Assessment tax return. HMRC's RTI system, which enables real-time income verification, is available only to specified authorised users (primarily DWP and certain mortgage lenders participating in specific schemes). A landlord requesting an SA302 as proof of rental affordability is relying entirely on the document's own internal consistency and their own visual assessment. This is why automated document forensics — checking metadata, arithmetic, and formatting — is the only reliable verification method available to private-sector landlords and letting agents.

Question 2

How do banks check my Self Assessment documents?

Accepted Answer

Mortgage lenders and banks verify Self Assessment documents through a combination of methods. For self-employed borrowers, lenders typically request SA302s for the past two to three tax years alongside the corresponding HMRC Tax Year Overviews (downloadable from the HMRC government gateway, which confirms the figures are lodged with HMRC). Some lenders participate in the HMRC Income Verification scheme, which provides a more direct confirmation channel. Automated document platforms — including CheckFile and specialist lender fraud systems — additionally apply metadata forensics, arithmetic verification and cross-document reconciliation to the submitted documents before underwriting proceeds.

Question 3

What is an SA302 and why is it commonly forged?

Accepted Answer

An SA302 is HMRC's Self Assessment tax calculation document, issued (or downloadable) after a Self Assessment return is processed. It summarises total income from all sources, allowable deductions, and the resulting income tax and National Insurance liability. It is the primary income proof accepted by mortgage lenders for self-employed borrowers — which makes it a high-value forgery target. Because there is no real-time public verification channel for SA302 figures, a convincing forgery can pass through a manual review process without detection.

Question 4

What HMRC documents are most commonly forged?

Accepted Answer

The most frequently forged HMRC documents in 2026 are the SA302 (Self Assessment tax calculation), the P60 (end-of-year certificate showing total pay and tax deducted from an employer), and the Notice of Coding (which specifies the PAYE tax code). The P11D (benefits in kind return) is also targeted where applicants are attempting to inflate total remuneration for mortgage affordability calculations. For further detail on AI-based fake payslip detection alongside tax documents, see our dedicated guide for consumer lenders.

Question 5

What should an organisation do if it suspects a submitted tax document is forged?

Accepted Answer

Any organisation that suspects a submitted HMRC document is forged should preserve the document and all associated metadata, record the verification steps taken and their outcomes, and report the suspected fraud to Action Fraud (actionfraud.police.uk) with a reference copy of the document. If the document was submitted as part of a mortgage application, the lender must report to the FCA under its GABRIEL reporting obligations. AML-regulated entities must also consider whether a Suspicious Activity Report (SAR) is required under the Proceeds of Crime Act 2002. Document the entire process — the adequacy of the verification methodology will be scrutinised in any subsequent regulatory review.

Question 6

Can OCR detect AI-generated documents?

Accepted Answer

No. OCR transcribes a document's textual content without assessing its authenticity. An AI-generated document contains plausible text that OCR transcribes without error. Detection requires forensic analysis of metadata, generation artefacts and structural coherence — dimensions that OCR alone does not examine.

Question 7

What UK regulations require detection of AI-generated documents in KYC?

Accepted Answer

The UK Money Laundering Regulations 2017, as amended, require firms to apply risk-based CDD measures that account for new technology-enabled fraud. The FCA's Financial Crime Guide expects firms' documentary verification controls to keep pace with fraud typologies including synthetic documents. The EU AI Act (applicable from August 2024) also introduces AI content marking obligations that facilitate detection.

Question 8

Which documents are hardest for OCR-based KYC tools to detect?

Accepted Answer

Synthetic bank statements and payslips are the hardest to detect by OCR alone: they contain no physical security elements (holograms, MRZ). LLM-generated documents with numerically coherent data — valid IBANs, plausible amounts, credible transaction histories — pass the vast majority of data consistency checks.

Question 9

How should I evaluate whether my current KYC vendor detects AI documents?

Accepted Answer

Run a blind test: submit a mixture of authentic and synthetic documents without disclosing the composition to your vendor. Measure detection rates and false positive rates. Also request documentation of the forensic methodology — a rigorous vendor should be able to explain it clearly and provide per-document analysis logs.

Question 10

What is the average time to detect unintercepted document fraud?

Accepted Answer

According to the ACFE 2024 Report to the Nations, the median time to detect fraud is 87 days. For identity-related document fraud, this window can extend well beyond the duration of the commercial relationship. Beyond direct financial loss, firms subject to FCA oversight face potential regulatory action if KYC control failures are established.

Data

Fake Tax Notice Fraud: AI Detection Guide for 2026

Can Your KYC Vendor Detect AI-Generated Documents? What OCR Misses

Build vs Buy: In-House AI Document Fraud Detection or a Specialized Solution?

AI Document Fraud Detection Software: How to Choose in 2026

Digital Identity Trends 2026: The Future of Online Verification and e-ID

Biometric Verification: Fingerprint, Facial and Voice

RegTech 2026: Regulatory Technology Guide

Compliance Automation ROI: Benchmarks by Industry

Document Fraud in France 2026: Data & Trends

Document verification ROI calculator: TCO analysis and payback period

Document Fraud and Validation Costs: The Data

AI vs Manual Document Verification: ROI Comparison

Document Fraud Statistics and Trends 2026: Key Data

Compliance Fines and Penalties: UK Penalties by Sector

Cost of Compliance: True Cost of Manual Checks

Manual Document Validation: True Cost (TCO)

Document Fraud 2026: Statistics and Detection