Back to blog
Deepfake Detection··7 min read

Document Forgery Detection: AI vs Traditional Methods for Insurance

AI-powered document forgery detection vs traditional manual review for insurance. How each method handles police reports, medical records, and repair estimates.

A side-by-side laboratory with traditional forensic methods on one side and modern AI analysis on the other examining the same document

Every insurance claim is a collection of documents. Police reports. Medical records. Repair estimates. Proof of ownership. Invoices. Contractor assessments. Identity documents. Correspondence.

Each document is a potential target for forgery. And the tools to create convincing forgeries have changed fundamentally.

Traditional document verification relies on human expertise: experienced investigators who know what a genuine police report looks like, how a real medical record is formatted, what a legitimate repair estimate should contain. This expertise remains valuable — but on its own it can no longer keep pace with generated and edited documents that are increasingly hard to tell from genuine ones.

This article compares AI-powered and traditional approaches to document forgery detection, and shows where each fits. For a method-by-method look at how tampering is detected, see our companion piece on document tampering detection.

The Document Threat Landscape

What AI Can Generate

Large language models (GPT-class models, Claude, Gemini, and open-weight alternatives) produce text that is grammatically correct, contextually appropriate, and formatted for specific document types. Combined with image generation and layout tools, they can produce:

  • Police reports with plausible formatting, case numbers, officer information, and incident narratives
  • Medical records with appropriate clinical terminology, diagnosis codes, treatment plans, and provider details
  • Repair estimates with itemized costs, part numbers, labor rates, and technical descriptions
  • Invoices and receipts with business details, line items, tax calculations, and payment terms
  • Legal documents with correct formatting, citation styles, and institutional letterheads
  • Identity documents with realistic photos, formatting, and approximations of security features

The quality is high enough that casual review — the level most claims documents receive — is unlikely to catch the forgery.

The Volume Problem

A single claims adjuster may review hundreds of documents per week across dozens of claims. The time available for scrutinizing each document is measured in minutes, not hours. Even a highly experienced adjuster performing conscientious review cannot examine every document with the attention that forgery detection requires.

This volume-versus-scrutiny mismatch is the core vulnerability that document fraud exploits — and the one automated screening addresses.

Traditional Detection Methods

Visual and Formatting Inspection

How it works: Trained investigators examine documents for visual anomalies — incorrect logos, wrong fonts, inconsistent formatting, alignment errors, suspicious quality variations.

Strengths:

  • Effective against crude forgeries (poor-quality copies, obvious formatting errors)
  • Leverages institutional knowledge of what genuine documents look like
  • Can catch physical document alterations (erasures, overwriting, cut-and-paste)

Limitations:

  • Depends entirely on the reviewer’s familiarity with the specific document type and issuing institution
  • Generated documents with correct formatting pass visual inspection
  • Time-intensive — impractical at claims volume
  • Subjective — different reviewers may reach different conclusions
  • Cannot detect pixel-level or file-structure anomalies

Contact Verification

How it works: The investigator contacts the institution that allegedly issued the document (hospital, police department, repair shop) to verify its authenticity.

Strengths:

  • Definitive — if the institution confirms or denies issuance, the question is usually settled
  • Catches forgeries regardless of quality

Limitations:

  • Extremely time-consuming — each verification may take hours or days
  • Not scalable — verifying every document on every claim is operationally impossible
  • Institutions may not respond promptly (or at all)
  • The contact information on the document may itself be fraudulent (directing calls to a fraudster rather than the real institution)
  • Applies only to documents with verifiable issuers — personal documents, handwritten notes, and informal records can’t be verified this way

Forensic Document Examination

How it works: Specialist forensic examiners use physical and optical techniques to analyze documents: examining paper, ink, printing methods, signatures, stamps, and security features.

Strengths:

  • Gold standard for physical document authentication
  • Established methodology with a long history of expert testimony
  • Can detect sophisticated physical forgeries (altered dates, signature grafting, security feature replication)

Limitations:

  • Requires physical access to the original document (increasingly rare in digital-first claims)
  • Highly specialized skill — few examiners available
  • Very expensive per document
  • Physical techniques don’t apply to born-digital documents (PDFs created electronically and never printed), which need digital forensics instead
  • Slow — turnaround often measured in weeks

AI-Powered Detection Methods

Statistical Text Analysis (Industry and Research Context)

Current product scope: deetech does not currently classify document text as AI-generated and does not automatically compare facts across multiple documents. The techniques below describe broader industry and research approaches. deetech document analysis combines deterministic structural and fabrication checks (including arithmetic consistency), edit-history and metadata analysis, confidence-gated OCR on scanned documents, and pixel forensics on supported scans.

How it works in systems that have separately validated this capability: AI models analyze the text content of documents for statistical signatures of AI generation. This includes:

  • Perplexity analysis — measuring how “surprising” the text is to a language model. AI-generated text tends to have lower perplexity (more predictable word choices) than human-written text.
  • Burstiness detection — human writing naturally varies in sentence length, complexity, and style within a document. AI-generated text is more uniform.
  • Stylometric analysis — comparing the writing style of a document against the expected style for its type. A police report should read like a police report, not like an AI’s approximation of one.

Catches: AI-generated text content in police reports, medical records, statements, and other narrative documents.

Limitations: Becoming harder as language models improve. Works best on longer documents. Less reliable on short, formulaic documents (invoices, receipts) where human and AI writing are inherently similar — and a document can be fraudulent whether or not a language model wrote its text.

Layout and Formatting Forensics

How it works: Models compare the visual layout of a document against templates and known examples from the purported issuing institution.

  • Template matching — comparing the document’s layout (header position, font usage, field arrangement, logo placement) against a library of verified genuine documents from the same institution
  • Micro-formatting analysis — examining details that forgers often get wrong: line spacing, character kerning, margin widths, paragraph indentation, table alignment
  • Logo and seal verification — comparing institutional logos, stamps, and seals against authenticated originals at the pixel level

Catches: Documents that use approximately correct but not precisely accurate formatting — a common failure mode for fabricated institutional documents. Template matching depends on maintaining a reference library for each issuer, which is a significant ongoing investment.

Digital Forensics

How it works: Analyzing the digital structure of the document file itself, independent of its visual content. This is the core of deetech’s document analysis.

  • Structural analysis — examining the internal structure of PDF files for signs of editing, later additions, or generation from non-standard tools
  • Edit-history analysis — reconstructing what the file’s own structure and metadata say about how and when it was changed
  • Arithmetic and fabrication checks — testing whether totals, identifiers, and dates hold together the way a genuine document’s would
  • Pixel forensics — on supported scans, detecting regions that were inserted or altered after the page was captured
  • Metadata examination — creation dates, authoring software, and other file-level metadata that may contradict the document’s claims

Catches: Documents that are visually convincing but structurally inconsistent with how genuine ones are produced — a common pattern with fabricated and edited documents.

Cross-Document Consistency Checking

How it works: Systems designed for this compare multiple documents within a single claim for internal consistency.

  • Date alignment — do dates across different documents form a consistent and plausible timeline?
  • Name and reference matching — do names, policy numbers, case numbers, and other identifiers match across all documents?
  • Factual consistency — does the medical record describe injuries consistent with the police report? Does the repair estimate address the damage documented in photos?
  • Source consistency — are documents from the same institution formatted consistently?

Catches: Fraud schemes where multiple documents were independently fabricated without ensuring mutual consistency.

Head-to-Head Comparison

DimensionTraditional MethodsAutomated Detection
SpeedMinutes to days per documentSeconds to minutes per document
ScaleHundreds per week (per investigator)Limited by compute and integration, not reviewer hours
Crude forgery detectionStrongStrong
Sophisticated digital forgery detectionLimitedDepends on method and document type
Physical document analysisStrongWeak (requires digital input)
Cross-document consistencyPossible if the investigator reviews every documentOnly where a separately validated consistency system is deployed
Consistency of resultsVariable (depends on reviewer)Consistent for a given model and rule release
Cost per documentHighLow
Use in legal proceedingsEstablished (forensic examiner testimony)Supports, but does not replace, qualified expert evidence
Audit trailManual documentationAutomatic logging

The Integrated Approach

The strongest document verification combines both approaches:

Automation handles bounded screening. deetech document analysis surfaces structural, fabrication, edit-history, OCR-derived, metadata, and supported pixel-level findings for review. AI-text authorship classification and automatic cross-document factual comparison require separate, validated controls.

Human expertise handles edge cases and evidence. When a document is flagged, a trained investigator reviews the findings, conducts contact verification where warranted, and prepares evidence for legal proceedings. Human judgment handles the nuance that automation may miss.

Forensic examination handles litigation. When a flagged document proceeds to legal action, traditional forensic document examination provides expert testimony, with the automated report as supporting documentation.

This layered approach provides coverage at scale (automation) with depth where needed (human review) and expert evidence when required (forensic examination).

Implementation for Insurers

Quick Wins

  1. Run structural and fabrication checks on supported digital documents at intake, with confidence-gated OCR on scanned documents.
  2. Keep cross-document review human-led unless a separately validated consistency system is integrated.
  3. Add metadata and pixel-level analysis on supported scans, then route findings to an investigator rather than treating them as automatic proof of fraud.

Medium-Term

  1. Build template libraries for common document sources (major hospitals, police departments, repair chains), and decide whether to maintain them in-house or through a provider.
  2. Analyze documents alongside photos for claims that include both — so an investigator can check that the photo evidence and document evidence tell the same story.

Long-Term

  1. Establish verified submission channels that provide cryptographic proof of document origin — reducing the opportunity for document injection.
  2. Share forgery intelligence with industry bodies to improve collective detection capability.

deetech™ analyzes supported documents alongside images, video, and audio. Document results cover deterministic structural and fabrication checks, edit-history and metadata analysis, confidence-gated OCR, and pixel forensics on supported scans, with findings for human review. Request a demo to see how it fits your claims team’s document review.

Document ForensicsDeepfake Detection