# Detect tampered and deepfake Admission Letter > A university admission letter is often the one document a visa application turns on, and it carries no security printing to check. That makes it the easiest document in the education set to fabricate and the most valuable one to get right. Offers are cloned from real letterheads, sold inside agent packages, or edited to change the applicant's name and start date. TamperCheck examines the letterhead, the signature block, and the file the letter arrived in. **Canonical URL:** https://tampercheck.ai/documents-support/admission_letter **API document class:** `admission_letter` **Last updated:** 2026-10-07 --- ## What a genuine admission letter contains An offer of admission is a letter, and it reads like one. The letterhead gives the institution's name, postal address, telephone number, and web domain, with a reference or application number and the date of writing. The body names the applicant, the programme and award level, the faculty or school, the mode and duration of study, the campus, and the intake date, and states whether the offer is conditional or unconditional. Tuition, the deposit required, and the deadline for acceptance follow, then the signatory's name, job title, and signature. The checkable facts here are external rather than internal. The programme has to exist at that institution and run at that intake, the fee has to match the published figure for that year, the application reference has to follow the institution's format, and the signatory has to hold an admissions role there. The letterhead domain is the field that most often gives a fabricated offer away, because cloned letters carry an address close to the real domain but not it, and the contact details in the footer frequently disagree with the office named in the signature block. ## How admission letter forgeries are made ### Letterhead cloned with a lookalike domain The whole letter is rebuilt on a copied letterhead with the contact domain altered by a character, or replaced with a free mail address, so that any attempt to confirm the offer reaches the fraudster rather than the university. The crest is usually pulled from the public website at screen resolution. ### Applicant name and reference substitution A genuine offer issued to one student is reused for another, with the name and application number exchanged and everything else left untouched. The applicant's name typically appears in the address block and again in the body, and a substitution often updates one instance and misses the other. ### Programme and intake edits The start date is pushed back to fit a visa timeline, or the course is swapped for one that carries different work or settlement rights. Either edit leaves a programme and intake combination the institution does not offer, which the published prospectus will contradict. ### Conditional offer converted to unconditional The conditions paragraph is deleted so an applicant who has not met the grade or language requirement appears fully admitted. Removing a paragraph reflows the page, and the spacing between the remaining blocks rarely matches the institution's own template afterwards. ### Invented signatory The letter is signed by a name and job title that correspond to no one at the institution, or by a real member of staff given a title they do not hold. Admissions correspondence is signed from a small number of offices, so an unfamiliar title is worth more scrutiny than an unfamiliar name. ### Offers manufactured as part of a visa package Education agents assemble complete application sets, offer letter included, that are internally consistent because they were designed together. Nothing in the text contradicts anything else, so these are separated from genuine correspondence through rendering signatures and the structure of the PDF itself. ## What TamperCheck checks on an admission letter TamperCheck runs 200+ forensic checks across three layers and returns a risk score from 0 to 100 with plain-English findings tied to specific regions of the document. These three carry the most weight on this document class. ### Stamp authenticity and placement Stamps are assessed for whether the ink was impressed onto the page or printed as part of it, and for whether the impression was placed digitally after the fact. ### Watermark detection Watermarks are checked for presence, placement, and whether they sit beneath the page content as a genuine watermark does or on top of it as an overlay does. ### Letterhead, logo, and issuer plausibility Issuer branding is checked for resolution and compression consistency against the body text it sits on. A logo lifted from a website carries the signature of its source, not of the document. ### And many more checks The three above are the layers that carry the most weight on an admission letter. Every upload runs the full suite of 200+ checks regardless of document class, spanning file structure and metadata, pixel-level forensics, font and text rendering, optical and print characteristics, provenance signals, AI-generation signatures, and many more checks. ## Who verifies an admission letter, and why Student visa officers, education agents, and scholarship boards. In each case the document is being used to unlock money, access, or a legal status, which is exactly what makes it worth forging. ## How to verify an admission letter in 4 steps 1. **Find the institution's contact details independently.** Search for the university yourself and use the admissions contact listed on its official site. Never call the number or write to the address printed on the letter, since those are the first fields a fabricated offer changes. 2. **Check the programme, intake, and fee against the prospectus.** Confirm the institution runs that exact programme, that it admits for the intake named, and that the tuition figure and deposit match the published rates for that academic year. Fabricated offers commonly get the fee slightly wrong. 3. **Ask the applicant to open the institution's portal.** Universities issue offers through an applicant portal the student logs into directly. An offer visible in that account, reached through the institution's own domain, is far stronger evidence than a PDF forwarded by email. 4. **Run the letter through a forensic check.** A cloned letterhead can be flawless on screen. TamperCheck runs 200+ forensic checks on the file, returns a risk score from 0 to 100, and ties each finding to a specific region of the letter, processing the document ephemerally and not storing it. ## Frequently asked questions ### How do I verify a university admission letter is genuine? Contact the admissions office using details you found on the institution's own website, never the ones printed on the letter, and quote the application reference to confirm the offer exists in that name. Check that the programme, intake, and tuition match the published prospectus, and have the student open the offer inside the university's applicant portal while you watch. ### How do visa officers check admission letters? They confirm the offer with the institution directly, usually through a sponsor or confirmation-of-acceptance system that ties a reference number to a named student and a specific course. Alongside that, they assess the document itself: whether the letterhead domain is the institution's real one, whether the signatory holds the title claimed, and whether the letter's own file shows signs of editing. ### Can a real offer letter be edited to name someone else? Yes, and it is one of the most common frauds in this category, because the original document is authentic in every other respect. The applicant's name appears in more than one place on a standard offer, so a substitution that updates the address block and misses the reference in the body leaves two different students named in the same letter. ### What is the biggest tell on a fake admission letter? The contact domain in the letterhead or footer. Genuine correspondence uses the institution's own domain throughout, while cloned letters route replies somewhere the fraudster controls, either through a near-identical domain or a free mail account. Compare every address on the page against the domain the university actually publishes. ### Does a PDF offer letter show evidence of editing? Yes, frequently more than the visible page does. A PDF records how its text was placed, which fonts were embedded, and whether regions were rasterised and pasted over existing content, and an edited letter often carries two generations of that history in one file. That structure is analysed alongside the letterhead, the signature block, and the layout. ## Related document types - Academic Transcript: https://tampercheck.ai/documents-support/transcript - Marksheet: https://tampercheck.ai/documents-support/marksheet - Degree Certificate: https://tampercheck.ai/documents-support/degree_certificate - Diploma: https://tampercheck.ai/documents-support/diploma - Certificate: https://tampercheck.ai/documents-support/certificate - Enrollment Certificate: https://tampercheck.ai/documents-support/enrollment_certificate --- Try TamperCheck now: https://tampercheck.ai/dashboard · Docs: https://tampercheck.ai/docs · Pricing: https://tampercheck.ai/pricing