Supported document type
Detect tampered and deepfake Brazil ID (RG / CIN and CPF)
The Brazilian identity card, the older state-issued Registro Geral (RG) and the Carteira de Identidade Nacional (CIN) that replaced it from late 2023, is the standard identity proof for banking and fintech onboarding. The CIN uses the CPF as its single national number, and the CPF's two check digits make fabricated numbers cheap to catch.
API slug: brazil_id
Last updated:
What a genuine Brazilian ID contains
The CPF has eleven digits written XXX.XXX.XXX-DD, nine base digits followed by two check digits, and its ninth base digit relates to the fiscal region of registration. The card shows the name, an optional nome social, filiacao, date of birth, naturalidade, CPF, date of issue, signature, and photograph, and the CIN adds a QR code for authenticity checks.
The old RG was issued independently by each state, so its number format and layout vary by state and it may show the CPF separately or not at all. Old RGs remain valid during the transition, the CIN may be paper or plastic, and a nome social can appear beside the registered name, so several layouts coexist legitimately and each is judged against its own design.
How Brazilian ID forgeries are made
CPF check-digit validation
Both check digits are computed with a weighted mod-11 scheme, and a sequence of one repeated digit is invalid. A CPF failing either computation was invented.
Variant conformance
The CIN carries a QR code and the CPF as its number, while an old RG follows its state's own pattern. A card with the wrong elements for its type signals assembly.
Name-order coherence
Brazilian names run given names then family names, and filiacao lists the parents. Edits to either leave font and baseline breaks against the surrounding lines.
Date logic
The date of birth, date of issue, and the age implied by the holder's photograph must follow each other plausibly. Edited dates show spacing and font passes that differ from the rest of the card.
Photograph and field patching
Portrait swaps and edited text leave cut-line edges and resolution steps that stand out against uniform issued print.
What TamperCheck checks on a Brazilian ID
TamperCheck runs 200+ forensic checks across three layers and returns a risk score from 0 to 100 with plain-English findings tied to specific regions of the document. These three carry the most weight on this document class.
Portrait substitution and face-swap analysis
The document is isolated from whatever it was photographed on, then the portrait region is assessed against the card surface around it. A pasted or generated face rarely matches the substrate it was placed onto.
Barcode and QR payload comparison
Encoded payloads are decoded and compared against the human-readable values printed alongside them. Editing the visible text without re-encoding the barcode is a common and highly detectable mistake.
Date and validity consistency
Issue, expiry, and period dates are checked against one another and against the file's own creation metadata, which catches backdating and validity extension.
And many more checks
The three above are the layers that carry the most weight on a Brazilian ID. Every upload runs the full suite of 200+ checks regardless of document class, spanning file structure and metadata, pixel-level forensics, font and text rendering, optical and print characteristics, provenance signals, AI-generation signatures, and many more checks.
Who verifies a Brazilian ID, and why
Brazilian banks, fintechs, and lenders. In each case the document is being used to unlock money, access, or a legal status, which is exactly what makes it worth forging.
How to verify a Brazilian ID in 4 steps
Capture the whole card
Photograph the card front and back flat at full resolution so the CPF, filiacao, and any QR code survive close analysis.
Validate the CPF
Apply both mod-11 computations and reject repeated-digit sequences before relying on the number.
Match the variant
Decide whether the document is an old RG or a CIN, and confirm its layout, number, and QR code fit that type.
Run a forensic check on the file
The number carries the structural story, and the print carries the edit history. TamperCheck runs 200+ forensic checks including CPF validation and patch detection, returning a risk score from 0 to 100 with findings tied to specific regions of the image.
Frequently asked questions
How is a CPF validated?
It has eleven digits, with the last two being check digits computed by weighted mod-11 sums over the earlier digits. A number failing either computation, or made of one repeated digit, is not a valid CPF.
What changed with the CIN?
The Carteira de Identidade Nacional uses the CPF as the single national registration number and carries a QR code, replacing the state-by-state RG numbering. Old RGs remain valid during the transition.
Why do RG layouts differ between states?
The old RG was issued by each state with its own number and layout, so no single template applies. Analysis judges an RG against the pattern of its issuing state.
How does TamperCheck verify a Brazilian ID?
TamperCheck validates the CPF check digits, compares the layout with the card type, and inspects the filiacao, date, and portrait regions for patching. Uploads run through a single REST endpoint, are processed ephemerally and not stored, and findings tie to specific regions.
TamperCheck analyses brazil id (rg / cin and cpf) uploads with a hybrid forensic and AI pipeline tuned for this document class. Upload endpoints accept PDF and common image formats; class is inferred automatically. See the API documentation for authentication, async jobs, and webhooks.