Supported document type
Detect tampered and deepfake Employment Verification Letter
An employment verification letter answers one question in the present tense: is this person employed here now, in the role and at the pay they claim. Consulates, lenders and landlords ask for it because it is the cheapest proof of continuing income available, and it gets forged for the same reason. The edits land on designation, date of joining and the seal, and the seal is where a letter that was never printed usually gives itself away.
API slug: employment_verification_letter
What a genuine employment verification letter contains
A certificate of employment sits on company letterhead with the registered address and, in many jurisdictions, an incorporation or registration number. It shows an internal reference, the day it was issued, an addressee, the employee's full name and employee ID, their designation and department, the date they joined, and a clear statement that they remain employed as at the date of the letter. Employment type and salary appear where the recipient asked for them. An authorised signatory's name, title and direct contact close it, with the company seal over the signature.
The date of issue is what makes the rest meaningful, because a present-tense statement expires quickly and most recipients accept only a recent letter. The joining date has to match the experience letter and the earliest payslip from that employer, while designation and salary have to match the most recent ones. The seal is meant to overlap the signature so neither can be moved without the other, and a seal resting neatly beside a signature on a file that was never printed is a finding, not a formatting quirk.
How employment verification letter forgeries are made
Designation and salary uplift
Title and stated pay are raised to clear a lender's income threshold or to make a visa application look better supported. Both are short fields in heavily used positions, and an inflated figure still has to survive comparison against the payslips and bank credits the same application usually includes.
Joining date moved
The date of joining is pulled earlier so the employee clears a minimum tenure requirement, whether continuous employment for a loan or a service period a visa category sets. The change then contradicts the experience letter and the first payslip issued by the same employer.
A seal placed in a PDF editor
A seal image is dropped onto a digitally produced letter to imitate the wet stamp many consulates insist on. It shows uniform opacity, no ink pooling at the rim, and it sits above the signature instead of crossing it, over a file with no print or scan stage anywhere in its history.
A former employee written back into the present
A letter genuinely issued while someone worked at a company has its tense and dates adjusted so it now asserts current employment. The word changes are tiny and the letterhead is real, so the document survives inspection while its issue date and the person's actual status no longer agree.
A letter from a company with no such employee
The certificate is produced end to end using a real company's public branding, sometimes by a service that will also answer the verification call. Field-level analysis finds nothing edited, so assessment turns to how the letterhead was made, whether the reference number follows any sequence, and whether the contact route belongs to the company.
What TamperCheck checks on an employment verification letter
TamperCheck runs 200+ forensic checks across three layers and returns a risk score from 0 to 100 with plain-English findings tied to specific regions of the document. These three carry the most weight on this document class.
Signature forgery analysis
Signature regions are assessed for ink consistency and for how the stroke sits on the page, which distinguishes a genuine pen stroke from a pasted image of one.
Letterhead, logo, and issuer plausibility
Issuer branding is checked for resolution and compression consistency against the body text it sits on. A logo lifted from a website carries the signature of its source, not of the document.
Date and validity consistency
Issue, expiry, and period dates are checked against one another and against the file's own creation metadata, which catches backdating and validity extension.
And many more checks
The three above are the layers that carry the most weight on an employment verification letter. Every upload runs the full suite of 200+ checks regardless of document class, spanning file structure and metadata, pixel-level forensics, font and text rendering, optical and print characteristics, provenance signals, AI-generation signatures, and many more checks.
Who verifies an employment verification letter, and why
Consulates, lenders, and landlords confirming that an applicant is currently employed. In each case the document is being used to unlock money, access, or a legal status, which is exactly what makes it worth forging.
How to verify an employment verification letter in 4 steps
Check the fields against each other
Read designation, date of joining, and company seal together rather than one at a time. Forgers typically change one value and leave the rest of the document describing the original.
Inspect the file metadata
Open the document properties and look at the producer, creation date, and modification date. A document produced by a consumer PDF editor, or created long after the date printed on its face, is worth a closer look.
Ask for a second document
Request a corroborating document from the same issuer or an adjacent period. Forgery effort concentrates on one file, so inconsistencies surface as soon as there are two to compare.
Run a forensic check
Manual review catches obvious edits but not field-level pixel manipulation or synthetic generation. TamperCheck runs 200+ forensic checks on an employment verification letter and returns a risk score from 0 to 100 in about a minute, at $0.50 per document.
Frequently asked questions
How do visa officers verify a certificate of employment?
Visa officers verify it by contacting the employer on details they source independently, and by reading the certificate against the payslips, bank statements and tax documents in the same application. Many consulates also require a wet company seal and will not accept a portal-generated or e-signed certificate, so how the letter was produced forms part of the check rather than only what it says.
How can you tell if an employment verification letter is fake?
The reliable tells are inconsistencies against the rest of the file rather than anything on the letter alone: a joining date the payslips contradict, a salary the bank credits do not support, a designation that differs from the experience letter. On the document itself, look hard at the seal and signature, since an evenly dense, perfectly crisp seal on a PDF that was never printed is a strong signal.
Is an e-signed employment certificate acceptable?
Often not, particularly for visa applications: many consulates require a wet signature and a physical company seal, and will reject a portal-generated PDF even where it is entirely genuine. Check the specific requirement before the letter is issued rather than after. For lenders and landlords, an e-signed certificate arriving from a verifiable corporate email address is usually accepted.
What is the difference between an employment verification letter and an experience letter?
An employment verification letter speaks in the present tense and comes from a current employer, while an experience letter is a past-tense record issued when someone leaves. The audiences differ as well: verification letters go to consulates, lenders and landlords who care whether income continues, and experience letters go to recruiters assessing what a candidate did. One file can need both, from different companies.
TamperCheck analyses employment verification letter uploads with a hybrid forensic and AI pipeline tuned for this document class. Upload endpoints accept PDF and common image formats; class is inferred automatically. See the API documentation for authentication, async jobs, and webhooks.