Detect tampered and deepfake Enrollment Certificate

What a genuine enrollment certificate contains

An enrolment certificate confirms that a named person is registered at an institution for a stated period. It carries the institution's name and address, the student's full name, date of birth, and matriculation or student number, the programme and year of study, the academic year or semester the certificate covers, and the enrolment status: full-time, part-time, on placement, or on leave. Most add an expected completion date, the date of issue, a line stating what the certificate may be used for, the registry office stamp, and a signatory with their office named.

Everything on the sheet is pinned to a window of time. The academic year printed on the certificate has to contain the issue date, the expected completion date has to sit a plausible number of terms after the year of study named above it, and the student number has to follow the institution's format and its intake year. Enrolment status is the field with money behind it, since part-time students and those on a leave of absence do not qualify for most of the benefits the certificate is presented for, and the status line is a single word to change.

How enrollment certificate forgeries are made

• Expired certificate re-dated

  The academic year and issue date on a certificate from a previous term are advanced so a document that has expired reads as current. The student was genuinely enrolled when it was issued, which is why nothing else on the page needs touching and why a reader accepts it.

• Status changed to full-time

  One word is edited so a part-time registration, a placement year, or a leave of absence reads as full-time attendance. It is the smallest possible change on this document and the one that unlocks the benefits the certificate is usually presented to obtain.

• Student identity substitution

  A sibling's or friend's certificate is reused with the name, date of birth, and matriculation number exchanged. Student numbers encode an intake year at most institutions, so a substituted number frequently implies a cohort that does not match the year of study stated two lines away.

• Enrolment window stretched past a withdrawal

  The end of the covered period is pushed beyond the point where the student actually left, so someone who withdrew mid-year continues to hold documentary proof of registration. This is the version that matters for visa extensions, where the covered period is exactly what is being assessed.

• Registry stamp copied between documents

  The office stamp is lifted from a genuine certificate and dropped onto a fabricated one. A copied stamp is identical pixel for pixel wherever it appears, whereas a real rubber stamp varies in ink coverage and pressure with every impression, so two certificates carrying the same stamp bitmap prove the copy.

• Certificates built from published samples

  Institutions publish specimen enrolment certificates so students know what to expect, and those specimens become templates. A document assembled this way is internally coherent from the start, so detection rests on how it was rendered and printed rather than on what it says.

What TamperCheck checks on an enrollment certificate

TamperCheck runs 200+ forensic checks across three layers and returns a risk score from 0 to 100 with plain-English findings tied to specific regions of the document. These three carry the most weight on this document class.

• Embossed seal analysis

  A physically embossed seal deforms the paper it sits on. A seal that was scanned and reprinted is flat, and the two separate cleanly under analysis even when they are hard to tell apart by eye.

• Date and validity consistency

  Issue, expiry, and period dates are checked against one another and against the file's own creation metadata, which catches backdating and validity extension.

• Field-level forensics

  Every text region is analysed in its own right rather than as part of one whole-page image. This catches the smoothed and feathered edits that whole-image Error Level Analysis misses entirely.

• And many more checks

  The three above are the layers that carry the most weight on an enrollment certificate. Every upload runs the full suite of 200+ checks regardless of document class, spanning file structure and metadata, pixel-level forensics, font and text rendering, optical and print characteristics, provenance signals, AI-generation signatures, and many more checks.

Who verifies an enrollment certificate, and why

Banks, visa officers, and discount programmes confirming student status. In each case the document is being used to unlock money, access, or a legal status, which is exactly what makes it worth forging.

How to verify an enrollment certificate in 4 steps

1. 1

   Check the fields against each other

   Read enrolment period, student name and ID, and institution stamp together rather than one at a time. Forgers typically change one value and leave the rest of the document describing the original.

2. 2

   Inspect the file metadata

   Open the document properties and look at the producer, creation date, and modification date. A document produced by a consumer PDF editor, or created long after the date printed on its face, is worth a closer look.

3. 3

   Ask for a second document

   Request a corroborating document from the same issuer or an adjacent period. Forgery effort concentrates on one file, so inconsistencies surface as soon as there are two to compare.

4. 4

   Run a forensic check

   Manual review catches obvious edits but not field-level pixel manipulation or synthetic generation. TamperCheck runs 200+ forensic checks on an enrollment certificate and returns a risk score from 0 to 100 within seconds, at $0.50 per document.

Frequently asked questions