Supported document type
Detect tampered and deepfake P60
A P60 is the end-of-year summary HMRC requires every UK employer to give each employee still on payroll on 5 April, totalling the year's pay, income tax, and National Insurance, and lenders and letting agents ask for it as employer-attested annual income. Because it must reconcile with the final payslip of the tax year, inflated totals are exactly the fraud that arithmetic exposes.
API slug: p60
What a genuine P60 contains
The form covers a single tax year running 6 April to 5 April, and prints the employer's name and PAYE reference, the employee's name and National Insurance number, and totals for pay, tax deducted, NI, and any student loan repayments or statutory payments. Employers must issue it by 31 May following the year end.
The P60's totals must agree with the final payslip's year-to-date column, and the National Insurance number and PAYE reference must agree with the payslips and employment elsewhere in the file. A P60 whose totals float free of the payslips behind it, or whose employer details shift between documents, is the composite signal lenders care about.
How P60 forgeries are made
Payslip reconciliation
The P60's closing totals must match the final payslip's year-to-date figures for the same employment. Totals that float above the payslips behind them are the inflation pattern this document exists to catch.
Tax-year coherence
The label covers 6 April to 5 April of consecutive years. Mismatched year labels, or totals for a period the employment dates cannot span, point at retyped numbers.
Reference and NI structure
The employer's PAYE reference and the employee's National Insurance number follow fixed formats, and both must agree with the payslips and employment letters in the same file.
Figure-level print forensics
Edited totals betray themselves through font passes, digit spacing, and realigned columns inside the totals table, since amounts are usually the only region a forger touches.
What TamperCheck checks on a P60
TamperCheck runs 200+ forensic checks across three layers and returns a risk score from 0 to 100 with plain-English findings tied to specific regions of the document. These three carry the most weight on this document class.
Table structure integrity
Inserted and deleted rows leave structural artifacts behind: inconsistent spacing, misaligned columns, and formatting the visible table no longer accounts for.
Date and validity consistency
Issue, expiry, and period dates are checked against one another and against the file's own creation metadata, which catches backdating and validity extension.
Reference and document number checks
Document, account, and reference numbers are checked for issuer format conformance and against every other place the same value appears on the page.
And many more checks
The three above are the layers that carry the most weight on a P60. Every upload runs the full suite of 200+ checks regardless of document class, spanning file structure and metadata, pixel-level forensics, font and text rendering, optical and print characteristics, provenance signals, AI-generation signatures, and many more checks.
Who verifies a P60, and why
UK mortgage lenders, letting agents, and visa financial reviewers. In each case the document is being used to unlock money, access, or a legal status, which is exactly what makes it worth forging.
How to verify a P60 in 4 steps
Collect the P60 and payslips
Gather the P60 alongside at least the final payslip of the tax year, since the reconciliation runs between the two documents.
Reconcile the totals
Compare the P60's pay and tax totals against the final payslip's year-to-date column for the same employment.
Check identifiers and dates
Confirm the tax-year label, PAYE reference, and National Insurance number agree with the rest of the file.
Run a forensic check on the file
The reconciliation is arithmetic, but inflated totals still need edited cells to carry them. TamperCheck runs 200+ forensic checks including totals reconciliation and cell-level print analysis, returning a risk score from 0 to 100 with findings tied to specific regions of the image.
Frequently asked questions
What is the difference between a P45 and a P60?
The P45 records pay and tax when an employment ends during the year, while the P60 totals a full tax year for employees still on payroll at 5 April. Someone who left mid-year receives a P45 and no P60 for that employment.
Why do lenders ask for a P60 instead of just payslips?
The P60 is an employer-attested annual total, so it summarises the year rather than a month, and it reconciles against the payslips behind it. That reconciliation is exactly what makes inflated annual income hard to fake convincingly.
Can a P60 be reissued after 31 May?
Employers can issue a statement of earnings or a duplicate P60 on request, but the layout and totals must still reconcile with payroll records. A replacement is normal; a replacement whose totals cannot be tied to payslips is not.
How does TamperCheck verify a P60?
TamperCheck reconciles the P60's totals against the final payslip in the file, validates the PAYE reference and NI number formats, and inspects the totals table for figure-level edits. It returns a risk score from 0 to 100 with findings tied to specific regions.
TamperCheck analyses p60 uploads with a hybrid forensic and AI pipeline tuned for this document class. Upload endpoints accept PDF and common image formats; class is inferred automatically. See the API documentation for authentication, async jobs, and webhooks.