# Detect tampered and deepfake Reference Letter > A fake reference letter usually fails on the person rather than the paper. The document can be ordinary, printed once, never edited, and still be worthless because the manager who signed it does not exist, works for a company that does not, or is a friend answering a mobile number the candidate supplied. The letters that are edited are the other kind: one genuine reference, reused across several candidates with the name and dates swapped out. **Canonical URL:** https://tampercheck.ai/documents-support/reference_letter **API document class:** `reference_letter` **Last updated:** 2026-10-07 --- ## What a genuine reference letter contains A reference letter identifies the referee before it says anything about the candidate: full name, job title, employer, and how they came to know the person, as a line manager, a client or a supervisor, and for how long. It then states the candidate's role and the dates they worked together, gives specific examples of work rather than adjectives, offers an assessment, and closes with direct contact details, a date and a signature. Company-issued references carry the employer's letterhead and registered address. The referee's own details are what the rest of it rests on. Their stated relationship has to overlap the candidate's employment dates at that company, and their title has to be senior enough to have supervised the work described. Contact details on a free email domain under a corporate letterhead is a contradiction, as is a personal mobile where the letter claims a head office role. Specificity constrains too: someone who genuinely managed a person can name projects, and a letter with no verifiable detail makes no checkable claim. ## How reference letter forgeries are made ### An invented referee The letter is written by the candidate under the name of a manager who never existed, with contact details routed to a phone a friend answers. Nothing on the page is tampered with, so it is assessed on its production: the letterhead, the origin of the signature, and whether the named person exists at all. ### A real referee's identity borrowed The candidate takes a former manager's genuine name and title and writes the letter themselves, signing it with a signature copied from an email footer or an earlier document. The praise is plausible because the relationship was real; the signature is the part that came from somewhere else and can be traced back to it. ### One letter, many candidates A reference circulating as a template has its name, dates and role fields swapped for each new use. Those fields were typed in a separate pass from the body around them, and the body stays generic enough to fit anybody, which is precisely what makes the same letter reusable. ### Letterhead borrowed from a real employer A company's public branding is rebuilt into a letter that company never issued, giving an invented referee institutional backing. A mark taken off a website at screen resolution prints softer and blockier than one that originated in a print-ready file, and the difference holds up under magnification. ### Model-written references A language model will produce a warm, well-structured reference for any name in seconds, and it reads better than most real ones. What it cannot supply is a checkable detail, so these letters praise at length while naming no project, client or measurable outcome, and the file behind them was never printed or scanned. ## What TamperCheck checks on a reference letter TamperCheck runs 200+ forensic checks across three layers and returns a risk score from 0 to 100 with plain-English findings tied to specific regions of the document. These three carry the most weight on this document class. ### Signature forgery analysis Signature regions are assessed for ink consistency and for how the stroke sits on the page, which distinguishes a genuine pen stroke from a pasted image of one. ### Letterhead, logo, and issuer plausibility Issuer branding is checked for resolution and compression consistency against the body text it sits on. A logo lifted from a website carries the signature of its source, not of the document. ### Field-level forensics Every text region is analysed in its own right rather than as part of one whole-page image. This catches the smoothed and feathered edits that whole-image Error Level Analysis misses entirely. ### And many more checks The three above are the layers that carry the most weight on a reference letter. Every upload runs the full suite of 200+ checks regardless of document class, spanning file structure and metadata, pixel-level forensics, font and text rendering, optical and print characteristics, provenance signals, AI-generation signatures, and many more checks. ## Who verifies a reference letter, and why Recruiters and background screening firms checking candidate history. In each case the document is being used to unlock money, access, or a legal status, which is exactly what makes it worth forging. ## How to verify a reference letter in 4 steps 1. **Find the referee independently of the letter.** Look up the referee's name, title and employer without using any contact detail printed on the letter itself. A referee who cannot be located at the company they claim to represent is the finding, however well the document is put together. 2. **Reach them through the company, not the number given.** Call the employer's published switchboard and ask for the referee by name, or write to a corporate address in that company's own email format. A reference that only survives on the contact route the candidate supplied has not actually been verified. 3. **Check the relationship against the employment dates.** Confirm the referee's stated period of supervision overlaps the candidate's tenure as their experience letter and CV describe it, and that the referee's title was senior enough to have managed the work the letter praises. 4. **Analyse the letter itself.** Run the file through a forensic check for swapped name and date fields, a signature lifted from another document, and a letterhead rebuilt from web images. TamperCheck returns a risk score from 0 to 100 within seconds at $0.50 per document. ## Frequently asked questions ### How do employers verify reference letters? Employers verify reference letters by contacting the referee through a channel the candidate did not supply, such as the company switchboard or a corporate email address in the employer's own format, and confirming the relationship, the dates and the role. Larger organisations hand this to a screening firm. The document is analysed separately, because a real referee and an unedited letter are different findings. ### How common are fake references? Frequent enough that most structured hiring processes now treat a reference letter as a lead to follow rather than evidence in itself. A precise rate is not something anyone can state honestly, since the fakes that work are by definition uncounted. The structural reason is plain: a reference records one private individual's opinion, and no registry of managers exists to check the name against. ### Can you tell if a reference letter was written by the candidate? Often, yes. The strongest signals are a signature matching one in another document stroke for stroke, contact details that lead back to the candidate rather than to the company, and a file whose creation history matches the rest of the application pack. None of them is conclusive alone, which is why they are reported as findings tied to regions of the page rather than as a verdict on authorship. ### Should a reference letter be on company letterhead? Not always, and its absence is not by itself a warning sign: personal and character references are legitimately written on plain paper, while a professional reference given in a company's name should sit on that company's letterhead. Consistency matters more. A letter that claims a corporate role, carries a letterhead and gives a personal email address is contradicting itself in a way neither format explains. ## Related document types - Experience Letter: https://tampercheck.ai/documents-support/experience_letter - Relieving Letter: https://tampercheck.ai/documents-support/relieving_letter - Resignation Letter: https://tampercheck.ai/documents-support/resignation_letter - Termination Letter: https://tampercheck.ai/documents-support/termination_letter - Cover Letter: https://tampercheck.ai/documents-support/cover_letter - No Objection Certificate: https://tampercheck.ai/documents-support/noc_letter --- Try TamperCheck now: https://tampercheck.ai/dashboard · Docs: https://tampercheck.ai/docs · Pricing: https://tampercheck.ai/pricing