FraudWorks
Try the demo

Every signal, explained

31 signals across five layers. Each page says what the signal means, how much it moves the Risk Score, and what can cause it innocently.

Layer · Provenance

Provenance signals

Content Credentials show AI generationc2pa_ai_generatedThe file carries a C2PA manifest stating it was produced by a generative AI tool.critical · 95Content Credentials signature is invalidc2pa_invalid_signatureThe file has a C2PA manifest, but its signature or content hashes do not validate, so the file changed after it was signed.high · 60Metadata names an AI image toolmetadata_ai_generatedIPTC DigitalSourceType or a software tag says the image came from a generative AI tool.critical · 90Saved by editing softwareexif_editing_softwareImage metadata shows the file was saved by an editor such as Photoshop, GIMP, or Canva.medium · 35Metadata is missingmetadata_strippedThe file has no creation metadata at all, which is unusual for exported statements and invoices. Weak on its own.low · 10

Layer · File structure

File structure signals

PDF producer mismatchpdf_producer_mismatchThe PDF says it was created by one system but last written by a consumer PDF editor.high · 55Modified after creationpdf_modified_after_creationThe PDF modification date is well after its creation date.medium · 35Saved again after creationpdf_incremental_updatesThe PDF contains later revisions that change content, not just signatures or validation data.medium · 30Inconsistent fontpdf_font_inconsistencyA value on the page uses a font or font embedding that appears nowhere else on the page.high · 55Text covered or overlaidpdf_text_overlayA shape or annotation is drawn over existing text, or text is drawn on top of other text.high · 65Visible text differs from text layerpdf_text_layer_mismatchWhat the page shows differs from the text stored in the PDF.high · 60Producer newer than the documentpdf_anachronistic_producerThe software that wrote the PDF was released after the date the document claims.high · 60Digital signature brokenpdf_signature_invalidThe PDF is signed, but the signature does not validate or content changed after signing.high · 60Digital signature intactpdf_signed_validThe PDF is signed and nothing changed after signing. This lowers the score. It does not prove who signed it.lowers scoreActive contentpdf_active_contentThe PDF contains JavaScript, embedded files, or launch actions.low · 15

Layer · Pixels

Pixels signals

Compression differs in one regionimage_ela_anomalyError level analysis shows a region that was compressed differently from the rest of the image.medium · 35Duplicated regionimage_copy_movePart of the image appears to be copied from another part of the same image.high · 55Noise differs in one regionimage_noise_inconsistencyA region has a different noise pattern than the rest of the image.medium · 30Recompressed imageimage_double_compressionThe JPEG shows signs of being decoded, edited, and saved again.low · 15AI image classifierai_image_classifierA third-party classifier scored the image as likely AI-generated. Never decides a verdict alone.medium · 40

Layer · Content logic

Content logic signals

Line items do not add upmath_line_items_mismatchThe line items do not sum to the printed subtotal.high · 60Total does not add upmath_total_mismatchSubtotal plus tax and tip does not equal the printed total.high · 65Running balance does not add upmath_running_balance_mismatchA bank statement balance does not follow from the previous balance and the transaction.high · 70Pay stub does not add uppaystub_math_mismatchGross pay minus deductions does not equal net pay, or year-to-date values are inconsistent.high · 65Payroll tax rate is offpaystub_tax_rate_anomalySocial Security or Medicare withholding does not match the statutory rate.medium · 40Tax rate is implausibletax_rate_implausibleThe effective sales tax or VAT rate is outside the normal range for the country.medium · 35Invalid datedate_invalidA date is in the future, does not exist, disagrees with the printed weekday, or the period makes no sense.high · 50Format anomalyformat_anomalyA misspelled card brand, an impossible card number fragment, or a routing number that fails its checksum.medium · 35Document disagrees with itselfinternal_inconsistencyThe same value is printed more than once with different amounts.high · 55Reviewer notecontent_plausibility_noteA specific inconsistency noticed during review of the extracted fields. Low weight.low · 10

Layer · History

History signals

Already submittedduplicate_submissionThe exact same file was checked before in this organization.high · 50

Check your first document in under a minute.

Try the live demo on a sample or on your own file. No account needed.

Try the live demoSee pricing