When Any Document Can Be Faked

Summary

For as long as businesses have borrowed, the evidence has been paper: statements, invoices, registrations, letters. That evidence was trusted partly because it was hard to forge well. It no longer is. This article argues that the response is not to inspect documents more closely, but to stop treating the document as the evidence at all. What matters is provenance: who confirmed a fact, against what source, and when.

The assumption that just broke

Every credit process rests on a quiet assumption: a document that looks right probably is right. Fraud existed, but a good forgery took skill and time, so most forgeries were bad and most checks could be visual.

That assumption has failed. Tools that anyone can use now produce statements with consistent arithmetic, plausible transaction histories and the correct letterhead. The cost of a convincing fake has fallen close to zero. The cost of telling it from the real thing by looking has risen, and will keep rising, because the same tools improve every year.

The harm does not fall mainly on the forgers' targets. It falls on honest businesses. When a lender can no longer trust what it is shown, the rational response is to trust nothing, and to price every applicant as if they might be lying. The good borrower pays for the bad one.

Why closer inspection is the wrong answer

The instinct is to fight this with detection: software that spots a doctored file. Detection is worth having, but it is a race against the tools that create the fakes, and the defender has to win every time.

There is a sturdier approach. Stop asking "does this document look genuine?" and ask "how do we know this fact?" A registration number is not evidence because it is printed on a certificate. It is evidence because someone looked it up at the registry on a known date and recorded what they found. The certificate is a claim. The lookup is the proof.

Three levels of knowing

It helps to sort every fact about a business into one of three levels, and to be explicit about which is which.

• Asserted. The business says so. Useful as a starting point, worthless as proof.
• Documented. There is a file that supports it. Better, but the file itself can now be manufactured.
• Confirmed at source. A named party checked the fact against an independent origin (a registry, a bank, a counterparty, a site visit) and recorded the date.

Most assessments today mix the three without saying so. A report that reads "revenue of X" might mean any of them. The reader cannot tell, and so must assume the weakest.

What this changes for institutions

Three practical consequences follow.

Record how each fact is known, not only the fact. An evidence file should carry its own audit trail: the source, the checker and the date, for every material item.

Treat verification as perishable. A fact confirmed last year is weaker than one confirmed last week. Evidence needs an issue date and an expiry.

Do the expensive check once. Confirming a fact at source costs real effort. It should not be repeated by every institution that meets the same business. A verified record that travels with the business, and that anyone can confirm, spreads that cost instead of multiplying it.

What this changes for businesses

The businesses that will find capital easiest in the coming decade will not be the ones with the best-looking paperwork. They will be the ones whose facts can be confirmed without relying on paperwork at all: bank relationships that can be queried, registrations that match the registry, customers who will pick up the phone. Building that kind of checkable business is slow work, and it is worth starting before it is needed.

Our view, and its limits

This is our reading of where credit and diligence are heading, not an established finding. We have not quantified how common AI-assisted document fraud is today, and we would be wary of anyone who claims to have a reliable number. The argument rests on a simpler point: when forging gets cheaper and detecting gets harder, evidence has to move from what a document shows to how a fact was checked.

Conclusion

The document was always a stand-in for a fact. For a long time the stand-in was good enough. It is no longer, and institutions that keep trusting it will either be defrauded or will stop lending to honest businesses. The durable asset now is provenance: a record of who checked what, against which source, on which day.