← All AI scams
🪪
AI-generated fake documents
A polished badge, ID, invoice, or letter is a claim — not proof.
Generative AI makes it easier to create realistic identification cards, government credentials, invoices, bank letters, employment records, and supporting photos. These files often arrive as proof inside a larger impersonation scam: the document is designed to settle your doubt so you will send money, disclose information, or approve access.
Trying to judge fonts, shadows, seals, or pixels is unreliable because genuine documents vary and synthetic ones keep improving. Treat every remotely delivered document as an unverified claim. Confirm the issuer, record, and requested action through a channel you locate independently.
How the scam works
1
Copy a trusted format
The scammer collects public logos, names, layouts, signatures, and sample forms from a business or agency, then uses editing or generative tools to assemble a plausible credential.
2
Personalize the evidence
Names, photos, addresses, invoice numbers, badge numbers, or case details make the document feel specific. Some details may be real information taken from public records, prior messages, or a data breach.
3
Deliver it inside a story
A fake agent sends an ID card, a supplier sends a revised invoice, or an online contact sends identity papers. The file answers the exact doubt that would otherwise make you stop.
4
Route you back to the scammer
Phone numbers, QR codes, email addresses, and verification sites printed on the document often lead to another part of the same operation, where an accomplice confirms the false record.
Red flags to watch for
!
The document was unsolicited
A credential arriving during an unexpected call or message does not validate the caller. It may simply be the next scripted step in the impersonation.
!
All verification paths are inside the file
If the only phone number, website, QR code, or reference contact came from the disputed document, you have not left the scammer's channel.
!
The underlying request is abnormal
Moving money to protect it, paying an invoice to a new account, buying gift cards, sharing a login code, or uploading identity documents remains unsafe no matter how official the attachment looks.
!
You are discouraged from checking
Claims that a case is secret, a supervisor cannot be contacted, or outside verification will cause arrest, lost funds, or a missed deadline are pressure tactics, not authentication.
!
A reference cannot be found independently
An employee, case, invoice, license, or job that exists only at the contact points supplied by the sender needs confirmation from the real organization before you act.
What to do
✓
Separate the document from the claim
Write down what the sender wants you to believe and what action they want. Verify those facts directly; do not let a convincing layout substitute for evidence.
✓
Contact the issuer independently
Use the agency's official .gov site, the company's known website, a phone number on an existing statement, or a trusted internal directory. Ask whether the person, case, invoice, or credential is real.
✓
Verify transactions against records
Match invoices to purchase orders and known contracts, call an established vendor contact about bank changes, and require the normal approver. For government claims, use the agency's published contact path rather than the badge or letter.
✓
Do not send more identity evidence
A stranger who sent a questionable credential does not become safer because they ask for your driver's license, Social Security number, selfie, or verification code in return. Stop until the organization is independently confirmed.
✓
If you acted, contain and report
Contact the bank or affected account provider, change exposed credentials, preserve the original files and messages, and report the impersonation to the FTC and IC3. If identity data was exposed, follow an identity-theft recovery plan and consider a credit freeze.
Frequently asked questions
Can I prove a document is AI-generated by zooming in?
Usually not with enough certainty to make a safety decision. Odd text or imagery can raise suspicion, but a clean-looking file can still be fake and a genuine scan can look imperfect. Independent verification is the deciding test.
Does a badge number or government seal prove an agent is real?
No. Badge numbers, seals, names, and ID cards can be copied or invented. For example, the FTC specifically warns that it does not have agents who call with badge numbers and will not tell you to move money.
What if a QR code or website says the document is valid?
A scammer can generate the code and the site together. Start from the issuer's official site or a contact you already trust, then locate its real verification process without using the disputed file's links.
Should I upload a suspicious ID to an online detector?
Avoid sending sensitive documents to an unknown service. Automated detection can be wrong and may expose personal data. Ask the issuing organization to validate the record through its official process.
Sources and further help
Reviewed
Fight AI with AI.
Scambook's AI checker analyzes suspicious messages, numbers, and links against a live scam database — including the machine-generated ones. Free, in seconds.
Scammers upgraded. So should your defenses.
Scambook is free on the App Store — check your first suspicious message in seconds.
ScambookANALYZE. DETECT. STAY SAFE.
The easiest way to answer one question: is this a scam?
© 2026 Scambook. All rights reserved.Scambook gives guidance, not legal or financial advice.