How to spot a fake certificate of insurance

Most forged certificates are not fabrications. They are real certificates that someone edited — a date pushed forward, a limit raised to clear a contract threshold, a name swapped. That matters, because it means the document will pass every “does this look right” test. It looks right because most of it is right.

Why it is so easy

A certificate of insurance is a PDF of a standard form. It carries no signature, no seal and no tamper-evidence. There is no central registry to check it against. The form is identical across the industry, which is what makes it useful and also what makes a convincing forgery a matter of matching a font.

The person handing you the certificate is also, usually, the person with a reason to alter it. They want the contract, the lease or the site access. The agency that issued it has no such incentive, which is why the agency is the one worth asking.

What to look at

None of these prove forgery. Several of them together justify a phone call.

In the document itself

• •Inconsistent typography. A different font, weight or baseline in the limits, the dates or the named insured — the three fields worth editing.
• •Alignment that breaks. Text that does not sit on the form’s grid, or a value slightly off-centre in its box.
• •Limits that exactly match your minimum. Real policies are bought for the insured’s own reasons and rarely land exactly on your contractual floor.
• •Dates that are suspiciously convenient — a policy period that begins the week work starts and ends the week it finishes.
• •A missing or altered disclaimer. The ACORD 25 boilerplate is fixed. Wording that differs from the standard form is a strong signal.

In the parties named

• •The producer. Look up the agency independently. Does it exist? Is the address real? Is it licensed in the state where the work happens? Most state insurance departments publish a licensee lookup.
• •The carrier and its NAIC number. Every insurer has one, and it should match the carrier named beside it. A mismatch, or a carrier name that is a near-miss for a well-known one, is worth stopping on.
• •The named insured. Compare it against the entity on your contract, character by character. An affiliate with a similar name is a real and common problem, and it is not always deliberate.

In how it arrived

• •Sent from the insured rather than from the agency. Ordinary, but it removes the disinterested party from the chain.
• •A scan or photograph when a clean PDF would have been easy — scanning hides the editing artefacts a native PDF would show.
• •Produced under time pressure, immediately after you named a requirement.

The check that actually settles it

1. •Find the agency yourself. Search for it, or use your state’s licensee lookup. Do not use the phone number on the certificate — if the document is forged, so is that number.
2. •Call and ask them to confirm they issued it. Give them the named insured and the policy dates and ask whether the certificate came from them.
3. •Ask separately whether the policy is still in force. A genuine certificate says nothing about today. Coverage can have lapsed since it was issued, and nobody is obliged to tell you.

This works. Its problem is arithmetic: it takes a few minutes per certificate, it only works during business hours, and an organisation tracking hundreds of subcontractors will not do it hundreds of times. So in practice most certificates are filed unverified, and forgery continues to work for exactly that reason.

Certificates that can be checked without a phone call

The underlying problem is that the document cannot say anything about itself. A certificate that is cryptographically signed when it is issued can: the signature covers the named insured, the limits and the dates, and the public half of the signing key is published. Change one character and the signature stops matching.

That check takes a second, needs no account, and does not depend on the agency answering the phone — or on the vendor who built it still existing. It settles authenticity. It deliberately does not tell you the policy is still active, which remains a separate, live question.

If you believe one is forged

Stop the work or access that the certificate was supporting, and say why in writing. Tell the agency named on the document — if their letterhead was used without their knowledge, they will want to know. Insurance fraud is a criminal matter in every state, and state insurance departments and the National Insurance Crime Bureau both take reports. Keep the original file, unaltered, along with a record of how it reached you.