For platforms

Document fraud detection API for platforms

Atomara is a REST API that checks whether a PDF bank statement, payslip, invoice or receipt was edited after it was issued, and returns a verdict, a 0–100 score and the signals behind them.

Built for software that receives documents from its own users — and needs an answer before a person opens the file.

Get an API key Talk to us about volume

Register with a work email and your first key adds 100 trial checks.

Watch it run

Play the demo
Two minutes: the upload, the verdict, and the same document sent over the API. Watch on YouTube

One request, one answer

RequestPOST
curl -X POST https://atomara.io/api/v1/documents \
  -H "Authorization: Bearer YOUR_API_KEY" \
  -H "Idempotency-Key: user-1042-statement" \
  -F "file=@statement.pdf" \
  -F "external_id=user-1042"
Response200 JSON
{
  "id": "doc_3f9a1c8e6d2b4f7a9c311e5b0a77d4c2",
  "object": "document",
  "status": "completed",
  "external_id": "user-1042",
  "verdict": "tampered",
  "score": 3,
  "tamper_score": 0.87,
  "integrity_score": 0.05,
  "confidence": 0.82,
  "summary": "The file was re-saved by an editor after issue.",
  "signals": [
    {
      "id": "editor_producer_blacklist",
      "module": "M4",
      "kind": "tamper",
      "severity": "high",
      "evidence": "Producer: Adobe Acrobat Pro DC",
      "scored": true
    },
    {
      "id": "invariant_balance",
      "module": "M8",
      "kind": "tamper",
      "severity": "medium",
      "page": 2,
      "evidence": "Closing balance: expected 4310.50, found 6310.50",
      "scored": true
    }
  ],
  "engine": {
    "version": "1.0.0",
    "rules_revision": "2026-07-07"
  },
  "report_url": "https://atomara.io/account/uploads/3f9a1c8e6d2b4f7a9c311e5b0a77d4c2"
}

Read the API reference →

What it does not do

  • It reads the PDF itself: its structure, metadata, fonts and arithmetic. It does not contact the bank or employer that issued it.
  • Send documents as PDF — a JPEG or PNG is refused. A scan or a photo saved as a PDF is checked as an image and usually comes back without a score, because a picture of a page cannot show which file it was taken from. Route it to a person, or ask for the original PDF.
  • An unsigned file is called authentic only when its structure matches, in every detail, a reference template learned from genuine documents of its issuer, and nothing points to editing; the response then says whether the amounts were verified too. Otherwise the best answer for an unsigned file is inconclusive with no signs of editing found.
  • There are no bank-specific templates. The same checks run on a statement from any bank.

Pricing

From $0.10 per document at volume, with no minimum and no setup fee. One document is one check, whatever its page count. Paid plans start at $5 a month. See all plans →

Questions platform teams ask

What does the API return?

A verdict — tampered, suspicious, inconclusive, authentic (a digitally signed file, or one matching a reference template of its issuer) or unsupported — a 0–100 score, and the signals behind them, each with its evidence, such as the editor named in the file or a balance that does not reconcile.

Which documents can it check?

PDF bank statements, payslips, employment letters, invoices, receipts, utility bills and other documents with a text layer, from any issuer. There are no bank-specific templates; the same checks run on every file. A JPEG or PNG is refused.

How much does it cost?

From $0.10 per document at volume, with no minimum and no setup fee. One document is one check, whatever its page count. Paid plans start at $5 a month.

Is there a free trial?

Every account gets 3 full checks once the email is confirmed. Register with a work email and your first API key adds trial checks, so you can run your own documents through it.

What about scans and photos?

A scan or a photo saved as a PDF is checked as an image and usually comes back without a score, because a picture of a page cannot show which file it was taken from. Route it to a person, or ask for the original PDF.

Does it confirm the document with the bank or the employer?

No. It checks the file itself — its structure, metadata, fonts and arithmetic — and tells you whether it shows signs of editing.

How long do you keep our users' documents?

30 days, after which the file and its report are deleted automatically, keeping only the verdict and the score. You can delete any document immediately with DELETE /documents/{id}.

Talk to us about volume

Tell us what you receive and how much of it. We answer within one working day and can add trial credits for a real test.

Documents you receive