How to verify a bank transfer confirmation and spot a fake

Last updated: 2026-08-18

A payment confirmation is one of the most trusted documents in everyday commerce — and one of the easiest to fake. A marketplace seller sees a screenshot of a transfer and ships the goods. A landlord receives a PDF receipt and hands over the keys. A freelancer reads "payment sent" and starts the work. In all three cases, the money may not have moved at all.

The checks below walk you through what a transfer confirmation actually proves, the fastest ways to spot a forgery, and when to escalate to a forensic review.

What a transfer confirmation actually proves (and doesn't)

A payment confirmation — whether a PDF receipt, a bank-app screenshot or an email from a payment service — is a document that says a transfer was initiated or completed. It does not, by itself, confirm that money reached your account. Banks sometimes show a "confirmed" status for a transaction that is still in clearing, or that was later reversed. The only certain evidence that you have been paid is seeing the credit appear in your own account statement.

Fraudsters exploit this gap: they screenshot a confirmation, edit the amount or account number, or generate a plausible-looking receipt from scratch. The document looks genuine; the money never arrives.

1. The only certain check: confirm the money in your own account

Before you release goods, hand over keys or start a job: log in to your own bank account and look for the credit. Check that the amount, the currency and the sender reference match what you expect. If you cannot see the incoming transfer, the confirmation means nothing — regardless of how convincing it looks.

This sounds obvious, but it is skipped constantly in time-pressured transactions. A buyer on a marketplace says "I've already paid — here's the receipt." Waiting two minutes to check your account balance is the single most reliable defence.

2. Read the PDF metadata

If the confirmation is a PDF, open its properties (Adobe Reader: File → Properties; or right-click the file and choose Document Properties) and read the Producer, Creator and Author fields. A genuine confirmation generated by a bank's system will name the bank's software or a recognised PDF engine. Seeing Adobe Acrobat, Microsoft Word, Canva, a photo editor, or an unfamiliar web-to-PDF tool means someone re-saved the file after it left the bank — a clear editing signal. This is the same tell described in spotting a fake bank statement.

3. Modification date vs the stated transfer time

Every PDF carries a creation date and a last-modified date. On an untouched confirmation, both align with the time the transaction was completed. If the confirmation says the transfer settled at 14:32 on Tuesday but the file was last modified at 19:07 on Wednesday, someone opened and re-saved it after the bank generated it. That gap is exactly when figures get changed. Check these dates in File → Properties → Description in any PDF reader.

4. Reference number, IBAN and amount-format consistency

Look carefully at the transaction reference, the IBAN or account number, and the amount. Genuine bank confirmations use a consistent numeric format throughout: the same decimal separator, the same digit grouping, the same currency symbol placement. A forged figure is often pasted in from a different locale or font — zoom to 200% and compare each digit with the characters around it.

The IBAN is particularly useful: verify that the country code, check digits and bank identifier match the institution named on the document. A two-digit mismatch in the check digits means the IBAN is invalid or has been altered. Free IBAN validators are available online.

5. Screenshots, "pending" status and same-name tricks

A screenshot is not a confirmation. Anyone can photograph their banking app mid-flow, before the transaction clears, or after opening a pre-filled transfer form without submitting it. Screenshots also carry no metadata trail and are trivially edited in any image app.

"Pending" or "processing" status is equally unreliable: a pending transfer can be cancelled before clearing. Only a completed or settled status in your own account view constitutes proof of receipt.

Watch for same-name tricks: a buyer uses a name that closely resembles a known contact, or a company name that differs by one character. Verify the sender account number independently rather than trusting the display name.

When to run a forensic check

The checks above are fast and catch the majority of careless fakes. They do not catch a careful forger who has correctly updated every visible field and kept the metadata consistent. When the transaction is large — a business payment, a property deposit, a high-value marketplace sale — or when something about the document feels off but you cannot pinpoint it, forensic verification is the right next step. It is also the appropriate tool for lenders who review payment confirmations as part of a borrower's supporting documents. See our full guides index for related checks on fake invoices and other document types.

What forensic verification adds

Manual inspection looks at what a document shows. Forensic analysis looks at what the file is: the object tree, incremental-update history, edit layers, font fingerprints and metadata streams that are invisible to the naked eye. The same checks run on a confirmation from any bank and any country — there is no issuer list to wait for and no template the file has to match. Alongside the structural signals the figures are cross-checked in their own right: the IBAN checksum, the dates, and any amount written in words against the digits on the page. Files are handled under strict security and GDPR controls and deleted automatically.

Frequently asked questions.

Is a payment confirmation PDF proof that the money was sent?

No. A confirmation only shows that a document claiming a transfer exists. The only certain proof is the money arriving in your own account — when you cannot wait for settlement, verify the document itself before you release goods or funds.

How do I check if a transfer confirmation is genuine?

Open the PDF properties and look at the Producer and the modification date, then check that the reference number, IBAN and amount formatting match the sender's bank. A file re-saved after the stated transfer time is a strong red flag.

Should I accept a screenshot of a payment confirmation?

Treat a screenshot as no evidence at all. An image strips out the metadata and edit history you would use to verify it. Ask for the original PDF exported straight from online banking.