Reference13 June 2026Updated 14 June 2026Edoka Idoko

Document Verification FAQ

25 Questions Answered (2026)

Document Verification FAQ: 25 Questions Answered (2026) illustration
Quick answer

As AI makes forgery cheap, trust is shifting from the paper to the proof — from inspecting a document to confirming it at source. Most of the 25 answers below follow from that one idea.

This FAQ answers the 25 questions people most often ask about document verification — how it works, how to make your own documents verifiable, how to spot fakes, whether electronic signatures and verifiable documents hold up legally, and where verification fits alongside KYC, GDPR, and notarisation. Each answer is self-contained, so you can jump to whatever you need. For definitions of individual terms, see our verifiable documents glossary.

This is general information, not legal advice.

The short version: make your documents verifiable

The shortest answer to most of the questions below: make your documents confirmable at source. VerifyDoc.ai issues documents with a QR-backed Certificate of Authenticity and a proof page anyone can scan, so anyone can confirm a document is genuine, who issued it, and that nothing has changed. Start free or see how it works.

For more depth, see the verifiable documents glossary, the 2026 document fraud statistics, our country-by-country e-signature guide, the UK GDPR issuer's guide, and how to verify a UK degree.

FAQ

Frequently asked questions

What is document verification?

Document verification is the process of confirming that a document is genuine, was issued by the party it claims to come from, and has not been altered — by inspection, by checking against an issuer or registry, or most reliably by confirming it at source.

How does document verification work?

Either the recipient detects a fake (inspection, software, contacting the issuer), or the issuer builds verification into the document — for example a QR code linking to a proof page showing the document is authentic and unaltered.

What does "verify at source" mean?

Confirming a document directly against the organisation that issued it, rather than judging it on appearance. It is more reliable because a forged document can look perfect but cannot match the issuer's own record.

What's the difference between issuer-side and recipient-side verification?

Issuer-side verification is built in by the organisation that issues a document so recipients can confirm it at source. Recipient-side verification is the receiver trying to detect a fake. Issuer-side is more durable, because it doesn't rely on out-detecting ever-improving forgeries.

Why does document verification matter more in 2026?

Because AI has made convincing forgeries cheap and fast. Digital document forgery has overtaken physical, and traditional defences like watermarks were designed for a slower threat.

How can I make my own documents verifiable?

Issue them through a verification platform that attaches a Certificate of Authenticity and a QR-backed proof page to each document, so any recipient can confirm at source that it's genuine, issued by you, and unaltered.

What is a Certificate of Authenticity?

A Certificate of Authenticity (CoA) is a record attached to a document confirming that a specific issuer produced it and that it is genuine. In digital form, it's usually paired with a QR code and a hosted proof page for instant verification.

How does QR-code document verification work?

A QR code on the document links to a hosted proof page. A recipient scans it with a phone camera and instantly sees confirmation that the document is authentic, who issued it, and that it hasn't changed — no account or special software needed.

Do verifiable documents still work if printed, forwarded, or downloaded?

Yes. With a well-designed system, the QR code and proof stay attached whether the document is printed, emailed, forwarded, or archived — so it remains verifiable wherever it travels.

How long does a verifiable document stay verifiable?

It should remain verifiable for the life of the document — years after issuance — so that, for example, a transcript issued today still verifies when a graduate applies abroad a decade later.

Can a verified document or its QR code be copied or faked?

Copying the QR code just leads to the genuine proof page, which shows the real document — so a copy doesn't help a forger. And because the document is tamper-evident, altering it breaks verification: the change is detectable at source.

What types of documents can be made verifiable?

Almost any issued document — degree certificates and transcripts, result slips, references and testimonials, payslips, bank and account statements, contracts and offer letters, professional and CPD certificates, and corporate documents.

How do I check whether a document I've received is genuine?

Confirm it at source where possible: scan its verification QR code, check it against the issuer's official portal or registry, or contact the issuer using independently sourced details. Treat appearance alone as no proof.

How can I tell if a degree or certificate is fake?

Verify it through the official route — for UK degrees, HEDD or the university; for regulated qualifications, the awarding organisation. Also confirm the institution is genuine and not a degree mill.

How do I verify a bank statement?

Confirm it at source — through the issuing bank, or via Open Banking where the data comes straight from the account. Failing that, check the running balance reconciles and inspect the file's metadata for signs of editing.

How do I spot an AI-generated or deepfake document?

Honestly, detection is hard and getting harder as AI improves — which is exactly why detection alone is a losing game. The durable answer is to rely on documents that can be verified at source rather than trying to spot an ever-more-perfect fake.

Is document verification the same as KYC?

No. KYC (Know Your Customer) is the regulated process of verifying a person's identity and risk. Document verification confirms a document is genuine. They overlap but solve different problems.

Are electronic signatures legally binding?

Yes, in virtually every major economy, for the majority of documents — subject to local rules and a few exclusions (wills, certain property transfers).

Is an electronically signed or verifiable document valid in court?

Electronic documents are generally admissible, but in a dispute you must prove intention, attribution, and that the document wasn't altered — which is exactly what a verification trail supports. Specific rules vary by jurisdiction.

What's the difference between an electronic signature and a digital signature?

An electronic signature is the broad legal concept — any electronic indication of intent to sign (even a typed name). A digital signature is a specific cryptographic method (using PKI) that can underpin higher-assurance e-signatures.

Does a QR code make a document legally binding?

No. A document's legal force comes from its content, the signatures, and any required formalities — not from a QR code. What the QR adds is verifiability and evidential weight: proof the document is genuine and unaltered.

Does verifiable issuance replace notarisation, legalisation, or an Apostille?

No. Where a document needs notarisation, embassy legalisation, or an Apostille, those processes are still required. Verifiable issuance complements them by making the underlying document confirmable at source — it doesn't replace them.

How is verifiable issuance different from a password-protected PDF or a watermark?

A password controls access; a watermark is a visual mark that can be copied. Neither lets a third party confirm a document is genuine and unaltered. Verifiable issuance does exactly that, at source, for anyone.

Does document verification comply with GDPR and data-protection law?

Verifiable issuance supports specific data-protection duties — accuracy, integrity, and accountability — by keeping documents tamper-evident and demonstrable. It isn't a complete compliance programme on its own; you still need a lawful basis, privacy notices, and the rest.

Does verifiable issuance replace KYC, fraud detection, or identity verification?

No. Verifiable issuance is issuer-side — it makes the documents you issue confirmable. It doesn't verify identities (KYC/IDV) or detect fakes submitted to you; for those, you still need dedicated KYC, identity-verification, and detection tools.

Edoka IdokoFounder of VerifyDoc.ai, building verifiable document infrastructure for teams that need to prove a document is authentic after it leaves their system.

Back to blog