What features can be considered in attempting to determine when a document was written or produced?

Passport and Visa

Identity and security documents such as passports, visas, and driver’s licenses are targets for alterations as well.  Alterations to a genuine document like a passport may include photo substitutions, page substitutions, mechanical and chemical erasures.  Photo substitution is the most common form of passport fraud.  The photograph of the original owner is removed and a new photograph put in its place.  Information that cannot be easily altered or erased is removed by disassembling the passport, removing the page of unwanted data (visa denial), and reassembling the page with a genuine page from another passport or replacing it with a counterfeit page.  Printed and written information can be altered by mechanical or chemical erasures.  Erasure may be whole word, letters, portions of letters, or dates.  Chemicals used to erase information can be detected with ultraviolet light.

Healthcare form

Health care fraud is a crime.  It’s committed when a dishonest provider or consumer intentionally submits, or causes someone else to submit, false or misleading information for use in determining the amount of health care benefits payable. Medical forms can be from the hospitals, physicians, clinics, home healthcare providers and insurance companies, and others. In some cases, the forms are genuine but submitted with drastically inflated claims 10x the normal fee for the procedure.  Other cases include alterations attempted by adding or deleting information on physicians notes, time keeping sheets, and procedures.  Many attempts are made to alter physicians prescriptions by simulating signatures, altering or substituting amounts, medicaitons prescribed, etc. Healthcare forms and all the agencies involved in transferring information are prone to attempts of alterations in a multitude of ways.

Custody agreement

Court orders and custody agreements are frequent targets by individuals attempting to alter these documents. If original agreements are presented, it’s important to evaluate these forms for areas of possible paper fiber disturbance, use of different fonts, sizes, and/or styles, irregular spacing and alignment, and crowded or awkward placement of writing and/or printed text. Many times these forms are signed by judges, attorneys, and the parties involved in the custody agreement so many signatures are present to examine. On occasion, these forms will  be notarized but the notary signature and seal must also be examined for possible manipulation or alteration, as they frequently are added to many documents to “prove” the genuineness of the signatures attached. 

Employment contracts

Employment contracts not only cover the time period when you obtain employment but often have detailed requirements if the employee no longer works there or is terminated.  In short, copies of these documents should be kept by the employer and the employee should any disagreement arise.  Frequent alteration attempts include: the signatures (by transfer, simulation, or duplication), additions and deletions of text, or entire pages inserted within the contract or have been removed.  It is not uncommon for a document examiner to examine the entire text looking for indications of alterations in horizontal and vertical spacing of text, alignment of signature lines, and differences in font, among others. 

Social Security cards

Social security and identity cards are frequent targets of alterations because they serve as breeder documents to obtain other types of identification. Social security and identity cards contain security features to keep them safe however many individuals still try and reproduce these document, sometimes in their entirety.  This is extremely difficult with social security cards because the paper is security-type paper and not commercially available.  Other security features include: letterpress printing, offset printing, microprinting (which is text that is contained within the document that can be detected with magnification), and multi-colored planchettes (these are the discs of paper embedded into the fiber of the cards).  These randomly placed discs are three dimensional and challenging to replicate.

How to detect alterations in document ? 

Detecting alterations depends on specialized equipment, light sources, and microscopes like the stereomicroscope and comparison microscope. One piece of specialized equipment used to detect alterations is a multi-spectral imaging device.  This device allows a document examiner to perform non-destructive testing with specialized lights sources and filters  covering the visible, ultraviolet, and infrared range of light. This equipment is the workhorse of any document examiner’s office and assists with analyzing a variety of materials including substrates, printing, laminates and holograms.

Other equipment such as side lighting or oblique lighting can detect indented impressions.  Detecting indented impressions on paper can provide valuable information to the examiner such as the sequencing of entries in a journal.  This may be helpful when working on medical record alterations of a patient’s chart or doctor’s notes, ledgers used for recording daily transactions, checkbooks, or notebooks.

A stereomicroscope provides magnifying power to allow fine details of a document to be observed.  Combined with lighting options, this can be particularly useful for distinguishing printing processes, detecting indented impressions, to observe handwriting features, and identifying security features like microprinting. These observations are recorded in the examiner’s notes or captured with a camera that may also be mounted on the microscope.

Lastly, a comparison microscope involves the use of two compound microscopes providing a split screen for an examiner to compare two things side-by-side.  These are especially useful for typewriting cases in discovering defects and non-print area or for any examination where a detailed side-by-side examination would be beneficial.  For alterations of passports, for examples, it may be useful to review the genuine passport alongside the suspect passport to determine all the security features and anomalies.

Detecting alterations is reliant on good training and equipment. Being able to recognize the characteristics of genuine features will help immensely when detecting alterations in security documents.

What basic characteristics would a document examiner look at to determine?

What key features would you look for in altered documents?

Which technique can determine the age of paper?

How can you examine or determine if the document presented was real or fake?