CloudlessKit / Guides

How to spot an edited pay stub or bank statement

Updated July 22, 2026

Look at enough pay stubs and bank statements and you start noticing the same three or four things that don't line up: math that's off by a few dollars, a font that shifts halfway through a number, a column that doesn't quite sit straight. None of those proves anything on its own. But they're exactly what a careful reviewer checks before signing off on an application.

Most of these checks take under a minute and need nothing more than the PDF viewer or photo app already on your computer. The tricky part is knowing what normal looks like so you notice what isn't.

Check the math first

Every real pay stub follows one simple rule: gross pay minus all deductions equals net pay, to the penny. Add up every deduction line and subtract that total from gross. If the number printed on the page doesn't match what you get, either the stub's math was wrong from the start, which happens with sloppy payroll software more often than people expect, or a number was changed by hand and the rest of the document wasn't updated to match.

Year-to-date figures are the second math check, and the one people skip. YTD gross, YTD tax, and YTD net should each grow from one pay period to the next by roughly that period's pay. If you're comparing a March stub to an April one and April's YTD gross is lower than March's, or it jumped by ten times a normal paycheck, that's not a rounding issue. Someone edited one stub without touching the other, or built both from a template with numbers that don't actually relate to each other.

Tax withholding deserves a rough sanity check too. Gross pay of $4,200 for the period next to $38 of federal withholding is a bigger gap than a legitimate stub usually shows, even allowing for exemptions and pre-tax deductions. You don't need to know the tax code. You just need numbers that move together the way real ones do.

Look at the fonts and the alignment

Payroll systems, and most bank statement generators, lay out a document once and repeat that layout for every customer. Every number in a given column should share the same font, size, and baseline all the way down the page. When someone opens a stub in a PDF editor or an image editor to change one figure, they often can't match the original font exactly, so the edited number sits a pixel or two off the baseline, looks slightly bolder or lighter, or has different letter spacing from the digits around it.

Zoom in, using the zoom control in your PDF viewer or Preview on a Mac, to at least 200 percent and study just the numbers column. Do the decimal points fall in a straight vertical line all the way down? Does every zero look like every other zero? A single digit that's a shade bolder or shifted half a line from its neighbors is one of the more reliable signs of a hand edit, because it's genuinely hard to fake once you're looking closely for it.

Column alignment matters on bank statements especially. A real statement export lines up the right edge of every dollar amount in a straight column no matter how many digits the number has. If one row's amount sits a few pixels left or right of where the column expects it, something was pasted in after the fact.

Be suspicious of round numbers

Real paychecks are almost never round. Hourly workers get paid for a specific number of hours at a specific rate, and salaried employees carry deductions for insurance and retirement contributions that rarely land on an even dollar. A gross pay of exactly $3,500.00, a net pay of exactly $2,000.00, or a bank balance of exactly $10,000.00 should catch your eye.

Round numbers alone prove nothing.

Some people genuinely do have round salaries or round transfer amounts, so treat this as a nudge to look harder at the rest of the document, not a finding on its own.

What's hiding inside the file

A PDF carries more than what's printed on the page. Every PDF records the name of the software that created it, and often the software that last saved it, inside its own metadata. On a Mac, open the file in Preview and press Command-I, or use Tools, then Show Inspector, to see the General tab, which usually lists the producer application. On Windows, the file's own Properties dialog in Explorer often skips PDF-specific fields unless a PDF app has added its own tab to it, so look for a "document properties" or "document info" menu item inside whatever PDF reader you already have instead. A pay stub that claims to come from a payroll system but lists a photo editor or a generic PDF editor as the last thing that touched it is worth a second look, though a legitimate document can also pick up an editor's fingerprint just from being re-saved or flattened somewhere along the way.

More telling than the software name is whether the file still contains an earlier version of itself. Many PDF editors save changes as an update tacked onto the file rather than rewriting the whole thing, so the previous version, sometimes with different numbers, can still be sitting inside the document you were handed. Digging through a PDF's internal structure by hand isn't realistic for most people reviewing a handful of applications a month, which is the one gap where a dedicated tool actually earns its keep. The Fake Document Detector looks for exactly this kind of leftover revision history, alongside the font and math checks described above, and shows the evidence behind each finding instead of just a pass or fail. If you only want a quick look at a PDF's metadata and edit history without a full screening pass, the PDF Edit Checker covers just that part.

None of this replaces a phone call

Every check above is circumstantial. A document can pass all of them and still be fabricated from scratch by a paystub-generator site that never touched a real payroll system, and a document can fail one of them for a completely innocent reason, like a scan that got re-saved twice or a bank that switched statement software mid-year. Treat every sign in this article as a reason to look closer, never as a verdict.

The step that actually settles the question is verification through the source: calling the employer's payroll department using a number you looked up yourself, not one printed on the stub, asking the applicant to have their bank send a statement directly, or using a bank's own read-only verification service if you already have access to one. That step catches a fabricated document that's otherwise flawless, and it's the only step that turns a hunch into a confirmed fact. Document checks help you decide which applications are worth that extra effort. They don't replace it.