How to Detect Altered or Forged Signatures in PDF Documents
Question details
The user suspects that scanned signatures or content within a PDF contract have been tampered with and wants to find evidence of forgery.

- Product
- Device & OS
- not provided
- Scenario
- Verifying the authenticity of a signed PDF contract or document.
- Observed behavior
- Suspected modifications to the signature or document content, requiring reliable verification methods.
Do not make any edits, add comments, or save new versions over the suspected PDF file. Preserve the original document exactly as you received it to maintain the chain of custody for any potential legal or forensic review.
Consult a Digital Forensics Specialist
Standard PDF readers cannot conclusively detect forged handwritten signatures or image tampering; professional analysis is required.
There is no standard consumer PDF software capable of conclusively comparing handwritten signature images or detecting advanced image forgery. Detecting modifications requires analyzing image compression artifacts, file metadata, incremental revisions, and scan characteristics.
Because of the complexity of digital forgery, this process requires specialized forensic tools and expertise rather than conventional office software.
Copy the original PDF to a secure, read-only drive or cloud storage to maintain the chain of custody. Do not open it in software that might auto-save or modify file metadata.
Contact a qualified digital forensics specialist or document examiner who has the necessary software tools to analyze PDF metadata, hidden layers, and image integrity.
Consult with your legal team or attorney before confronting the other party about the suspected forgery, as they can guide you on the proper investigative steps.

Prevent Future Forgery Using Cryptographic Digital Signatures
Avoid tampering disputes in future contracts by using cryptographic digital signatures instead of scanned signature images.
Secure and Verify PDF Documents with WPS Office
While forensic experts are needed to detect tampered image signatures, you can proactively prevent future disputes by using WPS PDF to apply and verify cryptographic digital signatures. WPS Office provides robust, easy-to-use PDF security tools to ensure document integrity.
- 1. Open the document: Launch WPS Office and open the PDF file you need to sign.
- 2. Access the Protect tools: Navigate to the 'Protect' tab on the top ribbon and select 'Sign Document'.
- 3. Apply a Digital Signature: Choose the 'Digital Signature' option to apply your cryptographic certificate to the document.
- 4. Save and secure: Save the document. Any future edits made by other parties will immediately invalidate your signature, providing clear evidence of tampering.

Frequently Asked Questions
Can a standard PDF reader detect if a signature image was photoshopped?
No. Standard PDF readers simply display the document elements as they were saved. They do not have the artificial intelligence or forensic tools required to analyze image artifacts or determine if a scanned signature was pasted, erased, or altered.
What is the difference between a scanned signature and a digital signature?
A scanned signature is just an image placed onto a document page and offers no inherent security. A digital signature uses a cryptographic certificate to lock the document, making any subsequent alterations easily detectable and verifiable by PDF software.
How can I check the metadata of a PDF to see when it was last modified?
You can view basic file properties in your operating system by right-clicking the file and selecting 'Properties' or 'Get Info'. Inside a PDF reader like WPS PDF, go to Menu > Document Properties to see the creation and modification dates. However, advanced metadata analysis requires specialized forensic tools.
What should I do if I find out the other party altered the contract?
Notify your legal counsel immediately. Do not confront the other party without legal guidance, and ensure you have preserved the original digital file on a separate drive as evidence for forensic analysis.




