Spotting Fake IDs in the US: State Features & Detection Tools

Modern fraud operations increasingly use AI-generated documents, synthetic identities, and other advanced techniques to create fake IDs that evade traditional verification checks. As a result, fake ID fraud is becoming more sophisticated and harder for businesses to detect. Between 2024 and 2025, reports of sophisticated fraud involving techniques such as AI-generated identities increased by 180% globally, while synthetic identity attempts grew steadily throughout 2025, and deepfake incidents surged—rising +237% in the US.

Recent cases illustrate the scale of the threat. In Colorado, a suspect allegedly used forged identity documents to impersonate legitimate account holders and withdraw more than $200,000 from multiple bank accounts. Meanwhile, the rise of AI-powered document-generation services has lowered the barrier to creating convincing fake credentials. One prominent example was OnlyFake, a platform that allegedly sold AI-generated passports, driver's licenses, and other identity documents that could pass certain online verification checks. Investigative journalists demonstrated that synthetic IDs could be created in minutes, and in 2026, the US Department of Justice charged the platform's creator and secured a guilty plea related to the sale of more than 10,000 fake digital IDs.

Against this backdrop, robust identity verification has never been more important. This guide explains the most common types of fake IDs used in the US, the warning signs businesses should watch for, and the verification measures that can help prevent fraud while supporting compliance.

Fake IDs explained

A fake ID is any identification document that has been altered, forged, stolen, or fraudulently used to misrepresent a person's identity. While fake IDs are often associated with underage access to age-restricted products and venues, they are increasingly used in more sophisticated fraud schemes, including account opening fraud, synthetic identity fraud, account takeover, money muling, etc.

The growing availability of AI-powered document-generation tools has made it easier to create convincing fake credentials that can resemble genuine government-issued IDs. As a result, businesses can no longer rely solely on visual inspection or manual document review to detect fraud.

For regulated organizations, accepting a fake ID can lead to compliance failures, financial losses, and reputational damage. In the US, the use, possession, or creation of fraudulent government-issued identification documents may constitute a criminal offense, with penalties varying based on the nature of the offense and the applicable federal or state laws.

Understanding the different types of fake IDs and the techniques used to create them is a critical first step in building an effective identity verification and fraud prevention strategy.

How AI is changing fake ID fraud in 2026

Sumsub’s latest Identity Fraud Report reveals that despite efforts by Big Tech to control the misuse of AI, including the use of watermarks and investments in new technology to detect AI-generated content, control measures can still be bypassed by professional scammers with the right malware.

With widely available generative AI tools, fraudsters can produce a convincing fake ID or utility bill in minutes. The velocity of attempts is accelerating—fraud actors can generate multiple versions of the same document in just minutes, flooding verification systems. Early versions were crude and easily detectable, but by mid-2025, the forged documents displayed fonts, layouts, and seals that mimicked authentic templates.

This points to a wider shift in how sophisticated fraud has become: even as the overall percentage of fraud attempts appears to stabilize, the composition of fraud is evolving. The accessibility of AI has led to an increase in low-quality, quick-win opportunities for amateur fraudsters, but also advanced the multi-layered, sophisticated scams often used to target high-profile individuals or enterprises. Generative AI is enabling the creation of inexpensive, repeatable, and increasingly realistic fakes—effectively industrializing what was once a skilled, niche activity.

Suggested read: AI Fake IDs and the New KYC Risk

Types of fake IDs seen in the US

Fraudulent identity documents generally fall into a few broad categories. 

Stolen documents. Genuine IDs used by someone other than the rightful holder, typically following theft, loss, or account compromise.

Altered documents. Genuine IDs that have been tampered with so that details such as name, date of birth, or address no longer match the original holder.

Counterfeit documents. Entirely fabricated documents designed to imitate genuine government-issued credentials.

Synthetic identities. Documents supporting an identity built from a mix of real and fabricated information, rather than belonging to a single real person.

Many fraudulent documents also include scannable barcodes or machine-readable elements intended to mimic genuine credentials and pass basic verification checks.

The three main types of counterfeit IDs

Counterfeit and fraudulent identity documents are generally encountered in three broad forms. The focus here is on recognizing them rather than on how they are produced:

Altered genuine documents

Genuine IDs that have been tampered with so that details such as the name, photograph, address, or date of birth no longer match the original holder. These are among the least sophisticated forms of fraud and often reveal physical inconsistencies on close inspection. 

Physically counterfeited documents 

Entirely fabricated cards designed to imitate genuine government-issued credentials. They are frequently produced at scale, distributed through online marketplaces, and shipped directly to buyers. One notable example occurred in 2025, when an Indianapolis man was sentenced to three years' probation after manufacturing and mailing more than 30,000 fake IDs over a four-year period. 

Digitally counterfeited documents 

Fraudsters increasingly use advanced digital tools, including AI, to create more convincing fake documents and to support attempts to defeat identity-verification systems. The growing availability of these tools, including through dark-web and Telegram-based markets, has made identity fraud more accessible. 

State-by-state US ID security features

For federal purposes such as boarding domestic flights, an ID must be REAL ID-compliant. States issue both compliant and non-compliant IDs, with the compliant version marked by a star in the top-right corner. In most states, this is either a black or gold star (or sometimes a white star in a black or gold circle), but California uses a gold bear overlaid with a white star, while Maine, Nevada, New Hampshire, and Michigan all use a gold silhouette of their state, overlaid with a white star. 

States tend to offer both compliant and non-compliant IDs, adding their own distinct ID card security features to deter counterfeiting. The American Association of Motor Vehicle Administrators (AAMVA) sets baseline design and data standards, but each state incorporates unique overt and covert security features.

This means spotting counterfeits requires state-specific knowledge.

Most states limit full access to official card design details due to security concerns. For full coverage, businesses should reference the latest card design templates and use automated verification tools.

How the REAL ID Act shapes verification

The REAL ID Act establishes minimum security standards for identity documents in the US, including driver’s licenses and identification cards.

REAL ID standards make identity verification more secure through requirements including:

• Strict personal data authentication. Users must provide physical proof of their full legal name, date of birth, and Social Security Number, as well as two forms of proof of address.
• In-person presentation. Individuals must attend the issuing office in person to verify their identity before they can be issued a REAL ID-compliant identity document.
• Compatibility with modern Identity Document Validation Technology (IDVT). REAL ID-compliant documents incorporate machine-readable technology that can be read by IDVT systems, enabling automated checks that are faster and more secure than manual checks. 

Red flags of a fake ID

• Blurry or inconsistent fonts and spacing: Legitimate IDs have standard typefaces; blurriness, misaligned text, or uneven spacing or lettering often signal a forgery.
• Missing or incorrect holograms and UV features: Genuine IDs include holograms or UV-reactive inks.
• Outdated or incorrect design elements: Fake IDs may feature outdated layouts or state seals that don’t comply with current regulations.
• No fine-line background pattern: Real IDs often feature intricate microprint or fine-line patterns that are difficult to replicate.
• No faint license picture behind personal info: Many states embed a faint secondary portrait behind the main one for security.
• No laser-perforated objects when held to the light: Some IDs include see-through elements or laser-cut shapes that are visible when backlit.
• No raised text or imagery from laser embossing: Authentic IDs frequently use tactile features.
• Peeling lamination or unusual texture: Lamination that lifts or IDs that feel too thick or thin may be counterfeit.
• Photo or personal data mismatches: Fake IDs may have mismatched photos, incorrect birthdates, or misspelled names.
• Suspicious or missing barcode data: Barcodes must encode accurate data matching the visible information; mismatches are red flags.
• Signs of tampering or physical damage: Scratches, overlays, or uneven edges may indicate tampering or physical damage.

New AI-driven fake ID red flags in 2026

Generative AI is making fake IDs faster to produce and harder to spot. Fraudsters can use it to alter personal details, generate synthetic portraits, and recreate document templates at scale.

Here are some of the indicators to watch out for:

• Cross-signal inconsistencies—when the document appears genuine but conflicts with other verification signals. For example, the address, device location, IP address, selfie, phone number, or customer behavior may not match the information on the ID. These inconsistencies are often more reliable indicators of AI-assisted identity fraud than visual inspection alone.
• Security feature simulation. Modern AI can imitate holograms, guilloches, microtext, UV elements, and other security features, but these are usually only visual representations. Under closer inspection—or through automated document authentication—they may lack the optical properties, printing techniques, or embedded security features found in genuine documents.
• AI-generated portrait substitution. Fraudsters increasingly replace the original document photo with an AI-generated or AI-modified face that resembles the user. While these images can appear convincing, automated face matching, liveness detection, and forensic analysis may reveal inconsistencies between the portrait and the person's live biometric data.
• Metadata and provenance anomalies. AI-generated documents are often submitted as screenshots, flattened images, or files with missing, inconsistent, or stripped metadata. While metadata alone cannot prove fraud, unusual file characteristics can provide valuable supporting signals during document authentication.

As AI-generated IDs become increasingly photorealistic, organizations should rely less on visual inspection alone and instead combine document authentication, biometric verification, liveness detection, device intelligence, and cross-signal risk analysis.

How to spot a fake ID

How to inspect an ID by hand

Although there are powerful tools available for automated ID verification, manual checks still remain a useful first line of defense. Basic steps include holding the ID under a UV light to reveal hidden elements, feeling for raised text or embossing, and closely inspecting the photo to ensure it matches the ID holder’s facial features.

Staff should also examine the card’s edges and lamination for signs of peeling or tampering, verify that fonts and spacing are consistent, and cross-check barcode data with printed data where possible. While manual checks cannot guarantee the detection of fakes, they help flag suspicious IDs for further scrutiny, so staff should be trained on how to check IDs manually.

Suggested read: MRZ Code—How Does It Work?  

Biometric and document verification tech

Technology has revolutionized fake ID detection, enabling more frictionless and more accurate verification through multiple layers of security analysis. ID verification tools include:

• ID scanners: Devices that scan and analyze physical IDs, checking features such as holograms, UV elements, magnetic stripes, and barcodes to verify authenticity. ID scanners may also scan for signs of alteration, like mismatched fonts.
• Mobile verification apps: Similar to ID scanners, these apps can use the camera to capture and verify ID images in real time. However, they may sometimes also incorporate liveness detection to prevent spoofing.
• Machine learning software: Systems can compare scanned IDs against extensive databases of authentic templates and use pattern recognition to identify forgeries.
• Barcode and MRZ readers: These tools verify the data encoded in barcodes and machine-readable zones (MRZs), ensuring it matches the information on the MRTD (Machine Readable Travel Document).
• Biometric verification: This compares the presented ID photo to the person’s facial biometrics to confirm identity.
• Cryptographic attestation: Advanced digital IDs may include cryptographic signatures for an extra layer of verification.

These identity document verification tools can significantly reduce reliance on human judgment and help businesses keep pace with fraudsters’ evolving tactics by continuously updating their verification databases.

Detecting fake IDs across key industries

Financial services & banking

• Focus on account opening fraud, mule accounts, synthetic identities, and stolen identity documents. Check whether the document is genuine, whether its data matches trusted sources, and whether the person completing verification matches the portrait.
• Look beyond the document itself. Link identity data with device, contact, account, and transaction signals to uncover multiple applications built around the same document, photo, phone number, device, or beneficiary.
• Trigger stronger checks when customers recover accounts, change personal or payment details, add new beneficiaries, or attempt activity that does not match their verified identity.
• Keep ID template databases up to date with federal and state changes, and cross-check visible data against barcodes, MRZs, NFC chips, and authoritative sources to ensure accurate detection.

Online marketplaces & e-commerce

• Focus on fake seller accounts, merchant impersonation, repeat offenders, and fraudulent payout setups. Verify sellers and merchants before they can list high-risk goods, access payouts, or increase transaction limits.
• Look for altered business owner IDs, repeated portraits, and documents reused across multiple storefronts. Connect identity checks with device, payment, address, and account-linkage data to expose coordinated seller networks.
• Trigger additional verification when sellers change payout details, take over dormant stores, rapidly increase sales, or open new accounts after suspension.

Cryptocurrency exchanges & wallets

• Check whether the identity behind the document matches the person controlling the account. Fake IDs in crypto are often used to open mule accounts, create networks of linked wallets, or bypass withdrawal limits.
• Look for repeated documents, portraits, devices, IP addresses, and funding patterns across multiple accounts. 
• Trigger re-verification before large withdrawals, changes to wallet addresses, account recovery, or sudden activity after a dormant period.

Government & border control

• Inspect chip data, machine-readable zones, security features, and portrait integrity to detect counterfeit documents, photo replacement, face morphing, and altered biographical details.
• Train personnel on new ID designs, forgery tactics, and compliance standards.
• Cross-check documents against issuing records, lost-and-stolen document databases, watchlists, and previous travel history.

Hospitality & nightlife

• Train staff on manual ID checks, focusing on UV features, holograms, and tactile elements.
• Deploy integrated scanning systems to automate ID verification and create audit trails.
• Establish clear refusal policies and staff support when handling suspected fake IDs.

Gambling

• Focus on age fraud, multi-accounting, bonus abuse, and withdrawal fraud. Validate date of birth, document expiry, portrait consistency, and signs of the same identity or document being reused across several player accounts.
• Apply stronger checks before first withdrawal, payment method changes, or high-value wins. Link document data with device, payment, and household signals to identify groups of accounts created with altered or borrowed IDs.

The need for ID verification is also growing online, especially in high-risk sectors like gambling. Kaizen Gaming, a major international gaming platform, partnered with Sumsub to automate most of its ID verification workflow. Kaizen scaled automated checks from 15% to 70% across markets, significantly reducing manual review time and improving process efficiency. This helps Kaizen reduce suspicious sign-ups, cut manual review time, and support its compliance obligations. Meanwhile, Non-Doc Verification reduces reliance on physical documents, helping mitigate the risk of forged IDs by confirming identity through trusted data sources.

Suggested read: Fraud Trends 2026: AI Scams, Deepfakes, and Emerging Threats

What to do when you spot a fake ID

Identifying a suspicious ID is only the first step. Businesses should have clear procedures in place to ensure incidents are handled consistently, comply with applicable laws, and support any subsequent investigation. If you suspect an ID is fake:

• Refuse service. Do not proceed with the transaction or allow access, even if the individual attempts to present another form of identification.
• Document the incident. Record the details of the suspected fraud, including the date and time, the individual involved (where appropriate), and the reason the ID was considered suspicious.
• Report the incident. Follow your organization's reporting procedures and, as required, notify law enforcement when identity theft, fraud, or other criminal activity is suspected.
• Confiscate the ID (where permitted). Some jurisdictions allow or require businesses to retain fraudulent physical IDs, while others do not. Always follow local laws and internal policies.

Staff should receive regular training on how to recognize suspicious documents and respond appropriately. However, as AI-generated fake IDs become increasingly convincing, manual inspection alone is no longer sufficient. Combining employee training with automated document verification, biometric checks, and fraud detection tools provides a much stronger defense against modern identity fraud.

Best practices for fake ID prevention

Protecting your business from ID fraud starts with knowing the obvious red flags: inconsistent fonts and spacing, poor printing quality, missing or incorrect holograms and UV features, outdated design elements, suspicious barcode data, and signs of tampering.

However, visual checks alone are not enough. High-quality counterfeit and digitally manipulated IDs may contain few obvious defects, while image compression, lighting, or camera quality can make genuine documents appear suspicious.

Use layered identity verification to validate the document against known templates, compare visible data with barcodes, MRZs, or NFC chips, and confirm that the document portrait matches the person completing the check. Device, behavioral, and cross-user signals can also reveal repeated document use, synthetic identities, and coordinated fraud that document inspection may miss.

Combining these controls helps businesses reduce identity fraud, improve verification accuracy, and support their fraud prevention and compliance obligations.

Learn more about Sumsub’s Fraud Prevention solution

Unlock the power of our advanced ML algorithms to tackle all types of fraud at every user interaction.

Find out more

FAQ on spotting fake IDs in the US

• Which red flags reveal a fake ID?

  Common red flags include blurry or inconsistent fonts, mismatched information, missing or incorrect holograms, outdated templates, peeling lamination, suspicious barcodes, and photos that don’t match the person presenting the ID.

• How do UV and touch checks expose fakes?

  UV light reveals security features like invisible ink and holograms that counterfeiters often miss. Tactile checks can detect raised or embossed elements on the card’s surface, which are hard to replicate.

• Which US states add unique ID features?

  Many states do. For example, California uses a UV-reactive bear, New York a laser-perforated Statue of Liberty, and Texas a color-shifting state seal.

• Are ID scanner apps reliable for detection?

  They can be very effective, especially when combined with biometric and cross-signal checks, but no single tool is foolproof, so layered verification is best.

• How can staff manually detect fake IDs?

  To spot a fake ID manually, staff can look for inconsistent fonts, missing holograms, photo mismatches, signs of lamination peeling, and unusual card thickness.