Document fraud: definition, forms and penalties

What is document fraud?

French state services define it as the use of documents that are counterfeit, falsified or fraudulently obtained. The aim is to gain an undue advantage, deceive someone or harm a third party, and it reaches every sector, private and public alike.

Offenses and penalties vary by country. This guide uses French law, where Docusan is based, as its reference; if you operate elsewhere, ask local counsel for the equivalent rules. Under article 441-1 of the French Criminal Code, forgery is any fraudulent alteration of the truth, liable to cause harm, made by any means in a document or other medium that can prove a right or a fact with legal consequences. Three practical points follow:

• The medium hardly matters: the text covers any means and any medium. The French government’s guide also mentions altering a photo or an audio or video recording.
• Intent counts: the author must know the document is false. An honest mistake is not forgery, which is one more reason to be careful before accusing anyone.
• Using is enough: using a forged document is punishable even if the person did not create it.

Why no global figure in this guide? We found no official statistic covering every form of document fraud across all sectors. Be wary of percentages quoted with no source and no date.

Material vs intellectual forgery: what is the difference?

French lawyers and courts draw a distinction that the wording of article 441-1 does not use. It is worth knowing wherever you work, because it decides how you can check a document.

• Material forgery alters the document itself: a fabricated file, a changed name or amount, an imitated signature. Examining the paper or file may reveal traces.
• Intellectual forgery leaves the document untouched: its content is false from the moment it is written. Nothing has been retouched, so only cross-checking against other sources can expose the lie.

A ruling of 5 November 2014 by France’s highest court gives a telling example. A lease and rent receipts, never physically altered, described a purely fictitious rental. The court of appeal found intellectual forgery, and the Court of Cassation dismissed the appeal.

The direct consequence: no file analysis is enough by itself. It can reveal an edit, but it cannot say whether an intact document tells the truth. You need both the examination of the document and verification at the source.

Common forms of document fraud

• Counterfeiting: a full reproduction of a document, such as a fake diploma imitating an official template.
• Falsification: changing a genuine document. A photo is replaced, a date changed, an amount or address retouched, often in a PDF.
• Full fabrication: a fake payslip, sick note or CV, now also with the help of generative AI.
• Assembly: real elements combined into a deed that never existed, such as a fake sale agreement built from photocopies.
• A genuine document wrongly obtained: an authentic ID issued on the strength of a false statement. It can pass a visual inspection with ease.
• Identity theft: using the documents of another person or company.
• False attestation: stating in writing, for someone else, facts you know to be inaccurate. The French government’s guide notes that a sworn statement made for oneself is not treated as forgery.

Penalties under French law: articles 441-1 onwards

The “forgery” chapter of the French Criminal Code scales penalties to the type of document. These are the maximum penalties in force at the date of this guide:

• Forgery and use of forgery: 3 years in prison and a €45,000 fine (article 441-1).
• Documents issued by an administration: 5 years and €75,000, or 7 years and €100,000 if committed by a public official on duty, habitually, or to facilitate a serious crime (article 441-2).
• Possessing such a forgery: 2 years and €30,000, or 5 years and €75,000 for several documents (article 441-3).
• Public or authentic deeds: 10 years and €150,000, or 15 years and €225,000 for a public official carrying out their duties (article 441-4).
• Fraudulently procuring an administrative document for someone else: 5 years and €75,000, up to 7 years and €100,000 in the same circumstances as article 441-2 (article 441-5).
• Wrongly obtaining a document or making a false statement for a benefit: 2 years and €30,000 (article 441-6).
• Inaccurate or falsified attestations and certificates: 1 year and €15,000, or 3 years and €45,000 if intended to harm the public treasury or another’s assets, or to obtain a residence permit (article 441-7).
• Using someone else’s identity document: 5 years and €75,000, or 7 years and €100,000 if habitual (article 441-8).

An attempt at most of these offenses carries the same penalties, additional penalties may apply, and a company can be held criminally liable.

Other offenses may apply depending on the facts, such as fraud (5 years and €375,000) or identity theft (1 year and €15,000).

This is general information, not legal advice: the legal qualification always depends on the facts. For a real case, turn to your legal department or a lawyer.

Which sectors are most exposed?

All of them, as soon as a document opens up a right, a payment or access. The documents and duties differ by sector, and the legal examples below are French:

• Banking and lending: bank statements, payslips and tax notices supporting a loan. In France, regulated entities must identify customers and verify their identity from reliable written evidence, and report certain suspicious transactions to Tracfin, the financial intelligence unit. See our banking and lending page.
• Insurance and health: claim photos, invoices, medical fee notes and prescriptions behind a reimbursement. See our insurance and health insurance pages.
• Real estate: payslips and tax notices in a fake rental application, false documents for social housing. See our real estate and rental page.
• HR and accounting: fake diplomas in hiring, sick leave certificates, expense reports, supplier invoices. See our HR and accounting page.
• Public sector: civil status records and supporting documents for benefits. In France, an official who learns of an offense on duty must notify the public prosecutor (article 40 of the Code of Criminal Procedure). See our public sector page.

How to organize your defenses against document fraud

1. Map documents and decisions

   List the documents you receive, what they trigger (a payment, a contract, a hire) and what a mistake would cost. Strengthen checks first where the stakes are highest.

2. Verify at the source whenever you can

   Official services, such as France’s tax notice check, signed codes such as 2D-Doc, or the issuer reached through its official contact details answer a question the document alone cannot settle.

3. Set up two levels of review

   A systematic first check by your teams (complete file, consistency, the file itself), then a trained specialist for doubtful cases.

4. Write down what happens in case of doubt

   Who asks for an explanation, in what words, who decides, what record is kept. Keep the file exactly as received: re-saving it can erase useful elements.

5. Set rules for personal data

   Keep only what you need and set a retention period (GDPR article 5). Data on offenses is strictly regulated under GDPR article 10. In France, article 46 of the Data Protection Act allows companies to process it only to prepare or pursue legal action. An internal list of “fraudsters” must therefore go through your data protection officer or legal department.

6. Keep a person in the decision

   Individuals in the EU have, in principle, the right not to be subject to a fully automated decision that significantly affects them. A tool flags, a person decides.

7. Measure and adjust

   Track confirmed alerts, false alarms and the most affected documents, then adapt training and checks.

Mistakes to avoid

• Accusing on a single clue: a re-saved, scanned or watermarked document has also been changed, without any fraud.
• Checking appearance only: a careful edit does not show, and an intellectual forgery has nothing to show.
• Asking for too many documents: some procedures set a closed list, such as renting a home in France.
• Automating everything: high-stakes decisions must remain open to human review.

If forgery is established

In France, a company can file a complaint through its representative, at a police or gendarmerie station or by writing to the prosecutor. The time limit for such offenses is in principle 6 years. These choices, like preserving evidence, belong to your legal department.

Where a detection tool fits

Manual checks soon reach their limits: volumes, fatigue, edits the eye cannot see. Docusan analyzes the file you receive, as a PDF, scan or photo, in any language, and gives a verdict: No detection, Warning or Alert. The anomalies are located on the document, and the decision always stays with your teams.

Docusan does not contact the issuer or government databases: it analyzes the file, and checks at the source remain necessary, especially against intellectual forgery. You can use it from the platform or integrate it into your tools with its API, and your documents are never used to train our models (security and privacy). To compare solutions, read our guide on choosing detection software.