UK Visa Bank Statement Fraud: What UKVI Actually Checks

Many people who search ‘how does UKVI verify bank statements’ are applicants. Others are the people helping them: an admissions officer at a university, a sponsor’s HR team, an immigration adviser assembling a bundle. The short answer is that the Home Office can check a bank statement with the bank that issued it. The public versions of its caseworker guidance describe when that happens only in outline and redact the operational detail.

This article sets out what the published rules and guidance say, route by route, and how the Home Office describes checking financial evidence. Then it looks at a narrower question that sits on the intake side, before anything is submitted: whether the PDF statement an organisation is holding was edited after the bank produced it.

Everything below reflects published gov.uk guidance as of October 2026. Immigration rules change several times a year. Each source is cited with the date of the version we read, so check the current page for the route you are working on before relying on any figure here.

Does UKVI verify bank statements?

Yes, it can. The student financial-evidence guidance tells applicants directly: ‘We may verify the evidence with your bank’ (updated 31 December 2025). Appendix Finance (updated 3 August 2026) goes further at FIN 2.1: funds will not be counted if the decision maker cannot make satisfactory verification checks, if the institution holding them is not regulated, or if it does not keep electronic records.

What the guidance does not describe is a check on every statement. The Student caseworker guidance (version 14.0, 3 August 2026) says verification is carried out where there is reasonable doubt about a document or where a risk profile instructs it, and the risk profiles themselves are redacted. The rules and guidance do set out the consequence when a document is found to be false, covered below. The suitability guidance’s definition of a false document includes a genuine document that has been altered or tampered with.

What UKVI asks for, route by route

Financial evidence rules differ by route. Since October 2020, the general position under the Immigration Rules has been more permissive about format than many applicants expect: the Explanatory Memorandum to HC 813 records that the old Appendix P list of acceptable banks was deleted and replaced with a general verification test, and that format rules were removed so electronic statements no longer needed a bank stamp on every page.

Student route

The student financial-evidence guidance (updated 31 December 2025) sets the maintenance figure at £1,171 a month outside London and £1,529 a month in London, for up to nine months. The money must have been held for 28 consecutive days, and the most recent evidence must be dated no more than 31 days before the application. Paper statements and electronic statements downloaded from online banking are both accepted, provided they show the account holder’s name, the bank’s name and the balance. Nationals of listed countries do not have to submit the evidence with the application unless they are asked for it.

Appendix Finance, at FIN 7.1 to 7.3, sets the general rules on dating: evidence must be dated within 31 days of the application, and the holding period is counted back from the closing balance.

Work routes

For sponsored and endorsed work routes, the financial evidence page (last updated 22 August 2022, so read it alongside the current Appendix Finance) describes a maintenance requirement that an A-rated sponsor can certify on the applicant’s behalf instead of the applicant showing personal savings. Where the applicant does provide statements, electronic statements are acceptable without a stamp if they show the date, name, institution and balance. The page also says the Home Office may check the evidence with the bank and may refuse the application if it cannot be verified.

Family routes

Family applications are governed by Appendix FM-SE (3 August 2026), which is more prescriptive than the other routes. Paragraph 1(a) requires statements on official bank stationery or, for electronic statements, a supporting letter from the bank or a bank stamp on every page.

The financial requirement caseworker guidance (version 9.0, 12 September 2025) states that electronic statements need neither a stamp nor a letter. The two published documents read differently on this point, so advisers should check the current wording of the rule and guidance for the specific application rather than rely on either summary here. FM-SE also allows the decision maker, in some cases, to request missing documents or documents in the correct format (paragraph D).

The same caseworker guidance says verification follows local processes, that funds can be disregarded if the bank refuses to verify them, and that ATM mini-statements are not accepted because they do not show enough information and are easy to fake. Much of the remaining procedure is redacted.

Visitors

There is no fixed amount for visitors. The visit caseworker guidance (version 17.0, 25 February 2026) says recent large deposits may be queried for their source, and that documents a caseworker doubts may be verified at source.

How the Home Office checks financial evidence

Read together, the published guidance describes three stages: caseworker review, verification at source when a document is in doubt, and a suitability decision if a document is found to be false.

Caseworker review. A caseworker assesses the evidence against the rules for the route: the amount, the holding period, the dates, the name and the institution.

Verification at source. The document verification guidance (version 1.0, 12 December 2016, still listed on gov.uk) gives the questions a caseworker may put to a bank: whether the account and branch exist, whether the bank knows the applicant, whether the balance is correct, whether the statement is genuine, and whether the person who signed it works there. A finding that a document is false is recorded in a Document Verification Report.

The Student caseworker guidance describes three outcomes for these checks: genuine, false and inconclusive. Where the Home Office’s own verification outcome is inconclusive, the document is discounted; if no other evidence meets the requirement, the caseworker refuses the application or refers the applicant for interview. Keep that term separate from the HTPBE? verdict inconclusive discussed below. They share a word and nothing else.

Suitability and consequences. Part Suitability (3 August 2026) sets the outcomes. Under SUI 9.1, deception proven against the applicant, including the use of false documents, leads to mandatory refusal, and SUI 12.1 adds a 10-year re-entry ban after deception. Under SUI 10.1, false documents can lead to discretionary refusal whether or not the applicant knew the document was false, including where a third party supplied it. The suitability guidance (version 1.0, 11 November 2025) defines a false document to include a genuine document that has been altered or tampered with, says the Home Office must prove deception on the balance of probabilities, and notes that discretionary refusals carry no ban.

The public record stops there. It does not describe how the Home Office selects documents for checking beyond the redacted risk profiles, and we do not speculate about it.

Three checks that answer different questions

There are three kinds of check here. Each answers a different question, and none substitutes for another.

1. Content rules. Does the statement show the right name, bank, balance and dates, and does the money meet the requirement for the route? This is the caseworker’s assessment, and the adviser’s or sponsor’s pre-submission review.
2. Source enquiries. Does the bank confirm the account, the holder and the balance? Only the bank can answer this, and the Home Office decides when to ask.
3. File structure. Was this PDF file edited after the software that produced it first wrote it? This is a property of the file, not of the account.

The first two are the Home Office’s process. The third concerns something only the intake organisation holds: the files it has collected before anything is submitted. A university admissions team, a sponsor’s HR team or a regulated adviser (the regulator, formerly OISC, was renamed the Immigration Advice Authority in January 2025) may receive a statement as a PDF attachment. That file has its own construction history, whatever the content shows.

Student Sponsor Guidance Document 2 (version 04/2026) sets no specific duty on sponsors to check applicants’ bank statements. It requires sponsors to act honestly, assess applicants before assigning a CAS and record the evidence they relied on. The specific authenticity duty at paragraph 5.73 concerns qualifications. A file-level check on statements is a choice an organisation makes for its own reasons, and what it buys is narrow: the chance to ask for a fresh copy from the bank before a file the organisation is unsure about goes into a bundle.

What a file-level tamper check can and cannot tell you

HTPBE? is a PDF tamper-detection tool. It reads the structure of a PDF and returns one of three verdicts plus a list of named markers describing what it found.

• intact means no structural evidence of modification after the file was created. It does not mean the statement is genuine, that the balance is correct, or that the bank issued it.
• modified means the file carries evidence that it was changed after it was first generated. Markers name the finding by outcome, for example HTPBE_EDITING_TOOL_FINGERPRINT (signs of a known PDF editing tool), HTPBE_MULTIPLE_REVISION_LAYERS (the document was modified after creation) or HTPBE_ONLINE_EDITOR_ORIGIN (the file passed through an online PDF editing or conversion service).
• inconclusive means the file’s structure cannot settle the question either way. It is not a finding that the file was edited, and it is not a finding that it was not. Plenty of legitimate statements return it, including some downloaded directly from a bank.

What it does not do matters as much:

• It does not read figures. It does not check balances, totals, the 28-day holding period or the closing date.
• It does not establish who owns the account, and it does not confirm anything with the bank.
• It does not check identity or eligibility, it is not a KYC or identity-verification service, and it is not part of any Home Office process. Its output has no bearing on a visa decision.
• It does not judge whether what a statement says is true. A structural check speaks to the file’s edit history only, which is why the content review and the bank remain the controls for the content itself.

A modified verdict is a statement about the file: it was edited after creation. It is not a finding of fraud, and it says nothing about who made the edit or why. People merge statements into one PDF, redact account numbers before emailing them, and convert files to meet upload limits, all for ordinary reasons.

What to do with a modified or inconclusive result

Treat both as routing signals inside your own review, never as grounds for adverse action against a person on their own.

modified. Ask for the statement again, obtained directly from the bank: a fresh download from online banking, or a letter or stamped statement where the route expects one. Note the result and what you asked for in your file. If the new copy raises the same question, that is a matter for your organisation’s normal escalation process and, where relevant, professional advice, not something the verdict decides by itself.

inconclusive. This is common on legitimate statements and is not a finding against the applicant. On its own it is not a reason to discount a statement or to treat the applicant differently, but it is not a pass either: it gives no structural assurance in either direction, so your content review carries the weight. Where your review needs a firmer answer, ask for the statement again, obtained directly from the bank, and bear in mind that a fresh bank download can itself return inconclusive.

intact. No structural evidence of an edit after creation. Your content review still applies, and so does every check the Home Office makes after submission.

Where it fits in an intake workflow

The check sits at the point where a PDF statement arrives, before it goes into an application bundle or a CAS assessment. It answers one question about the file and leaves every other question to the people and processes that own them.

For occasional checks, create an account. New accounts normally receive 5 welcome credits, and further checks are pay-per-check; the options are on the pricing page. For volume, the API takes a PDF URL, and the result endpoint returns the verdict and named marker IDs, so the result can be stored against the case record. Test keys return deterministic sample results for wiring up an integration; they never analyse a real file. If you check applicants’ statements through any third-party tool, make sure your lawful basis and privacy notice cover it.

For the wider picture, the immigration document fraud detection hub and the sponsor licence document fraud page cover other document types. Share codes and right-to-work checks are covered in right-to-work and I-9 document fraud. If your team also handles statements outside immigration, see how lenders verify bank statements, the guide to spotting an altered bank statement and the bank statement tamper detection use case.

FAQ

Does UKVI contact the bank to check a statement?

It can. The published guidance tells applicants the Home Office may verify financial evidence with the bank, and caseworker guidance describes verification at source when there is reasonable doubt about a document or a risk profile instructs a check. The detailed procedure is redacted from the public versions.

Is an HTPBE? inconclusive verdict the same as the Home Office’s inconclusive verification outcome?

No. The Home Office’s own verification outcome of inconclusive means its enquiry with the issuer could not settle whether a document is genuine. An HTPBE? inconclusive verdict means the file’s structure cannot settle the question either way: it is neither a finding that the file was edited nor a finding that it was not. It is common on legitimate statements and is not on its own a reason to discount one, but it gives no structural assurance either, so the content review carries the weight.

Can a tamper check confirm the funds requirement is met?

No. HTPBE? reads the structure of the PDF file, not its figures. It does not check balances, the 28-day holding period, who owns the account or whether the bank issued the statement. Those questions belong to the decision maker and, where it chooses to ask, to the bank.