Forensic check

HTPBE_ALTERED_TYPEFACE_IDENTITY

A font whose identity appears altered. A marker is evidence about the file, not a judgement about the person who sent it.

Back to all checks
Marker profile

Generator Fingerprinting

A font whose identity appears altered.

Independent signals
1
Check group
Generator Fingerprinting
19 checks in this group
Independent signals
1
Conditions this check evaluates
Returned in
modification_markers
Field of a modified result

Marker profile

What HTPBE_ALTERED_TYPEFACE_IDENTITY tells you

HTPBE_ALTERED_TYPEFACE_IDENTITY is one of the named findings returned in modification_markers when a PDF is reported as modified. It belongs to the Generator Fingerprinting group of checks. These checks compare the software a file claims to come from with what the file itself shows about how it was produced.

Example API response

How it appears in a result

When a PDF is reported as modified, HTPBE_ALTERED_TYPEFACE_IDENTITY is listed in modification_markers next to the verdict and its confidence. Each marker is a named, actionable finding – not a score.

GET /api/v1/result/{id}
{
  "id": "9f3a2c1d-8b47-4e6f-a012-3d5e7f890123",
  "status": "modified",
  "modification_confidence": "high",
  "modification_markers": [
    "HTPBE_ALTERED_TYPEFACE_IDENTITY"
  ],
  "creator": "Adobe Acrobat Pro DC",
  "has_incremental_updates": true,
  "page_count": 3
}

Full schema in the API reference →

Related checks

Other Generator Fingerprinting checks

Checks from the same group. Each card links to its own reference page.

HTPBE_TOOL_VS_STRUCTURE_MISMATCHStructural evidence that contradicts the file’s stated origin
Share of modified14.8%
HTPBE_FONT_VS_TOOL_MISMATCHFont handling that points to a different producer
Share of modified0.1%
HTPBE_RESIDUAL_PRIOR_GENERATOREvidence of an earlier production history behind the current file
Share of modified0.4%
HTPBE_EDITING_TOOL_FINGERPRINTFingerprints of PDF editing software
Share of modified5.2%
HTPBE_DOCUMENT_RESTAMPED_AFTER_CREATIONDocument re-saved by another tool after its original creation
Share of modified0.1%
HTPBE_ONLINE_EDITOR_ORIGINSigns of processing by an online PDF editing or conversion service
Share of modified2.2%
HTPBE_SELECTIVE_IDENTITY_EDITOrigin information partly removed or edited
Share of modified0.3%
HTPBE_IDENTITY_OVERWRITTENOrigin information replaced with that of different software
Share of modified0.1%
HTPBE_UNKNOWN_IDENTITY_CLAIMMetadata showing signs of having been rewritten
Share of modified1.5%
HTPBE_SCRIPTING_ON_REEMITTEDActive scripting added to the document after its original creation
Share of modified<0.1%
HTPBE_LAYERED_IDENTITY_DISAGREEMENTClaims about the producing software that do not hold up
Share of modified0.5%
HTPBE_IMPOSSIBLE_TOOL_PIPELINEAn implausible chain of production softwareHTPBE_IDENTITY_BLANKEDIdentifying details stripped from the document after production
Share of modified14.5%
HTPBE_DESIGN_TEMPLATE_ASSEMBLYPage content composed from separately produced parts
Share of modified16.5%
HTPBE_TOOLCHAIN_DEFAULT_METADATA_RESIDUETraces of other software in the document’s productionHTPBE_PRINT_PIPELINE_TAMPERINGSigns of alteration in a document that was re-printed to PDFHTPBE_FONT_LAYER_INCONSISTENT_WITH_ISSUERTypography indicating the document was not produced by its stated issuer
Share of modified0.1%
HTPBE_PRODUCER_IDENTITY_FORGEDFabricated origin details that misstate how the document was produced
Share of modified0.1%

FAQ

HTPBE_ALTERED_TYPEFACE_IDENTITY: common questions

What does HTPBE_ALTERED_TYPEFACE_IDENTITY mean?

HTPBE_ALTERED_TYPEFACE_IDENTITY is a named finding in an HTPBE? result: a font whose identity appears altered. It is returned in the modification_markers list of a modified result and belongs to the Generator Fingerprinting group of checks.

Does HTPBE_ALTERED_TYPEFACE_IDENTITY mean the document is fake?

No. A marker is evidence about the file, not a judgement about the person who sent it. It records that the file shows this pattern; it does not say why, and it does not assess what the document states. Read it together with the verdict and any other markers on the same result.

What should I do when a result contains HTPBE_ALTERED_TYPEFACE_IDENTITY?

Ask the sender for the original file straight from the issuing system, or request a fresh copy from the issuer. Check whether the document went through a later step such as re-saving, merging or converting, and verify it with the issuer before relying on it for a decision.

Where do I see HTPBE_ALTERED_TYPEFACE_IDENTITY?

In the modification_markers list of the result returned by the HTPBE? API, and on the result page of a modified document. Other checks in the Generator Fingerprinting group are listed below on this page; all 63 checks are listed on the how-it-works page.

Secure your workflow

Create your account – check PDFs on the web or with an API key, both ready on signup.
No sales call. Cancel any time.