Manual PDF Review vs Automated Tamper Detection
A reviewer reads what the page says. An automated check examines how the file was built. They answer different questions, so they miss different things. This page shows where each one stops, and how teams put them in order so neither is asked to do the other’s job.
Two different questions
A reviewer judges the content. A file check judges the file.
Manual review is a judgement about the document as a reader sees it: do the figures add up, does the layout match what this issuer normally sends, does the story fit the applicant. A good reviewer catches things no software can, because they know the context.
What a reviewer cannot do is see inside the file. A PDF that has been opened in an editor, changed and saved again can look identical to the original on screen. The page renders the same, the fonts look right and the totals still add up. Whether the file was changed after it was issued is a property of its construction, not of its appearance, and a checklist has nothing to look at.
The reverse also holds. A file check says nothing about whether a salary is plausible for the job title, or whether an invoice is for goods that were ever delivered. It reports on the file, and a document can be structurally unremarkable and still describe something untrue.
What a checklist cannot see
- 1Whether the file was re-saved after it was issued
- 2Whether a signed document was changed after signing
- 3Whether pages come from more than one source file
- 4Whether the file’s origin matches the issuer it claims to be from
- 5Anything that renders correctly but was edited
What this looks like
Where manual review and a file check each earn their place
Three real fraud mechanics we catch at the structural PDF layer.
A bank statement with one changed balance
The edit is clean: same font, same alignment, totals recalculated. A reviewer comparing the page against a checklist has no reason to object. A file check looks at whether the statement is still the file the bank’s system produced, and flags it as modified if it is not.
An invoice with swapped bank details
The supplier’s name, logo and amounts are all correct, and only the account number differs. A reviewer who has never seen this supplier’s previous invoices cannot tell. A file check does not need previous invoices, because it examines the document in front of it. Calling the supplier on a number you already hold is still the right second step.
A pay stub that is internally consistent but implausible
The file is fine, but the stated salary does not fit the role, the city or the employer’s pay structure. No file check can catch that. This is the reviewer’s job, and it is why an INTACT result is not an approval.
A scan or photo saved as PDF
Scanners and phones produce files with little origin information, so a file check often cannot give a firm answer and returns INCONCLUSIVE rather than guessing. This is where the reviewer’s attention is most useful: the file check has told you that it cannot vouch for this one.
A contract signed electronically
A visual check cannot tell whether anything changed after the signature was applied. A file check reports whether the signed document is still the one that was signed.
How they fit together
Put the file check first, the reviewer second
Each layer covers what the other cannot reach.
Manual review alone
Judges what the page shows
- Catches implausible figures and inconsistent stories
- Brings case history and issuer knowledge
- Cannot see whether the file was changed after issuance
- A well-made edit looks the same as the original
Strong on context, blind to construction.
Manual review plus a file check
The check examines the file, the reviewer examines the case
- Every file gets the same structural examination
- MODIFIED and INCONCLUSIVE arrive with named findings
- The reviewer’s attention goes where it is needed
- Content, plausibility and sign-off stay with people
What HTPBE? checks
Detection capabilities
Deterministic structural signals. No probabilistic scores, no model training.
Step 1: run the file check on arrival
Submit every incoming PDF before anyone opens it. The result is one of three verdicts – INTACT, MODIFIED or INCONCLUSIVE – with named findings attached, so the reviewer starts with context instead of a blank file.
Step 2: route by verdict, not by volume
MODIFIED goes to a person together with a request for a fresh copy from the source. INCONCLUSIVE is handled according to what the document claims to be: a bank portal download that comes back INCONCLUSIVE deserves a question, a scan the sender openly scanned does not. INTACT continues to the normal content review.
Step 3: keep the content review exactly as it is
The reviewer still checks arithmetic, plausibility, consistency with the case file and the facts that only context supplies. The file check adds a question the checklist never asked. It does not remove any question the checklist already asks.
Step 4: confirm with the source when it matters
For documents that carry real money or a legal decision, neither layer replaces asking the issuer. A direct request to the bank, employer or supplier settles what no review of the file can.
A finding is a reason to look harder
A MODIFIED verdict reports that the file changed after it was issued. It does not say why, and it does not say anyone acted in bad faith: people re-save, merge and annotate legitimate documents. The reviewer decides what the finding means for the case.
Accountability stays with the person
Approval and rejection decisions are made by people who can explain them. The file check supplies evidence for that decision and is not wired to make it automatically.
Share with engineering
Wire this into your intake pipeline in under a day
Two API calls – one POST to submit the PDF, one GET to retrieve the verdict. Forward this page to your engineering team; the full API reference, quotas, and copy-paste examples in cURL, JavaScript, Python, PHP, Go, and Ruby are one click away.
Pricing
Self-serve plans, no sales call
All plans include the same forensic checks. Pick the quota that matches your monthly document volume.
manualStarter
30 credits/mo
Manual spot-checks and integration testing
most commonGrowth
350 credits/mo
Active document processing pipelines
high volumePro
1,500 credits/mo
High-volume automation and API integrations
Enterprise (unlimited, on-premise available) — see full pricing
API key on signup. Free test environment on every plan. No card required.
Customer Stories
Teams that stopped document fraud
Compliance, finance, and risk teams use HTPBE? to catch manipulated PDFs before they become costly mistakes.
Caught an invoice where the total had been changed by less than a thousand dollars. Without this I would have approved it without a second look.
Sarah M.
AP Manager
United States
We had three applicants in the same week with bank statements that looked completely fine. Two of them were flagged as modified. You simply cannot see this by reading the document — it is in the file structure.
Lars V.
Risk Analyst, Online Lending
Netherlands
Salary slips were coming with altered figures. We identified two problematic files before the placement was finalised.
Priya K.
HR Operations Lead
India
Since we started checking documents this way, we stopped two applications early in the process that would have been very difficult to reverse later.
Julien R.
Fraud Analyst, Fintech
France
Some applicants were sending PDFs that looked authentic but had been edited in ways not visible to the eye. We now ask for checked originals when something is flagged. Already saved us from a few bad decisions.
Marta S.
Compliance Coordinator
Spain
One invoice was caught because there was a mismatch between the document dates and structure. That particular case would have cost us significantly.
Tariq A.
Finance Manager
United Arab Emirates
FAQ
Frequently asked questions
Can a person tell by eye that a PDF has been edited?
What should a manual PDF review checklist include?
Does an INTACT result mean the document is genuine?
What does a reviewer do with MODIFIED or INCONCLUSIVE?
Do we have to change our review process to add a file check?
Does the file check read the content of the document?
Secure your workflow
Create your account – check PDFs on the web or with an API key, both ready on signup.
No sales call. Cancel any time.