Hub/Blog/Error Level Analysis
Error Level AnalysisRutvij Khatri•7 min read•Published 2026-10-14

Spotting Spliced Documents, Invoices, and Fake Receipts with ELA

A tactical forensic guide for fraud investigators and compliance teams on uncovering modified amounts, forged signatures, and spliced contract terms.

Why Digital Invoice Fraud Leaves Fingerprints

Fraudulent invoices and modified bank receipts are usually constructed by taking an authentic PDF or scan and pasting new digits or bank account numbers over the existing fields.

Because the pasted numbers are rendered in modern software and saved on top of a previously compressed document scan, the two components carry completely different compression histories.

Key Investigative Takeaway

Pasted numbers and altered invoice totals almost always produce glowing ELA outlines compared to the background document texture.

Practical Examination Workflow

1. Convert the disputed receipt or screenshot into JPEG format and open it in the ELA workspace.

2. Inspect the bounding boxes around the currency symbol, decimal points, and account numbers.

3. Check whether the modified box has identical background noise to adjacent unedited lines of text.

#detect fake invoice#verify receipt authenticity#document forensics online#spot forged signature
RK
Rutvij KhatriSecurity Analyst

Security Analyst and Aspiring Security Engineer passionate about digital image forensics, OSINT research, CTF steganography challenges, and client-side application security.

Related Guides in Error Level Analysis