The consequences of a fake pay stub arrive in two very different registers. In statute, knowingly making a false statement to influence a federally insured lender is a felony carrying up to a million dollars and thirty years, and submitting an altered document to obtain credit can also be charged as bank fraud. In practice, what happens to almost every forged stub is procedural: the file stops, a fraud analyst reads the evidence, a second person signs any decline, a confidential report may be filed that the applicant will never be told about, and the application ends with a specific written reason. Botminds’ Income and Document Verification is built around that second register — it raises the signal with its working attached and holds the file, and a named person decides what the consequence is.
This page describes the law and the procedure. It does not offer a figure for how often an individual consumer-credit applicant is prosecuted, because no public series counts that, and a number invented for the purpose would be the least useful thing on the page. The worked example is a fictional sample file the solution ships with.
What the law says about a false statement to a lender
The central federal provision is 18 U.S.C. § 1014. It reaches “whoever knowingly makes any false statement or report, or willfully overvalues any land, property or security, for the purpose of influencing in any way the action of” a long list of federal and federally insured institutions, where the statement is made “upon any application, advance, discount, purchase, purchase agreement, repurchase agreement, commitment, loan, or insurance agreement or application for insurance or a guarantee, or any change or extension of any of the same” (18 U.S.C. § 1014). The penalty is a fine of up to $1,000,000, imprisonment of up to 30 years, or both.
Four words in that sentence carry almost all the weight, and they are the words a lender’s own procedure has to respect.
What the statute requires, and what a tamper check can and cannot establish
| The element | What it means | What a document check establishes about it |
|---|---|---|
| Knowingly | The person knew the statement was false when they made it | Nothing. Arithmetic cannot distinguish a forgery from a payroll correction the applicant never looked at |
| False statement or report | The document or assertion is untrue in fact | A great deal — a net figure that is not gross minus deductions is wrong as a matter of arithmetic |
| For the purpose of influencing | It was made to move a credit decision | Partly: a stub sent with a loan application was plainly sent to support it |
| The institution | One of the listed federal or federally insured lenders, or a federally related mortgage loan | Nothing — this is a fact about the lender, not about the document |
A second statute covers the same conduct from a different direction. Bank fraud reaches whoever “knowingly executes, or attempts to execute, a scheme” to defraud a financial institution, or “to obtain any of the moneys, funds, credits, assets, securities, or other property owned by, or under the custody or control of, a financial institution, by means of false or fraudulent pretenses, representations, or promises”, with the same maximum of $1,000,000 and 30 years (18 U.S.C. § 1344). Where § 1014 is about the statement, § 1344 is about the scheme, and an application supported by several manufactured documents is more naturally described as the latter.
Is a fake pay stub illegal, or only a declined application?
Illegal, and the two are not alternatives. Making the document, sending it and the lender’s decision to decline are separate events with separate consequences, and the ordinary applicant experiences only the last one.
The distinction underwriters most often get wrong is between the stub and the statement it supports. Generating a template that looks like a payroll document is not, by itself, the offence described in § 1014 — the offence is making a false statement to a covered lender for the purpose of influencing its decision. The document is the instrument; the application is the statement. That is why a lender’s evidence is never the file history alone, and always the combination of the document, the figure it asserts and the application it arrived with.
It is also why the covered-institution element is not academic. A lender that is not federally insured and is not making a federally related mortgage loan is outside § 1014, though state fraud, forgery and false-pretences statutes apply to it, and § 1344 turns on whether a financial institution is involved. None of this changes what the lender does next — but it changes who, if anyone, would ever prosecute.
Can you go to jail for a fake pay stub?
The statutory maximum is thirty years, and the honest answer is that the maximum and the usual outcome are a long way apart. Federal maxima describe the ceiling available for the worst conduct a statute covers — in § 1014’s case, conduct that has included multi-million-dollar schemes against insured institutions — and are not an estimate of what follows an individual’s inflated stub on a personal loan application.
What this page will not do is put a probability on it. No published series counts prosecutions of individual consumer-credit applicants for a single altered pay stub, and the responsible thing to say to someone searching this question is: the exposure is real, it is a felony, the ceiling is severe, and the far more likely immediate consequences are the ones in the rest of this page — a declined application, a specific reason on record, a confidential report you are not told about, and a lender that remembers.
For a lender the asymmetry runs the other way, which is worth saying out loud to any team that handles these files. An accusation of a federal felony is not something to make on the strength of a font. The evidential standard that governs a decline is the lender’s own, it is lower than a criminal standard, and the two should never be confused in the words anybody writes down.
Why a signal does not decline a file
Because the check establishes the wrong element. Every integrity test — gross to net, the statutory tax rates, year-to-date against the pay calendar, balances carried from page to page, a re-save by an editing tool — tests whether a figure is consistent. Consistency failures have innocent causes: a payroll correction, a retroactive adjustment, a stub reprinted after an amendment, a partially scanned page, a document photographed instead of downloaded.
So in the solution a tamper signal does one thing: it holds the file and sends it to the fraud analyst with the evidence. Clearing a signal takes a written reason, and the fraud analyst reviews every cleared signal. Nothing is declined by a check, and no notice goes to the applicant until fraud has decided. The eight checks themselves, and the arithmetic each one runs, are set out in how to identify fake pay stubs; how to measure how often those checks flag a document that turns out to be genuine is in automated income verification.
Agent
CheckRuns the integrity checks on every page and raises a signal with the figure or date each sign rests on.
Never: Never declines or calls fraud — a person decides
Agent
HoldStops the file where it stands. No decision is issued and no communication goes to the applicant.
A person decides
Fraud analyst reviewsReads every sign against the pages behind it, and decides whether there is a finding or not.
A person decides
Clear, with a reasonIf the signs are explained, the analyst writes why, and the file resumes. The fraud analyst reviews every clearance.
A person decides
Or decide against the fileThe verification analyst declines on a specific stated reason, at the verified figures.
A person decides
Second signatureAbove the analyst’s limit, and on every decline for altered documents, the underwriting team lead co-signs.
A person decides
Report, where requiredA suspicious activity report is filed if the bank’s thresholds are met — confidentially, and never disclosed to the applicant.
Hold, refer or clear: the three ways out
A held file has exactly three futures, and the discipline is that each produces a different artefact. A hold that produces nothing is the state to avoid, because it is indistinguishable from a file nobody opened.
The three outcomes, what each requires, and what each leaves behind
| Outcome | What it requires | What the applicant experiences | What stays on the record |
|---|---|---|---|
| Cleared | A written reason, reviewed by the fraud analyst | A short delay, then the file proceeds normally | The reason, the reviewer and the date — so clearances can be counted |
| Declined on the documents | A finding by the fraud analyst and a co-signature from the underwriting team lead | A decline with a specific principal reason, within the notification period | The finding, both signatures, the evidence and the reason given |
| Decided on the merits instead | Enough verified information to decide without relying on the disputed document | An ordinary decision at the verified figures | Why the disputed document was not relied on |
Clearances deserve counting for the same reason exceptions do. The OCC’s examiners expect documentation exceptions to be tracked with “appropriate reporting to identify and track exceptions and appropriate analysis to determine causes, impact, and any need for corrective action” (OCC, Retail Lending, version 2.0). A rising clearance rate on one product, or on one analyst’s files, is exactly the kind of pattern that reporting is for.
What does a lender do when it finds a fake document?
Five things, in roughly this order, and only the first is about the document.
What to do, and what to keep, when a document is held
- Preserve the document exactly as received
The original file, with its own internal history intact — not a printed copy, not a re-saved version, not a screenshot of a viewer.
- Record the signs with the figures behind them
“Year-to-date gross identical on two stubs a month apart” is a record. “Tamper suspected” is not.
- Decide whether the file can be decided without it
Where the deposits and the payroll response settle income on their own, the disputed page need not carry any weight.
- Apply the reporting thresholds
A suspicious activity report is a regulatory question with its own thresholds and clock, decided separately from the credit decision.
- Write the reason the applicant will receive
Specific, principal, and capable of being read by someone who may be able to explain it.
Where the loan was nonetheless made and the fraud is discovered afterwards, there is an accounting consequence too: the OCC’s classification guidance is that “fraudulent loans should be classified loss and charged off no later than 90 days from discovery or within the time frames specified in the classification policy, whichever is shorter” (OCC, Retail Lending, version 2.0). Discovery starts a clock in the finance function as well as in the fraud one.
Does a lender tell you it found a fake document?
It tells you the decision, in specific terms. It does not tell you about the report, and it is forbidden to.
On the decision, Regulation B requires that a statement of reasons for adverse action “must be specific and indicate the principal reason(s) for the adverse action”, and that statements resting on “the creditor’s internal standards or policies” are insufficient (12 CFR 1002.9(b)(2)). The Official Interpretations add a point that matters whenever a credit report or any outside source contributed: disclosing that a credit report was obtained and used “does not satisfy the ECOA requirement to disclose specific reasons”, and nor does disclosing the key factors that affected a credit score (Official Interpretations to 12 CFR 1002.9(b)(2)). The two disclosure regimes sit side by side and neither substitutes for the other.
On the report, the position is the opposite of transparent, deliberately. A national bank files a suspicious activity report when it detects a known or suspected federal criminal violation against it or through it, at an aggregate of $5,000 or more “where the bank has a substantial basis for identifying a possible suspect”, or $25,000 or more “regardless of potential suspects” (12 CFR 21.11(c)). And then: “no national bank, and no director, officer, employee, or agent of a national bank, shall disclose a SAR or any information that would reveal the existence of a SAR”, with the rule expressly conditioned on the principle that “no person involved in any reported suspicious transaction is notified that the transaction has been reported” (12 CFR 21.11(k)).
- Hold and fraud review
- Decision, co-signed
- Notice with a specific principal reason, inside the notification period
- Initial detection of the facts
- 30 calendar days to file
- A further 30 days only if no suspect was identified at detection
Two consequences follow for the people doing this work. Front-line staff must never hint at a report, in a call, an email or a decline letter — the prohibition covers “any information that would reveal the existence of” one. And the credit decision has to be able to stand on its own stated reason, because that reason is the only thing the applicant will ever be given.
The second signature, and why it is on the decline
In the sample lender, the underwriting team lead co-signs above the analyst’s $35,000 limit and on every decline for altered documents, regardless of amount. The second condition is the interesting one, because it is not about exposure. A large approval is co-signed because the money at risk is large. A decline for altered documents is co-signed because the consequence to a person is severe and the evidence is interpretive.
That is the right instinct and it has a straightforward justification: the error that costs most here is not the forgery that gets through, which is a credit loss the lender can size and price, but the honest applicant refused on a misread document, which is a harm the lender cannot see and the applicant cannot appeal. A second reader is the cheapest control against it, and the only one that works on a judgement rather than on a number.
Signing the decision, with the meaning recorded

Is altering a bank statement a crime?
Submitting one to a lender to obtain credit raises the same two statutes as a forged pay stub. An edited statement sent in support of an application is a false statement made “for the purpose of influencing in any way the action of” the institution under § 1014, and a scheme that uses several such documents to obtain money from a financial institution is the conduct § 1344 describes. The medium is irrelevant: a PDF edited in a browser, a spreadsheet printed to look like a statement and a genuine statement with one line painted over are the same act.
For the lender, the practical difference is evidential rather than legal, and it favours the statement. A pay stub asserts a payment; a bank statement is the record of whether that payment happened, which means an altered statement usually has to be altered consistently in several places at once — the transaction line, the running balance, the carried balance on the following page, and the totals. That is why the carried-balance check is so productive, and why the deposit behind each stub is the hardest thing in a file to fake; the method is in pay stub verification against bank deposits.
Five signs, each naming the figure or date it rests on

Questions people ask
What are the consequences of a fake pay stub?
In law, exposure under 18 U.S.C. § 1014 for a false statement to a federally insured lender, and potentially under § 1344 for bank fraud, each carrying up to $1,000,000 and 30 years. In practice, the immediate consequences are a declined application with a specific written reason, a lender that keeps the evidence, and — where the bank’s thresholds are met — a confidential report to the authorities that the applicant is not told about and that the bank is forbidden to mention.
What is the penalty for loan application fraud?
Under § 1014 the statutory maximum is a fine of not more than $1,000,000 or imprisonment of not more than 30 years, or both; § 1344 carries the same ceiling for a scheme to defraud a financial institution. These are maxima for the whole range of conduct the statutes cover, not an estimate of what follows a single inflated stub, and state fraud and forgery laws apply alongside them.
What does a lender do when it finds a fake document?
It holds the file and refers it to a fraud analyst with the evidence attached. The analyst either clears the signs with a written reason or makes a finding; a decline for altered documents is co-signed by a second person; the reason sent to the applicant must be specific and principal. Separately, and on its own clock, the bank decides whether its suspicious-activity reporting thresholds are met. Where the loan was already made, the OCC expects a fraudulent loan to be charged off no later than 90 days from discovery.
Does a lender tell you it found a fake document?
It tells you the decision and the specific principal reason for it, because Regulation B requires that. It does not tell you about any report. The reporting rules prohibit a bank and its staff from disclosing a suspicious activity report “or any information that would reveal the existence of” one, expressly so that no person involved in a reported transaction learns it was reported.
Can a lender decline an application for a fake pay stub?
Yes — and the reason has to be stated specifically. A decline resting on “our internal standards” is insufficient under Regulation B, and disclosing that a credit report was used does not satisfy the requirement either. In many files the cleaner route is to decide on what is actually proved: where the bank deposits, the payroll response and the tax forms settle income between them, the disputed page need not carry the decision at all.
Does a lender report document fraud?
A national bank must file a suspicious activity report when it detects a known or suspected federal criminal violation involving $5,000 or more where it has a substantial basis for identifying a possible suspect, or $25,000 or more regardless of suspects, no later than 30 calendar days after initial detection — extendable by 30 more only where no suspect had been identified, and never beyond 60 days. The filing is confidential, and management must promptly notify the board or a designated committee.