TL;DR: A fake certificate of incumbency is a company certification, either edited after a real certificate existed or generated as a new page, that named people hold named offices and often that their signatures are genuine. The FBI's Internet Crime Complaint Center reported 22,364 AI-related complaints for 2025 in an April 6, 2026 press release. That is a broader fraud figure, not a rate for this document. A seal or a notary stamp fails as a visual check, because genuine certificates and fabricated pages both carry them.
What a Fake Certificate of Incumbency Actually Is
A certificate of incumbency is a certification by the company, usually through its corporate secretary, that named people hold named offices and, on many forms, that the signatures beside those names are genuine. The company issues it. A secretary of state filing is a different document, and so is a certificate of existence.
Kentucky shows the split. The Secretary of State lists current officers, directors of nonprofits, and managers or members of LLCs, and states that the listing is not an ownership record. The business records division issues a certificate of existence, conclusive evidence that a domestic corporation or LLC exists. That certificate does not say who holds office. Standing and formation are a separate read, covered in how to spot a fake certificate of good standing.
Treasury FS Form 1014, revised October 2025, shows what this certification is asked to do. The form calls for original signatures, refuses stamped signatures, and refuses alterations. The signer must not be one of the incumbents listed. If the organization has a seal, the form expects it. If the organization has no seal, a bank certifying officer completes the certification. A commercial bank form is the bank's own document. The same separation runs through it: someone outside the named officers attests to the offices and, often, to the signatures.
The upload arrives in two production classes. Edited-after-creation starts from a real secretary certificate, a prior entity's form, or a bank blank, then changes a name, an office, or a date. Generated-from-scratch builds the certification paragraph, the officer table, and the seal together, so the page agrees with itself. FinCEN's September 9, 2024 analysis of check fraud tied to mail theft found that 44 percent of the checks were altered and then deposited, and 26 percent were used as templates for counterfeits. Those percentages describe checks. They illustrate the two classes, a genuine instrument changed after it existed and a new instrument built from a template, and they are not a rate for incumbency certificates.
Tells That Still Work, and the Ones That Do Not
The certifier still has to sit outside the list being certified. On FS Form 1014 the signer must not be an incumbent. On a bank form the secretary attests to the officers, and the point of the page collapses if the secretary is also the person the page empowers. Names that match the state's public officer list, where the state publishes one, still work. Kentucky publishes current officers from the annual report. A name the register does not list is a mismatch a seal cannot repair.
A seal fails as proof. A notary stamp fails as proof. Both appear on genuine certificates and on pages that were never certified. Treasury expects a seal on FS Form 1014 when the organization has one, so a missing seal on that particular form is a content problem, and a present seal on any other page proves nothing about the offices. A clean scan of a raised seal is still a picture of a stamp.
Where the state publishes officers, pull the list on the day of review and compare office by office. Where the state does not publish officers, the register cannot confirm the page, and the file's own history has to carry that part of the review. An operating agreement can name managers and who may sign, and that schedule is a different document, covered in how to spot a fake operating agreement.
How Detection Actually Works
The file's story is that a named certifier, on a named date, attested that these people hold these offices and that the signatures are genuine. Detection asks whether the bytes support that story. The six checks are classes of evidence on the file.
Production method asks how the page was made. A company or bank export, a later office-suite edit, a design tool, and a generative pipeline do not share a path, even when the headings match. Edited-after-creation leaves a genuine certificate under a later save. Generated-from-scratch has no earlier certificate underneath. The case note should name which class.
Timestamp trail asks whether creation and modification fit the certification date. A certificate dated last spring and first created the morning of the upload can be a scan of a paper original. A file whose last change is the officer table, saved after the rest of the page, reads as an edit of a finished certificate. Re-scans add noise, so dates alone do not settle the file.
Issuer matching asks who was in a position to issue this page. The issuer is the company, or a bank certifying officer when FS Form 1014 is used and the organization has no seal. The secretary of state is the wrong issuer for an incumbency certificate. Kentucky will confirm existence and will list current officers. Kentucky does not issue this certificate. Legal name still has to match the formation record. Officer names have to match the public list where one exists. A state search that returns the company does not verify the offices.
Consistency turns the comparison inward. The certifier is absent from the incumbent list. Offices in the table match the certification paragraph. Signature names match the people the paragraph names. A generated page produces that agreement by construction, so internal agreement is not authenticity. Disagreement inside the file is a fail. Model artifacts are traces a generated page leaves when the layout, the prose, and the seal do not come from that company's prior certificates or from the Treasury form. Recycled patterns are the same seal, paragraph, or signature image on an unrelated applicant. One reviewer with one file will not see the third copy. The same failure on statements and identity documents is the subject of document fraud in banking.
What to Do with a Suspect File
Hold the upload until the certifier and the names survive a comparison the applicant does not control. Read the certification block first. The signer should not be one of the incumbents. On FS Form 1014, a stamped signature or an alteration already sits outside the form. Then open the state register where officers are published and compare each name and title. Kentucky's list comes from the entity's reporting. Kentucky did not issue the incumbency certificate. A mismatch is the case. A match means the public list and the page agree on names, and any edit after creation is still open.
Compare the legal name to the formation filing so the certificate belongs to this entity. If the company is thin on other grounds, the officer page does not cure that. Shell company red flags are the separate read. When the text matches and the file still looks rewritten, ask whether the officer table changed after the rest of the page was produced. For a scored read of that history, check the file. The x-ray is production method, timestamps, issuer match, consistency, model artifacts, and recycled patterns. That read does not replace the state officer list.
Where Sphinx Fits
Watchdoc scores the certificate and shows the x-ray a reviewer can point to. Sphinx's published product figures put a correct verdict at 94.3 percent, at $0.45 per document. The Watchdoc playground is free for the first file. Run the officer table against the file's history, and against the public list, before those names are treated as the people who can sign.
Frequently Asked Questions
How can you tell if a certificate of incumbency is fake?
Compare the certifier and the named officers with the form's own rule and, where the state publishes officers, with that public list. The certifier should not be one of the incumbents. Visual defects still catch crude forgeries. Competent fakes fail when the officer table was edited after the certificate was created, the page was generated with no underlying certificate, or the same seal and paragraph show up on an unrelated company.
Is a certificate of incumbency the same as a certificate of existence?
A certificate of incumbency is the company's certification that named people hold named offices. A certificate of existence, such as the one Kentucky's Secretary of State issues, attests that the entity exists. Kentucky lists current officers and does not issue the incumbency certificate. A clean existence certificate leaves the offices untested, and a clean incumbency page leaves existence untested.
Who signs a certificate of incumbency?
On Treasury FS Form 1014, revised October 2025, the signer must not be one of the incumbents listed, signatures must be original, and stamped signatures and alterations are refused. If the organization has a seal, the form expects it. If the organization has no seal, a bank certifying officer certifies instead. A commercial bank's form is the bank's own, and the check that still works is the same separation: the certifier is not one of the people certified.
Does a corporate seal prove the named people hold office?
A seal does not prove the offices. Some genuine forms expect one, including FS Form 1014 when the organization has a seal, and a stamp image can sit on a page that was never certified. Confirm the names against the state's published officer list where one exists, and confirm that the certifier is outside the list of incumbents.
.png)
