TL;DR: A fake mortgage statement is a periodic statement for a closed-end consumer loan secured by a dwelling, either edited after the servicer produced it or generated to look like one, showing what is due and what remains. The FBI's 2025 Internet Crime Report logged 1,008,597 complaints from the public. That is a broader fraud figure, not a rate for mortgage statements. One visual template fails as a check, and so does a missing escrow balance, because servicers may modify the model form and Regulation Z does not require the escrow balance on the page.
What a Fake Mortgage Statement Actually Is
Regulation Z, 12 CFR 1026.41, requires the current servicer of a closed-end consumer credit transaction secured by a dwelling to send a periodic statement for each billing cycle. A creditor or assignee that does not currently own the loan or the servicing rights does not send it. One statement per billing cycle is the rule. Servicing transfers are ordinary, so the original lender may not be the sender.
Required content is a list of facts, not a picture of one statement. The page has to show amount due, due date, late fee, and the principal, interest, and escrow split of that payment, plus past due amounts, a payment breakdown, transaction activity, and the servicer's phone number on the front. Account information includes outstanding principal, the interest rate, the next rate change where one is coming, any prepayment penalty, and housing counselor information. Past 45 days delinquent, delinquency information goes on page one. The escrow account balance is not required. The payment can show an escrow portion while the escrow balance stays off the page.
The same section in the Code of Federal Regulations is the operative text. Form H-30 is a model the servicer may modify. A statement that does not match a sample screenshot can still meet 1026.41. A bank statement is a different document, covered in how to spot a fake bank statement. Cash offered as reserves is a different letter, covered in how to spot a fake proof of funds letter.
The upload arrives in two production classes. Edited-after-creation starts from a real servicer PDF or a portal download, then changes the principal, the amount due, the due date, the rate, or the servicer name. Generated-from-scratch builds a statement whose lines agree, including a plausible principal and a plausible past-due figure, with no servicer system underneath. FinCEN's September 9, 2024 analysis of check fraud tied to mail theft found that 44 percent of the checks were altered and then deposited, and 26 percent were used as templates for counterfeits. Those percentages describe checks. They illustrate the two classes, a genuine instrument changed after it existed and a new instrument built from a template, and they are not a rate for mortgage statements.
Tells That Still Work, and the Ones That Do Not
A callback to the current servicer still works, and only on a telephone number the reviewer looks up. Principal, amount due, due date, and interest rate are the figures to confirm. The number printed on the file is part of the document under test. A servicer that does not recognize the loan number, or that quotes a different principal or a different amount due, is the case. A match still leaves open whether those figures were edited onto a real statement after the servicer generated it.
One visual template fails. Servicers modify Form H-30, and the same loan can look different after a servicing transfer. A missing escrow balance fails as a tell, because the balance is not required. A servicer name that differs from the original lender fails as a tell, because the statement comes from the current servicer, and the former owner of the loan is not the party who must send it. The name to test is the current servicer, confirmed off the document, not the name on the note from origination.
The fields 1026.41 requires are a floor, not a brand match. Amount due, due date, the payment split, transaction activity, a phone number on the front, outstanding principal, and the rate should be findable. Delinquency information belongs on page one past 45 days. Missing those items is a reason to ask. Missing an escrow balance is not. A layout that includes every item can still be generated.
How Detection Actually Works
The file's story is that the current servicer of this dwelling-secured loan produced one statement for this billing cycle, and that the principal, amount due, due date, and rate are the figures that servicer would quote. Detection asks whether the bytes support that story.
Production method asks how the PDF was made. A servicer download, a later edit of that download, a photo of a mailed statement, and a generative pipeline do not share a path, even when the boxes follow Form H-30. Edited-after-creation leaves a real statement under a later save. Principal and amount due are the usual changes. Generated-from-scratch has no servicer export underneath, and the payment split adds up because it was composed to add up. The case note should name the class.
Timestamp trail asks whether creation and modification fit the billing cycle. A statement for a due date last month, downloaded from the servicer portal this week, is ordinary. A statement whose due date is next week, created in one session the night before upload, with no earlier servicer file, needs a story. The trail sits beside the servicer callback.
Issuer matching asks whether the named servicer is the current servicer, confirmed on a number the reviewer looks up. The original lender is the wrong party to call when servicing has transferred. A creditor that no longer owns the loan or the servicing rights is not the issuer of this statement. The loan number that servicer recognizes should tie to the borrower and the property in the application. A second statement from another servicer for that same cycle is a conflict.
Consistency checks the page against 1026.41 and against itself. Amount due should reflect the principal, interest, and escrow split the statement shows. Past due amounts, transaction activity, and outstanding principal should be able to sit in one history. The rate and any next change date should agree with the product the application claims. A generated statement produces that agreement by construction. Model artifacts are layout and wording that belong to no servicer's actual export. Recycled patterns are the same statement image, the same loan number, or the same transaction block on an unrelated borrower. One underwriter with one file will not see the repeat. The same production classes on other banking documents are covered in document fraud in banking.
What to Do with a Suspect File
Hold the file. Do not score it against a sample layout, an escrow balance, or a servicer name that differs from the original lender. Identify the current servicer from a source outside the PDF, and call a number from that source. Confirm principal, amount due, due date, and interest rate, and confirm the loan number belongs to this borrower and this property. Past 45 days delinquent, delinquency information should be on page one. Different figures from the servicer mean the PDF is not the current statement. Matching figures mean the loan may be real and the file may still have been edited after the servicer produced it.
Then read the file's own history. A portal download that matches the callback is a different object from a page whose principal was the last field to change. For a scored read of that history, check the file. The x-ray is production method, timestamps, issuer match, consistency, model artifacts, and recycled patterns. The servicer callback remains the outside check.
Where Sphinx Fits
Watchdoc scores the statement and shows the x-ray a reviewer can point to. Sphinx's published product figures put a correct verdict at 94.3 percent, at $0.45 per document. The Watchdoc playground is free for the first file. Run the principal and the amount due against the file's history, and against the current servicer, before the statement is treated as the loan.
Frequently Asked Questions
How can you tell if a mortgage statement is fake?
Confirm outstanding principal, amount due, due date, and interest rate with the current servicer, using a phone number you look up rather than the number on the file. Regulation Z requires one statement per billing cycle from that servicer, with a defined set of fields. A sample layout, a missing escrow balance, and a servicer name that differs from the original lender are weak tells. Competent fakes fail when those figures were edited after the servicer produced the PDF, or when the page was generated and the servicer has no such loan.
Why does the servicer on the statement differ from the lender?
12 CFR 1026.41 puts the periodic statement on the current servicer of a closed-end consumer loan secured by a dwelling. A creditor or assignee that does not currently own the loan or the servicing rights does not send it. Servicing transfers are ordinary. The name to confirm is the current servicer, not the lender that made the loan.
Does a missing escrow balance mean the statement is fake?
No. Regulation Z requires the amount due to show the principal, interest, and escrow split of the payment. It does not require the escrow account balance. Form H-30 may be modified, so a statement that omits the balance, or that does not match a model screenshot, can still be a real servicer statement. Confirm the required figures with the servicer.
Can you verify a mortgage statement by calling the number printed on it?
The number on the file is part of the document under test. Look up the current servicer and use a number from that lookup. Ask for principal, amount due, due date, and rate, and ask whether the loan number matches the borrower and the property. Agreement on those figures still leaves open an edit made after the servicer generated the file.
.png)
