SUSPICIOUS

invoice_total_inflated.pdf

invoice 1 page(s) PDF evidence score 0.63 (not a probability) sha256 043de46ebbf04b4d…

High-severity evidence of tampering (TL-LOGIC-002).

Where

page 1

#1 high TL-LOGIC-002 Invoice totals do not add up page 1 · logic · confidence 0.90

Subtotal 134,214.85, discounts 0.00, charges 0.00 and tax 22,816.52 give 157,031.37, but the total shows 162,031.37 (difference +5,000.00).

Evidence

{
  "expected": 157031.37,
  "stated": 162031.37
}

Detector	Layer	Status	Findings / reason
signatures	structure	skipped	document is not digitally signed
revisions	structure	ran	0
metadata	structure	ran	0
edit-markers	content	ran	0
fonts	content	ran	0
overlays	content	ran	0
alignment	geometry	ran	0
statement-logic	logic	skipped	document type is invoice, not a bank statement
invoice-logic	logic	ran	1
identifiers	logic	ran	0
jpeg-grid	image	skipped	no raster images to analyse
copy-move	image	skipped	no raster images to analyse

Findings are evidence for a human reviewer, not proof of fraud.
A document rebuilt from scratch in the issuer's own software leaves few structural traces.
Edits made before the PDF was generated (for example in a spreadsheet) cannot be detected from the file structure.

Generated by tamperlint 0.1.0.dev0 on 2026-09-28 06:47 UTC. Report schema 1.0. Findings are evidence for a human reviewer, not proof of fraud.