SUSPICIOUS

statement_edited_flattened.pdf

statement 1 page(s) PDF evidence score 0.59 (not a probability) sha256 52bf14fd73978c46…

Independent content and geometry evidence points to editing after the document was produced.

Where

page 1

Findings (3 · 33 locations)

#1 medium TL-OVL-001 Filled shape covers text 15 places page 1 · content · confidence 0.85

On page 1, the text '13,782.06' is covered by a filled shape, and '1,378.21' is drawn on top of it.

14 more place(s) with the same finding

On page 1, the text '15,931.14' is covered by a filled shape, and '28,334.99' is drawn on top of it.
On page 1, the text '9,610.39' is covered by a filled shape, and '22,014.24' is drawn on top of it.
On page 1, the text '66,670.65' is covered by a filled shape, and '79,074.50' is drawn on top of it.
On page 1, the text '50,059.58' is covered by a filled shape, and '62,463.43' is drawn on top of it.
On page 1, the text '109,615.91' is covered by a filled shape, and '122,019.76' is drawn on top of it.
On page 1, the text '93,479.89' is covered by a filled shape, and '105,883.74' is drawn on top of it.
On page 1, the text '85,795.28' is covered by a filled shape, and '98,199.13' is drawn on top of it.
On page 1, the text '75,156.97' is covered by a filled shape, and '87,560.82' is drawn on top of it.
On page 1, the text '65,987.65' is covered by a filled shape, and '78,391.50' is drawn on top of it.
On page 1, the text '57,265.60' is covered by a filled shape, and '69,669.45' is drawn on top of it.
On page 1, the text '54,027.42' is covered by a filled shape, and '66,431.27' is drawn on top of it.
On page 1, the text '40,028.72' is covered by a filled shape, and '52,432.57' is drawn on top of it.
On page 1, the text '80,022.31' is covered by a filled shape, and '92,426.16' is drawn on top of it.
On page 1, the text '80,022.31' is covered by a filled shape, and '92,426.16' is drawn on top of it.

Evidence

{
  "hidden_by": "shape",
  "hidden_text": "13,782.06",
  "visible_text": "1,378.21"
}

#2 medium TL-GEO-002 Inconsistent typeface or size in a column of values 14 places page 1 · geometry · confidence 0.75

On page 1, the value '1,378.21' is set in ArialMT while 11 other values in its column use BitstreamVeraSans-Roman, the font of the rest of the page.

13 more place(s) with the same finding

On page 1, the value '28,334.99' is set in ArialMT while 3 other values in its column use BitstreamVeraSans-Roman, the font of the rest of the page.
On page 1, the value '22,014.24' is set in ArialMT while 3 other values in its column use BitstreamVeraSans-Roman, the font of the rest of the page.
On page 1, the value '79,074.50' is set in ArialMT while 3 other values in its column use BitstreamVeraSans-Roman, the font of the rest of the page.
On page 1, the value '62,463.43' is set in ArialMT while 3 other values in its column use BitstreamVeraSans-Roman, the font of the rest of the page.
On page 1, the value '122,019.76' is set in ArialMT while 3 other values in its column use BitstreamVeraSans-Roman, the font of the rest of the page.
On page 1, the value '105,883.74' is set in ArialMT while 3 other values in its column use BitstreamVeraSans-Roman, the font of the rest of the page.
On page 1, the value '98,199.13' is set in ArialMT while 3 other values in its column use BitstreamVeraSans-Roman, the font of the rest of the page.
On page 1, the value '87,560.82' is set in ArialMT while 3 other values in its column use BitstreamVeraSans-Roman, the font of the rest of the page.
On page 1, the value '78,391.50' is set in ArialMT while 3 other values in its column use BitstreamVeraSans-Roman, the font of the rest of the page.
On page 1, the value '69,669.45' is set in ArialMT while 3 other values in its column use BitstreamVeraSans-Roman, the font of the rest of the page.
On page 1, the value '66,431.27' is set in ArialMT while 3 other values in its column use BitstreamVeraSans-Roman, the font of the rest of the page.
On page 1, the value '52,432.57' is set in ArialMT while 3 other values in its column use BitstreamVeraSans-Roman, the font of the rest of the page.
On page 1, the value '92,426.16' is set in ArialMT while 3 other values in its column use BitstreamVeraSans-Roman, the font of the rest of the page.

Evidence

{
  "column_font": "bitstreamverasans",
  "font": "ArialMT",
  "text": "1,378.21"
}

#3 medium TL-GEO-001 Amount out of line with its row 4 places page 1 · geometry · confidence 0.61

On page 1, the value '1,378.21' sits 1.0 pt above the baseline shared by the other words in its row.

3 more place(s) with the same finding

On page 1, the value '122,019.76' sits 1.0 pt above the baseline shared by the other words in its row.
On page 1, the value '105,883.74' sits 1.0 pt above the baseline shared by the other words in its row.
On page 1, the value '92,426.16' sits 1.0 pt above the baseline shared by the other words in its row.

Evidence

{
  "deviation_pt": -1.0,
  "text": "1,378.21"
}

Checks

Detector	Layer	Status	Findings / reason
signatures	structure	skipped	document is not digitally signed
revisions	structure	ran	0
metadata	structure	ran	0
edit-markers	content	ran	0
fonts	content	ran	0
overlays	content	ran	15
alignment	geometry	ran	18
statement-logic	logic	ran	0
invoice-logic	logic	skipped	document type is statement, not an invoice
identifiers	logic	ran	0
jpeg-grid	image	skipped	no raster images to analyse
copy-move	image	skipped	no raster images to analyse

Read this before acting

Findings are evidence for a human reviewer, not proof of fraud.
A document rebuilt from scratch in the issuer's own software leaves few structural traces.
Edits made before the PDF was generated (for example in a spreadsheet) cannot be detected from the file structure.

Generated by tamperlint 0.1.0.dev0 on 2026-09-28 06:47 UTC. Report schema 1.0. Findings are evidence for a human reviewer, not proof of fraud.