How to Detect Fake IDs in the US: Red Flags, State-by-State Security Features, and Verification Tools for 2027

What Is a Fake ID? Definition and Types

A fake ID is any identification document that misrepresents the holder's identity, age, or personal details. This includes altered genuine IDs, documents belonging to another person (borrowed IDs), entirely forged documents, and  increasingly  AI-generated synthetic documents that have never existed as genuine originals. Fake IDs are used to access age-restricted venues and products, bypass identity verification checks, commit fraud, and evade AML and KYC requirements.

Not all fake IDs are the same, and this distinction matters significantly for detection. Understanding which type of fake ID is most likely to be presented in your specific context determines the most effective detection strategy.

The borrowed ID is the most frequently underestimated type. A 2024 survey of U.S. adults aged 18–25 found that 45% knew someone who had successfully used a fake ID. Because a real ID can be borrowed, verifying the holder’s face against the ID photo, ideally with liveness detection, is an important control for detecting impersonation and spoofing..

Fake ID Laws in the US: What Businesses and Individuals Need to Know

Under 18 U.S.C. § 1028 (the federal identity fraud statute), using, possessing, producing, or transferring a fraudulent identification document is a federal criminal offense. Penalties range from fines up to 15 years' imprisonment for production or trafficking of fraudulent IDs, with enhanced penalties where the fraud facilitated terrorism, drug trafficking, or other federal crimes.

For businesses, the legal exposure operates on two separate tracks that compliance officers and risk managers must understand clearly.

The distinction between a bar accepting a fake ID and a bank accepting one is not just a matter of scale; it is a different regulatory universe. A bank or fintech that onboards a customer using a fraudulent ID has committed a Customer Identification Program (CIP) failure under the Bank Secrecy Act, which carries potential fines in the millions of dollars, mandatory remediation, and personal liability for responsible officers. This article addresses both threat profiles, age verification fraud and identity fraud for financial crime, because they require different detection strategies.

Physical Red Flags: How to Tell If an ID Is Fake by Visual Inspection

The most reliable visual red flags for a fake ID are inconsistent fonts or font sizes within the same field; holograms that are flat, dull, or in the wrong position; photo substitution visible as a raised edge or slight color mismatch; lamination that peels, bubbles, or feels thinner than a genuine card; and a PDF417 barcode that scans as blank or returns data inconsistent with the printed information. No single indicator is definitive; multiple flags together warrant escalation.

Manual inspection remains an important first-line check. Trained staff who know what a genuine ID for their most common customer demographics looks like can catch obvious fakes without any technology. The following red flags are the most reliable indicators of a fraudulent document.

1. Font and Typography Inconsistencies

Every US state's driver's license uses a specific, government-mandated typeface for each data field. Genuine IDs produced by state DMVs use precision printing equipment that produces perfectly consistent character spacing, font weight, and baseline alignment. On altered or poorly forged IDs, look for characters that vary in size within the same data field; different font weights on the name versus the date of birth; spacing that appears stretched or compressed; and text that appears digitally printed rather than laser-engraved. The American Association of Motor Vehicle Administrators (AAMVA) sets baseline design standards, though each state adds its own specifications.

2. Hologram and Optical Variable Device (OVD) Problems

Every state-issued driver's license includes holographic overlaminates or optical variable device (OVD) elements that shift color, reveal hidden images, or display different patterns when the card is tilted. On a genuine ID, holograms are crisp, precisely positioned, and integrated into the card's surface. On fakes, holograms are often missing entirely, replaced by a reflective sticker that does not shift correctly, placed in the wrong position relative to the photo or data fields, or visible as a separate element that sits on top of rather than within the card surface.

3. Photo Issues

Photo substitution is one of the oldest techniques for creating a borrowed ID that can pass a visual check. The original photo is replaced with the user's own photo while retaining the genuine document's security features. Signs of photo substitution: a slight ridge or raised edge around the photo area; a color temperature mismatch between the photo and the card's background; a different laminate finish over the photo versus the rest of the card; and on cards with integrated photos (laser-engraved rather than printed), an inconsistency in the laser engraving depth.

4. Card Thickness, Edge Quality, and Feel

Genuine US driver's licenses are produced on Teslin or polycarbonate card stock that has a specific weight, rigidity, and texture. Counterfeit cards produced on standard PVC card printers feel lighter, more flexible, and slightly thinner than the genuine article. Run a thumb along the card's edges; genuine IDs have smooth, precisely cut edges with no rough patches. Check corners for sharpness: genuine state IDs have very slightly rounded corners produced by precision cutting equipment.

5. Microprint and Fine-Detail Security Features

Many state IDs incorporate microprinting text so small it is invisible to the naked eye but readable under magnification. Counterfeit IDs either omit microprinting entirely or reproduce it as a blurred line. Similarly, fine-line background patterns, or guilloche patterns used as anti-counterfeiting features in the card background, should be perfectly crisp on a genuine ID. On counterfeits, these patterns appear slightly blurred or are replaced with a solid color.

6. UV and Blacklight Inspection

This is one of the most effective quick-detection tools available. Under ultraviolet (UV) light, genuine IDs reveal security features that are invisible in normal light: fluorescent fibers embedded in the card substrate, state-specific UV-reactive images (California's state bear, for example, appears under UV), and invisible ink markings that confirm specific data fields. Counterfeiters frequently miss or incorrectly reproduce UV security features because they require specialized inks and substrates. A UV light costing under $20 allows any member of staff to check for these features in seconds.

State-by-State Security Features: What to Look for in the 10 Most Counterfeited States

Each US state incorporates unique security features into its driver's licenses beyond the AAMVA baseline. Knowing the specific features of the IDs most commonly presented or most commonly faked in your market is essential for effective manual inspection. Fake ID rates by state: Texas, South Carolina, and Arizona consistently rank among the highest-volume fake ID states. The table below covers the ten most frequently counterfeited or presented state IDs and their key distinguishing security features.

Note: Full official security feature specifications for each state are restricted by state DMVs for security reasons. For complete, current card design templates for verification purposes, businesses should reference AAMVA's official driver's license design standards and use automated verification tools that maintain live, updated templates against which presented IDs are compared.

The PDF417 Barcode: The Most Reliable Quick Check

The PDF417 barcode on the back of every US driver's license encodes the holder's personal data in a format standardized by AAMVA. Scanning the barcode and comparing the encoded data against the printed information on the front of the card is one of the most reliable quick-detection methods available. On a genuine ID, the barcode data matches the printed data exactly. On an altered ID, discrepancies between the barcode data (which reflects the original document) and the altered printed fields reveal the tampering immediately. On a fully synthetic fake ID, the barcode may be blank, absent, or encode random data.

The AAMVA barcode standard for driver's licenses specifies exactly which data fields are encoded in the PDF417 barcode on every US state ID. The encoded fields include the license number, full name, date of birth, address, gender, height, eye color, and issue and expiry dates. A barcode scanner or smartphone app capable of decoding PDF417 barcodes can perform this check in under 5 seconds.

The barcode check has one significant limitation: sophisticated AI-generated fake IDs can now produce functional PDF417 barcodes that encode plausible data matching the printed fields. The barcode scan confirms internal consistency but cannot confirm that the identity itself is real. That requires cross-referencing the encoded data against a government identity database,  which is why database verification is the most robust detection method for regulated institutions.

Fake ID vs Real ID: How to Tell the Difference

Beyond security features, there are observable differences in the overall production quality of a genuine versus counterfeit ID that staff can learn to recognize. This is not a substitute for tool-based detection but serves as a useful mental framework for first-line staff.

Detection Tools: What Businesses Should Use and When

No single detection tool catches every type of fake ID. The most effective approach is layered, combining physical inspection, tool-based checks, and, where required by regulation, database verification and biometric matching. The right combination depends on the business type, the volume of IDs checked, and the nature of the compliance risk.

1. UV Light Scanners

A UV light is the most cost-effective detection tool for any business handling physical IDs. It reveals state-specific UV security features that counterfeiters consistently fail to replicate accurately because they require specialized fluorescent inks and card substrates. UV scanners suitable for commercial use are available for under $30 and require no software or connectivity. Recommended for: bars, liquor retailers, age-gated venues, and any business conducting in-person ID checks at low-to-medium volume.

2. ID Document Scanners

Dedicated ID scanners extract and validate data from the card's magnetic stripe, PDF417 barcode, and OCR zones. Higher-end scanners also check for UV security features automatically and compare the card against templates of genuine state IDs. These devices are suitable for medium-to-high volume in-person ID verification at airport check-in counters, casino entrances, and high-volume venue doors. Key evaluation criteria when selecting an ID scanner: coverage of all 50 states plus DC; real-time template updates; barcode validation against AAMVA standards; UV and IR imaging capability; and whether the device integrates with your existing access control or POS system. AAMVA's DL/ID Card Design Standard is the benchmark reference for template coverage.

3. Mobile Verification Apps

Smartphone-based ID verification apps use the device camera to capture and analyze ID images, performing OCR data extraction and barcode validation. Some apps incorporate basic liveness detection to confirm the person presenting the ID matches the photo. Mobile apps are appropriate for lower-volume use cases and remote age verification (e.g., online alcohol delivery). They are not suitable as a sole detection method for regulated KYC compliance; they lack the forensic depth required to catch AI-generated synthetic IDs.

4. AI-Powered Document Verification Platforms

For regulated institutions, banks, fintechs, crypto platforms, and any business conducting KYC onboarding remotely, AI-powered document verification is the required standard. These platforms use multi-layer analysis: OCR for data extraction, template matching against a live database of genuine state ID designs, font and typography analysis at the pixel level, security feature detection including UV, IR, and hologram simulation, metadata and MRZ integrity checking, and biometric face matching with certified liveness detection to prevent spoofing by photo, video, or AI-generated deepfake.

Youverify's identity verification platform combines all of these layers in a single API-connected workflow, delivering a pass/fail decision with a full audit trail for each verification. For businesses operating in both African markets and the US, the platform provides document coverage across both geographic contexts, critical for institutions serving diaspora communities or cross-border customers.

5. Non-Document Verification (Database Verification)

The most effective method for defeating synthetic ID fraud is to bypass the document entirely. Non-document verification, also called eKYC or database KYC, verifies a person's identity by querying authoritative government databases directly. In the US, this includes Social Security Administration (SSA) number verification, credit bureau identity data (Experian, Equifax, TransUnion), and state DMV database lookups where available through regulated data providers. Because a synthetic AI-generated ID does not correspond to a real person in these databases, the database check catches what a document check cannot. FinCEN's Customer Identification Program rules permit the use of non-documentary verification methods for banks and regulated institutions.

INTERESTING READ: What is the Best Identity Verification Service in the US?

The AI Fake ID Problem: What Has Changed for 2027

The fake ID threat in 2027 is categorically different from 2022. AI fake ID  tools capable of generating photorealistic fake IDs complete with correct fonts, layouts, barcode structures, and even simulated holographic elements are now accessible without specialist technical knowledge. 

Three specific shifts that compliance and fraud prevention teams must understand:

1. Industrialization of fake ID production: AI tools allow fraudsters to generate multiple variations of the same fake ID in minutes, flooding verification queues. A single fraudster can now attempt verification hundreds of times with different synthetic identities in a single day, volumes that were practically impossible with manual document forgery.

2. Functional barcode replication: Early AI-generated fake IDs had blank or non-functional barcodes that any scanner would immediately flag. Current tools can generate functional PDF417 barcodes encoding plausible data consistent with the printed fields. Barcode scanning alone is no longer sufficient to catch sophisticated AI-generated fakes.

3. Combined synthetic identity and deepfake attacks: The most sophisticated attacks pair an AI-generated ID with a deepfake video or image for the liveness check, creating a fully synthetic onboarding attempt where both the document and the biometric check are fabricated. The only reliable defence is liveness detection certified to iBeta Level 2 Presentation Attack Detection (PAD) standards, which tests detection systems against a comprehensive range of known attack types.

Sector-Specific Fake ID Detection: What Different Businesses Must Do

1. Bars, Restaurants, and Alcohol Retailers

The most common fake ID scenario in the hospitality and alcohol sector is the borrowed ID, a genuine ID belonging to a friend or sibling who is over 21. Physical inspection of security features catches forged IDs but not borrowed ones. The most effective tool for this sector is a combination of UV scanner (catches forged features) and biometric face matching (catches borrowed IDs by comparing the presenter's face to the ID photo in real time). Some states, including California and Texas, have clear-cut 'responsible vendor' programs that offer liability protection to businesses that follow specified ID-checking procedures.

2. Banks and Financial Institutions

For banks, accepting a fake ID during customer onboarding is a Bank Secrecy Act (BSA) and Customer Identification Program (CIP) failure, not just an operational error. The FinCEN CIP rule (31 CFR § 1020.220) requires banks to collect and verify specific identity information for every new account holder. Verification must use documentary or non-documentary methods sufficient to form a reasonable belief that the institution knows the customer's true identity. AI-powered document verification with liveness detection and database cross-reference is the current industry standard for meeting this requirement in digital onboarding environments.

3. Fintechs, Neobanks, and Payment Platforms

Fintechs face the highest concentration of AI-generated fake ID attempts because they operate entirely in the digital channel; there is no physical ID presented to a human for inspection. The entire verification workflow relies on technology. This makes them the primary target for synthetic ID fraud and requires the most sophisticated detection stack: AI-powered document forensics, certified liveness detection, database cross-reference, and device intelligence checks that flag suspicious device or network behavior consistent with fraud ring operations.

4. iGaming and Online Casinos

Age verification and AML identity verification overlap significantly in the gaming sector. A player who is under 21 using a borrowed ID presents an age verification violation; a player using a synthetic identity to open multiple accounts presents an AML and fraud risk. The AAMVA standards for ID verification apply to age checks; FinCEN's AML rules apply to the identity verification layer for platforms that meet the threshold for money services business registration. Effective detection requires age verification and KYC verification integrated in the same onboarding workflow.

How to Train Staff to Detect Fake IDs: A Practical Framework

Technology handles high-volume automated verification. But for businesses conducting in-person ID checks, bars, retailers, hotel front desks, and car rental counters, staff training is the critical first line of defence. The following framework covers the essential elements of an effective fake ID training program.

1. State-specific familiarization: Train staff on the specific security features of the IDs most commonly presented by your customer demographic. A college-town bar in Texas will see mostly Texas, Oklahoma, and Louisiana IDs. A border-city venue may see more out-of-state and international IDs. Staff should be able to identify the UV features, hologram position, and perforation pattern of the top three to five IDs they encounter most frequently.

2. The bend test and feel test: Train staff to hold the card firmly and apply slight pressure across the center. Genuine polycarbonate and Teslin IDs are firm and spring back; cheaper counterfeit PVC cards flex more easily. Train staff to note card weight, edge smoothness, and corner precision as secondary indicators.

3. Barcode scanning as standard practice: For any business using a scanner, establish a protocol where the barcode is scanned for every ID presented, not just suspicious ones. Selective scanning creates social pressure that fraudsters exploit. Consistent scanning makes the check neutral and impersonal.

4. Face-to-photo comparison with structured criteria: Train staff to compare specific facial features rather than making a general impression judgment. The distance between eyes, the shape of the nose, and the jaw line are harder to modify than overall appearance, which is affected by lighting, age, and styling. Give staff a three-point checklist: eyes, nose, and jaw. All three must match.

5. Escalation protocol: Train staff not to confiscate IDs (this can create legal liability), not to interrogate customers, and not to make final decisions alone when uncertain. The protocol should be the following: flag the ID, escalate to a manager or supervisor, use the tool if available, and refuse service without explanation where uncertain. Documenting refusals protects the business in any subsequent regulatory review.

6. Refresher training on new fraud methods: AI-generated fake IDs in 2025 look different from counterfeit IDs in 2022. Staff training must be updated at minimum annually, with specific coverage of emerging fraud methods, including AI-generated documents, deepfake liveness spoofing, and new state ID design updates that produce a wave of unfamiliar-looking genuine IDs that staff may incorrectly flag.

People Also Ask

1. How can you tell if an ID is fake without a scanner?

Without a scanner, check four things: hold the card under UV light and look for state-specific security imagery; apply slight pressure to test card rigidity  genuine IDs are firm; check the hologram by tilting the card  it should shift colours and reveal state imagery; and examine the photo edge for any raised surface or colour mismatch indicating photo substitution. Compare the font size and weight in every data field for consistency. These checks take under 30 seconds and catch the majority of physically forged IDs. They do not catch borrowed IDs or sophisticated AI-generated documents.

2. What states have the most fake IDs?

Texas, South Carolina, and Arizona consistently rank among the highest-volume fake ID states, driven by large university populations and high demand for age-restricted products and venues. California and New York IDs are also heavily counterfeited due to their large populations and the widespread recognition of their design, which makes counterfeits easier to pass with staff unfamiliar with specific security features. Note: These rankings reflect the origin state of the ID, not necessarily the state where fake IDs are most used.

3. Is it illegal for a business to accept a fake ID?

Knowingly accepting a fake ID is illegal under both state and federal law in most circumstances. For alcohol retailers and age-gated venues, most states impose civil liability and licence consequences for serving minors regardless of whether the retailer 'knew' the ID was fake; the standard is whether reasonable verification was conducted. For banks and regulated institutions, accepting a fake ID in the onboarding process is a KYC and Bank Secrecy Act violation regardless of intent. Maintaining documented, systematic ID verification procedures provides a legal defence  inconsistent or absent verification procedures do not.

4. What is a REAL ID and how does it affect fake ID detection?

The REAL ID Act of 2005 established minimum security standards for state-issued driver's licences and ID cards accepted for federal purposes, including boarding domestic flights and accessing federal facilities. REAL ID-compliant state IDs include a gold or black star in the upper right corner. All US states now issue REAL ID-compliant cards alongside (in many cases) non-compliant alternatives. For ID verification purposes, REAL ID compliance indicates the card meets a minimum federal security standard, but it does not guarantee the specific card presented is genuine; counterfeiting of REAL ID-compliant cards remains a documented fraud method.

Conclusion

Fake ID detection in 2027 requires a clear-eyed assessment of which threats actually apply to your business. A bank or fintech needs AI-powered document forensics, certified liveness detection, and database cross-references to catch synthetic identities and AI-generated documents. These are different threat models that require different solutions, and treating them as the same problem leads to systematic gaps.

The regulatory stakes reinforce this point. Banks face federal AML enforcement under the Bank Secrecy Act. Fintechs and crypto platforms face both. The cost of a systematic detection failure across fines, remediation, and reputational damage will always exceed the cost of the right verification tools, implemented before the examination finds the gap.
 

For financial institutions and regulated businesses operating digitally, Youverify's identity verification platform provides AI-powered document forensics, certified liveness detection, and database verification in a single workflow built to catch altered IDs, synthetic documents, deepfake liveness attacks, and borrowed IDs alike. For institutions serving both US and African markets, the platform's multi-market coverage ensures consistent detection standards across geographies.
 

Take the next step. Book a free demo today to see how businesses are detecting fake IDs from manual red flags to AI-generated synthetic documents with a single, auditable verification workflow.

About the Author

Victoria Okere is a writer at Youverify with expertise in identity verification, fraud prevention, and AML/KYC regulatory frameworks. She covers document fraud detection, digital identity verification technology, and compliance requirements for regulated institutions across global and African markets.