How to verify pay stubs: a lender fraud-check workflow

A pay stub that adds up can still describe a job that does not exist. To verify pay stubs, check the original file, reconcile pay and deductions, then compare year-to-date totals across consecutive statements. Confirm employment and income through independent channels. A familiar payroll logo cannot do that for you.

We make that distinction at VerifyPDF too: a paystub checker can help assess a file, but it cannot turn an applicant’s upload into employer confirmation. Below, you’ll work through the payroll math and a $500 YTD gap, with an alternative for applicants who have no native PDF. The workflow is for US lenders.

How to verify pay stubs without confusing consistency with authenticity

What exactly have you verified? Consistent figures, a genuine document and current income are different findings. Calling all three “verified” hides gaps in the evidence. Keep them separate in your review:

1. Check whether the statement agrees with itself.

   Check the math, pay periods, employee details and total earnings to date. Correct numbers show that the figures agree, not who issued the file.

2. Look for support for the claimed source.

   Keep the submitted file and review how you received it and what forensic checks found. A named payroll provider gives you a source to check, not a confirmed issuer.

3. Get independent support for employment and income.

   Get the employer’s response with the required consent or use an approved verification channel. Check payment records where required. Matching files from the applicant are not an independent source.

At intake, record the employee name, employer, pay-period start and end, payment date and stated frequency. Before doing the math, check that the statement is complete and legible. A cropped deductions panel can leave you unable to resolve a suspected error.

Fannie Mae’s employment and income documentation standards require YTD earnings and enough information to calculate income, with the employer and source clearly identified. They also permit downloaded paystubs and specify a most-recent-paystub date relative to the initial application.

Those rules apply to covered Fannie Mae mortgages, not every US loan. Use your loan program’s requirements to decide which records to get and how recent they must be. Borrowing a mortgage rule without checking its scope is no shortcut.

An ADP logo is not independent income evidence

To spot a fake ADP pay stub, start with the checks you would apply to an unbranded statement. Fraudsters do not need access to an employer’s payroll system to put a familiar logo on a file. We would not give that logo any weight on its own.

Compare the employer and employee details across the application and consecutive statements. Check whether pay dates, types of earnings and deductions make sense. Do not assume every employer using the same provider must produce the same layout.

Ask for the statement downloaded directly from the payroll portal when available. Preserve that upload unchanged and use a working copy for notes or text extraction. Keep your own processing separate from the file’s earlier history.

What if the applicant only receives paper statements?

A scan is an evidence limitation, not a fraud finding. If paper payroll, access problems or accessibility needs prevent a native download, document an alternative. An automatic accusation is the wrong response.

• Request a complete, legible copy rather than a cropped image.
• Record why a native download is unavailable.
• Obtain employer-issued records directly through an approved channel, with appropriate authorization.
• Corroborate payment and employment using evidence your program accepts.

Our original-file submission guidance explains why printing and re-scanning can remove forensic signals. Mark checks that need the missing original structure as unavailable, not passed. Explain what other evidence filled the gap.

The format will vary. Your checks still need to hold up when it does.

Reconcile gross pay, deductions and the pay frequency

Start with pay for this period. The largest number on the page is not a shortcut to an annual salary. Separate gross earnings, employee deductions and net pay, then check how the statement defines each total. ADP’s pay-stub explanation distinguishes earnings before deductions from take-home pay and describes the hours and rates behind earnings lines.

Consider this hypothetical statement:

Here, $3,000 minus $750 equals $2,250. The deductions are illustrative, not a recommended withholding rate or a fraud threshold.

Add the individual deduction lines and compare them with the total. Do not subtract employer contributions as though the employee paid them or confuse taxable wages with gross earnings. If the statement includes reimbursements or adjustments, check how they enter the net-pay calculation.

For an hourly employee, check the earnings behind those totals: compare the stated hours and rates with the relevant earnings lines. Keep regular pay separate from overtime, bonuses and other categories.

Frequency matters just as much. For fixed base income, Fannie Mae’s base-income guidance uses semimonthly gross pay multiplied by two, biweekly pay multiplied by 26 and divided by 12 or weekly pay multiplied by 52 and divided by 12.

Under those methods, $3,000 semimonthly means $6,000 monthly; $3,000 biweekly means $6,500. “Twice a month” and “every two weeks” are not interchangeable.

These formulas calculate qualifying income, not the actual payroll calendar. Check YTD base earnings against the result. Assess variable hours, overtime and bonuses separately under your loan policy, rather than treating an unusually high payment as typical pay.

Use consecutive pay stubs to test YTD earnings

The most useful year-to-date (YTD) check compares like with like. Use consecutive statements from the same employer in the same calendar year. Confirm that they define gross earnings the same way and that no payments fall between them.

Suppose the previous statement shows $27,000 YTD gross. The current statement shows $3,000 current gross and $30,000 YTD gross.

Subtract the previous YTD total from the current one:

• Current YTD gross: $30,000.
• Less previous YTD gross: $27,000.
• Increase: $3,000, matching the current gross earnings.

Now change the current YTD figure to $30,500. The increase becomes $3,500, leaving $500 unexplained by this statement’s current gross.

You now have a specific amount to explain. It might be a separate bonus or payroll correction, but do not invent one for the applicant. Request the supporting statement or employer record and reconcile the extra payment.

Check chronology before calling the difference suspicious. Missing statements, a calendar-year reset or a change in which earnings a total includes can break a comparison without establishing fraud.

A low-risk result from a fake paystub detector leaves that $500 gap unresolved. And if the YTD sequence does reconcile, you still have to authenticate the files. Fraudsters can make several documents agree.

VerifyPDF’s lender solution adds document-forensics findings to loan review. Keep those findings alongside your earnings worksheet, with the $500 exception open until you have evidence that explains it.

Cross-reference deposits and confirm employment independently

Match payment evidence against net pay, not gross salary. In the example above, start with the $2,250 take-home amount and establish the payment method, destination and relevant dates.

If payroll records show $2,000 sent to checking and $250 to savings, request the documented allocation and the required payment evidence. A $2,000 credit leaves $250 unaccounted for. You need more than the applicant’s explanation to close that difference.

Do not assume a posting-date mismatch proves fraud. Check the payroll payment date and bank posting date. Ask payroll to document timing differences, corrections or other adjustments rather than guessing why they differ.

Even after the payments match, you need to establish who confirmed the job.

Find an official HR or payroll contact independently or use an approved employment-verification channel. Obtain appropriate authorization and send requests through controlled channels. In Fannie Mae’s blanket-authorization process, requests go directly to the institution and completed verification forms come directly from it. Keep the response and a record of its source. Do not request the applicant’s payroll password.

Fannie Mae’s employment-verification guidance emphasizes confirming continued employment and resolving changes or discrepancies. Despite the topic’s “verbal” label, its current guidance allows written responses, verification vendors and other reasonable, verifiable methods too.

Use the method and timing your loan program requires. A genuine pay stub can be out of date. It does not establish that the applicant is still employed today. Confirmation that someone works there does not, by itself, confirm the amount they earn.

Keep a documented fallback when an approved connection is unavailable, rather than treating connectivity as an applicant’s credibility test.

Treat PDF findings as review evidence, not a verdict

Document forensics answers questions the earnings worksheet cannot. Checks of PDF structure, layout and figures can flag issues worth a closer look, even when the math works.

We treat those findings as evidence to review, not a verdict. Adobe’s metadata-editing documentation shows that PDF metadata can be replaced or deleted. Do not treat a Creator or Producer field as independent confirmation of the issuer.

Before treating an editor name, font difference, timestamp or incremental update as suspicious, ask what handling could explain it. Request the original download or a documented explanation rather than inferring intent from the signal alone.

A clean forensic result is not proof of authenticity or current employment either. Record what the analysis found and what it could not assess. Then note which independent evidence supports the income claim.

Use distinct review outcomes:

• Mark the claim “supported for the required checks” when calculations reconcile and the required corroboration is complete.
• Use “more evidence needed” while an unexplained amount, missing period or unavailable check remains open.
• Escalate conflicting source evidence or a material unresolved discrepancy for specialist review.

Keep the original file, calculation worksheet, verification response and reasons for the decision together. Record who resolved each exception and what evidence changed the decision. A bare “passed” label tells the next reviewer too little.

This is also how you avoid turning every warning into an accusation. Our false-positive review workflow explains why a flag needs an evidence-based resolution.

We help assess the document itself. You still need payroll reconciliation and independent confirmation to support the income claim. Explore the interactive demo to see how forensic findings fit alongside those checks in your lending workflow.

If the $500 is still unexplained, the review is still open. However polished the pay stub looks.