Awareness Guide

Document Forgery Visual Guide

Annotated diagrams showing where Russian and Ukrainian passport forgeries fail — MRZ checksum errors, font inconsistencies, series anomalies, photo zone manipulation, and digital editing tells. From 27 years of active document verification casework.

By Michael Muinov, Founder and Lead Investigator · AllRussian.com ·

This guide covers surface-level indicators visible in passport scans. No guide, however detailed, substitutes for MVD database access (Russia) or EDDR registry verification (Ukraine). A scan that passes every visual check can still be a high-quality forgery built on a genuine cancelled document. For consequential decisions — visa applications, financial commitments, K-1 filings — commission a professional passport verification.
Russian passport
Russian international passport (zagranpassport) — data page anatomy

The biometric zagranpassport has been issued since 2006 (first generation) and 2009 (second generation with chip). Both use the same data page layout. Callouts show the fields most frequently targeted in forgeries.

A
Critical forgery indicator
D
Verify / cross-check
E
Authentic feature to confirm
Russian international passport data page — forgery indicator diagram SCHEMATIC ONLY — illustrative, not an actual document РОССИЙСКАЯ ФЕДЕРАЦИЯ RUSSIAN FEDERATION PHOTO ePassport chip SURNAME / ФАМИЛИЯ IVANOVA GIVEN NAME / ИМЯ EKATERINA NATIONALITY SEX DATE OF BIRTH RUS F 15 JAN 1990 PLACE OF BIRTH / МЕСТО РОЖДЕНИЯ MOSCOW / МОСКВА PASSPORT NO. EXPIRY DATE 79 1234567 15 JAN 2029 PERSONAL NO. (INN) 770123456789 P<RUSIVANOVA<<EKATERINA<<<<<<<<<<<<<<<<<<< 7912345674RUS9001158F2901156<<<<<<<<<<<<<<06 Machine Readable Zone (MRZ) A B C D E F
A
Photo zone cloning artifacts
Digital photo substitution leaves cloning artifacts — visible colour banding, pixel-level irregularities, or inconsistent compression at the boundary between the photo and the document background. Zoom to 200-400% in any image editor. The transition from photo to background should be completely clean on a genuine document.
B
Series number format
Russian zagranpassport series consists of two digits (region code) followed by a space and seven digits. Format: 79 1234567. Forgeries frequently use the wrong total digit count, wrong separator, or implausible region codes. Series 79 = Moscow; verify the region code matches the stated place of issue.
C
MRZ check digit mismatch
The most reliable single indicator. Each data field in the MRZ has a check digit computed by a specific algorithm. Forgers who edit names, dates, or passport numbers rarely recalculate the check digits. Use the MRZ calculator below to verify any scan you have received.
D
INN arithmetic verification
The Russian INN (12-digit individual taxpayer number) has a verifiable internal checksum structure. The 11th and 12th digits are computed from the first 10 using a weighted multiplication algorithm. A fabricated INN frequently fails this check. An INN that passes the arithmetic check can still be verified against the nalog.ru portal.
E
Expiry-to-issue date logic
Russian zagranpassports are issued for 10 years. The expiry date must be exactly 10 years from the issue date. If the visible data shows an expiry that is not exactly 10 years after the stated issue date, the document has been altered. This check fails in a large proportion of forgeries where only one date field was changed.
F
ePassport chip (biometric)
Second-generation zagranpassports (issued from 2009 onward) contain a biometric chip. First-generation (2006–2009) passports have no chip. If the stated issue date is post-2009 but no chip is visible in the scan, verify the issue date carefully.
Ukrainian passport
Ukrainian biometric passport (ID card format, post-2016) — data page anatomy

Ukraine migrated to biometric passports in 2015-2016. The current format is an ID card (85.6 × 54mm) with a chip, Cyrillic and Latin text, and a data page on the front face. The older booklet format remains valid but is being phased out. Forgeries of both types are documented in current casework.

A
Critical forgery indicator
D
Verify / cross-check
E
Authentic feature to confirm
Ukrainian biometric ID card — forgery indicator diagram SCHEMATIC ONLY — illustrative, not an actual document UKRAINE / УКРАЇНА IDENTITY CARD / ПОСВІДЧЕННЯ ОСОБИ PHOTO LAST NAME / ПРІЗВИЩЕ KOVALENKO FIRST NAME / ІМ'Я OLENA DATE OF BIRTH SEX 22.08.1992 F DOCUMENT NO. / НОМЕР ДОКУМЕНТА 000456789 EXPIRY / ДІЙСНИЙ ДО 22.08.2032 RNTRC (DRFO) / РНОКПП 2234567890 IDUKRKOVALENKO<<OLENA<<<<<<<<<<<<<<<<<<<<< A B C D E F
A
Photo zone — most common attack
Photo substitution is the most frequently documented forgery technique on Ukrainian ID cards. At high zoom, check for colour banding or compression artifacts at the photo boundary. UV fluorescence patterns at the photo edge are also disrupted by substitution, but require professional equipment.
B
Document number format
Post-2016 Ukrainian biometric ID cards use a 9-digit number with no letters. The older booklet format used a 2-letter + 6-digit format (e.g. AA123456). Mixing formats, using a booklet number on an ID card, or using a number with an implausible issue date are all documented forgery indicators.
C
MRZ check digit mismatch
The Ukrainian ID card uses a single MRZ line. Check digit mismatch confirms the document was edited after printing. Use the MRZ calculator in Diagram 3. Any mismatch between in-document check digits and computed values is a confirmed forgery indicator.
D
RNTRC (DRFO) tax number check
The Ukrainian individual tax number (RNTRC/DRFO) is a 10-digit number with a verifiable check digit in the last position. A fabricated DRFO frequently fails this arithmetic check. Numbers beginning with specific prefixes correspond to specific regions — a Kyiv resident with a Lviv-prefix DRFO warrants further investigation.
E
Expiry validity period logic
Ukrainian ID cards issued to persons under 25 at time of issue are valid for 4 years. Cards issued at age 25 or older are valid for 10 years. A card showing a 10-year validity for someone under 25 at issue has incorrect data — a frequent tell in forgeries that copy the expiry without verifying it against the date of birth.
F
Chip present on all post-2016 cards
All post-2016 Ukrainian biometric ID cards contain a chip. Chip absence on a card with an allegedly recent issue date is a suspect indicator. The chip cannot be read from a scan, but its physical presence (visible as a gold contact pad) can be confirmed visually on the front of the card.
MRZ checker
MRZ structure and check digit calculator

The Machine Readable Zone appears on every ICAO-compliant passport. Line 2 encodes the passport number, date of birth, and expiry date — each followed by a check digit. Paste a Line 2 string to verify the check digits.

MRZ Line 2 field structure for ICAO passport 7 9 1 2 3 4 5 6 7 Passport no. pos. 1–9 4 cd 1 RUS Nat. 11–13 9 0 0 1 1 5 Date of birth YYMMDD, 14–19 8 cd 2 F Sex 2 9 0 1 1 5 Expiry YYMMDD, 22–27 6 cd 3 <<<<<<<<<<<<<< Personal no. pos. 29–42 6 cd 4
Checkable field
Check digit (cd)
Filler / variable field
Check digit algorithm (ICAO Doc 9303) Weights repeat: 7, 3, 1, 7, 3, 1… for each character. A–Z = 10–35. 0–9 = face value. < = 0. Multiply each character value by its weight, sum all products, divide by 10 — the remainder is the check digit. A mismatch means the field was edited after the check digit was set. Example: passport no. 791234567 → cd=4  •  DOB 900115 → cd=8  •  Expiry 290115 → cd=6  •  composite → cd=6
MRZ Line 2 check digit verifier
Forgery types
The four forgery categories encountered in active casework

Not all forgeries are created equal. Understanding the category determines what checks are most likely to detect it.

1. Fully fabricated
Created entirely from scratch. Usually the lowest quality — series numbers are wrong, MRZ check digits fail, fonts are inconsistent.
Detectable by:
MRZ check digits, series format, font audit
2. Altered genuine
A real document with specific fields edited digitally — usually name, photo, or date of birth. MRZ fields often not recalculated.
Detectable by:
MRZ mismatch, photo zone artifacts, MVD check
3. Genuine, cancelled
An authentic passport that has been revoked, expired, or reported lost. Passes all visual checks including MRZ. Most dangerous type.
Detectable only by:
MVD database (Russia) or EDDR (Ukraine) query
4. Real person, fake claim
A genuine passport belonging to a real person who is not the person in the photo. Common in romance and advance-fee fraud.
Detectable only by:
Cross-referencing photo against civil registry records (professional)

Types 3 and 4 cannot be detected from the scan alone — they require database access.

Interactive checklist
Passport scan assessment checklist

Work through this checklist against any Russian or Ukrainian passport scan you have received. Mark each item as clear or flagged. A summary verdict appears when all items are assessed.

Series number format correct Russian zagranpassport: 2 digits + space + 7 digits. Ukrainian ID card: 9 digits only (no letters). Does the number match the expected format for the document type and stated year of issue?
MRZ check digits verified Use the MRZ calculator above. Paste Line 2 and confirm check digits 10, 20, 28, and the composite check are all correct. Any mismatch = edited document.
Name field matches MRZ Line 1 The surname and given name in the readable fields must exactly match the format in MRZ Line 1. Discrepancies indicate one or the other has been edited without updating both.
Photo zone clean — no boundary artifacts Zoom to 200-400% in any image editor. The boundary between the photo and the document background should be completely clean. Colour banding, pixelation, compression inconsistency, or a visible rectangular edge are all signs of photo substitution.
Font and character weight consistent across all data fields Zoom in on the name, date of birth, and passport number fields. The typeface, character weight, and spacing should be identical across all fields. Any variation indicates a field has been individually edited.
Expiry date logic correct Russian zagranpassport: expiry must be exactly 10 years from issue date. Ukrainian ID card: expiry is 4 years if issued under age 25, 10 years if issued at 25 or older. Verify against stated dates of birth and issue.
INN / RNTRC arithmetic check passed Russian INN: 12-digit number with verifiable checksum structure. Ukrainian RNTRC: 10-digit number with check digit. Both can be partially validated arithmetically. Fabricated tax numbers frequently fail this check.
Background pattern visible and consistent Zoom to 150-200%. The guilloché security background pattern should be continuous, fine, and consistent across the entire data page. Patches of solid colour, broken lines, or simplified pattern indicate manipulation.
Person in photo matches description and photo in other communications Run a reverse image search on the passport photo using Google Images and Yandex. If the photo appears elsewhere under a different name, the document is fraudulent. Compare the passport photo against any other photos provided by the contact.

Surface checks are not enough for consequential decisions

The forgery categories that are invisible to visual inspection — genuine cancelled documents and real-person identity theft — require database access. AllRussian accesses the Russian MVD passport registry and Ukrainian EDDR to confirm whether a passport number was issued to the person shown, whether the document is currently valid, and whether the photo matches civil registry records. Professional report delivered in 3–5 business days.

Frequently asked questions

Can I verify a Russian or Ukrainian passport scan myself?

You can check several surface indicators: MRZ check digit arithmetic, series number format, basic font consistency, expiry date logic, and reverse image search of the photo. These checks eliminate the most obvious forgeries. They cannot confirm authenticity against the MVD or EDDR database. A scan that passes all visual checks can still be a high-quality forgery built on a genuine cancelled document.

What is the MRZ and why does it matter for forgery detection?

The Machine Readable Zone is the two rows of characters at the bottom of the data page. Every data field has a check digit computed by a specific algorithm. Forgers who edit the readable fields — name, date of birth, passport number — frequently forget to recalculate the check digits, producing a detectable mismatch. This is one of the most reliable single indicators of a forged scan. Use the calculator on this page to verify any string you have received.

What makes Russian and Ukrainian passports particularly common in identity fraud?

Both countries have a wide valid format space (many series numbers, multiple document generations) that is difficult for non-specialists to verify from memory. Russian Cyrillic text is additionally opaque to non-Russian-literate recipients, concealing errors obvious to native speakers. And post-2022, reduced physical document flow between Russia/Ukraine and Western countries has made recipients less experienced with genuine documents and therefore less likely to notice inconsistencies.

What do professional document verifiers check that consumer tools miss?

Professional verification accesses the MVD database (Russia) or EDDR registry (Ukraine) to confirm the passport number was issued to a real person, is currently valid, and has not been reported lost or cancelled. Cross-referencing the photo against civil registry records identifies the "real person, fake claim" category that passes all surface checks. These two checks are definitively unavailable from a scan alone.

I received a document with an address in a region of Ukraine that was occupied after 2022. Can it be verified?

Records from occupied territories — parts of Donetsk, Luhansk, Zaporizhzhia, Kherson, and Crimea — are partially inaccessible through standard Ukrainian civil registry channels. AllRussian handles these cases through alternative verification pathways assessed individually. Write to allrussian@allrussian.com with the document details before ordering.

Related resources

More on identity verification and document fraud

Service

Passport Research

Professional verification of Russian and Ukrainian passports against MVD and EDDR registries.

 Awareness guide

Scam Script Library

How documents are used to justify financial requests — week-by-week fraud script examples.

 K-1 guide

K-1 Visa Background Check Guide

Why USCIS does not check the fiancée's passport authenticity and what you need to do instead.

 Free tool

Red Flag Decoder

Paste any message or describe a situation for instant fraud pattern analysis.

 Case study

The Perfect Application

Salary slips, references, ID — all fabricated. How the forgery was identified.

 K-1 / ZAGS

Apostille and Marriage Registration Verification

ZAGS civil registry access, apostille scope, and occupied-territory documentation gaps.

Have a passport scan you need verified against the official registry?

Order Passport Verification