Counter Fraud

Classroom Online

A large part of our interactions with companies is now conducted online. Customers expect to be able to set up accounts, pay bills, and request assistance, all without having to be present themselves or bring in hard copies of their identification.

As such, it is becoming increasingly common for companies to ask for digital copies, photographs of identity documents and similar to try to ascertain the true identity of the customer. Whilst this is more convenient for the customer, digital documents are much more easily tampered with, copied or faked than hard copies – creating a greater risk of application fraud. The Digital Document Fraud course was set up to help mitigate those risks by teaching ways to detect tampering with documents and emails.

What the training covers


Digital Document Fraud Online

This online course involves both a theory and a practical element, to give students the chance to practice their skills on tampered documents. It also involves a final knowledge check and a written assessment, with individual feedback.
The main elements this course covers are:

  • Methodologies to detect if photos/image files have been manipulated.
  • Methodologies to detect if document files such as PDF/word files have been tampered with.
  • A close look at what extra information (metadata) we can pull out of those files that may give us clues to who the sender is, or any anomalies.
  • As emails are the primary methodology for sending these documents in, the course teaches methods in which emails themselves can be assessed for anomalies which might point to fraudulent activity.
  • How to put together a professional report on the above areas.

This course can be taken at any time and there are no set enrolment or completion dates.

What the training covers


Digital Document Fraud Classroom

  • Have an understanding of metadata and how it can hold useful information
  • Technically and visually analyse image, document and PDF files for operationally useful data
  • Analyse emails for clues on their sender and their authenticity.
  • Have an understanding of computer network and security measures relevant to counter-fraud
  • Understand how to conduct a digital document investigation.
  • Know how to put together a professional report of their findings


Session One – Introduction

  • Domestics
  • Programme outline
  • Icebreaker – getting to know you

Session Two – Understanding Digital Document Fraud

  • What is Digital Document Fraud (DDF)?
  • How DDF can be used to combat fraud.
  • Understanding Metadata and digital documents.

Session Three – Image Analysis

  • Metadata and technical analysis.
  • Visual analysis.
  • Error Level Analysis
  • Identifying common elements of fraud.
  • Practical session.

Session Four – Document Analysis

  • Metadata and technical analysis.
  • Visual analysis.
  • Passport (digital copy) analysis.
  • Practical session

Session Five – Knowledge Check

• Knowledge check and closing.


Session Six – Recap

  • Recap of day one

Session Seven – Technical Foundation

  • Networking and internet technology for Counter Fraud professionals.
  • Operational security (VPNs, Proxies, ToR etc.).

Session Eight – Email Analysis

  • Technical analysis of emails
  • Visual and content analysis of emails.
  • Practical session.

Session Nine – Reporting and Evidencing

  • Best practices for recording investigations and handling evidence
  • File Hashing
  • Writing a professional standard report

Session Ten – Conducting an investigation

  • Step by step of conducting an investigation.
  • Developing understanding of collection plans and analysis.

Session Eleven – Practical Exercise

This section is a practical exercise, in which students will use the skills they’ve gained to undertake a ‘real world’ scenario in which they are tasked with analysing documents to prove or dispute a given narrative. This will involve collating available data, analysing it (whilst avoiding red herrings) and producing a professional standard report on their findings.

Session Twelve – Closing

  • Knowledge check
  • Next steps and developing knowledge
  • Close


For further details or to discuss a course booking please contact Peter at

Contact us

PDA deliver their courses nationally and internationally, both online and at a number of UK based face-to-face training locations across the UK, including London, Manchester and throughout the Midlands.

For further information on any of our products and services please contact either Peter or Malcolm, between the hours of 8am to 8pm:

Peter Darby | 07714 216126

Malcolm Hollett | 07522 394883