Counter Fraud

Digital Documents Fraud – Classroom Course

This course gives students the tools and methodologies required to analyse digital documents for signs of tampering or fraud.  Like all of the courses, this course is operational in nature and students will be able to immediately apply the skills they have gained.



By the end of this course, students will:

  • Have an understanding of metadata and how it can hold useful information
  • Technically and visually analyse image, document and PDF files for operationally useful data
  • Analyse emails for clues on their sender and their authenticity.
  • Have an understanding of computer network and security measures relevant to counter-fraud
  • Understand how to conduct a digital document investigation.
  • Know how to put together a professional report of their findings



Session One – Introduction

  • Domestics
  • Programme outline
  • Icebreaker – getting to know you

Session Two – Understanding Digital Document Fraud

  • What is Digital Document Fraud (DDF)?
  • How DDF can be used to combat fraud.
  • Understanding Metadata and digital documents.

Session Three – Image Analysis

  • Metadata and technical analysis.
  • Visual analysis.
  • Error Level Analysis
  • Identifying common elements of fraud.
  • Practical session.

Session Four – Document Analysis

  • Metadata and technical analysis.
  • Visual analysis.
  • Passport (digital copy) analysis.
  • Practical session

Session Five – Knowledge Check

  • Knowledge check and closing.


Session Six – Recap

  • Recap of day one

Session Seven – Technical Foundation

  • Networking and internet technology for counter fraud professionals.
  • Operational security (VPNs, Proxies, ToR etc.).

Session Eight – Email Analysis

  • Technical analysis of emails
  • Visual and content analysis of emails.
  • Practical session.

Session Nine – Reporting and Evidencing

  • Best practices for recording investigations and handling evidence
  • File Hashing
  • Writing a professional standard report

Session Ten – Conducting an investigation

  • Step by step of conducting an investigation.
  • Developing understanding of collection plans and analysis.

Session Eleven – Practical Exercise

This section is a practical exercise, in which students will use the skills they’ve gained to undertake a ‘real world’ scenario in which they are tasked with analysing documents to prove or dispute a given narrative. This will involve collating available data, analysing it (whilst avoiding red herrings) and producing a professional standard report on their findings.

Session Six – Closing

  • Knowledge check
  • Next steps and developing knowledge
  • Close

There are no upcoming events at this time.

Contact us

For further information on any of our products and services please contact either Peter or Malcolm:

Peter Darby | 07714 216126

Malcolm Hollett | 07522 394883