How to Spot a Fake Certificate of Insurance
Editing a PDF takes a minute, and an ACORD 25 is a one-page PDF. Most bad certificates aren't elaborate forgeries. They're last year's certificate with new dates typed in, or a real certificate for a policy that was cancelled after it was issued. Here are the 12 red flags that give them away, and the five-minute check that settles the question either way.
You spot a fake certificate of insurance by checking four things: the form (real ACORD markings, consistent fonts), the insurer (a licensed carrier with an NAIC number), the numbers (policy numbers, limits and dates that make sense), and the producer. The last one is the only definitive test: look the agency up yourself and have them confirm the policy, rather than trusting the phone number printed on the certificate.
Key Takeaways
- The most common "fake" COI is a genuine certificate with edited dates, not a from-scratch forgery.
- Visual red flags tell you which certificates to verify. Only the producer or carrier can tell you a policy is real.
- Even a genuine certificate proves nothing about additional insured status without the endorsement itself.
- A policy can be cancelled after the certificate is issued, so verification is an ongoing process, not a one-time check.
1. Why Fake and Altered COIs Are So Common
An ACORD 25 certificateis issued by the subcontractor's insurance agency, but it almost always reaches you through the subcontractor. That gives the person with the most to lose from a lapsed policy a chance to "fix" the paperwork before you see it. The typical scenarios are mundane:
- A policy lapsed for non-payment, and the sub edits the expiration date on last year's certificate to keep working.
- A new crew or a small sub borrows a certificate from another company, or from a policy that doesn't cover their entity.
- Limits are bumped to match your contract minimums because the real policy carries less coverage than you require.
- The additional insured box is ticked to get through onboarding, with no endorsement on the policy.
Carriers see this often enough to publish their own warnings. Great American Insurance Group's loss-control team, for example, tells businesses to call the insurance company or broker "using publicly available information to confirm that the information is accurate" (Great American Insurance Group, retrieved September 2026).
2. 12 Red Flags on an ACORD 25
None of these proves fraud on its own. Agency typos happen, and small agencies do use webmail. Treat each one as a reason to verify before the subcontractor mobilizes, not as grounds for an accusation.
The form itself
1. It isn't on an ACORD form, or the ACORD markings are missing
A genuine ACORD 25 carries the ACORD logo in the top-right corner and the form edition, "ACORD 25 (2016/03)", in the bottom-left. A homemade letterhead "certificate", or an ACORD layout without those markings, deserves a closer look.
2. Fonts, spacing or alignment change inside key fields
Agency systems print every field in the same typeface. Dates or policy numbers that sit off-center, use a different font or size, or look pasted over a white box are the most common sign someone edited an old certificate.
3. The PDF was produced by an editor, not an agency system
Open the file's document properties. A certificate whose producer field names a consumer PDF editor, or whose modified date is later than the certificate date printed in the top-right box, was changed after the agency issued it.
The producer and insurer
4. The insurer has no NAIC number, or the name doesn't match a real carrier
Every insurer listed under "Insurer(s) Affording Coverage" has an NAIC company code. A blank NAIC column, a slightly misspelled carrier name, or a carrier you can't find in your state's licensed-company search is a red flag.
5. The producer's contact details only lead back to the insured
A producer block with a free webmail address, a mobile number, or an agency you can't find anywhere else online means the only person who can "confirm" the policy may be the subcontractor themselves.
The policy details
6. Policy numbers read TBD, pending, applied for, or repeat across lines
A certificate should reference an issued policy. "TBD" or "binder" wording means coverage may not be bound yet, and the same policy number printed on General Liability, Auto and Workers' Comp lines is almost never legitimate.
7. The limits don't add up
On a standard CGL policy the general aggregate is at least the each-occurrence limit ($1M / $2M is the common pairing). An aggregate lower than the occurrence limit, or limits that exactly match your contract minimums on every single line, suggest the numbers were typed to satisfy you.
8. The dates don't make sense
Watch for a certificate dated before the policy's effective date, a policy term that doesn't cover your project, or an expiration date that has been "extended" in a different font from the effective date.
Your name and your protections
9. The insured isn't the entity you contracted with
If your subcontract is with "ABC Framing LLC" and the certificate insures "Tony's Framing", you may be looking at someone else's policy, or a policy that doesn't cover the entity doing your work.
10. Your company is listed wrong, or not at all
A certificate holder box with a generic name, an old address, or another company's details is a sign the certificate was reused from a different job rather than issued for yours.
11. "Additional insured" is checked but no endorsement is attached
The ADDL INSD box on an ACORD 25 is a statement, not coverage. If your contract requires additional insured status, ask for the endorsement form (for example CG 20 10 and CG 20 37). A checked box with nothing behind it is the most common gap we see, forged or not.
12. The authorized representative signature is blank or pasted in
Certificates are signed by an authorized representative of the producer. A missing signature, or a signature image that looks copied from another document, is one more reason to verify directly.
For a box-by-box walkthrough of what each ACORD 25 field should contain, use our ACORD 25 inspection checklist.
3. The 5-Minute Verification That Actually Proves a Policy Is Real
Red flags tell you which certificates deserve scrutiny. This process tells you whether coverage exists. Run it on any certificate that trips a red flag, and on every certificate for high-risk scopes like roofing, steel erection, excavation or demolition.
- 1Find the producer independently.
Search the agency name from the top-left PRODUCER box and get its phone number or email from its own website or your state insurance department's licensee lookup. Don't use the contact details printed on the certificate. If the certificate is forged, those details may lead straight back to the forger.
- 2Ask for written confirmation of five facts.
Policy number, effective and expiration dates, limits on each line, the named insured's exact legal name, and whether your company is on file as certificate holder. Agencies routinely answer verification requests from certificate holders.
- 3Confirm the endorsements, not just the checkboxes.
If your contract requires additional insured status, waiver of subrogation or primary and non-contributory wording, ask whether those endorsements are attached to the policy and request copies.
- 4Check the carrier.
Confirm the insurer is licensed in your state (the NAIC's company search and your state insurance department both list licensed carriers) and check its financial strength rating at AM Best. Great American suggests requiring carriers rated "B" or higher; many construction contracts set the bar at A- VII.
- 5For workers' comp, use the state lookup where one exists.
Several states and state funds run free proof-of-coverage searches, such as the New York State Insurance Fund's certificate validation tool. They're a fast second source for the policy most often allowed to lapse.
Useful public tools: AM Best for carrier ratings and the NYSIF certificate validationpage as an example of a state-fund workers' comp check.
A script that works: "We're listed as certificate holder on a certificate your agency issued for [insured name], dated [date]. Can you confirm policy [number] is active through [expiration date] with the limits shown, and that our additional insured endorsement is on the policy? Please reply by email so we can file it."
4. What to Do If a Certificate Turns Out to Be Fake
Treat a confirmed fake as an uninsured subcontractor on your site, because that's what it is. The priorities are limiting your exposure today and documenting what happened.
Do immediately
- • Suspend site access until verified coverage is in place
- • Hold pending payments as your subcontract allows
- • Save the certificate, the email it came in, and the producer's written response
- • Tell your own broker; your premium audit may be affected
Then review
- • Whether any work, incident or injury happened during the gap
- • Other certificates from the same sub or the same "producer"
- • Your contract remedies, with your attorney
- • Whether the sub should stay on your approved list
The audit risk is concrete. Travelers' premium-audit guidance says that without a valid certificate of workers' compensation insurance, it "may charge a premium for work performed by an independent contractor/subcontractor" (Travelers, retrieved September 2026). Our uninsured subcontractor audit formula shows how that charge is calculated. For the full response plan when coverage lapses mid-job, see what to do when a subcontractor's insurance expires mid-project.
5. What a Genuine Certificate Still Doesn't Prove
Every ACORD 25 carries the same disclaimer: the certificate "is issued as a matter of information only and confers no rights upon the certificate holder." A real certificate can still leave you exposed in three ways:
- It's a snapshot. The policy can be cancelled the week after the certificate is issued. A notice of cancellation endorsement is the only contractual way to hear about that in advance.
- Checkboxes aren't endorsements. Additional insured status comes from the endorsement, not the certificate. See additional insured vs. certificate holder.
- The policy may not cover your workers. A workers' comp policy with zero payroll, or one that covers only the owner, can look fine on paper. See our guide to workers' comp ghost policies.
6. Where Software Helps, and Where It Doesn't
No software can prove a policy is in force from the PDF alone. Only the producer or carrier can do that. What software does well is the part people skip when they're busy: reading every field on every certificate, comparing limits and dates against your requirements, and flagging the inconsistencies that tell you which certificates need a phone call.
SubDoc requests certificates through a passwordless link that subcontractors can forward to their own broker, so more certificates arrive straight from the agency instead of being re-sent by the sub. Its AI reads each ACORD 25, checks limits, dates and required endorsements against your requirements, and flags what doesn't match for your review. Deciding which certificates to confirm with the producer stays with you.
Frequently Asked Questions
Look for form problems first: a missing ACORD logo or 'ACORD 25 (2016/03)' footer, fonts or alignment that change inside the dates and policy-number fields, policy numbers like 'TBD' or 'pending', an insurer with no NAIC number, or a general aggregate lower than the each-occurrence limit. None of those proves fraud on its own. The only definitive test is to look up the insurance agency independently and have them confirm the policy number, dates, limits and your certificate-holder details.
Find the producer (the agency listed in the top-left box) through a source you trust, such as the agency's own website or your state insurance department, rather than calling the phone number printed on the certificate. Ask them to confirm, in writing, that the policy number is active for the dates shown, that the limits match, and that any additional insured or waiver of subrogation endorsement is actually attached to the policy. Most agencies will answer a certificate holder's verification request by email the same day.
Yes. A COI only shows coverage as of the day it was issued. The ACORD 25 itself says it is 'issued as a matter of information only and confers no rights upon the certificate holder.' A policy can be cancelled for non-payment a week after a perfectly genuine certificate is issued, which is why a certificate on file is not the same as coverage in force, and why expiration tracking and notice-of-cancellation requirements matter.
Fabricating or altering a certificate can expose the person who did it to fraud claims and to breach of contract, and many state insurance codes restrict issuing certificates that misstate coverage. The practical consequence for you is simpler: if an uninsured subcontractor causes a loss, a forged certificate does not create coverage, so the claim can land on your own policy. Talk to your attorney and broker before deciding how to respond to a confirmed forgery.
At minimum, verify when the certificate is first collected and again at every policy renewal. For long projects, re-check before large progress payments and before final payment, and re-verify immediately if the certificate changes producers, carriers, or policy numbers mid-term, since those are the moments a lapsed or replaced policy is most likely to slip through.
Related Verification Guides
Know which certificates need a second look
SubDoc reads every ACORD 25 you receive and flags limits, dates and endorsements that don't match your requirements. Free for up to 3 vendors.