Read our white paper on AI forgeries in 2026
New AI fake detection model. Try it now
4.6 / 5 on Trustpilot

Check a residence permit
in 10 seconds

Koncile detects tampering in the photo, scan or PDF of a green card, work permit or foreign residence permit, and documents generated or edited by AI, then returns a fraud score from 0 to 100. Design version and dates come next.

  • 22k+ users
  • SOC 2 and GDPR
  • Try for free
  • SOC 2 Type II, GDPR
  • Deleted after analysis
  • Never used to train an AI

For document volumes or an API, talk to an expert.

Check your own document

Analyzed securely by Koncile. Never used to train a model, deleted as soon as the analysis is complete.

  • SOC 2 Type II, GDPR
  • Secure servers
  • Deleted after analysis

For document volumes or an API, talk to an expert.

The document checker used by insurers, banks and large companies

4.8 / 5
In short

How to check if a permanent resident card is real

Identify the card and its design generation first, then check the fonts, the alignment, the security background, the photo, the validity dates and the category. On a file, read the editing traces too. For a new hire, Form I-9 and E-Verify confirm work authorization; for everyone else who receives a copy, the file check flags the cards that deserve a closer look.

Design generation

Green cards and work permits have been redesigned several times, and older designs stay valid until they expire. A fake often mixes two.

Fonts and alignment

Each field has its font, weight and baseline. A retyped name or date drifts by a pixel or two, or changes font.

Security background

The fine pattern must run unbroken under the text and the photo. A smooth or repeated patch gives away an erased field.

Photo

Edges too sharp, light from another side, a grain that differs from the card: the classic signs of a swapped portrait.

Dates and category

Issue date, expiry and category must fit the card type: a conditional resident card and a ten year card do not run for the same time.

File traces

On a scan or a PDF: editing software, AI generator marks, two save dates. The eye cannot see them, the file keeps them.

Method

Residence permit verification: the 5 Koncile checks

Residence permits almost always arrive as a photo or a scan. The checker runs the same checks as on an ID document: the image first, to catch an edit or an AI generated card, then the template of each design, the dates and the category. When the card arrives as a PDF, the file is read too.

  1. We compare fonts and alignment with each design

    Every design generation has its own fonts, weights, baselines and margins. A rewritten field drifts by a few pixels or changes font, and a fake often mixes two designs. The full method is on our ID document checker page.

  2. We follow the security background

    A retyped date breaks the fine background pattern, a cloned field repeats the same texture, and pasted text floats above the pattern. Image analysis picks up these breaks even after a JPEG compression that hides them on screen.

  3. We spot replaced photos and AI generated cards

    K-Detect, our image model trained on fakes, flags a portrait pasted in or regenerated, and cards generated in whole or in part by AI. The EXIF of the image is read at the same time: device, software, dates.

  4. We check dates and category

    Issue date, expiry, validity period and category are extracted and cross checked with each other, then with the rest of the file: passport, offer letter, pay stub. A validity period that does not fit the card type does not hold.

  5. We read the file and recognise generators

    When the card arrives as a PDF, the producer software, the dates and the saved versions are read. The serialisation fingerprint points to the engine that produced the file: on ID documents, 1,617 files from a single generator were recognised this way, at once.

Official checks

Form I-9, E-Verify and SAVE: who checks what

The official tools answer whether a person may live or work in the United States. None of them analyses the photo or PDF of a card that someone emailed you.

Form I-9, for every new hire

Employers complete Form I-9 within three business days of the start date. They examine the documents the employee chooses to present, and accept those that reasonably appear to be genuine and to relate to the person. They cannot ask for a specific document, such as a green card rather than another acceptable one.

E-Verify and photo matching

E-Verify employers run the I-9 data against government records. When the employee presents a green card or an employment authorization card, photo matching shows the photo on file so the employer can compare it with the card. It confirms the record, not the copy someone else received.

SAVE, for agencies

USCIS's SAVE program lets government agencies verify immigration status before granting a benefit or a license. It is not open to landlords, lenders or marketplaces, who receive the same cards as photos or PDFs.

Everyone else

Tenant screening, lending, fintech onboarding and marketplaces receive residence permits as files, often from abroad, with no official channel to query. The document itself is what you can check.

Card types

Green cards, work permits and foreign residence permits

A check starts by identifying the card and its version. Forgers who start from a sample found online often mix two generations: that is where they slip.

Permanent resident card (Form I-551)

The green card proves permanent residence. A standard card runs for ten years, a conditional resident card for two. USCIS has redesigned it several times, and older designs stay valid until they expire, so a design mix is the first thing to look for.

Employment authorization document (Form I-766)

The work permit card issued to people allowed to work for a limited period, with a category code and an expiry date. Like the green card, it has gone through several designs. Read the category and the dates first: they are the fields a forger has a reason to change.

Foreign residence permits

Across the European Union, residence permits follow the uniform format of Regulation (EU) 2017/1954, adopted because the previous model had been compromised by counterfeits. Old and new versions circulate until they expire. Koncile's corpus is mostly French: the file checks carry over to any card, the template comparison is strongest on French permits.

Checks

Residence permit verification by hand, in three checks

Without a tool, these three checks stop clumsy fakes in a few minutes. Ask for the original photos of the front and the back, not a screenshot or a rebuilt PDF.

Compare with a sample of the same design

Find an official sample of the same card and design generation, and compare the layout, fonts and background. A newer design font inside an older frame, or the reverse, is enough to stop the file.

Cross check dates, category and the rest of the file

The validity period must fit the card type, the category must allow what the person claims, and the name and date of birth must match the passport and the other documents. An expired card needs the paperwork that extends it.

Inspect the photo and the background

Follow the fine background pattern under the photo and the fields: it must run unbroken. Be wary of a portrait with edges too sharp or lit from another side.

Limits

A real card can still be the wrong card

An authentic card passes every image check when someone other than its holder presents it. That case shows in the file, not on the card.

Someone else's card

A borrowed or stolen card is still a real card. Cross check the holder with the passport, the bank details and the lease or contract: a name, a date of birth or an address that disagree need an explanation.

Status that changed

A card can be authentic and the status behind it no longer current. Only official channels, I-9 and E-Verify for employers, SAVE for agencies, say what the status is today.

Fraud detection API

Plug residence permit checks into your tools with the API

Koncile's fraud detection API gives you a score from 0 to 100 and detailed explanations of manipulation risks, right inside your own tools.

  1. 01

    Extraction of the card fields

    Front, back, dates and category, field by field.

  2. 02

    Fraud checks explained

    High, medium or low level, with a one sentence explanation.

  3. 03

    Score from 0 to 100

    High risk from 80.

  4. 04

    Quick explanation

    A one line summary ready for your information system.

Request
curl -X POST https://api.koncile.ai/v1/upload_file \  -H "Authorization: Bearer $API_KEY" \  -F "files=@residence-permit-front.jpg"
ResponseDONEExample
{  "status": "DONE",  "General_fields": {    "Document_type": {"value": "Residence permit", "confidence_score": 0.97},    "Expiry_date": {"value": "2028-06-30", "confidence_score": 0.98}  },  "Fraud_detection": {    "risk_score": 90,    "summary": "Newer design fields laid over an older background, fonts off template",    "signals": [      {"name": "Template mismatch", "severity": "high"},      {"name": "Fonts and alignment", "severity": "high"}    ]  }}
Use cases

Residence permit checks for hiring, screening and KYC

Residence permits show up in hiring files, account openings and rental applications. Koncile handles them as an extension of its ID document checks. Here is where the checker fits in.

Hiring and Form I-9

Copies received before the start date are checked on receipt, so the doubtful ones get a closer look when the employee presents the originals.

Staffing and job platforms

Candidates sign up online and upload their cards as photos. The checker is called by API in the sign up flow and returns a score per document.

Bank and fintech onboarding

A residence permit is one of the IDs accepted at account opening. It is checked with the proof of address and the bank details, with the detail of every test kept.

Tenant screening and lending

Landlords and lenders receive the card with pay stubs and bank statements. The name and dates are cross checked with the rest of the application.

Pointers

Fake residence permits: what Koncile sees in the image

Some edits leave no visible inconsistency: right name, right dates, the right font to the eye. The checker relies on signals invisible to the naked eye, in the pixels and, when the card arrives as a PDF, in the file itself.

Card elementWhat Koncile checksWhat gives an edit away
PortraitPixels of the face and its outline, grain, lighting, how it joins the card backgroundA portrait pasted in, regenerated by AI or with a different grain from the card
Security backgroundContinuity of the fine patterns under the fields and the photoA pattern broken, smoothed or repeated by a clone stamp
Fonts and geometryFont, weight, baselines and margins of each field, compared with the template of the designA name or a date retyped that drifts by a few pixels
Design generationCard type and design version identifiedFields of one design laid on the background of another
Dates and categoryIssue date, expiry, validity period, categoryA validity period that does not fit the card type, a category changed
Image metadataEXIF and marks left by AI tools: device, software, dates, C2PA watermarksEditing software after the phone camera, the mark of a generative AI
PDF fileWhen the card arrives as a PDF: producer software, dates, saved versions, serialisation fingerprintA PDF saved again in an editor, one image laid over another
Security

Your residence permits handled as sensitive data

A residence permit brings together a name, a nationality, a date of birth, a number and a photo. Founded by a former lawyer, Koncile was built with data protection at the core of its architecture: third party SOC 2 audit, GDPR compliance, secure hosting. Documents are encrypted, deleted after analysis and never used to train a third party model.

Read our security documentation
  • HIPAA Compliant badge
  • SOC 2 badge (AICPA Service Organization Control)
  • GDPR Compliant badge
  • HDS badge (French health data hosting certification)

Residence permit verification FAQ

Short answers, with figures when we have them.

Talk to us
  1. Identify the design generation, then check the fonts, the alignment, the security background, the photo, the dates and the category. On a file, read the EXIF and the metadata too. Employers confirm the record through Form I-9 and, if enrolled, E-Verify. Koncile runs the document checks in 10 seconds and returns a fraud score from 0 to 100.

  2. Through Form I-9: the employer examines the document the employee chooses to present and accepts it if it reasonably appears genuine and relates to the person. E-Verify employers then run the data against government records, with photo matching for green cards and employment authorization cards.

  3. There is no public lookup of green card numbers for businesses. Employers go through Form I-9 and E-Verify, government agencies through SAVE. Anyone else can only check the document they received, which is what the checker does.

  4. A standard permanent resident card runs for ten years, a conditional resident card for two. Permanent residence itself does not expire with the card, but the card must be renewed. A validity period that does not fit the card type is a red flag on a copy.

  5. The green card (Form I-551) proves permanent residence and the right to work. The employment authorization document (Form I-766) allows work for a limited period, within a category printed on the card. Both are accepted on their own for Form I-9.

  6. It can help, mainly to spot an inconsistent date or category. It lacks three things: models specialised in images edited or generated by AI, knowledge of the traces each editing tool leaves, and the templates of each card design, which bring the mismatches out. A language model is only one part of the machine.

  7. No. Official channels confirm status, Koncile analyses the file you received: edits, AI generation, design version, dates and category. The two complete each other. An authentic card presented by someone else can pass the analysis: only the official channels and the rest of the file reveal it.

  8. It depends on your volume. The price combines a base subscription and a cost per page or per document processed. The plans are detailed on the pricing page.

  9. Yes. Koncile complies with SOC 2 and GDPR, and an independent firm certifies our security and data protection. Your documents are hosted securely with a provider that itself holds SOC 2 and ISO 27001 certifications.

Try Koncile's fraud detection on your own documents

Upload your bank statements, pay stubs or IDs: Koncile extracts the data and flags fakes in seconds.

Talk to an expert