How to Spot a Fake ID: Face Comes First

Anyone can learn how to spot a fake ID, and the order matters. Compare the face with the photo first, using features that stay the same for years. Then check the birth and expiry dates, and only then the card: how it feels, what changes when you tilt it, and whether the barcode matches the printed front.

The order comes from a study most checklists never mention. Researchers at York and Strathclyde ran simulated alcohol sales in which 108 people checked ID cards (Robertson and Burton, Applied Cognitive Psychology, 2021). Afterwards, each person picked the line that described how they had done it:

"I checked the face first followed by the date of birth."

"I checked the date of birth first followed by the face."

Of the 108, 69% picked the second line, and they paid for it. On legal-age cards carrying someone else's photo, the date-first checkers wrongly approved the sale 52% of the time, twice the 26% error rate of the people who looked at the face first.

Because people chose their own order and the two groups ended up unequal in size, the authors call the result preliminary. A gap that large is still worth acting on at your door or counter, especially against a borrowed license.

How do you tell if an ID is fake in person?

Virginia's alcohol regulator sorts fake IDs into three kinds: manufactured, genuine but altered to change critical information, and "valid identification used by another person." The face catches the third kind and the card and barcode checks catch the first two, which is why you run the five steps below in order and keep going after one passes.

1. Match the face before you read the birthday

California's alcohol regulator warns that minors "can alter their hairstyles, eye makeup, and eye color or grow a beard/mustache." It tells sellers to "focus on the shape of their nose, chin, ears and eyes" instead. Look at the person, then the photo, then the person again, and decide on the face before any arithmetic. Robertson and Burton titled their paper "Age decisions bias face decisions" because a legal age made people likelier to accept a mismatched face. If the photo does not match, you can refuse without reading the date at all.

2. Read the dates and the layout

AAMVA (the American Association of Motor Vehicle Administrators) publishes a card design standard that makes a vertical layout "mandatory for U.S." cards issued to people under 21. Many states also print an "Under 21 until" date on those cards. A vertical card only tells you the holder was under 21 when it was issued, which means it still needs the arithmetic. Kansas's alcohol regulator notes that a customer may have turned 21 and "still have the old license," so count from today's date and check the expiry date too.

3. Handle the card

Run your thumb over the text. New York's law enforcement guide to its polycarbonate cards says "you can feel the raised lettering on the ID number, birth and expiration dates, and signature." If a New York card feels flat in those places, check everything else on it more closely. Edges that lift or peel suggest a laminate over a printed card, and AAMVA lists commercial laminates among counterfeiting methods.

Then tilt the card under a light. On New York's redesigned cards, a laser-imaged window "displays their birth month and year when viewed at a different angle," the state's DMV says. That hidden date should agree with the printed one. Look at the background printing too, because US Customs and Border Protection (CBP) officers have flagged counterfeits for "the lack of fine line detail." Our guide to the document checks that catch a forgery ranks checks like these by how hard each is to beat.

4. Scan the barcode, then compare it with the front

Hold the name and birth date the scanner shows against the front of the card, because a mismatch between the two is one of the few things a scan catches on its own. New York writes the consequence into its alcohol law. Where scanned data "fails to match the information printed on the driver's license," the sale "shall be denied."

5. Ask, then decide

If the face or the card still leaves you unsure, ask a question. Virginia's alcohol regulator suggests asking for a middle name, zodiac sign, or high school graduation year, which someone with a borrowed card may stumble over. A second card in the same name tests the same thing. Neither works against a counterfeit in the buyer's own name, because that buyer knows their own details and can show real cards that match. If doubt remains, refuse the sale politely and say the ID could not be verified.

What does a fake ID scanner check?

A fake ID can scan cleanly, because a basic scanner or checker app only reads the PDF417 barcode, checks its data against AAMVA's published format, and does the age math. That read proves the data is well formed, and a well-made counterfeit's barcode passes it too.

Here is part of the sample barcode in AAMVA's 2025 standard, for a fictional Virginia license.

Scan that card today and a scanner set to 21 flags it, since the holder is 20. Scanners do that part well, sparing staff the arithmetic under pressure, and many also check that the fields agree.

The catch is that the format is public. AAMVA's standard says "All mandatory and optional data must be unencrypted." It publishes the layout down to the byte because it "primarily seeks to support the needs of the law enforcement community." The openness that lets one scanner read every state's license also lets a forger write data that reads just as cleanly. CBP officers in Chicago, who seized 19,888 counterfeit licenses in the first half of 2020, reported that "the bar code attached to the Michigan licenses worked."

California's DMV now adds "a digital security signature to one of the two barcodes" on its new cards, which a compatible scanner can check. The DMV is plain about what that protects: "The data in the barcode is protected by the digital signature – the text and photo on the card are not." Even a signed barcode leaves the photo, and the person standing in front of you, for someone to check.

Why does a borrowed ID pass every card check?

A borrowed license is a real license. The state issued it to its owner, so its barcode reads and every security feature works as designed. Only the face comparison and a question about the owner's details can catch the stranger holding it.

People get the face comparison wrong often, including those who do it for a living. In a 2014 PLOS ONE study, for example, 30 passport officers compared people standing in front of them with their photo IDs, and "14% of fraudulent photos were wrongly accepted." Years of service did not predict their accuracy.

Polling clerks who checked photo ID at the UK's 2024 general election made 36% errors on a standard test that asks whether a face photo and a genuine ID card show the same person (Burton, Dimmock and Salton, 2026). The training those clerks described was informal and made no measurable difference. Closer to a bar, the York and Strathclyde experiments tested 18 working cashiers and bar staff. They beat volunteers with no checking experience, yet still approved 34% of legal-age cards carrying the wrong face. Experience helped, then, without closing the gap.

Rarity makes it worse. In a 2014 study by Megan Papesh and Stephen Goldinger, people missed 49% of mismatches when one photo pair in ten showed different people, and 24% when half did. If nearly every license you see belongs to the person holding it, your door is running the one-in-ten version of that test all night, or something rarer. So the last card of a busy night needs the same look at the face as the first.

How to spot a fake ID by state as designs change

Some estimates put the number of valid license designs "well in excess of 200," AAMVA's 2025 standard says. That makes it "extremely difficult for law enforcement, or anyone else, to recognize a genuine license, especially if it comes from another jurisdiction."

Three large states have redesigned their cards recently. California and Texas both say older cards stay valid until they expire, which leaves two designs side by side for years.

Keep a current ID-checking guide or your regulator's sample cards at the counter, and update it when a state redesigns. The issuer number is a check you can run without a guide, because AAMVA says that six-digit number in the barcode header identifies the issuing jurisdiction. Some scanners show only a pass or a fail, but on one that displays the raw data, a Texas card carrying another state's number is a strong sign of alteration or forgery.

Can you spot a fake ID online or from a photo?

A photo of an ID can't be felt, tilted, or put under a UV lamp, so the hands-on checks are lost online. A clear photo of both sides still shows the face, the dates, and the barcode, and that barcode is the one part you need software to read and compare with the printed front.

So ask for both sides of the license, and treat an ID as unchecked if a guest won't send the back. Check the name against the booking or account and check the expiry date. Then look at the photo the way a bank does. FinCEN, the US Treasury's financial crimes bureau, tells banks to watch for a photo that "shows visual tells of being altered," or one where "a customer's date of birth indicates that they are much older or younger than the photo would suggest." If you meet the guest at check-in, compare their face with the photo before you hand over the keys.

The same FinCEN alert, from November 2024, described criminals using generative AI "to alter or generate images used for identification documents, such as driver's licenses." In February 2026, federal prosecutors in Manhattan announced that the creator of OnlyFake had pleaded guilty. The site had generated more than 10,000 digital fake IDs, which "allowed individuals to circumvent KYC programs," the identity checks used to open accounts. Some of the fakes aimed at hosts and marketplaces were never printed at all.

Software can take over the parts you cannot do by eye. Authenticate's document verification reads the printed front, decodes the barcode and compares the two, checks that the barcode meets the AAMVA format, and matches the ID's name and date of birth with what the person entered. A selfie scored against the ID photo stands in for the face at the counter. A liveness check, tested to iBeta Level 2, is built to catch someone holding a photo, video, or mask up to the camera. A deepfake fed straight into the video stream is a different attack and needs a second kind of liveness test. Even then, no document check, Authenticate's included, can promise that every card is genuine, because some IDs carry few security features to test.

Frequently asked questions

Does a REAL ID star mean an ID is real?

A REAL ID star means the license was issued under the federal REAL ID standards, which TSA has enforced at airport checkpoints since May 7, 2025. The star is printed like any other element and says nothing on its own about whether a card is genuine. DHS also lets states use other markings, and most enhanced driver's licenses carry no star, so a missing star is not a tell either.

Do UV lights catch fake IDs?

A UV light catches fake IDs that skipped the ultraviolet layer, because AAMVA's standard makes UV-fluorescent ink a mandatory feature of compliant licenses. Stateline reported in 2017 that fake IDs sold online already came with holograms and ultraviolet markings, though. A card that glows as expected has passed one test out of several and still needs the face check.

Can you confiscate a fake ID?

Confiscating a fake ID is allowed in some states and not in others. California's Business and Professions Code Section 25659 lets a licensee or employee seize ID that shows the holder is under 21 or is false, if the person gets a receipt and the ID reaches local law enforcement within 24 hours. Virginia's regulator says "Only law enforcement has the right to keep the ID," so check your own state's rule before staff keep anyone's card.

Are you liable if you accept a fake ID?

The legal risk of accepting a fake ID depends on your state, and the states with a scanner defense still expect someone to look at the card. California counts a scan that missed a fake as evidence only if the ID "was physically inspected, is seemingly legitimate, and matches the physical appearance of the customer." New York's defense needs a card "apparently issued by a governmental entity," a successful scan, and reasonable reliance on it.

The same order works at the door and online

Whoever checks IDs for you, at a door, a counter, or a check-in desk, should follow one order: the face, then the dates, then the card, with a scanner doing the arithmetic if you have one. A basic scanner never looks at the face, which is why it cannot come first. If the people you check never stand in front of you, put a selfie and a liveness check behind the document check, so a face still gets compared with the photo.

Related resources

• Identity verification with Authenticate
• Guest verification for short-term rentals
• How identity verification works, method by method
• Age verification software compared on what each provider keeps