Authenticity and extracted content answer different questions
An OCR system may accurately read a salary amount from a forged pay statement. A language model may summarize that statement coherently without establishing that it is genuine. Resistant AI’s document product focuses on fraud and manipulation signals in PDFs and images, with API and web-interface access. Its developer documentation describes verdicts, indicator-level explanations, metadata checks, classification and localized detections where supported. [1]
That function is relevant to underwriting, income verification, merchant onboarding and investigations. It complements rather than replaces the question of whether the reported income is recurring, available to the borrower or sufficient for the proposed obligation. Document authenticity, factual accuracy, account ownership and affordability should remain separate decisions.
What the AI component is described as doing
The developer documentation lists detectors for editing tools, document reuse, template farms, metadata changes, pixel anomalies, digitally issued PDF authenticity and other manipulation patterns. It also describes policy mapping through adaptive decisioning. [1] These are documented product capabilities, not proof that every detector performs equally on every document type or that a verdict establishes fraud as a legal fact.
The public product page describes recommendations such as Trusted, Warning and High Risk and configurable treatment of document features. [2] A bank should obtain the specific indicator definitions and version behavior used in its deployment. The meaning of a verdict depends on the detection evidence and the policy applied to it, not just the color shown to an analyst.
The vendor’s loan-underwriting material positions the product as a way to identify suspicious financial documents within lending workflows. [3] That establishes the intended use case. It does not establish a validated credit-risk model or authorize the bank to substitute a fraud score for required credit analysis and explanations.
A changed file is not necessarily a fraudulent file
Analysis: legitimate documents are printed, scanned, annotated, translated and combined. A customer may obscure an irrelevant account number or use accessibility software. Those changes can alter metadata or structure without making the underlying financial information false. Conversely, a sophisticated fabricated document can be created cleanly rather than edited from a genuine original.
The correct response therefore depends on the signal and the use case. A low-quality image may require a better copy. An unsupported digital signature may require source verification. A repeated template across unrelated applicants may merit investigation. A bank should avoid treating all warnings as interchangeable automatic declines.
Preserve the original submitted file and the system’s result before converting it for display or OCR. Normalization can remove evidence or introduce artifacts. Record the submission time, document type, detector version and analyst disposition so later review can distinguish what the customer supplied from what internal processing changed.
A hypothetical underwriting workflow
Assume an applicant submits a PDF bank statement showing $6,000 of monthly deposits. OCR extracts the number correctly, but document forensics flags inconsistent structure around several deposit entries. A reviewer requests an independently obtained statement or another approved verification method. The discrepancy may be resolved as a benign conversion issue or confirmed as manipulation; the initial flag alone does not determine the outcome.
If a genuine statement is obtained, the lender still needs to classify the deposits. Transfers between the applicant’s own accounts, refunds and one-time proceeds are not necessarily recurring income. If manipulation is confirmed, the bank should apply its approved fraud and credit processes, preserve evidence and communicate as required. This example describes a proposed workflow, not a reported Resistant AI customer result.
The alternative verification route matters. Requiring an applicant to resubmit the same file repeatedly can create friction without resolving the question. Provide staff with specific reasons and a workable path to additional evidence. A human review step is useful only if reviewers have authority, training and information beyond the original warning label.
Evaluate with the documents the bank actually receives
Build a test set spanning native PDFs, scans, photographs, different issuers, languages and legitimate transformations. Include difficult authentic documents as well as known fraud. A benchmark dominated by obvious forgeries will overstate practical usefulness. Separate document-level performance from application-level outcomes when one applicant submits several files.
A hypothetical sample of 10,000 documents may include only 100 confirmed fraudulent ones. If a model flags 200 documents and 60 are confirmed fraud, precision is 30% and recall is 60%. These assumed values show why an impressive overall accuracy figure can obscure a large manual-review burden. Measure fraud dollars, review time and applicant resolution as well as classification metrics.
Hold out issuers or templates and later time periods to test robustness. Track whether fraudsters adapt after a new control is introduced. Feedback from analyst dispositions should be reviewed for consistency before it becomes training data; an unverified suspicion is not equivalent to confirmed manipulation.
Costs, privacy and implementation
Commercial cost is only one component. Include file ingestion, secure storage, integration with OCR and underwriting, analyst time, appeals and source-verification expense. The public sources reviewed do not establish a universal bank price or independently replicated net savings. Vendor accuracy and automation claims require their own definitions, populations and baselines.
The product’s focus on document structure should not be treated as a blanket privacy exemption. Files can contain sensitive financial and identity information regardless of which features a detector emphasizes. Review access, retention, processing locations, permitted training use and deletion behavior for the actual configuration. Maintain a reliable path when the service is unavailable.
Governance and the decision to proceed
The April 2026 SR 26-2 guidance is the current interagency model-risk reference. [4] Governance should reflect the consequences of the bank’s use: prioritizing a review queue and automatically declining a credit application create different risks. Preserve the bank’s policy rationale and required explanations rather than substituting a vendor verdict for accountability.
Confidence would rise with strong performance on difficult authentic documents, useful explanations and measurable incremental fraud detection at an acceptable review burden. Persistent false positives, opaque verdict changes or weak alternative verification would weaken the case. Resistant AI is relevant as an authenticity layer; the full lending decision still requires evidence about the borrower, the obligation and the reliability of the underlying information.
Sources
- Resistant AI developer documentation, About Resistant Documents; reviewed September 27, 2026SourceBack to text: ↑1↑2
- Resistant AI, Documents product page; reviewed September 27, 2026; vendor claimsSourceBack to text: ↑
- Resistant AI, loan-underwriting use case; reviewed September 27, 2026; vendor claimsSourceBack to text: ↑
- Federal Reserve, SR 26-2, April 17, 2026Official sourceBack to text: ↑