Arc & LedgerForensic document training
Checking account…English
CAA Forensic Document Training Module 1 of 12 · about 8% of the course

CAA Forensic Document Training, by Arc & Ledger · Module 1 of 12

Foundations: Forensic Document Examination and Your Duties as a CAA

Instructor: Burak Genc, EA · Reading time: about 25 minutes

The whole module in one sentence: Your signature on the Certificate of Accuracy stands in for the IRS's own eyes, so this module teaches the document rules, the examination toolkit, and the five-step workflow that make that signature honest.

What you will be able to do

Course learning/assessment design; reference context: IRS W-7: supporting documents · IRS W-7-COA: certification · Home Office: document examination.

Introduction: why this course exists

Rule references: IRS W-7: supporting documents · IRM 3.21.264: CAA duties.

Before you look at a single passport or license, be clear about what you are being trained to do, because the skill and the legal duty are the same thing viewed from two sides. As a Certifying Acceptance Agent, you will examine original identity documents with your own eyes and your own hands, and then you will tell the Internal Revenue Service, in writing, that those documents are authentic. This course teaches you how to make that statement honestly.

An Individual Taxpayer Identification Number, or ITIN, is issued on Form W-7 to people who need a U.S. taxpayer number but are not eligible for a Social Security number. Most applicants are foreign nationals. To get the number, an applicant must prove two separate things: identity, meaning this is a real person and the document belongs to them, and foreign status, meaning the person has a connection to a foreign country. Every supporting document in the W-7 system is evaluated against those two questions, and you will return to them in every module of this course.

What a CAA certifies: the Certificate of Accuracy

Rule references: IRS W-7-COA: certification · IRM 3.21.264: CAA duties.

A regular Acceptance Agent helps an applicant complete Form W-7, but the applicant's original documents still travel to the IRS. A Certifying Acceptance Agent is different. Under your Acceptance Agent Agreement, you are authorized to review the original documents yourself, or certified copies issued by the agency that created them, and to certify that review. Your certification is Form W-7-COA, the Certificate of Accuracy, which you attach to each Form W-7 you submit.

Read the certification language on that form carefully, because it defines your job. By signing, you certify that the documentation was reviewed in accordance with the procedures in the Acceptance Agent Agreement and is authentic, complete, and accurate, based on the information and documents the applicant submitted. The form records which documents you relied on for identity and which for foreign status, and it requires you to retain copies of all relevant documents, including signed copies of the Forms W-7 you submitted. Only the designated Responsible Party of the business may sign the Certificate of Accuracy. That is why every Responsible Party on a CAA application must complete forensic document training individually. The signature is personal, and so is the training.

Here is the practical benefit your clients receive: because you certify the documents, the applicant does not have to mail an original passport to the IRS and wait weeks for its return. You submit the Form W-7, the Certificate of Accuracy, and copies of the documents you reviewed. That benefit is also the risk. The IRS is accepting your eyes in place of its own, and it audits that trust through compliance reviews, which can be in person or by correspondence. If your examinations are sloppy, the consequence is not just a rejected application. It can be termination of your agreement.

The W-7 document rules

Rule references: IRS W-7: supporting documents · IRM 3.21.263: document definitions.

The IRS accepts 13 types of supporting documents for Form W-7. The Instructions for Form W-7 sort them by what they can prove. A passport is the only stand-alone document: it proves both identity and foreign status by itself. USCIS photo identification, a visa issued by the U.S. Department of State, a foreign military identification card, a national identification card with the required data elements, and a foreign voter's registration card can also prove both. A U.S. driver's license, a U.S. state identification card, a U.S. military identification card, and a foreign driver's license prove identity only. A civil birth certificate proves identity, and it proves foreign status only if it is a foreign document. Medical records and school records have narrow uses for dependents. When an applicant has no passport, you generally need at least two documents that together cover both columns.

Three rules govern every document you touch. First, you must examine original documents or certified copies from the issuing agency. A certified copy is a copy the issuing agency itself provides and certifies as an exact copy of the original, and it contains an official stamped seal from the agency. A notarized photocopy is not a certified copy, and a plain photocopy is nothing at all for this purpose. One narrow exception exists outside CAA certification: the instructions allow notarized copies for dependents and spouses of U.S. military personnel applying from an overseas or APO/FPO address. That exception runs to direct IRS submissions; it does not change what you may certify from. Second, documents must be current. Do not rely on a document past its printed expiry without verifying a specific IRS-recognized extension or exception for that document. Third, at least one document in the package must carry the applicant's photograph, subject to limited exceptions for young dependents.

Two limits on your authority deserve attention now. For dependents, a CAA may authenticate only the passport and the birth certificate; other dependent documents, such as medical or school records, must be submitted to the IRS as originals or certified copies from the issuing agency. And a foreign military identification card, although it appears on the IRS list, cannot be authenticated by a CAA. If an applicant's case depends on documents outside your authority, your job is to recognize that early and route the applicant correctly, not to stretch your certification to cover them.

Pause and check: An applicant offers a notarized photocopy of her passport because the original is at home. Can you certify from it?

No. You may examine only original documents or certified copies issued by the agency that created them. A notarized photocopy is not a certified copy: the notary attested to a signature, not to the document's authenticity. The applicant must bring the original or an issuing-agency certified copy.

Fictional course exercise; rule context: IRS W-7: supporting documents · IRM 3.21.263: document definitions.

Your examination toolkit

Course method; reference context: Home Office: document examination · NIST SP 800-63A-4: evidence validation.

Forensic document examination sounds like laboratory work. At the CAA level, it is disciplined observation with four simple tools, and the discipline matters more than the equipment.

Your first tool is light itself, in three forms. Direct white light is your default view: color, print quality, layout, and legibility. Transmitted light means holding the document up so light passes through it, which reveals watermarks, security fibers, and thinning or disturbance in paper documents. Oblique light means raking a light source across the surface at a low angle, which reveals embossing, indentations, erasures, and surface disturbance that flat light hides.

Your second tool is magnification. A simple loupe at roughly ten-power magnification lets you read microprinting, inspect fine-line background patterns, and see whether printed text is crisp or made of the irregular dots that betray a home printer. Your third tool is an ultraviolet light, typically a longwave UV source. Under UV, genuine security papers and inks respond in planned ways: fibers fluoresce, printed designs appear, and ordinary bright white paper, which usually contains optical brighteners, glows in a way that security paper often does not. Your fourth tool is touch. Run a fingertip across the document. Laser engraving, intaglio printing, embossing, and laminate edges all have a feel, and alterations often announce themselves to a finger before they announce themselves to an eye.

Each tool contributes evidence; no single matching feature establishes authenticity. Compare the observed features with official references for the issuing authority and design generation, and investigate discrepancies before reaching a conclusion. The course workflow uses a consistent sequence to help you avoid omitted checks.

The general authentication workflow

Course method; reference context: Home Office: document examination · NIST SP 800-63A-4: evidence validation · IRS W-7: supporting documents · ICAO Doc 9303 Part 3: MRZ rules

Use this five-step workflow for every document in this course and in your practice. The sequence is this course's workflow, a fixed habit we teach so that no check depends on memory or mood; the IRS requires the examination, and the order is our method for making sure it happens completely, every time.

Step 1 Identify the document Step 2 Check validity on its face Step 3 Examine substrate and construction Step 4 Test security features Step 5 Decide and record The same five steps, in the same order, for every document.
The five-step authentication workflow. Steps 1 to 4 examine; step 5 is where your signature is earned.

Step one, identify the document. Name it precisely: issuing country or state, document type, and series or design generation if you can determine it. You cannot judge whether a document looks right until you know what it is supposed to be.

Step two, check validity on its face. Confirm currency under the IRS rules and any documented extension, confirm the photograph resembles the person in front of you, and confirm the biographical data is internally consistent: the name, date of birth, and document number on the face should agree with any machine-readable zone, barcode, or second data location on the document.

<<< MACHINE-READABLE ZONE <<< Printed data on the face Name, date of birth, document number Barcode Encodes the same data a second way Machine-readable zone Encodes it a third way, with check digits Apply the encoding rules.
A document repeats its data in several places. Consistency supports the examination; it does not establish authenticity. Allow for documented encoding, transliteration and truncation rules, and investigate unexplained differences.

Step three, examine the substrate and construction. Paper or polycarbonate? Laminated or solid? Look at edges, thickness, and flexibility. Alteration often disturbs construction before it disturbs printing.

Step four, examine the security features with your toolkit, in the course's order: direct light, transmitted light where the document type allows it, oblique light, magnification, then UV. The document-specific modules that follow tell you which features to expect for each document type.

Step five, decide and record. Your decision has three honest outcomes: the document is authentic and consistent, and you certify it; the document raises a question you can resolve with another acceptable document; or the document fails, and you do not certify it. Record what you examined and what you relied on. Your file should let another examiner reconstruct your decision.

Common fraud patterns

Document reference: Home Office: document examination.

Nearly every fraudulent document you will ever see belongs to one of four families. Learn the families and you will know what to look for before you pick the document up.

Counterfeit

A counterfeit document is fabricated from start to finish. It imitates a genuine document but was never issued by any authority. Counterfeits fail at the level of materials and printing: wrong substrate, flat printing where genuine printing is engraved or raised, microprinting that dissolves into dots or a solid line under magnification, missing or wrong UV responses, and security features that are pictured rather than built in. If the expected optically variable feature does not respond correctly, compare it with the reference for that exact model and investigate. A counterfeit can also carry a moving generic hologram; movement alone does not establish authenticity.

Altered

An altered document began life as a genuine document and was then changed. The classic alterations are photo substitution, where the portrait is replaced; data alteration, where a name, date, or number is changed; and page or laminate substitution in booklets. Alterations are usually local. One area of the document disagrees with the rest: the portrait area feels different under a fingertip, the laminate edge is disturbed, the background pattern breaks around a changed digit, or the data page disagrees with the machine-readable zone. Compare the document against itself. Internal consistency is the altered document's enemy.

Fantasy

A fantasy document is a document issued by nobody: an authority that does not exist, or a document type that no government issues. Novelty passports, so-called world passports, and official-looking cards from invented organizations fall here. Fantasy documents often look impressive precisely because they were designed to impress rather than to comply with a standard. Your defense is the IRS list itself. If the document type is not one of the 13 accepted types from an identifiable issuing authority, it cannot support a W-7, however genuine it feels.

Impostor

An impostor case is not a document problem at all. The document is genuine and unaltered, but the person presenting it is not the person it was issued to. Your defense is the interview: compare the photograph to the person, note age progression and the stable features of a face, and ask the basic questions a document holder should answer easily. This is one reason the CAA process requires an interview with the applicant and why the Responsible Party must have the original documents in hand, even when the interview is conducted by video.

Pause and check: A card looks flawless, but its hologram does not change when you tilt it. Which fraud family are you likely holding, and why?

The expected optically variable behavior is missing. Recheck the exact model, viewing conditions and condition of the feature. Do not certify while the discrepancy remains unresolved; the observation alone does not establish who made the document or how.

Fictional course exercise; rule context: Home Office: document examination.

When a document fails

Course method; reference context: IRS W-7-COA: certification · IRS W-7: supporting documents.

Sooner or later a document will fail your examination. Handle that moment professionally and you protect everyone involved, including the applicant, who may be an innocent victim of a bad document rather than its author.

First, do not certify what you cannot support. Your signature attests to authenticity, and there is no partial credit. If the document fails, the Certificate of Accuracy does not get signed for that document. Second, give the applicant a path forward. Many applicants have more than one acceptable document, and a different document may pass cleanly. If no acceptable document can be certified, the applicant still has options: submitting original documents directly to the IRS with the Form W-7, or visiting an IRS Taxpayer Assistance Center that offers document review. Third, stay within your authority. You are an examiner, not law enforcement. You have no power to seize or confiscate a document, and you should never accuse an applicant of fraud. State what you can and cannot do, in neutral terms: "I am not able to certify this document." Fourth, write it down. Note in your file what was presented, what failed, and what you advised. That note protects you at a compliance review and creates an honest record if the same document appears again.

Recordkeeping and safeguarding

Rule references: IRS W-7-COA: certification · IRM 3.21.264: CAA duties · IRS Publication 4557: safeguarding data.

Your duty does not end when the application leaves your office. The Certificate of Accuracy itself states the retention rule: the CAA shall retain copies of all relevant documents, including signed copies of the Forms W-7 submitted to the IRS, on which you relied to certify identity and foreign status. Build a file for every applicant that contains the signed Form W-7 copy, copies of the documents you reviewed, your copy of the Certificate of Accuracy, and your examination notes. Keep those files organized so that a compliance review, whether in person or by correspondence, is an exercise in retrieval rather than reconstruction. The IRS also expects you to cooperate with reviews and with requests from the Treasury Inspector General for Tax Administration and the Government Accountability Office.

Finally, safeguard what applicants hand you. Identity documents and their copies are exactly the raw material of identity theft. Store originals in your possession securely and return them promptly; an applicant's passport should never sit in an unsecured inbox tray. Store copies, paper or digital, under the same discipline you apply to tax return data: limited access, locked or encrypted storage, and no casual transmission. If you conduct a video interview, remember the rule that makes it valid: you, the Responsible Party, must hold the original documents or certified copies during that interview. Convenience never outranks the agreement you signed.

Where your examination sits in the modern process

Rule references: IRS: program application changes · IRS: forensic training · IRM 3.21.264: CAA duties.

A word about the process that surrounds your examination, because students sometimes confuse the two trainings and the two systems. Since January 2024, the Acceptance Agent application itself is fully electronic: you apply through IRS e-Services with an ID.me verified identity, and you upload supporting documents, including your forensic training certificate, through the CAA Documentation Upload Tool. The paper Form 13551 and fingerprint cards you may still see described in old articles are retired. That electronic process is how you become a CAA. The examination skills in this course are what you do afterward, with applicants, for the life of your agreement.

The IRS does not endorse forensic-training providers. Its public guidance tells applicants to assess document coverage, testing, and delivery of an original certificate; use of a provider listed on IRS.gov is not mandatory. IRM 3.21.264.4.6 separately requires vetted and approved providers and describes periodic review of course materials and certificate acceptability. This course does not promise IRS acceptance of its certificate or approval of a CAA application. Confirm provider standing with the ITIN Policy Section when needed; course completion is not appointment as a CAA.

Where the IRS requires submission of a forensic-training certificate, each Responsible Party needs an individual original for a new, renewal or amended CAA application, subject to applicable IRS exceptions. IRM 3.21.264.4.6 rejects a certificate issued more than four years before application submission, one listing multiple Responsible Parties, one signed by the same person as instructor and student, or one issued by the firm applying. Continued access to this course does not extend that IRS certificate-age limit. A replacement certificate or an ordinary practice retake keeps the original training-completion date; it does not restart that period. Check whether your existing certificate remains acceptable before assuming a fresh course is required; course completion does not appoint you as a CAA.

The applicant-facing process has its own fixed shape. You interview the applicant; the interview may be conducted by video, but only when you hold the original documents or certified copies in your possession during it. You examine the documents using the workflow from this module. Conduct the interview with each primary, secondary and dependent applicant, following the current IRS requirements. Then you sign the Certificate of Accuracy, assemble the package of Form W-7, the Certificate of Accuracy, and copies of the documents you reviewed, and submit it. Your examination supports your own certification under the agreement. IRS staff also authenticate documents through designated in-person services and review submitted evidence; your office is one authorized route. Use the exact document references, record your findings, and decline certification while a material question remains unresolved.

Checklist: keep this

Course method; reference context: IRS W-7: supporting documents · IRS W-7-COA: certification · Home Office: document examination.

Use this checklist for every document, before you apply the document-specific checklists in later modules.

Red flags

Course method; reference context: IRS W-7: supporting documents · IRS W-7-COA: certification · Home Office: document examination.

Case study

Fictional course exercise; rule context: IRS W-7: supporting documents · IRS W-7-COA: certification · Home Office: document examination · ICAO Doc 9303 Part 3: MRZ rules

The genuine package

A client presents an unexpired foreign passport, the only stand-alone document in the system. You identify the issuing country and design series. The data page photograph matches the client, the shared fields agree with the machine-readable zone after allowing for documented formatting and transliteration, and the check digits validate. Under magnification the background microprinting reads as continuous text. Under UV the page shows the expected fluorescent design and the paper does not glow like office stock. The laminate is undisturbed and the data page aligns with the booklet's perforated number. You copy the passport, record your checks, and sign the Certificate of Accuracy relying on the passport for both identity and foreign status.

The suspect package

Another client presents what appears to be the same passport model. The face data looks clean, but the portrait zone feels slightly raised and rough under your fingertip, and the laminate edge near the portrait is disturbed. Under magnification, the fine background pattern around the portrait is broken and re-printed, and the portrait itself has the soft, dotted look of an inkjet image rather than the issuing authority's personalization process. The machine-readable zone matches the printed data, because whoever substituted the photo changed nothing else. This is the classic altered document: a genuine booklet with a substituted portrait. You do not certify it. You tell the client, neutrally, that you cannot certify this document, explain the alternatives (another acceptable document, or submitting originals to the IRS directly), and note the failed checks in your file. Notice what caught the fraud: not any single gadget, but the workflow. The tactile check raised the question, magnification confirmed it, and internal comparison explained it.

Remember these three

Course method; reference context: IRS W-7: supporting documents · IRS W-7-COA: certification · Home Office: document examination.

Module 1 quiz

1. What does a CAA certify by signing Form W-7-COA, the Certificate of Accuracy?

2. For your own CAA authentication, which statement about the documents you examine is correct?

3. An applicant presents a U.S. driver's license as the only supporting document. What is the correct analysis?

4. During examination, one area of a document feels rough and raised, the background pattern breaks around the portrait under magnification, and everything else checks out. This pattern most likely indicates:

5. When a document fails your examination, what should you do?

Score 80% or better (4 of 5) to complete the module. Retakes are free and unlimited.