Someone signs a will, a contract, or a promissory note. Later, another party says the signature is forged, or that a page was swapped in, or that a number was changed after the fact. A questioned document examiner is the person who looks at the paper itself and works out what happened.
The job is not about reading what a document says. It is about the physical object: the ink, the paper, the pressure of the pen, the marks a printer leaves. Much of what settles these cases is invisible to the person holding the page.
what the exam tries to establish
An examiner works toward a short list of questions. Is the document genuine, or was it altered after signing? Did a particular person write the handwriting, or can they be ruled out? What machine produced the printing? The answers go into a written report and, when a case reaches court, into testimony that explains how the examiner got there.
There is a limit worth stating plainly. An examiner can often say a signature is not genuine, or that two samples share features, without naming the forger. Handwriting comparison points to a source or rules one out. It does not read intent, and an honest report says where the evidence stops. A jury can hear the difference between someone stating what the paper shows and someone reaching for a conclusion it will not support. Overreaching is how expert testimony gets thrown out.
comparing against known writing
You cannot judge a disputed signature in isolation. You compare it against samples known to come from the person, called standards. These fall into two kinds. Requested standards are writing the person produces on demand, copying out words an examiner dictates. The problem is that people asked to write for an examination often change their hand, whether or not they mean to.
Nonrequested standards are writing the person produced in ordinary life, before any dispute existed: checks, letters, signed forms, an old diary. They rarely contain the exact words in question, but they are honest, because the writer had no reason to disguise anything. Good examinations lean on both.
the tools
Two instruments do a lot of the work. An electrostatic detection apparatus reads the faint indentations left on a page by writing on the sheet above it. That can show an entry was added later, or reveal what a missing page said. Spectral comparators view a document under different wavelengths of light, which separates inks that look identical to the eye. Two lines written in what appears to be the same pen can turn out to be different, a sign that something was added after the original was signed.
handling the evidence
The examination is only as good as the document that reaches it. Folding, stapling, cutting, or writing notes on original evidence can destroy the very marks an examiner needs, and it can hand the other side an argument that the document was tampered with. Originals should be stored flat and untouched, with a clear record of who held them and when. A broken chain of custody can sink an otherwise solid finding.
Seeing red flags like these in your own numbers?
A confidential consultation costs nothing and tells you where you stand.
What it means for your matter
Most engagements are not Enron. But the pattern is the same at every scale: a diverted vendor payment, a related party that shouldn't exist, revenue booked before it was earned, a reserve fund that never quite reconciles. The methods used to expose a multibillion-dollar fraud are the same methods that expose a bookkeeper skimming from a small business or a managing agent taking kickbacks from a co-op.
If something in your financial picture doesn't add up, the earlier a forensic accountant looks, the more of the trail survives. Documents get lost, memories fade, and money moves. The record is easiest to reconstruct while it is still fresh.
Think something's wrong with your numbers?
Talk to a forensic accountant. It's confidential, and there's no obligation.