How to Spot Mortgage Application Fraud: A 2026 Guide for Australian Brokers

In August 2026, AUSTRAC's Fintel Alliance published the results of Operation Claw, a joint analysis of data from 10 major Australian banks. It found potentially hundreds of millions of dollars in suspected fraudulent home loans, mostly on Sydney properties, supported by inflated incomes, misrepresented employment and fabricated or unverifiable business activity. Two warning signs kept turning up across the participating banks. One was falsified or misleading documents. The other was the same mortgage brokers, accountants and law firms appearing on application after application.

Very few brokers would knowingly lodge a false document. But your name is on every file you lodge, and a doctored payslip that passes through your hands becomes your problem as well as the lender's. If you are short on time, skip to the mortgage fraud detection checklist below. It is the part worth keeping open while you assess a file.

What mortgage application fraud looks like in 2026

Most of it is unsophisticated, and experienced brokers will recognise every move on this list. The difference in 2026 is how good the fakes look.

• Payslips or income letters that overstate what the client earns, often by just enough to clear serviceability.
• An employer that does not exist, a business registered weeks before the first payslip, or a start date moved back to get past a probation period.
• A friend's payslip with the name changed, or one file reused across several applications.
• Debts, buy now pay later accounts and living expenses left off the fact find so the deal services.
• Offshore or third-party money used to complete settlements and make repayments, which Operation Claw also found.
• Documents made with AI. In May 2026, ASIC wrote to licensees warning that frontier AI models are lowering the barrier to sophisticated attacks. A convincing fake payslip now takes minutes to make.

Why the risk lands on the broker

RAMS is the clearest recent example. ASIC's case against the Westpac-owned lender covered June 2019 to April 2023. Internal findings included franchise staff submitting false payslips from non-existent employers and altering clients' liabilities and expenses so applications would be approved. In October 2025 the Federal Court ordered RAMS to pay a $20 million penalty after it admitted widespread compliance failures.

Operation Claw went further. Fintel Alliance passed the names of individuals and entities potentially involved in submitting false documents to ASIC, the Australian Taxation Office and the Tax Practitioners Board. Some banking relationships have already been ended, and AUSTRAC says more action is coming. A broker who loses a lender's accreditation can lose a large part of their business with it.

Your existing obligations point the same way. Responsible lending rules already require you to take reasonable steps to verify a client's financial situation, and Best Interests Duty means your file should show what you checked and why you were satisfied. If a loan you arranged later turns out to involve fraud, that file is your defence, and it needs to show its work: what you checked, what looked odd, what you asked and what the client said.

Mortgage fraud red flags: a document-by-document checklist

Most of these checks need nothing more than a calculator, ABN Lookup and some patience.

Identity documents

• The client's name is spelled differently across their ID, payslips, bank statements and the fact find.
• The date of birth or residential address changes from one document to the next.
• The driver licence or passport has expired, or the licence number does not fit the issuing state's format.
• A document on the file belongs to someone who is no longer on the application.

How to spot a fake payslip

• The arithmetic. Gross pay minus tax minus deductions should equal net pay. Fakes get this wrong surprisingly often.
• Year-to-date figures. YTD gross should never be lower than this period's gross, and should grow by the right amount from one payslip to the next.
• Superannuation. Employer super should match the super guarantee rate for the period (12% from 1 July 2025).
• Tax withheld. PAYG withholding should sit close to what the ATO's tax withheld calculator gives for that gross pay and pay frequency.
• Missing details. A genuine payslip shows the employer's ABN, the pay period and the pay date. If the basics are missing, ask why.
• Dates. Pay periods should run end to end without gaps or overlaps, and the pay date should not fall before the period ends.
• Repeats. Two payslips with identical gross, tax and net for different periods suggest one was copied from the other.
• Presentation. Mismatched fonts, misaligned columns and a misspelled employer name are all worth a closer look.

The employer

The RAMS payslips came from employers that did not exist. This is where a fake employer tends to show up.

• Look the ABN up on the Australian Business Register. Check that it is valid, active on the pay date, and registered to a name that matches the payslip.
• Be curious about an ABN that became active only weeks before the client's first payslip, or a salary paid through an ABN registered to an individual.
• Check that the declared start date fits the year-to-date figures on the latest payslip.
• If you are unsure, ask the client's permission to call the employer. If they say no, treat that as a red flag too.

Bank statements and income

• Check the BSB on AusPayNet's BSB Lookup against the bank named on the statement. A Westpac statement with a CBA BSB is a problem.
• Net pay on the payslip should land in the account as a salary credit of the same amount, from a payer whose name matches the employer.
• Declared income should be close to what the bank data shows.

Commitments and conduct

• Repayments to lenders, credit cards or buy now pay later providers that match no liability on the fact find.
• Declared living expenses well below what the client actually spends.
• Dishonour fees, long stretches in overdraft, and gambling spend large enough to affect serviceability.

Funds to complete

• Large deposits from third parties in the last few months, with no clear source.
• A declared deposit well above the balances you can see, with no gift letter or statutory declaration on file.

The file itself

Every PDF carries properties that most clients never think about. Open the document properties in your PDF viewer and look for:

• A producer or creator that names a PDF editor (iLovePDF, Canva, Photoshop and the like) on something a payroll system or bank should have generated.
• A modified date earlier than the creation date, or signs the file has been saved several times.
• Metadata stripped out entirely. Payroll and banking systems normally stamp it.
• A different producer on two consecutive payslips from the same employer.
• A scanned image of a document that should have been a digital export. This is common and usually innocent, but it is a fair reason to ask for the original.

Why manual checks miss more than they used to

Visual inspection is the weakest check you have, and AI has made it weaker. A well-made fake payslip looks exactly like a real one.

The more reliable signals sit between documents. A payslip can be perfect on its own while the BSB on the bank statement belongs to a different bank, the employer's ABN was registered three weeks ago, or the salary credit is $400 short of the stated net pay. Finding those means cross-referencing every document against every other document and the fact find, on every file. Few brokerages have the hours.

Timing matters too. Documents arrive over days or weeks and details get corrected along the way, so a check done at the start of the file can be out of date by lodgement. Our client onboarding guide covers how to tighten that collection stage.

Open banking: the hardest evidence to fake

The strongest single defence against edited bank statements is to stop relying on them. With the client's consent, open banking under the Consumer Data Right delivers transaction data straight from their bank. There is no PDF for anyone to alter, and the data is current.

The Australian Banking Association has said banks want secure access to ATO income data for the same reason: a verified source is much harder to fake than a document. Nobody has said when, or whether, that access will arrive. Until it does, consented bank data is the closest thing a broker has. Our guide to open banking for mortgage brokers explains how the CDR works and how to introduce it to clients, and Lend1 connects through Fiskil. If you already use Lend1, the documentation walks through connecting Fiskil.

How Lend1 automates the checklist

Lend1's AI Fraud Detection runs most of the checklist above for you. There are 47 checks in nine groups: identity, employment, payslips, bank statements, income, liabilities and conduct, funds, file integrity, and declared financials compared with bank data. They run whenever a document is read, open banking data arrives, the client completes their application or someone corrects a field, so the file is re-checked each time it changes. You can also run them on demand.

The checks themselves are plain code. Payslip arithmetic, year-to-date progression, super and PAYG withholding are recalculated. Employer ABNs are looked up live on the Australian Business Register, and BSBs are checked against the AusPayNet directory. Every uploaded file is fingerprinted, so if the same document turns up for a different client in your firm, it gets caught.

Each finding is graded critical, warning or info. Critical findings alert the deal owner by email and in the app, and findings can also trigger your workflow automations.

AI comes in at the end. It writes a plain-English summary of what needs confirming and recommends one of three next steps: proceed, confirm with the applicant, or obtain source documents. It also drafts a question for the client and a file note. Findings describe what was observed and what would settle it, and they never call anyone a fraudster.

AI Fraud Detection is included on Starter, Pro and Enterprise. The checks use no AI credits, and the summary keeps running even if your monthly allowance runs out. Two permissions control who can see findings and who can resolve them, so a compliance reviewer can see every deal without being able to edit it. To see it run on a real deal, request a demo.

What automation does not do

No tool catches everything, and this one has limits worth knowing.

• Lend1 does not check identity documents against government registers. The licence check only confirms the number fits the issuing state's format.
• It does not analyse images or fonts for signs of editing. File checks read the PDF's properties and internal structure.
• Bank conduct and income checks need open banking data. On an uploaded statement, Lend1 checks only the BSB and the bank name.
• Duplicate files are matched within your own firm only.
• It does not make the call for you. Plenty of findings have innocent explanations (a second job, a scanned statement, an employer that restructured under a new ABN). It gives you the right question, early enough to ask it.

Specialist document forensics tools go deeper on the document itself. As at October 2026, Fortiro, Docuscan's FraudX and outsource Financial's Fraud Finder are all marketed to Australian brokers and lenders for this purpose, and lenders run their own checks after lodgement. Broker-side checks are one layer of several.

Frequently asked questions

How do I check if a payslip is real? Recalculate net pay from gross, tax and deductions, confirm the year-to-date figures progress correctly, and look up the employer's ABN on the Australian Business Register. Then match the net pay to a salary credit in the client's bank data. If anything does not line up, ask the client to explain it, or ask permission to contact the employer.

Can AI detect fake payslips? AI can help, but the most reliable checks are arithmetic and cross-referencing: comparing the payslip with the ABR, the ATO withholding schedule and the client's actual bank data. Lend1 does those checks in code and uses AI only to explain the results in plain English.

Is open banking enough on its own? It is the strongest evidence of income, spending and commitments, but it does not verify identity documents, payslip arithmetic or the employer's ABN. Use it alongside those checks.

What should I do if I suspect a fraudulent loan application? Do not lodge until the question is resolved. Ask the client for original documents or consent to verify directly, record what you found and what you asked in a file note, and speak to your aggregator or licensee's compliance team about your reporting obligations.