PDF metadata forensics: how to spot a tampered CoS

A Certificate of Sponsorship is an electronic Home Office record, but sponsors typically hand applicants a PDF summarising it. That PDF is what scammers most often manipulate — and every PDF carries embedded metadata that can reveal whether it's been altered after the fact.

Why metadata matters.

PDF metadata includes fields like Creation Date, Modification Date, Creator, and Producer — effectively a digital paper trail. In a genuine, freshly issued CoS PDF, the creation and modification dates should be the same or very close. A modification date meaningfully later than the creation date, with no obvious legitimate reason, is a real warning sign.

Step 1: Get the actual PDF file.

Work from the original file the employer sent you — not a screenshot or a printed copy. Those strip the metadata entirely.

Step 2: Check the document properties.

1. 1

   Open the properties panel.

   In Adobe Acrobat Reader: File > Properties (Ctrl+D / Cmd+D). Most browsers' built-in PDF viewers also expose document properties.

2. 2

   Compare Created and Modified dates.

   A significant gap between the two, without a clear explanation such as a digital signature, suggests the document was edited after issue.

3. 3

   Check the Creator and Producer fields.

   Generic software names aren't automatically suspicious — but combined with an unexplained modification-date gap, they add weight to the concern.

What metadata alone can't tell you.

Metadata is a strong indicator, not proof on its own — a PDF with no metadata at all is itself a red flag, since that's often stripped deliberately to hide a document's history. Always combine this check with verifying the sponsor's licence on the official UKVI register and contacting the employer directly through contact details you find independently.

The ability to open and read a PDF says nothing about whether it's genuine. Metadata inconsistencies are one of the few checks that can catch tampering a visual inspection will miss entirely.