How to Spot a Fake Pay Stub: 6 Math Checks
Spot a fake pay stub with six checks a verifier can re-run: gross-to-net reconciliation, YTD continuity, TY 2026 FICA rates, and false-positive traps.
A landlord holding an application that expires today does not need a lecture on document forensics. They need to know whether the numbers on the page could plausibly have come out of a payroll system.
This is verification-side guidance. It is written for landlords, property managers, HR staff, bookkeepers, and loan processors deciding whether an income document is genuine. It is also for honest self-employed readers and small employers whose real stub has to survive that same scrutiny. Every check here is something a verifier re-runs independently with a calculator. None of it is a recipe for making a fabricated document pass.
The stakes on the other side are worth stating plainly. Submitting a falsified pay stub to obtain housing, credit, or a loan is fraud, and the penalties are not theoretical. A false statement to a federally insured lender carries a fine of up to $1,000,000, up to 30 years in prison, or both, under 18 U.S.C. 1014. Rental-application falsification is prosecuted under state fraud statutes.
Snappt’s 2026 Multifamily Fraud Report found a 5.1% average fraud rate across 1,462,338 applicant submissions in 2025, with more than 86,000 edited applications identified, and pay stubs among the document types with the highest fraud rates (Snappt). That is a vendor’s data, so weigh it accordingly, but the direction is not in dispute.
This article is general information, not legal advice.
Why the classic red flags stopped working
Search this topic and you will find the same six visual tells repeated on every page: suspiciously round numbers, the letter “O” typed where a zero belongs, mismatched fonts, missing decimal places, no itemized deductions, and a low-resolution logo.
Run them. They take about thirty seconds and they still catch lazy edits. But treat them as a first pass, not a verdict.
The reason is that the threat moved. Snappt attributes the largest share of cases in its 2026 report, more than 42,600, to “template farms”: mass-produced document templates sold online and reused across thousands of applicants. Those templates render clean fonts, correct decimals, plausible deduction lines, and a sharp logo, because that is the entire product. Snappt also reports that property managers who once caught roughly 90% of altered applications now catch closer to 75%.
A visual checklist against a professionally generated document produces false confidence, which is worse than no check at all. What a fabricated stub still fails routinely is arithmetic. Numbers have to agree with each other across lines, across periods, and against statutory rates, and keeping all of that consistent is much harder than getting the layout right.
The rest of this article is the layer underneath the pixels.
Checks 1 and 2: the two-minute arithmetic test
Two checks, one calculator, one stub. Start here on every document you receive.
Check 1: gross minus deductions equals net, to the cent
Add every itemized deduction. Subtract the total from gross. The result must equal the printed net pay exactly.
Take an hourly employee, biweekly, TY 2026, working 80.00 hours at $28.00 per hour.
| Line | Amount |
|---|---|
| Gross pay (80.00 x $28.00) | $2,240.00 |
| Pre-tax medical (Section 125) | $85.00 |
| 401(k) deferral, 5% | $112.00 |
| Social Security | $133.61 |
| Medicare | $31.25 |
| Federal income tax withheld | $163.00 |
| State income tax withheld | $61.28 |
| Total deductions | $586.14 |
| Net pay | $1,653.86 |
The arithmetic: $85.00 + $112.00 + $133.61 + $31.25 + $163.00 + $61.28 = $586.14. Then $2,240.00 - $586.14 = $1,653.86, which matches the printed net exactly.
Any residual at all, even one cent, means one of two things: a figure was edited after the fact, or the stub is not itemizing a deduction that it took. Both are worth a question. This check has no tolerance band, because net pay is calculated from the same rounded numbers the stub prints.
Check 2: FICA against FICA-taxable wages, not gross
This is the check almost every other guide gets wrong, and getting it wrong is how real stubs end up rejected.
The TY 2026 employee rates, with TY 2025 alongside for stubs that straddle the year boundary:
| Item | TY 2025 | TY 2026 |
|---|---|---|
| Social Security (OASDI), employee | 6.2% | 6.2% |
| Social Security wage base | $176,100 | $184,500 |
| Maximum employee Social Security for the year | $10,918.20 | $11,439.00 |
| Medicare, employee | 1.45% | 1.45% |
| Medicare wage base | none | none |
| Additional Medicare Tax | 0.9% | 0.9% |
| Additional Medicare withholding trigger | wages over $200,000 | wages over $200,000 |
Rates per IRS Topic No. 751.
Those rates apply to FICA-taxable wages, which are not the same as gross pay. Section 125 cafeteria-plan items (health, dental, and vision premiums, most HSA contributions, health FSA contributions) reduce Social Security and Medicare wages. Elective 401(k) or 403(b) deferrals reduce federal income tax wages but do not reduce FICA wages. See IRS Publication 15 for the treatment.
In the example above, FICA-taxable wages are $2,240.00 - $85.00 = $2,155.00.
- Social Security: 6.2% x $2,155.00 = $133.61
- Medicare: 1.45% x $2,155.00 = $31.2475, rounded to $31.25
Both match the stub. Apply the rates to gross instead and you get 6.2% x $2,240.00 = $138.88 and 1.45% x $2,240.00 = $32.48, off the printed figures by $5.27 and $1.23. A verifier working from gross would flag a perfectly correct document.
The 401(k) line trips people in the other direction. Subtracting the $112.00 deferral as well gives 6.2% x $2,043.00 = $126.67, which is too low, because deferrals are still subject to FICA.
If you would rather not do this by hand, our FICA tax calculator computes the same figures from gross and pre-tax deductions.
Expect up to a cent of variance on any rate-derived line, since $31.2475 rounds to $31.25. A one-cent FICA difference is a rounding convention, not fraud. Check 1 is the one with zero tolerance.
Check 3: YTD continuity across consecutive stubs
Ask for two or three consecutive stubs. That is the mortgage industry norm, and it exists because a single stub has no continuity to break. Fabricating one internally consistent document is achievable; making three of them chain together correctly is a much harder job. Our guide on how many pay stubs a lender wants covers the documentation standards in more detail.
Prior stub’s YTD, plus this stub’s current-period figure, equals this stub’s YTD. On every line: gross, each deduction, and net.
Same employee as above, now at pay date 14 of 26 in 2026:
| Column | Prior stub (period 13) | + Current period | = Current stub YTD |
|---|---|---|---|
| Gross | $29,120.00 | $2,240.00 | $31,360.00 |
| Pre-tax medical | $1,105.00 | $85.00 | $1,190.00 |
| FICA-taxable wages | $28,015.00 | $2,155.00 | $30,170.00 |
| Social Security | $1,736.93 | $133.61 | $1,870.54 |
| Medicare | $406.25 | $31.25 | $437.50 |
Cross-check the gross line independently: 14 x $2,240.00 = $31,360.00. It holds.
The three-cent trap
Look at the Medicare row. The stub says $437.50. A verifier who applies the rate to YTD FICA wages gets 1.45% x $30,170.00 = $437.465, which rounds to $437.47, and concludes they have caught a three-cent forgery.
They have not. Payroll systems accumulate YTD by summing the rounded per-period amounts, so 14 periods at $31.25 is $437.50. The rate is applied per period, then added, not applied to the annual base.
Reconcile YTD by addition across stubs, never by re-applying a rate to a YTD figure. If you want the addition done for you, the YTD earnings calculator does the accumulation, and what YTD actually means on a pay stub explains how the columns are built.
Two legitimate discontinuities
YTD follows the pay date, not the period dates. A period running Sunday 2025-12-21 through Saturday 2026-01-03 and paid on Friday 2026-01-09 counts toward 2026 YTD, even though most of the work happened in 2025. A verifier who computes YTD from period start dates will be off by a full period through January and February.
Mid-year changes break the ratio test. A raise, a benefits-election change, a bonus, or a stretch of unpaid leave will all break “YTD divided by per-period gross equals the period number.” That ratio is a smell test, not a proof. What must hold exactly is the stub-to-stub addition in the table above.
Checks 4 and 5: dates, pay frequency, and the wage base cap
Check 4: do the dates match the stated frequency
Generated documents get dates wrong more often than they get money wrong, because the money gets more attention.
| Frequency | Periods per year | Period length | Pattern to expect |
|---|---|---|---|
| Weekly | 52 (sometimes 53) | 7 days inclusive | Period end dates exactly 7 days apart |
| Biweekly | 26 (sometimes 27) | 14 days inclusive | Period end dates exactly 14 days apart |
| Semi-monthly | 24 | 13 to 16 days | Almost always 1st to 15th, then 16th to month end |
| Monthly | 12 | calendar month | 1st to month end |
Four things to test:
- Inclusive period length. Take (end date minus start date) and add 1. Our example period runs Sunday 2026-06-21 to Saturday 2026-07-04: 13 days apart, plus 1, equals 14. Correct for biweekly.
- Pay date follows period end. The example pays Friday 2026-07-10, six days after the period closed. Typical lag runs 2 to 10 days when payroll runs in arrears. A pay date on or before the period end is not impossible: semi-monthly and monthly salaried payrolls are often run on a current basis, paying the 1st-to-15th period on the 15th. What matters is that the relationship is the same on every stub you are given. A lag of several weeks deserves a question.
- Frequency and length agree. A stub labeled semi-monthly showing a clean 14-day period, or labeled biweekly showing the 1st through the 15th, is internally inconsistent. This is a common generator artifact.
- Period-number sanity. YTD gross divided by per-period gross should land near the number of pay dates elapsed. Here, $31,360.00 divided by $2,240.00 equals 14.
On that last one, mind the 27-period caveat. Biweekly years usually contain 26 pay dates but occasionally 27, depending on the calendar and the employer’s pay-date anchor. On a first-Friday anchor, 2026 has 26 periods, while 2027 and 2032 have 27. Weekly equivalents run 53. A YTD implying 27 periods is not automatically a fake.
Check 5: the Social Security wage base
For TY 2026, Social Security withholding stops once year-to-date Social-Security-taxable wages reach $184,500. On a semi-monthly employee at $9,000.00 gross per period with no pre-tax items, it plays out like this:
| Period | YTD wages | SS-taxable this period | SS withheld |
|---|---|---|---|
| 20 | $180,000.00 | $9,000.00 | $558.00 |
| 21 | $189,000.00 | $4,500.00 | $279.00 |
| 22 | $198,000.00 | $0.00 | $0.00 |
| 24 (final) | $216,000.00 | $0.00 | $0.00 |
Period 21 is where the cap lands mid-period: only $4,500.00 of that period’s wages are still taxable, so withholding is $279.00 instead of $558.00. From period 22 on, the line is $0.00.
Three takeaways for a verifier. A partial Social Security amount followed by $0.00 lines is correct, not evidence of editing. YTD Social Security should never exceed $11,439.00 for TY 2026 (or $10,918.20 for TY 2025); if it does, the document is wrong. And Medicare has no wage base, so the Medicare line keeps accruing at 1.45% all year. A stub where Medicare also stops is a genuine red flag.
Check 6: does the employer exist, and what to do when a stub fails
Resolve the employer independently
A real stub carries the employer’s legal name and address, the employee name (many payroll systems print only the last four digits of the SSN), inclusive pay-period dates, the pay date, and each rate with the hours worked at that rate.
Verify the employer through a channel you sourced yourself, in this order of effort:
- An applicant-authorized match against bank deposits for the same amounts and dates.
- A third-party verification of employment service such as The Work Number.
- Direct contact with HR using a number from the company’s own published site, a state Secretary of State business registry, or a directory.
- A W-2 or an IRS tax transcript for prior-year income.
Never call the phone number printed on the stub. It is the single easiest field to control. Cross-check the employer name, job title, and employment dates against what the applicant wrote on the application. Fannie Mae’s principle for mortgage files is that income documentation must come from a third-party source such as HR, a payroll department, or a payroll vendor, with the most recent stub dated no earlier than 30 days before the application and showing all year-to-date earnings (Selling Guide B3-3.2-01).
Fannie Mae explicitly accepts stubs downloaded from an employee portal. “It came from the internet” is not itself a red flag.
When a stub fails a check
Slow down before you conclude. Most failures are one of the false positives above, so start by asking the applicant a direct question. A real employee can usually explain a $0.00 Social Security line or a mid-year raise in one sentence.
When it still fails, ask for independent proof rather than debating the document: bank statements showing the deposits, a W-2, a tax transcript, or third-party verification. Apply the same criteria to every applicant, every time, since inconsistent screening creates its own liability.
If a consumer report (a tenant screening report or credit report) contributed to the denial, the Fair Credit Reporting Act requires a written adverse-action notice naming the reporting agency and telling the applicant they can request a free copy of the report within 60 days. See the FTC’s guidance for landlords and the CFPB’s explainer. Written notices are the safe path even when you believe none is required.
The other side: making sure your real stub survives the check
If you are self-employed, a contractor, or a small employer writing your own stubs, the same six checks run inward. Plenty of honest applicants get rejected because their real document fails arithmetic that a leasing office can do in two minutes.
Start with what belongs on the document. California Labor Code section 226 is the most concrete model available, and it works as a template anywhere: gross wages earned, total hours worked, piece-rate units and the applicable piece rate where pay is piece-based, every deduction itemized, net wages earned, inclusive pay-period dates, the employee’s name with the last four of the SSN, the employer’s legal name and address, and each hourly rate with the hours at that rate. Federally, 29 CFR Part 516 requires employers to keep hours worked, the regular rate, all additions and deductions, total wages per period, and the pay-period dates, whether or not a stub is furnished. Requirements vary, so check pay stub rules in your state.
Two things go wrong most often on self-made stubs. The totals do not reconcile to the cent, usually because a spreadsheet did the math in floating point and the rounding drifted. And the YTD columns restart, jump, or get recomputed from scratch each period instead of carrying forward. Both look exactly like tampering to a screener.
That is the problem Payslip44 is built around: reusable employer, employee, and item templates so identity fields stay identical period to period, and decimal money math so the totals reconcile and the YTD columns carry forward by addition. Accuracy is the goal. Nothing makes an inaccurate document acceptable.
If you are assembling documents for a leasing office, our guide to pay stubs for a rental application covers what to send and how many.
The six checks, in order
- Reconcile. Gross minus every itemized deduction equals net, to the cent, with no tolerance.
- FICA rates. Social Security at 6.2% and Medicare at 1.45% of FICA-taxable wages (gross minus Section 125 items), TY 2026, allowing a cent for rounding.
- YTD continuity. Prior stub YTD plus current period equals current YTD, line by line, by addition.
- Dates. Inclusive period length matches the stated frequency, and the pay date sits in the same relationship to the period end on every stub (typically 2 to 10 days after it).
- Wage base. A $0.00 Social Security line late in the year is correct above $184,500 YTD (TY 2026); YTD Social Security above $11,439.00 is not. Medicare never stops.
- Employer. Legal name, address, and a phone number you sourced independently. Never the number on the stub.
Print it, keep it by the desk, and run all six on every applicant rather than only the ones who give you a feeling. Consistency is what makes the process defensible, and it is also what keeps you from turning away someone whose paperwork was real all along.
Frequently Asked Questions
How can I tell if a pay stub is fake?
Re-run the arithmetic instead of studying the fonts. Ask for two or three consecutive stubs, confirm gross minus every itemized deduction equals net to the cent, confirm the prior stub's YTD plus this period equals this stub's YTD on every line, check Social Security and Medicare against FICA-taxable wages rather than gross, and verify the employer through a phone number or registry you sourced yourself.
Do the numbers on a real pay stub always add up exactly?
Gross minus deductions must equal net exactly, because net is computed from the same rounded figures the stub prints. Individual rate-derived lines can vary by a cent from rounding, and YTD columns are accumulated by adding rounded periods together, not by applying a rate to a YTD base.
Why doesn't Social Security equal 6.2% of gross pay on this stub?
Usually because of pre-tax Section 125 benefits (health, dental, vision, HSA, health FSA), which reduce FICA-taxable wages. 401(k) deferrals do not reduce them. Late in the year it can also be the Social Security wage base, which is $184,500 for TY 2026.
How many pay stubs should I ask for?
At least two consecutive stubs, ideally three. A single stub has no continuity to break, so the strongest check is unavailable. Fannie Mae's mortgage standard asks for the most recent stub dated no earlier than 30 days before the application, showing all year-to-date earnings.
Is it illegal to use a fake pay stub?
Yes. Submitting fabricated income documents to obtain credit, a loan, or housing is fraud. A false statement to a federally insured lender carries a fine of up to $1,000,000, imprisonment of up to 30 years, or both under 18 U.S.C. 1014, and rental-application falsification is prosecuted under state fraud and falsification statutes. This is general information, not legal advice.
What should a landlord do after spotting a fake pay stub?
Document what you found, request independent proof before concluding (bank deposits, a W-2, an IRS tax transcript, or third-party employment verification), apply the same screening criteria to every applicant, and issue a written adverse-action notice if a consumer report contributed to the denial.
Can a real pay stub have round numbers?
Yes. Salaried employees on flat semi-monthly gross, employees with no pre-tax benefits, and many contractor stubs all produce clean figures. Round numbers on their own are weak evidence. The reconciliation and YTD checks are what settle the question.
How do I make sure my own pay stub gets accepted?
Itemize every deduction so gross minus deductions equals net exactly, carry YTD forward consistently from period to period, use real pay-period and pay dates that match your stated frequency, print full employer identity details, and be ready to back the document with bank deposits or a 1099 or W-2.