Malte ZanderContents
Forged certificates reach authorities in four ways: as bought forgeries, as altered genuine documents, as genuine certificates earned by someone else and together with a fake verification page that confirms the forgery. In 2025, forged language certificates in German naturalization cases showed how quickly this can become a nationwide issue. Caseworkers verify safely when they contact the issuer themselves and never follow the link on the document.
- According to the German government, forged B1 certificates in naturalization cases were first described at a meeting of the large naturalization authorities in June 2025. The phenomenon is known to police nationwide (German Bundestag).
- The German interior ministry updated its guidance for naturalization authorities in August 2025 (German Bundestag).
- In a survey in August 2025, Bavaria alone reported 213 forged language certificates, even though authorities do not record such cases in a standardized way (Bavarian State Parliament).
- Through the Internal Market Information System (IMI), authorities in the EU can check the validity of professional qualifications from other member states (EUR-Lex).
Where do certificates matter in administrative procedures?
Wherever an authority does not assess a qualification itself but asks for proof. German nationality law requires German skills at B1 level for naturalization (Section 10, German Nationality Act), and many countries tie residence, citizenship or work permits to similar proof. The recognition of foreign qualifications, access to regulated professions and funding programs also depend on certificates. In public procurement, company certificates such as ISO certifications come on top.
In all of these procedures, a document triggers a legal consequence. That makes it valuable to forgers and demanding for caseworkers, who check credentials from many issuers whose documents they cannot know in detail.
How do forgeries get into procedures?
In four ways that get noticed differently:
| Route | Typical example | How it gets noticed |
|---|---|---|
| Bought forgery | A B1 certificate offered on social networks | When matched against the issuer's records |
| Altered genuine document | Level, grade or name changed in a genuine PDF | During a data match or signature check |
| Genuine exam, wrong person | A paid stand-in sits the exam | Rarely at the authority, more often at the issuer on exam day |
| Forgery with a fake verification page | The QR code on the document leads to a page showing "valid" | Only when the verification route is found independently |
The fourth route is the most dangerous for authorities, because it deceives the check itself. The page often sits under an address like [issuer].result-check.[random].com and shows nothing without the parameters from the QR code. Hidden fakes explains more.
What did 2025 show?
That a known problem suddenly became visible. According to the German government, forged B1 certificates in naturalization cases were first described at the meeting of the large naturalization authorities in June 2025. The forgeries are offered on social networks, among other places, and the interior ministry updated its guidance for authorities in August 2025 (German Bundestag).
The state figures are patchy because cases are not recorded consistently. Bavaria reported 213 forged language certificates, and Hesse estimates around 35 to 40 cases for 2024 and around 30 for 2025 up to the time of the inquiry (Hessian State Parliament). These figures show what gets noticed. A forgery with a convincing verification page stays invisible in the statistics.
How can caseworkers verify safely?
With a few fixed rules that apply to every issuer:
Find the verification route yourself, through the issuer's official website, which you open yourself.
Never rely only on the link or QR code on the document. At most, scan it to compare the target address with the official domain.
Ask the issuer when in doubt, using a contact from its website and the certificate's number, name and date.
Check EU professional qualifications through IMI if your authority is connected to it as a competent authority.
Place foreign degrees using your country's recognition body or database, such as anabin in Germany.
Record the check in the file: route, date, result.
Train the team with examples of genuine and fake verification pages. Anyone who has seen one fake verification page spots the next one faster.
Many of these steps also apply to HR teams, see the certificate verification checklist for HR.
How can authorities report a fake verification page?
Most effectively to the issuer whose name the page misuses. The issuer can get the page removed and warn other authorities. Capture three things first: the full link with all parameters, a screenshot with date and time, and a copy of the document that was presented. If the issuer offers a reporting route on its verification page, use it. In addition, anyone can report a fraudulent page to Google Safe Browsing so that browsers warn visitors.
Whether and when to file a criminal complaint depends on your internal rules. In Germany, making or using a forged certificate can count as forgery of documents (Section 267, German Criminal Code), and most countries have similar offences.
What can issuers do for authorities?
Authorities can expect quite a lot from issuers, and issuers gain a lot by offering it:
A fixed verification address on their own domain that also appears on the certificate.
A dedicated contact for authenticity inquiries from authorities that answers quickly.
A reporting route on the verification page where authorities can report a suspicious link or upload a certificate as a PDF.
Digitally signed certificates whose authenticity can be checked through the signature.
Regular briefings for authorities on what genuine certificates and genuine verification pages look like.
How does AI Fraud Protect help?
AI Fraud Protect is built for issuers and makes their verification routes more reliable for authorities. With the report widget on the issuer's verification page, caseworkers report a suspicious link in full or upload the certificate as a PDF. The AI analyzes the page right away, every case gets an evidence package, and the reports to host, registrar, DNS provider and Google go out with the certificate forgery framing after a person has reviewed them. Open cases stay on the list until the forgery is offline.
Start the free fraud scan for a short report within 48 hours, or request a demo to see the report widget and takedowns in the app.
FAQ
Can caseworkers use the QR code on a certificate?
To compare, yes; to verify, no. The code shows where the forger would send you. If it does not lead to the issuer's official domain, that is itself a strong sign of a forgery.
Who should we contact about a suspicious language certificate?
The test provider named on the certificate, through the contact on its official website. The Goethe-Institut, for example, lists its own address for reports on its website and offers an online authenticity check (Goethe-Institut).
What does reporting a fake verification page achieve?
It protects the next authority. As long as the page is online, it confirms further forgeries. Your report also gives the issuer the link that no search engine finds.
What about procedures that are already closed?
That depends on the procedure and the country. In Germany, for example, Section 35 of the Nationality Act governs withdrawing a naturalization obtained through deception or deliberately false information (Section 35, German Nationality Act). This is not legal advice.
Sources
Bavarian State Parliament: printed paper 19/8603, answer of 21 October 2025