What is Error Level Analysis (ELA) and How Does It Catch Forgeries?

In the modern digital economy, submitting a PDF bank statement or a JPEG invoice takes seconds. Unfortunately, forging one takes just as little time. With the rise of advanced photo-editing software, traditional visual inspections are no longer enough to verify a document's authenticity. This is where Error Level Analysis (ELA) steps in.

The Science Behind File Compression

To understand ELA, you first have to understand how digital images and documents are saved. When a scanner or software creates a JPEG file, it compresses the entire image uniformly. Every pixel in that original file shares the same "compression signature" or "error level."

However, if a fraudster opens that document in an editing program, pastes a new name, changes an account balance, and saves it again, something cryptographic happens behind the scenes. The newly added pixels undergo a second round of compression, while the original background undergoes a different mathematical shift.

Reading an ELA Heatmap

When you run a file through an ELA tool, the output is not a normal image—it is a cryptographic heatmap.

• Authentic Documents: Display uniform coloring. The compression edges look similar across the entire page, appearing as a dull, consistent texture.
• Forged Documents: Display stark, brightly glowing patches. Because the forged text or numbers were saved at a different compression level than the rest of the file, they "pop" off the page during the analysis.

Why Institutions Rely on ELA

Banks, insurance agencies, and loan officers cannot rely on the naked eye. A perfectly matched font can fool a human, but it cannot fool the underlying file mathematics. By using ELA tools, institutions can flag potentially fraudulent documents before approving payouts or verifying identities.