Complete Forensic Document Examination guide : From Handwriting to Security Documents

Forensic Examination of Handwriting, Signatures, Forgeries, Inks, Paper Age, and Printed Security Documents/Currency

 

1. Introduction

Questioned document examination is an important branch of forensic science concerned with the scientific examination of documents whose authenticity, origin, authorship, alteration, or production method is disputed. Documents may provide crucial evidence in cases involving fraud, forgery, cheating, impersonation, financial crimes, disputed contracts, wills, anonymous letters, identity documents, bank instruments, and counterfeit currency.

The major areas of questioned document examination include handwriting examination, signature examination, detection of forgery and alterations, analysis of inks and writing materials, examination of paper, determination or estimation of the age of documents, and examination of printed security documents and currency.

The fundamental objective is not merely to determine whether a document "looks genuine," but to identify and evaluate observable characteristics using appropriate scientific methods and to determine whether the questioned document is consistent with a particular source, writing process, printing process, or alteration.

2. Handwriting Examination

2.1 Meaning of Handwriting

Handwriting is the individual expression of written language produced by the coordinated movements of the hand and associated neuromuscular system. Although handwriting is influenced by education, writing habits, language, writing instrument, and physical condition, individuals often develop relatively stable writing characteristics through repeated practice.

Forensic handwriting examination involves the comparison of questioned handwriting with specimens of known authorship to determine whether the writings are consistent with having been produced by the same writer.

The examiner evaluates handwriting as a combination of characteristics rather than relying on the appearance of individual letters alone.

 

3. Characteristics Examined in Handwriting

Handwriting characteristics can broadly be divided into class characteristics and individual characteristics.

3.1 General Characteristics

These include:

• Slant
• Size
• Spacing
• Alignment
• Arrangement
• Proportion
• Pen pressure
• Writing speed
• Baseline characteristics
• Margins
• Connecting strokes

3.2 Individual Characteristics

These are distinctive habits developed by a writer.

Examples include:

• Formation of particular letters
• Initial and terminal strokes
• Unique connections between letters
• Unusual abbreviations
• Specific punctuation habits
• Individual spacing patterns
• Characteristic pen lifts
• Repeated deviations from standard letter forms

No single characteristic should normally be considered sufficient by itself. The overall combination and consistency of characteristics are evaluated.

 

4. Important Features of Handwriting Examination

4.1 Line Quality

Line quality refers to the smoothness, continuity, and naturalness of writing.

Natural handwriting generally demonstrates:

• Smooth movement
• Variation in pressure
• Appropriate rhythm
• Natural coordination

Forgery may show:

• Tremors
• Hesitation
• Unnatural stops
• Blunt beginnings and endings
• Slow drawing-like movements

However, natural variation, illness, age, writing conditions, and writing instruments can also affect line quality.

4.2 Slant

Slant describes the inclination of letters relative to the baseline.

A writer may consistently use:

• Rightward slant
• Leftward slant
• Vertical writing

Variation within a person's writing is also important because handwriting naturally changes to some degree.

4.3 Spacing

The examiner evaluates:

• Letter-to-letter spacing
• Word spacing
• Line spacing
• Margin spacing

Unusual spacing patterns may contribute to writer identification.

4.4 Baseline Alignment

The baseline refers to the imaginary line upon which writing rests.

Writing may be:

• Horizontally aligned
• Ascending
• Descending
• Irregular

Baseline habits may be useful when comparing questioned and known writing.

4.5 Pen Pressure

Pressure refers to the force applied to the writing instrument.

The examiner may evaluate differences between:

• Downstrokes
• Upstrokes
• Beginning strokes
• Terminal strokes

Pressure can also provide information about writing sequence and possible alterations.

 

5. Handwriting Examination Procedure

A typical examination involves:

Step 1: Collection of Questioned Documents

The original document should preferably be obtained because photocopies may not preserve important microscopic features.

Step 2: Collection of Known Specimens

Known writing samples should be obtained from the suspected writer.

These may include:

• Previously written documents
• Controlled specimens
• Dictated writing
• Signatures
• Appropriate exemplars

Step 3: Preliminary Examination

The examiner assesses whether the questioned writing contains sufficient characteristics for comparison.

Step 4: Detailed Comparison

The examiner compares writing characteristics systematically.

Step 5: Evaluation

Similarities, differences, natural variation, and the quality of the specimens are considered.

Step 6: Conclusion

The examiner reports whether the evidence supports common authorship, exclusion, or an inconclusive result according to the applicable laboratory methodology.

 

6. Signature Examination

A signature is a specialized form of handwriting used to represent a person's identity or authorization.

Because signatures are frequently used on:

• Cheques
• Contracts
• Bank documents
• Legal instruments
• Property documents
• Identity records
• Financial transactions

they are common subjects of forensic examination.

 

7. Characteristics of Genuine Signatures

Important features include:

• Overall form
• Relative size
• Slant
• Letter formation
• Connecting strokes
• Pen movement
• Speed
• Rhythm
• Pressure
• Pen lifts
• Initial and terminal strokes
• Flourishes
• Spacing

A genuine signature may display natural variation between different occasions.

Therefore, an examiner should not expect two genuine signatures to be perfectly identical.

 

8. Examination of Signatures

The examiner compares the questioned signature with several genuine signatures rather than relying on a single specimen.

The examination may determine:

• Whether the signature is genuine.
• Whether it was simulated.
• Whether it was traced.
• Whether it was slowly drawn.
• Whether it was produced by an unusual writing method.

The quality and contemporaneity of known signatures are important because handwriting changes naturally with age and circumstances.

 

9. Forgery

9.1 Meaning

Forgery is the creation, alteration, reproduction, or imitation of a document, signature, writing, or other representation with the intention of presenting it as authentic.

In forensic document examination, forgery may involve:

• Signatures
• Handwriting
• Cheques
• Certificates
• Contracts
• Identity documents
• Currency
• Official documents

 

10. Types of Signature Forgery

10.1 Freehand Simulation

The forger attempts to imitate another person's signature by studying its appearance.

Characteristics may include:

• Hesitation
• Poor rhythm
• Tremor
• Unnatural pen movements
• Incorrect proportions

10.2 Traced Forgery

The forger follows the outline of a genuine signature.

The source may be:

• An original signature
• A transparent overlay
• A projected image
• A digital or printed reproduction

Possible indications include:

• Slow movement
• Tremor
• Blunt starts and stops
• Unusual pressure
• Lack of natural rhythm

10.3 Disguised Writing

In disguised writing, a person deliberately modifies their own handwriting to conceal authorship.

Possible modifications include:

• Changing slant
• Altering letter forms
• Changing writing size
• Changing speed
• Using another writing style

The examiner must distinguish deliberate disguise from natural variation.

10.4 Mechanical or Digital Reproduction

Signatures may be reproduced through:

• Scanning
• Printing
• Photocopying
• Digital manipulation

Such documents require examination of printing and reproduction characteristics in addition to handwriting features.

 

11. Alterations in Documents

Documents may be altered by:

• Erasure
• Addition
• Obliteration
• Overwriting
• Substitution
• Chemical alteration
• Page replacement

Erasure

Writing may be removed mechanically using abrasion or other physical methods.

Indicators may include:

• Disturbed paper fibres
• Surface roughness
• Loss of paper coating
• Residual writing

Overwriting

New writing is placed over existing writing.

Microscopic examination, lighting techniques, and sometimes spectral imaging can assist in determining the sequence or nature of writing.

 

12. Ink Examination

Ink analysis is an important component of questioned document examination.

Different inks may vary in:

• Dye composition
• Pigments
• Solvents
• Resins
• Additives
• Optical properties

Ink examination can help determine whether apparently similar entries were made using the same or different writing materials.

 

13. Methods of Ink Examination

13.1 Visual Examination

The examiner first observes:

• Colour
• Intensity
• Gloss
• Pen characteristics
• Distribution

Different illumination conditions may reveal differences not visible under ordinary light.

13.2 Ultraviolet Examination

Under ultraviolet illumination, inks may show different fluorescence or absorption characteristics.

This can help reveal:

• Alterations
• Different inks
• Erasures
• Additions
• Some forms of obliteration

13.3 Infrared Examination

Infrared examination can exploit differences in absorption and reflectance between inks.

It can be particularly useful where one ink absorbs infrared radiation differently from another.

Infrared techniques may therefore assist in:

• Differentiating inks
• Revealing obscured writing
• Detecting alterations

13.4 Thin-Layer Chromatography

Thin-layer chromatography (TLC) can be used to separate ink components.

A small sample is extracted and applied to a chromatographic plate. Different components migrate at different rates, producing characteristic patterns.

TLC may help determine whether two inks are chemically similar or different.

Because sampling can be destructive, appropriate laboratory procedures and minimal sampling are essential.

13.5 Raman Spectroscopy

Raman spectroscopy can provide molecular information about pigments and dyes and may permit examination with little or no sample preparation.

13.6 Fourier Transform Infrared Spectroscopy

FTIR spectroscopy can identify chemical functional groups and materials associated with inks, paper, coatings, and other document components.

 

14. Paper Examination

Paper is an important source of forensic information.

Examination may involve:

• Colour
• Thickness
• Weight
• Texture
• Fibre composition
• Watermarks
• Optical brighteners
• Surface characteristics
• Coatings
• Manufacturing characteristics

Comparison with known paper samples can assist in determining whether documents could have originated from a common source.

 

15. Paper Age Determination

Determining the age of paper is considerably more difficult than simply determining its physical condition.

Two concepts should be distinguished:

Absolute Age

The actual date when the paper was manufactured.

Relative Age

Whether one document or writing is older or newer than another.

In routine forensic examination, absolute dating is often difficult and conclusions may need to be expressed cautiously.

 

16. Methods Used in Paper Age Examination

Several analytical approaches have been investigated or applied.

Physical Examination

Changes in:

• Colour
• Brittleness
• Surface condition

may provide general information but are strongly influenced by environmental conditions.

Chemical Examination

Paper contains cellulose and other components that undergo chemical changes with time.

Possible indicators include:

• Oxidation
• Degradation of cellulose
• Changes in acidity
• Fluorescent products

Spectroscopic Methods

Techniques such as:

• FTIR
• Raman spectroscopy
• UV-visible spectroscopy

may help characterize paper and degradation products.

Chemical Dating

Specialized methods may examine degradation products and volatile compounds. However, environmental storage conditions can significantly affect the results.

 

17. Limitations of Paper Age Determination

Paper dating is affected by:

• Temperature
• Humidity
• Light exposure
• Storage conditions
• Air quality
• Paper composition
• Manufacturing processes

Consequently, forensic experts should avoid assigning an exact date to a document solely from its physical or chemical condition unless a validated method supports such a conclusion.

 

18. Printed Security Documents

Security documents are designed to prevent unauthorized reproduction, alteration, or counterfeiting.

Examples include:

• Passports
• Identity cards
• Certificates
• Bank documents
• Government documents
• Security cheques
• Stamps
• Licences
• Currency

These documents often incorporate several layers of security features.

 

19. Security Features in Documents

19.1 Watermarks

Watermarks are images or patterns incorporated into paper during manufacture.

They can often be observed by transmitted light.

19.2 Security Threads

Security threads may be embedded within paper and may contain:

• Text
• Metallic elements
• Fluorescent properties
• Magnetic properties

19.3 Microprinting

Extremely small text is printed into a document and may become unclear or distorted in counterfeit reproductions.

19.4 Intaglio Printing

Intaglio printing produces raised ink that can often be detected by touch.

It is widely used in high-security documents and banknotes.

19.5 Fluorescent Features

Some inks, fibres, or security elements respond to ultraviolet illumination.

19.6 Optically Variable Features

Certain security features change appearance when viewed from different angles.

19.7 Holographic Features

Holographic elements produce changing visual patterns and are difficult to reproduce accurately.

19.8 Serial Numbers

Serial numbers provide identification and traceability and may be printed using specialized techniques.

 

20. Examination of Currency

Forensic examination of currency is particularly important in cases involving counterfeiting, fraud, possession of counterfeit notes, and financial crimes.

The examiner may evaluate:

• Paper
• Printing quality
• Security thread
• Watermark
• Intaglio printing
• Serial numbers
• Microprinting
• Fluorescent characteristics
• Optical variable features
• Registration of printed elements
• Ink characteristics
• Overall construction

 

21. Genuine Versus Counterfeit Currency

Counterfeit currency may exhibit:

• Incorrect paper characteristics
• Poor printing quality
• Incorrect colours
• Missing security elements
• Poor registration
• Incorrect dimensions
• Inconsistent serial numbering
• Improper microprinting
• Absence of genuine intaglio characteristics
• Incorrect ultraviolet response

A forensic examination compares questioned currency with authenticated reference material and established security features.

 

22. Examination of Printed Matter

Printed documents can be produced using different printing technologies.

These include:

• Offset printing
• Letterpress
• Intaglio
• Inkjet printing
• Laser printing
• Electrophotographic printing
• Digital printing

Each process may leave characteristic features.

The examiner may determine:

• Printing process
• Printer characteristics
• Alteration
• Addition
• Source characteristics
• Whether different portions were produced by different processes

 

23. Examination of Printing Sequence

In altered documents, it may be necessary to determine which element was printed first.

For example, an examiner may investigate whether:

• A signature was present before printing.
• Printed text was added after a handwritten entry.
• A number was altered after the document was originally produced.

Microscopic examination, ink interaction, indentation analysis, and specialized imaging techniques may assist in determining sequence.

 

24. Indented Writing

Indented writing occurs when pressure from writing on one sheet creates impressions on sheets beneath it.

Even when the original writing is absent, impressions may remain.

Detection methods include:

• Oblique lighting
• Electrostatic detection apparatus
• Digital imaging

Indented writing may provide valuable evidence in investigations involving anonymous notes, threatening letters, or altered documents.

 

25. Examination of Torn or Disputed Documents

Physical reconstruction may be performed by examining:

• Paper fibres
• Torn edges
• Printing
• Handwriting
• Page numbering
• Perforations
• Folding patterns

Matching torn edges can provide strong evidence that two pieces originally belonged to the same document.

 

26. Forensic Significance

Questioned document examination can answer important investigative questions, including:

1. Who may have written the questioned document?
2. Is a disputed signature genuine?
3. Has the document been altered?
4. Was the same ink used throughout?
5. Could two documents have originated from the same source?
6. Is the paper consistent with the claimed origin or period?
7. Was the document printed or digitally reproduced?
8. Does questioned currency contain genuine security features?
9. Is the document consistent with a genuine government or financial document?
10. Can concealed or erased information be recovered?

 

27. Collection and Preservation of Questioned Documents

Proper handling is essential.

Investigators should:

• Prefer original documents over photocopies.
• Avoid folding or stapling documents unnecessarily.
• Handle documents with clean hands or appropriate gloves when necessary.
• Protect documents from moisture and excessive heat.
• Package documents individually where appropriate.
• Avoid writing notes directly on evidence.
• Preserve associated envelopes and packaging.
• Maintain proper chain of custody.

Documents should not be subjected to unnecessary chemical or physical treatment before forensic examination.

 

28. Modern Techniques in Questioned Document Examination

Modern forensic laboratories increasingly use advanced analytical methods, including:

• Video spectral comparison
• Hyperspectral imaging
• Digital microscopy
• Raman spectroscopy
• FTIR spectroscopy
• X-ray fluorescence
• Multispectral imaging
• Three-dimensional surface analysis
• Digital image enhancement
• Computer-assisted handwriting analysis

These techniques can reveal information that is not readily observable under ordinary illumination.

 

29. Limitations of Questioned Document Examination

Several factors can affect examination:

• Poor-quality photocopies
• Limited writing samples
• Natural variation in handwriting
• Disguised writing
• Age-related changes
• Different writing instruments
• Changes in writing conditions
• Environmental degradation
• Chemical alteration
• Digital reproduction
• Insufficient security features for comparison

For this reason, forensic conclusions should be based on the totality of the available evidence rather than a single feature.

 

30. Conclusion

Forensic examination of handwriting, signatures, forgeries, inks, paper, and security documents is an important component of questioned document analysis. Handwriting and signature examination focuses on the systematic evaluation of writing characteristics and natural variation, while forgery examination seeks evidence of simulation, tracing, disguise, alteration, or reproduction. Ink and paper analysis can reveal differences in writing materials and document composition, while specialized techniques may assist in assessing relative or estimated document age.

The examination of printed security documents and currency combines physical, microscopic, optical, and chemical analysis to identify genuine security features and detect counterfeit or altered documents. Modern technologies such as spectral imaging, Raman spectroscopy, FTIR, digital microscopy, and hyperspectral analysis have expanded the capabilities of forensic document examination.

Ultimately, reliable questioned document examination depends on proper evidence collection, preservation of original materials, appropriate analytical methods, adequate comparison specimens, validated laboratory procedures, and cautious interpretation of results. When properly conducted, it can provide significant evidence in cases involving fraud, forgery, identity theft, financial crimes, disputed signatures, counterfeit currency, and other document-related offences.