A polished website, a consistent brand voice, a stream of plausible reviews, and a founder bio with a professional headshot used to take real effort and real money to fake convincingly. Generative tools have collapsed that cost close to zero. What hasn't gotten any cheaper is a state business filing with a two-decade history, a court docket with a case number, or a professional license tied to a real exam and a real board. That gap is the whole argument of this piece, and it's worth being direct about it: the layer of "trust signals" the internet has trained people to look for is now the easiest layer to fake, and the layer almost nobody checks is still the hard one.
The old heuristics are breaking
For years, reasonable advice for spotting a shady business online amounted to: check if the site looks professional, read the reviews, look for a real-sounding About page. Those heuristics worked because faking them took disproportionate effort relative to the payoff - a scammer running a small-dollar operation usually couldn't justify hiring a designer and manufacturing a hundred convincing reviews.
That math has changed. A convincing multi-page website with a coherent brand story is now something one person can generate in an afternoon. Review text that reads as specific and personal, rather than generic, is straightforward to produce at volume, and platforms are in a constant, uneven fight to catch it - Google's own content policy on fake engagement exists precisely because manufactured reviews are a large enough problem to need an explicit rule against them. A founder headshot and bio can be generated wholesale, with no real person behind it at all. None of these used to be free. Now, functionally, they are.
What still isn't cheap
Public records occupy a different category, and the reason is structural, not just a matter of effort. A Secretary of State business filing exists inside a government system with its own verification, timestamps, and legal consequences for false statements - you can't retroactively insert twenty years of clean annual filings into a system that's been recording them in real time since 2006. A court docket is generated by an actual legal proceeding, with a case number that resolves to a real filing you can pull. A professional license is tied to an exam, continuing education requirements, and a disciplinary history maintained by a board with its own incentive to keep the record accurate.
None of this is unfakeable in an absolute sense - document fraud has existed as long as documents have. But it's unfakeable at scale, cheaply, by generating text. That's the specific capability AI tools have unlocked for the marketing layer and specifically have not unlocked for the public-records layer, and the distinction matters because it tells you where to put your remaining skepticism.
Why this is a genuine shift, not just a tweak to advice
The old advice said: look for signals of professionalism as a proxy for legitimacy. The honest updated advice has to be closer to the opposite: professionalism is now a weak signal, precisely because it's cheap to produce, and the signals that resist cheap production are the ones worth weighting more heavily. That's an uncomfortable adjustment, because it means the intuitive, fast way most people evaluate a business online - does the site look good, do the reviews sound real - is exactly the evaluation method that's degrading fastest.
It also means the burden shifts toward tools and habits that pull from the harder-to-fake layer by default, rather than relying on a person's gut read of polish. That's not a sales pitch for any particular product category as much as it is a structural observation: as the cost of faking the top layer approaches zero, whatever still checks the bottom layer becomes disproportionately more valuable, even if it was only moderately useful before.
What this looks like in practice
Concretely, this argues for a specific reordering of priorities when evaluating an unfamiliar business:
- Treat website polish and review volume as weak, easily-manufactured signals - necessary but nowhere near sufficient.
- Treat state registration status, formation date, and licensing records as the load-bearing signals, precisely because they're structurally expensive to falsify.
- Treat court and complaint records as corroborating evidence, cross-referenced against the registration layer rather than read in isolation.
- Be more skeptical of brand-new domains paired with claims of a long operating history than you would have been five years ago, because the gap between "claimed history" and "actual history" is now trivially easy to manufacture on the claimed side.
Where this leaves consumer trust tools
This is the thesis a service like ProofReports is built around: as the marketing layer of the internet gets easier to fake, the value of a report that pulls from registries, licensing boards, and court records - rather than from the site's own claims - goes up, not down. It's not that public records were ever a secret; the SBA's own guidance on registering a business has been public for years. It's that almost nobody used to bother checking them for a routine purchase, because the marketing layer used to be good enough evidence on its own. That's the assumption that no longer holds.
A counterargument worth taking seriously
The strongest objection to this thesis is that public records have their own gaps: they're jurisdiction-specific, sometimes poorly digitized, and slow to reflect real-time changes in a business's conduct. A company can be perfectly registered and licensed while still treating customers badly in ways no filing captures. That objection is correct, and it's a real limitation, not a minor caveat. But it doesn't undercut the core argument - it refines it. Public records were never meant to be a complete picture of trustworthiness, only the part of the picture that resists cheap forgery. The claim isn't that a clean registration guarantees a good experience; it's that a registration record is much harder to fabricate than a review, which makes it a better anchor for the specific, narrower question of whether an entity is who it claims to be.
Why this matters more for individuals than institutions
Large enterprises have run identity and background verification on vendors for decades, largely because they could afford dedicated staff and paid database access to do it. Individual consumers mostly couldn't, and mostly didn't need to, because the cost of faking a convincing storefront used to price out most small-scale bad actors. AI content generation removes that pricing barrier at exactly the scale that affects individual consumers most - not enterprise procurement, which was already skeptical by default, but the ordinary purchase, hire, or deposit an individual makes with a business they found through an ad or a search result. That's the population for whom this shift matters most, and it's also the population with the least existing infrastructure to handle it.
The uncomfortable part
If AI-generated legitimacy keeps getting cheaper and better, the gap between "looks real" and "is real" will keep widening, and the instinct to trust polish will keep getting worse advice to follow, not better. Public records aren't a complete solution - they're slow, sometimes hard to search, and don't capture everything that matters about a business relationship. But they're the one part of this trust equation that AI hasn't made cheap to fake, and in a world where everything else has, that scarcity is exactly what makes them worth checking first.
Sources
- content policy on fake engagement — Google
- SBA's own guidance on registering a business — U.S. Small Business Administration
Next step
Checking a specific company?
Search it by name or website for a free preview of what public records, reputation, web presence, and licensing show. No account required.