How to Verify the Digital Signature on Form 16 or Any PDF
You open your Form 16 in Adobe Reader and see a yellow question mark: “Signature Validity Unknown”. Is the document fake? Did someone change it? In most cases, no. This guide explains what a PDF digital signature actually proves, why that warning appears so often in India, and how to check any signed PDF in under a minute — without uploading it anywhere.
What a digital signature on a PDF proves
Form 16, GST e-invoices, gazette notifications, bank statements and many certificates are signed with a digital signature certificate (DSC). Unlike a scanned signature, a DSC is a sealed, certificate-based mark inside the file. A proper check tells you three things:
- Who signed it — the name and organisation in the signer's certificate (for Form 16, usually your employer or its authorised person).
- Whether it was changed afterwards — if even one character is edited after signing, the check fails.
- Whether the certificate is from a licensed Indian provider — providers such as eMudhra, SafeScrypt, SignX, ProDigiSign or Capricorn, all licensed under India's Controller of Certifying Authorities (CCA).
Important: a valid signature does not prove the salary or TDS figures are correct. It proves the PDF came from the signer and has not been altered. To check the tax figures, compare Form 16 with Form 26AS or the Annual Information Statement (AIS) on the income tax portal.
Why Adobe says “Signature Validity Unknown”
Every Indian DSC traces back to a root certificate called CCA India. Adobe Reader does not trust that root out of the box. On top of that, many PDFs contain only the signer's certificate and not the provider's own certificate in the middle of the chain. Adobe cannot connect the dots, so it shows a question mark. That is why tax websites and even universities publish step-by-step guides for “trusting” the certificate in Adobe.
The warning means “Adobe could not confirm who issued the certificate” — not “this document is fake”.
The quick way: check it in your browser (no upload)
DocuSmartly's Verify PDF Signature tool already includes the CCA India root certificates and the certificates of India's licensed providers, so it can complete the chain that Adobe leaves unfinished.
- Open Verify PDF Signature.
- Choose your Form 16 (or any signed PDF). It is checked on your device — the file is never uploaded, which matters for a document that contains your PAN and salary.
- Read the result.
Check a PDF's digital signature in seconds
Verify PDF Signature — FreeWhat each result means
| Result | What it means | What to do |
|---|---|---|
| ✅ Valid signature | Signed with a certificate from a licensed Indian provider, and not changed since signing. | Nothing — the file is genuine and untouched. |
| ❌ Changed after it was signed | The contents no longer match what was signed. | Do not rely on this copy. Ask your employer or the sender for the original file. |
| ⚠️ Signer could not be confirmed | The file is intact, but the certificate does not lead to CCA India (self-made or foreign), or was not valid on the signing date. | Ask the sender which provider issued the signature. |
| ℹ️ No digital signature found | The PDF has no DSC. A scanned or pasted signature picture is not a digital signature. | If you expected a signed Form 16, download it again from your employer or TRACES. |
The tool also shows the signer's name, organisation, signing time and the full certificate chain — for example CCA India 2022 → SafeScrypt CA 2022 → signer.
The Adobe Reader way
- Open the PDF in Adobe Acrobat Reader and click the signature (usually on the last page).
- Choose Validate Signature or open Signature Properties.
- If you see “Validity Unknown”, open Show Signer's Certificate, select the top certificate in the chain (CCA India), and add it to Trusted Certificates. Then validate again.
Before trusting any certificate, make sure the chain really ends in “CCA India”. Trusting the wrong certificate can make a fake signature look valid.
Common mistakes to avoid
- Adding your own signature to Form 16. Any change to a digitally signed PDF — even pasting a signature picture — makes the original digital signature show as broken. Keep the original untouched and sign a copy only if someone asks.
- Printing to PDF or compressing the signed file. “Microsoft Print to PDF” and many compressors rebuild the file and remove the signature. Share the original.
- Panicking over an expired certificate. What matters is whether it was valid on the day of signing.
Frequently Asked Questions
Is my Form 16 uploaded when I check it on DocuSmartly?
No. The signature is checked inside your browser. Only if a PDF lacks the provider's own public certificate does the tool fetch that one public file from the address written inside the signer's certificate — your PDF is never sent.
The signer's certificate has expired. Is the signature still valid?
Yes, if the certificate was valid on the day the document was signed. Certificates last one to three years, so older documents often show an expired certificate.
Does this work for GST invoices and government certificates?
Yes. Any PDF signed with a standard PDF digital signature can be checked — GST e-invoices, gazette notifications, university certificates, bank statements and agreements signed with a DSC.
Can the tool tell if a certificate was revoked?
Not yet. Revocation needs a live check with the certificate provider. For most documents, “signed by a licensed provider and not changed” is what matters, and the tool says clearly what it did and did not check.
Related: Sign PDF (add your own signature to unsigned documents), Protect PDF (lock a PDF with a password, on your device) and self-attested vs attested vs notarised.