The integrity of accounting records, management minutes and warehouse documents is essential to protecting the company, its shareholders and its creditors. However, the discovery of discrepancies in accounting entries or the deletion of data from an electronic system does not, on its own, establish the offence of forgery. The legal characterisation depends on the nature of the document, the method by which the truth was altered, the perpetrator’s intent and the harm potentially arising from the act. Special provisions governing companies or information technology offences may also apply. This guide outlines the Egyptian legislative framework and the practical steps for investigation, proof and risk mitigation.

I. Concepts: Distinguishing Errors from Forgery

Manipulation may be physical, such as imitating a director’s signature or altering the date of minutes or the amount on an invoice after its execution. It may also involve recording false information in a document to which the capacity of its author gives a particular evidential status. The description “intellectual forgery”, however, does not automatically apply to every false statement in a private internal record: each offence has its own scope and constituent elements. Incorrect accounting entries capable of correction must also be distinguished from breaches of bookkeeping requirements and the fabrication of a document intended to be used as if it recorded the truth.

A subsequent amendment to records should not be presumed criminal. It may be a documented, authorised correction. The reason for the alteration, the person who approved it, its date and whether the previous version is preserved in an audit log that cannot be altered without leaving a trace should all be examined.

II. Applicable Legal Provisions According to the Type of Document

Official Documents, Private Documents and Documents of Joint-Stock Companies

Articles 211–214 of the Penal Code govern particular forms of forgery and the use of forged official documents, depending on the perpetrator’s capacity and the type of document. Article 215 addresses forgery of private documents or the knowing use of a forged document. Article 214 bis prescribes a special penalty for forgery or use involving documents of joint-stock companies and certain associations and institutions specified in the provision. The penalty is aggravated in the circumstances laid down therein where the State or a public body holds an interest in the capital of the relevant entity. The company’s legal form must therefore be examined before applying a criminal provision: not all records of private companies are automatically treated as official documents or documents of joint-stock companies.

Commercial Bookkeeping Obligations

Articles 21–25 of Commercial Law No. 17 of 1999 require traders who meet the statutory conditions to maintain books appropriate to their business, particularly the journal and inventory book, and to retain commercial correspondence. Article 25 requires books to be free of blanks, crossing-out, erasures, insertions and writing in margins or between lines, subject to the rules for correcting errors. A bookkeeping violation must be distinguished from forgery or tax evasion, each of which requires additional elements and a separate penal provision.

Interference with Electronic Records

Information Technology Crimes Law No. 175 of 2018 governs forms of unauthorised access to systems and private accounts under Article 14, exceeding the limits of authorised access under Article 15, and the intentional and unlawful destruction, disruption, redirection, alteration or cancellation of data under Article 17. The applicable provision must be assessed in light of the user’s permissions, the nature of the act and the system affected, without concluding that every deletion of an ERP record constitutes electronic forgery. Article 11 sets out the conditions for the evidential value of digital evidence, taking account of the Implementing Regulations.

III. Principal Forms of Corporate Record Manipulation

• Imitating signatures or stamps on payment orders, board minutes or supply contracts.
• Altering invoice amounts or approval dates, or fabricating goods-receipt notes for items that never entered the warehouse.
• Creating accounting entries or cancelling existing entries with the intention of concealing transfers or inflating revenue or expenses.
• Using another employee’s account privileges to access financial records or delete the transaction audit log.
• Amending an original document after signature or fabricating a copy presented to shareholders, the auditor or a regulator as authentic.

IV. Requirements of Proof and Individual Liability

Criminal liability is not established by job title alone. A director or company accountant is not criminally liable merely because inaccurate information appears in a system they supervise. It is necessary to establish who created, altered or used the document; what that person knew about the truth of its contents; the intent required by law; and whether the technical and documentary evidence attributes the act to that person. The incident may independently give rise to civil liability for damages or employment disciplinary proceedings where their respective conditions are satisfied. Joint and several liability should not be presumed among all the persons concerned.

V. Documentary and Technical Investigation Methodology

• Secure original documents suspected of forgery in protective envelopes, record their receipt and chain of custody, and do not write over signatures or stamps.
• Collect earlier and later versions and review page sequences, book numbers, inventory minutes and records showing the issue or receipt of documents.
• Preserve forensic copies of databases, access and amendment logs and backups, recording the time of extraction, the persons who handled them and their digital hashes wherever possible.
• Commission an accountant or technical expert to examine discrepancies and identify the transactions under suspicion, distinguishing technical findings from legal conclusions.
• Conduct an impartial internal investigation in which each person is confronted with the specific allegations, statements from the defence and witnesses are heard, and the investigation record and its annexes are preserved.

Specimen Writing and Handwriting Comparison

Where a signature, handwriting or stamp is disputed, the legally prescribed procedures should be sought for submitting the original documents to the competent expert authority, including the Forgery and Counterfeiting Research Department of the Forensic Medicine Authority, according to the decision of the investigating authority or court. Photocopies may limit the examination of writing pressure, inks and physical characteristics, but they are not automatically excluded from every form of proof. Their evidential weight is assessed in light of the original, if available, the other evidence and the circumstances of the case.

Preservation of Digital Evidence

Evidence from ERP systems, email and electronic records must be extracted lawfully, preserving creation and modification data and the permissions log, and avoiding alteration of the data during examination. Personal data protection requirements and the confidentiality of correspondence must be observed. The fact that the company owns a device does not confer an unrestricted right to search an employee’s personal accounts.

VI. Employment Procedures and Criminal Complaints

Labour Law No. 14 of 2025 applies to workers within its scope, instead of a general reference to Law No. 12 of 2003 in relation to present-day incidents. The safeguards and deadlines governing investigation and disciplinary penalties under Articles 138–147 must be observed, including notifying the employee of the alleged misconduct, hearing their defence and documenting the investigation. Mere suspicion of forgery does not justify immediate dismissal without the required legal procedures. The Labour Court’s jurisdiction over dismissal and the special provisions governing serious misconduct must also be examined.

For the criminal route, the complaint dossier should contain a precise factual account, the source of the original document, its chain of custody, supporting records and the preliminary examination report. Final legal characterisation should be left to the investigating authority. A civil claim for recovery of money and damages may be considered on the basis of fault, loss and causation, or on a contractual basis, depending on the facts. Forgery does not necessarily invalidate every transaction involving the document or every subsequent resolution.

VII. Accounting, Tax and Regulatory Consequences

Inaccurate records may affect the financial statements, profit-distribution decisions, taxation and the company’s creditworthiness. Their consequences must be assessed under the Companies Law, applicable tax laws and relevant accounting standards, and may require amendments to financial statements, tax returns or disclosures, or notification of regulatory authorities, depending on the entity and the violation. Not every bookkeeping irregularity constitutes tax evasion or gives rise to a criminal fine.

VIII. International Companies and Preventive Governance

Multinational companies need to align their document-retention and digital-investigation policies with Egyptian law. It is advisable to define permissions for creating and amending entries, activate a protected audit log, separate preparation from approval of financial statements, preserve original documents and backups, and document electronic approvals. Electronic signatures should not be considered inherently incapable of forgery: their level of protection and legal effect depend on the signature system and satisfaction of the requirements of the applicable legislation.

Common Errors and Preventive Practices

• Alleging forgery without obtaining the original document or earlier versions or identifying the person who made the alteration.
• Deleting a suspect file or correcting the original before preserving an intact copy and the activity log.
• Assuming that every inaccurate accounting statement constitutes intellectual forgery, or that all access to a company system is unauthorised.
• Imposing a penalty or dismissal without a properly conducted investigation or without identifying the company’s legal form and the applicable criminal provision.
• Failing to restrict record-modification permissions to authorised persons, or allowing one person to create, approve and delete entries without independent oversight.

When Is Specialist Legal Counsel or Local Counsel in Egypt Necessary?

Legal advice becomes particularly important where the fabrication of minutes, forgery of officers’ signatures or alteration of ERP records is suspected, or where the incident affects financial statements, shareholder disputes, or regulatory and tax obligations. A lawyer can assist in identifying the type of document, the legal characterisation, evidence-preservation procedures and coordination with accounting and forensic experts and the competent authorities.

How Can Specialist Legal Support Help?

El Rouby Law Firm provides legal reviews of the integrity of company records, oversees internal investigations and the documentation of records and digital evidence, assesses criminal, civil and employment liability, and prepares and pursues appropriate complaints and claims. It also supports investors and international companies as Local Counsel in Egypt.

Frequently Asked Questions

Are All Documents of Private Companies Governed by Article 215?

No. The type of document and the company’s legal form must be established. Article 214 bis may apply to documents of joint-stock companies and the other entities specified in that provision, while Article 215 governs private documents within its scope.

Does Amending an Electronic Record in Itself Establish Forgery?

No. The legal characterisation depends on whether access was lawful, the nature of the amendment, intent and the remaining elements of the applicable provision. Specific provisions of the Information Technology Crimes Law may apply.

Is a Copy of a Document Sufficient to Prove Forgery?

Its evidential value depends on the circumstances, the examination required and the remaining evidence. The original should be preserved for technical examination where possible, but its absence does not automatically defeat the case.

Can an Employee Be Dismissed Immediately on Suspicion of Forgery?

A disciplinary penalty or dismissal requires compliance with the investigative safeguards, procedures and jurisdiction prescribed by the Labour Law in force, according to the nature of the misconduct.

Does Forgery of a Set of Minutes Invalidate All Company Contracts?

No. The effect of the forgery on each resolution or transaction, the relevant mandatory provisions and the protection of bona fide third parties must be examined.

Legal References and Official Sources

• Penal Code No. 58 of 1937, particularly Articles 211–215.
• Commercial Law No. 17 of 1999, Articles 21–25, published by the Egyptian Tax Authority (the source document contains a damaged link).
• Information Technology Crimes Law No. 175 of 2018, Articles 11, 14, 15 and 17, Financial Regulatory Authority (the source document contains a damaged link).
• Egyptian Ministry of Labour: Labour Law No. 14 of 2025 and related legislation.
• General Authority for Investment and Free Zones: Companies Law and legislation regulating business entities.