How to Trace a Leaked PDF to the Recipient

Why a leaked PDF usually points to no one

A deck sent to ten investors, a contract draft sent to four parties, a proposal sent to three agencies: in each case everyone holds the same file. The usual defences leave gaps.

• Metadata (author, creation date, custom properties) can be stripped by re-saving or "print to PDF", and it does not survive a screenshot.
• Visible watermarks such as "Confidential - Ana" can be cropped, covered or edited out, and you have to create each version by hand.
• Link-based sharing and data rooms control who can open a file and often add a visible watermark, but once someone photographs the screen, the control is gone.

What an invisible per-recipient mark does

A forensic watermark hides a different identifier in each copy in a way that is not meant to be visible when reading. Later, a detector reads that identifier back from the file you found.

Markedfile is designed so the mark survives common things that happen to leaked documents: screenshots of pages, recompression, crops and rotation. Detection is heuristic, so there is no 100% guarantee, and a heavily edited or very small piece of a page may not be identifiable.

How to do it with Markedfile

1. Before sharing, upload the original PDF and create one marked copy per recipient. Use labels you will recognise later (for example the person or firm).
2. Send each recipient their own copy through the channel you already use: email, Drive, a data room, a messaging app.
3. If the document leaks, get the version you found. A PDF, an image of a page or a screenshot all work.
4. Upload it to Detect. Markedfile reports which recipient's copy it matches.
5. Decide what to do. The result tells you which copy leaked. What you do with it (a conversation, ending access, legal follow-up) is up to you.

Files are processed in memory and are not stored. Free covers 5 active files with detection for 6 months, so you can test it on a real document first. For teams, the Enterprise plan ($49.99/month) uses one shared workspace.

What this cannot do

• It cannot trace copies you sent before you used it. It only recognises copies Markedfile marked.
• It does not stop a leak. It tells you which copy leaked, and people tend to be more careful when they know copies are traceable.
• It is not access control or a data room. You can use it alongside one: mark the file first, then upload each copy.
• PDF limits depend on the plan, for example up to 10 pages on Free and up to 500 pages on Enterprise.

FAQ

Can you trace a screenshot of a PDF page? Often, yes, if the mark survived and the screenshot shows roughly a quarter of a page or more. This applies to PDFs marked from now on, so re-mark older PDFs. A crop of just a barcode or QR code is not detected, and detection is heuristic, so there is no 100% guarantee.

Does this change how the PDF looks? The mark is invisible in normal reading.

Do I need to give recipients a special viewer? No. They receive a normal PDF.

Does it work with a data room like DocSend? Yes, as a complementary step. Mark one copy per recipient, then upload each copy. A data room controls access; Markedfile identifies the copy.

Is the document stored? No. Files are processed in memory and are not stored.

What if the PDF already leaked? Markedfile cannot trace it, because that copy was never marked. Use it the next time you share.

Try Markedfile free · For creators