How to check if an image is AI generated
Written for readers, journalists, buyers and designers checking whether a photo came from a camera or an AI image generator
Short answer
The only hard proof that an image came from an AI generator lives inside the file’s own metadata: a signed C2PA Content Credentials manifest, an IPTC DigitalSourceType tag set to trainedAlgorithmicMedia, or generator strings written into EXIF, XMP or PNG text chunks. You can inspect all of those locally in our free photo metadata tool. When metadata has been stripped by a screenshot or social network, visual and pixel-based AI detectors can only offer probabilistic guesses that frequently misclassify edited phone photos.
On this page
When you want to know whether a picture came from a real camera or an AI model, there are two completely different ways to check it: reading the cryptographic and metadata records inside the file, or looking at the pixels.
Only the first method gives you a verifiable fact. The second method gives you a clue, and if you rely on online “98% AI probability” meters without understanding how they work, you will regularly accuse real photographers of using AI and wave clean AI renders through.
What real AI provenance labels look like inside a file
Major AI generators and camera makers now embed structured provenance data directly into the image container before you download it. There are three places inside a JPEG, PNG or WebP file where generator identity is recorded:
- C2PA Content Credentials (
JUMBF): the Coalition for Content Provenance and Authenticity (C2PA) defines a cryptographically signed manifest stored insideAPP11marker segments in JPEG (per the C2PA Specification),caBXchunks in PNG, or JUMBF chunks in WebP. Tools like OpenAI DALL-E / ChatGPT Images, Adobe Firefly, Microsoft Designer and Leica/Sony/Nikon hardware-signed cameras attach a signed C2PA claim showing the generator name and edit chain. - IPTC
DigitalSourceTypeand XMPCredit: the International Press Telecommunications Council standardized thetrainedAlgorithmicMediaURI (http://cv.iptc.org/newscodes/digitalsourcetype/trainedAlgorithmicMedia) andcompositeWithTrainedAlgorithmicMediainside XMP/IPTC metadata so search engines and social platforms can read an explicit AI label even without a C2PA certificate. - PNG
tEXt/iTXtgenerator chunks: Midjourney writes your prompt, job ID andDigitalSourceTypeinto PNG text chunks (Description,Author,XML:com.adobe.xmp), while local tools like Automatic1111 Stable Diffusion and ComfyUI store the entire prompt, negative prompt, seed, steps and checkpoint filename underparameters,promptorworkflowchunks.
How to check an image in three steps
You can inspect all three metadata layers inside your browser tab without uploading the image to a third-party detector:
- Ask for or download the original image file rather than a screenshot or a compressed preview from a chat thread.
- Open the photo metadata remover and drop the JPEG, PNG or WebP file onto the inspection box.
- Read the inspection report for Content Credentials (C2PA / JUMBF), Software or Generator tags, XMP Credit or DigitalSourceType, and PNG text chunks, and check whether normal camera EXIF tags (Make, Model, shutter speed, ISO, lens focal length) are present or absent.
How to interpret what the metadata report shows
| What you see in the file report | What it means | Can it be faked or lost? |
|---|---|---|
| C2PA / JUMBF Content Credentials present | The file carries a structured provenance manifest from an AI tool (such as DALL-E or Firefly) or a C2PA-enabled camera/editor. | Cryptographic signatures break if pixels are edited, though stripping metadata removes the manifest entirely. |
PNG parameters / workflow / DigitalSourceType: trainedAlgorithmicMedia | The file was exported directly from Stable Diffusion, ComfyUI, Flux, Midjourney or another generator that writes plain-text provenance chunks. | Definitive when present on an original export; removed if re-saved through an image editor. |
Full camera EXIF (Make, Model, LensModel, ExposureTime, ISOSpeedRatings, SubSecTimeOriginal) | Strongly points to a real smartphone or dedicated camera, especially when paired with manufacturer MakerNote tags. | Plain EXIF fields can be copied with command-line tools like ExifTool, so treat EXIF as supporting evidence rather than cryptographic proof. |
| No EXIF, no XMP, no C2PA at all | Inconclusive. Almost every social network (Instagram, X, Reddit, Facebook), messaging app and screenshot strips metadata automatically. | Absence of metadata never proves an image is AI generated, and never proves it is a real photograph. |
Why pixel-based “AI image detectors” disagree so often
When a file has no metadata left, websites that claim to detect AI images feed the picture into a neural network trained to spot high-frequency diffusion artifacts. Here is why two detectors often report “96% AI” and “4% AI” on the exact same image:
- Modern smartphone cameras use computational photography: every recent iPhone and Android flagship merges multiple exposures, runs neural denoising and applies semantic sharpening to faces, skies and foliage. Those computational passes smooth out natural sensor grain in ways that look statistically similar to diffusion models.
- Re-compression erases high-frequency diffusion residuals: resizing an AI image to 1080 pixels wide and saving it as an 80%-quality JPEG wipes out the microscopic checkerboard frequency patterns that pixel classifiers look for.
- Invisible pixel watermarks (like Google SynthID) are vendor-specific: Google DeepMind’s SynthID embeds an imperceptible signal into the pixel values of Imagen and Gemini images that survives cropping and filters, but only Google’s own SynthID verifier can read that specific watermark: it does not show up in generic third-party AI detectors.
What still gives AI images away visually when metadata is gone
When you are reviewing a stripped image with no metadata, check the physical geometry that image models still get wrong more reliably than any percentage meter:
- Small background text and signage: secondary street signs, book spines, nutrition labels and serial numbers in the background often dissolve into pseudo-Latin shapes or inconsistent letterforms.
- Architectural and reflection geometry: follow tile grout lines, window mullions, brick courses or reflections in eyeglasses and puddles behind a subject’s head; diffusion models frequently shift alignment where an object interrupts a straight line.
- Hardware and mechanical details: check button holes vs buttons on jackets, watch dial markings, bicycle spokes, guitar frets and shoelace crossings.
For a deeper look at what happens when someone strips provenance headers from an AI image, read our guide on how AI watermarks and metadata work.
Questions
What is the most reliable way to prove an image is AI generated?
Inspect the original file for a C2PA Content Credentials manifest (stored in APP11 JUMBF segments in JPEG or XMP/RIFF chunks in PNG and WebP) or an IPTC DigitalSourceType tag. When present, these records name the exact generator tool, such as DALL-E, Adobe Firefly, Leica/Sony camera signing or Google Imagen.
Why do online 'AI image detector' websites give different percentage scores on the same photo?
Pixel-based AI detectors are machine-learning classifiers trained to spot statistical texture patterns. Heavy phone camera noise reduction, Portrait Mode blur, JPEG re-compression or sharpening filters often trigger false AI scores on real camera photos, while resized or post-processed AI images can score as human.
Does a missing C2PA or EXIF tag mean the photo is real?
No. Most social media platforms, messaging apps and screenshots strip both camera EXIF tags and C2PA manifests when resizing an image. A file with zero metadata simply means the provenance record is missing, not that the picture came from a camera.
Where do Midjourney, Stable Diffusion and ComfyUI hide their prompts?
Stable Diffusion web UIs and ComfyUI commonly write the full prompt, seed, sampler and model checkpoint name into PNG text chunks (tEXt or iTXt under keys like parameters, prompt or workflow). Dropping the original PNG into our metadata inspector reveals those fields immediately.
What is Google SynthID and can a browser metadata viewer see it?
SynthID is an imperceptible watermark developed by Google DeepMind that alters pixel frequency values directly in images made by Google’s AI models. Because it is baked into the pixels rather than stored as a metadata header, checking SynthID requires Google’s own verification detector rather than an EXIF/C2PA reader.
Keep reading
Removing AI watermarks and metadata: what actually comes off
C2PA metadata, visible corner badges and invisible SynthID pixel watermarks work in three different ways. Here is what you can and cannot remove.
GuideHow to remove location from your photos
Turn off Location in the share sheet, stop the Camera recording where you are, and clean files before you email them.
SituationProtecting a source who sends you photos
A photo can reveal where and when it was taken and on which phone. Don’t rely on the app to strip that; clean files yourself.