Can You Actually Tell If an Image Is AI-Generated? What Works in 2026
'Just look at the hands' stopped being reliable advice a while ago. What still works for telling a real photo from a generated one, and the honest limits.
Key takeaways
- The visual tells that used to give away AI images — warped hands, garbled text, waxy skin — have mostly been fixed by newer generators. Looking closely is no longer a reliable method on its own.
- No tool, free or paid, can look at raw pixels and return a trustworthy 'AI or real' verdict for a modern image. Publicly claiming otherwise is usually a sign a tool is overselling what pixel analysis can actually do.
- The approach that actually holds up is provenance, not pixels: checking whether an image carries generation metadata (like a Stable Diffusion or Midjourney parameter block) or a cryptographically signed Content Credential under the C2PA standard.
- Provenance checking has a real, honest limit — it can confirm AI origin when the evidence is present, but it can't prove an image is authentic just because that evidence is absent, since metadata is trivial to strip.
- For anything with real stakes — a viral news photo, a listing, a dating profile — treat a missing 'AI-generated' signal as 'unproven,' not as 'verified real.'
The advice that stopped working
For a couple of years, spotting an AI-generated image had a reliable trick: count the fingers. Early image generators reliably mangled hands, smeared background text into nonsense, and gave skin an odd, too-smooth waxiness. That advice spread everywhere, and for a while it was genuinely useful.
It isn't anymore. Newer generation models have largely fixed those specific failure modes — hands render correctly, text is often legible, and lighting is consistent enough to fool a quick glance. The tells that made visual inspection a viable strategy were specific bugs in specific model generations, not something structurally impossible for AI to get right. Once the bugs got fixed, the advice quietly stopped applying, even though it kept circulating.
Why pixel-based detection is a losing race, not a solved problem
A pixel-based AI detector works by training a classifier to recognize statistical artifacts left behind by generation models — subtle patterns in noise, compression, or color distribution that differ from a camera sensor's output. The problem is structural: every time a detector gets good at spotting one generation model's artifacts, a newer model (or a detector-aware generator specifically trained to evade classifiers) erases them. This is an adversarial arms race with no finish line, not a bug that eventually gets patched.
That's true for every pixel classifier, not just weaker or free ones. Independent evaluations of commercial AI-detection tools have repeatedly found accuracy rates that swing wildly depending on which generator produced the test image, and drop sharply on images that have been re-compressed, resized, or lightly edited after generation — which describes most images once they've been uploaded anywhere. A tool that confidently returns '94% AI-generated' on an arbitrary image is making a claim pixel analysis alone can't currently back up.
“A confident percentage on an arbitrary image is a marketing number, not a measurement.”
What actually works: checking where the image says it came from
The approach that holds up isn't looking at the picture at all — it's looking at what's attached to the file. Many AI image generators embed generation details directly into the file's metadata: the exact text prompt, the model name, the sampler and seed used. Tools like Automatic1111 and ComfyUI write this into a PNG's text chunks by default. When that data is present and intact, it's a direct, first-party record of how the image was made — not an inference from pixel patterns.
A newer and more robust version of the same idea is the C2PA standard (Content Credentials) — an open specification backed by Adobe, Microsoft, OpenAI, and a growing list of camera and software makers, which cryptographically signs an image with a tamper-evident record of its edit history, including whether an AI tool touched it. Where a plain metadata tag can be edited or stripped without much friction, a C2PA signature is built to show when it's been altered or removed, which is a meaningfully stronger guarantee.
The honest limit: absence of proof isn't proof of absence
This is the part worth being upfront about, because it's where overselling happens. Provenance checking can confidently confirm AI origin when generation metadata or a valid Content Credential is present — that's a real, verifiable signal. What it can't do is confirm that an image is authentic just because that signal is missing.
Metadata is easy to strip. A screenshot of an AI-generated image, a re-save through an editor that doesn't preserve metadata, or a simple export with 'strip metadata' enabled will all remove the exact evidence a provenance check relies on — leaving an AI-generated image indistinguishable from a real one, as far as the file itself is concerned. A clean result means 'no evidence of AI generation was found,' not 'verified authentic.' Those are different claims, and conflating them is how people end up trusting an image they shouldn't.
Where this actually matters
The stakes vary a lot by context, and it's worth calibrating effort accordingly. A viral photo attached to a breaking-news claim, a product photo on a marketplace listing, a headshot on a dating profile, or an image submitted as evidence all carry real consequences if they turn out to be fabricated or misrepresented — and all are worth an actual provenance check rather than a glance.
A lot of everyday AI imagery isn't trying to deceive anyone at all — a marketing graphic, a blog header, a piece of concept art — and doesn't need the same scrutiny. The method is the same either way; the amount of effort worth spending on it isn't.
- Breaking-news or 'shocking' photos spreading on social media before an official source confirms them
- Marketplace or rental listing photos, where a generated image can misrepresent a real item or property
- Dating profile and social media photos
- Any image submitted as documentation or evidence
How to actually check one
In practice, this means checking a file's metadata directly rather than trusting a visual impression. The AI Image Detector reads an uploaded image's metadata locally in the browser, looks for known generation-tool signatures (like AUTOMATIC1111 or ComfyUI parameter blocks) and C2PA Content Credentials, and reports exactly what it finds — including an honest 'no AI generation evidence found' result when metadata is absent, rather than a false confidence score. For images with location or device metadata to check as well — a separate but related concern — the EXIF Viewer & Remover shows everything else a file is carrying.
Mentioned in this post
EXIF Data Viewer & Remover
View a JPEG's embedded camera, exposure, date, and GPS location data, then download a cleaned copy with the EXIF, XMP, or IPTC metadata removed — without re-compressing the image.
AI Image Detector
Checks a photo for real, verifiable AI-generation signals — embedded C2PA Content Credentials, Stable Diffusion generation parameters, known AI-tool software tags, and camera EXIF — and says plainly when none are found, instead of guessing from pixels.
Frequently asked questions
Can any tool tell me with 100% certainty whether an image is AI-generated?
No — and it's worth being skeptical of any tool that claims otherwise. Pixel-based detection is an unsolved, adversarial problem. The most reliable signal available is checking for generation metadata or a C2PA Content Credential, which confirms AI origin when present but can't prove authenticity when absent.
If an image has no AI metadata, does that mean it's a real photo?
Not necessarily. Metadata is easy to strip through a screenshot, a re-save, or an editor that doesn't preserve it. No metadata means no evidence was found, not that the image is confirmed authentic.
What is a C2PA Content Credential?
An open, cryptographically signed record of an image's origin and edit history, backed by a coalition including Adobe, Microsoft, and OpenAI. It's designed to be tamper-evident, so removing or altering it is detectable, unlike a plain metadata tag.
Why did the 'check the hands' trick stop working?
It was never a fundamental limitation of AI image generation — just a bug common in earlier models. Newer generators have largely fixed hand rendering, text legibility, and other early tells, so visual inspection alone is no longer reliable.
Does re-uploading an image to social media strip this metadata?
Often, yes — most major platforms re-compress and strip metadata on upload, which is part of why checking an image at its original source, before it's been re-shared, gives a more reliable result.