# Why AI detectors flag real photos

Source: https://passreal.com/guides/false-positives

AI image detectors are statistical classifiers. They return a probability based on patterns in the pixels, not a verdict about how the file was made, so heavily smoothed, compressed, upscaled or retouched real photographs can score as AI. No detector has ground truth about your file. Treat a score as one weak signal and keep your original as evidence.

## A score is not a fact

When a detector says an image is likely AI-generated, it is reporting the output
of a classifier. The classifier was trained on examples of generated and real
images and learned patterns that separate them in that training set. Given a new
file, it estimates how closely the file resembles each group.

That is a probability about resemblance. It is not a record of how the file was
made, and it does not read a watermark or a signature. The detectors behind the
free web tools are also usually trained on particular generators from a particular
period, so a file made by a different model, or a different version, may fall
outside what they know.

## Common reasons a real photo gets flagged

None of these is certain for a given file. They are the patterns that reliably
move a real image toward looking synthetic.

- Heavy noise reduction. Smooth skin, sky and walls remove the random
  grain that real sensors produce. Generated images are also unusually clean.
- Upscaling. A small photograph enlarged with an AI upscaler gains invented detail
  that has the statistics of generated texture.
- Aggressive compression. Repeated JPEG saving leaves blocky artifacts that
  confuse classifiers trained on clean data.
- Portrait retouching. Skin smoothing and eye enhancement apps change faces
  toward the smooth look common in generated portraits.
- Computational photography. Night modes and HDR stacking blend several frames and
  can produce an unnatural evenness.
- Screenshots and re-photographed screens, which add a moire pattern and shift
  the color statistics.
- Stock and illustration styles. A very polished studio shot with perfect
  lighting looks like the training data for a generator.

## What you can check yourself

You can look at several things before accepting a verdict.

First, read the metadata. A file straight from a phone has a make, a model, a
date and exposure fields. If those are present and consistent, the file started
life in a camera, even if later editing triggered a detector. Second, try a
second detector that works differently. One that reads pixel statistics and one
that runs error level analysis disagree often. The pages on
[Sightengine](/detectors/sightengine) and on
[FotoForensics error level analysis](/detectors/fotoforensics-ela) describe what
each one looks at. Third, if the picture was enlarged or recompressed, check
whether an earlier version exists.

## What a flagged photographer can do

Keep the evidence from the day of capture: the original file as it came off the
device, the RAW file if there is one, and adjacent frames from the same shoot. If
a platform or client has flagged the work, those are what you send, not a screenshot
of another detector's score. If your camera supports signed Content Credentials,
the signature adds weight, as the guide on [what C2PA is](/guides/c2pa)
explains, because it is a record created at capture and not an estimate made
afterwards.

Be wary of the opposite error as well. A clean score on a detector tells you the
classifier did not recognize the file. It says nothing about whether the file is
real, and our own tests of processed images against ZeroGPT have kept returning
values of 0.96 to 0.97, so a detector answer should never be the basis of a
promise in either direction.

## Why this matters for tools like PassReal

A tool that changes pixels moves a file around in that statistical space, and no
tool should promise to land on a particular side. PassReal removes the declared
provenance and changes the pixel statistics with grain and frequency smoothing,
and its terms offer a refund if a public detector classifies a processed image
as AI-generated within the window the terms state. That is a commercial
guarantee, not a technical claim that detectors cannot be fooled or that they are
always right.

## Questions

### Can a real photo be classified as AI?

Yes. Detectors work from learned patterns, and a real photo that has been denoised, sharpened, upscaled or recompressed can look statistically similar to a generated one. Every detector has some rate of mistakes, and you cannot assume yours is zero.

### Does a phone photo get flagged more often than a camera photo?

It can. Phones apply heavy computational processing, such as noise reduction and sharpening, that changes the fine texture a detector looks at. We have not measured how often, so treat that as a reason for caution, not a rate.

### Is a high score proof that the image is AI?

No. It is a model's estimate. Two detectors can disagree on the same file, because they are trained on different data and look for different things.

### How can I show that my photo is real?

Keep the original file with its camera metadata, any RAW file, and neighbouring frames from the same session. A signed C2PA record from a camera that supports it is stronger than any score.

### Should I run my own photos through a detector?

Only to learn how it behaves. Do not read a clean result as proof of anything either, since the same tool that misses an AI image can also flag a real one.

Try it: https://passreal.com/app (three images free)