Download Detective
Check the places where PDFs usually land
Start with Downloads, Desktop, and the folder your browser uses for saved files. Also check the folder used by the app that supplied the PDF. Mail attachments, cloud-drive exports, and browser downloads do not always share one location.
In Finder, switch to List view so date, size, and kind are easy to compare. Sort by Date Added if the column is available. Date Modified can reflect the document’s own history rather than the day you downloaded it, so it is not always the best first clue.
Filter by file kind
Use Finder search, choose the likely folder rather than This Mac, and add a Kind filter for PDF. Search terms from the document title can help, but remember that Finder may be searching content as well as the filename.
If you know roughly when you downloaded it, add a date condition. Keep the first search broad: month or week is safer than guessing one exact day.
Search by the source website
A generic filename becomes much less of a problem when the file still carries its download URL. For example, this command searches Downloads for files from a remembered domain:
mdfind -onlyin ~/Downloads 'kMDItemWhereFroms == "*example.com*"c'Review the results and use mdls -name kMDItemWhereFroms on a likely file if you want to check its full saved URLs.
Download Detective makes this easier for people who prefer not to use Terminal. Choose Downloads, click the remembered domain, and filter for documents or type pdf. Sort by date, name, source, size, or kind. Quick Look lets you confirm the document without opening it in a full app.
Use several weak clues together
One clue may be unreliable, but a few together are strong. A useful combination might be:
- PDF document
- from a specific bank or portal domain
- downloaded around the end of last month
- between 100 KB and 2 MB
You do not need to know the exact title. The aim is to reduce a folder of thousands of files to a short list you can preview.
Be careful with sensitive documents
Filenames and source URLs can reveal private information. Avoid uploading a folder index, screenshot, or full URL to an online tool just to search it. Download Detective processes the selected folder locally and has no account, analytics, or backend.
Before reopening a source page, check the domain. A saved URL is historical context, not a guarantee that the current page is safe or that an old session link still belongs to you.
Why the source may not appear
A PDF saved through a browser may have Where from metadata, but a scanned document created locally will not. A file exported from another app may point to that app’s workflow or have no web source. Copying through some cloud services or drives can strip the metadata.
If the source is missing, return to other records: browser history, the email containing the link, account download pages, recent Finder folders, or backups. Download Detective can show that a source is unknown, but it cannot reconstruct a URL that is absent.
After you find the PDF
Rename it with a clear, non-sensitive title and move it to the right project or records folder. If you will need the source again, keep a bookmark or note. File provenance is a useful fallback, but it should not be the only record for tax forms, contracts, receipts, or other important documents.