Preventing and Detecting Insurance Fraud

1. Why This Topic Matters
Insurance fraud is one of the costliest categories of economic crime. Industry estimates put the cost in the tens of billions of dollars annually in the United States alone, and every dollar lost to fraud is passed along to honest policyholders through higher premiums. For the CFE candidate, Insurance Fraud is a tested sub-topic in the Financial Transactions and Fraud Schemes section of the exam. The ACFE expects you to know the common schemes committed by claimants, policyholders, agents and brokers, underwriters, medical providers and organized rings, and, just as importantly, the red flags, detection techniques, and prevention controls that insurers and fraud examiners use to fight them. Questions on this topic are usually scenario-based: you are given a short fact pattern and asked to name the scheme, pick the best red flag, or identify the most appropriate detection or prevention step.

2. What Insurance Fraud Is
Insurance fraud is any act committed with the intent to obtain a fraudulent outcome from an insurance process. It occurs when a claimant attempts to obtain a benefit or advantage to which they are not entitled, or when an insurer, agent, or other industry insider knowingly denies a benefit that is due or misuses premiums and policies for personal gain. The Fraud Examiners Manual organizes insurance fraud into several categories:

a) Agent and Broker Fraud
• Premium theft – the agent collects premiums from customers but never remits them to the insurer, leaving the customer uninsured.
• Fictitious payees – the agent changes the beneficiary or payee on a claim or refund check to themselves or an accomplice.
• Fictitious death claims – the agent writes a policy on a non-existent or deceased person and later files a fabricated death claim.
• Twisting – inducing a policyholder to drop an existing policy and buy a replacement through misrepresentation, so the agent earns a new commission.
• Churning – repeatedly replacing policies, often using the cash value of the old policy to fund the new one, to generate commissions.
• Sliding – adding extra, unrequested coverages or products to a policy without the customer's informed consent.
• Rebating – illegally returning a portion of the commission to the customer as an inducement to buy; also used to disguise kickbacks.

b) Underwriting Irregularities
• Misrepresentation on the application – lying about health, driving record, property value, prior claims, or location to obtain coverage or a lower premium.
• Equity funding – using the cash value of an existing policy (often through loans) to pay premiums on new policies, concealing the true financial picture.
• Fictitious or ghost policies – policies written on persons or property that do not exist.
• Surety and performance bond schemes – bonds issued by unlicensed or insolvent sureties, or on fraudulent financial statements.

c) Vehicle Insurance Schemes
• Ditching (owner give-up) – the owner disposes of a vehicle (burns, sinks, abandons, or sells it) and then reports it stolen.
• Past posting – an accident occurs while uninsured; the owner then buys coverage and reports the accident as happening after the policy inception.
• Vehicle repair fraud – body shops bill for parts not installed, use used or counterfeit parts, or inflate labor.
• Vehicle smuggling – a car is financed and insured, then shipped overseas and reported stolen.
• Phantom vehicles – a vehicle that never existed is insured using a false title and VIN, then claimed as stolen or wrecked.
• Staged accidents – Swoop and squat (one car cuts in front, the squat car brakes hard so the victim rear-ends it); Drive down (the fraudster waves the victim into traffic then hits them and denies it); Sideswipe (the fraudster drifts across a dual turn lane); T-bone (the fraudster runs into a victim at an intersection with planted witnesses).
• Paper accidents – no collision occurs at all; the claim is supported entirely by fabricated documents, often with a corrupt body shop or adjuster.
• Inflated damages – including prior damage or unrelated repairs in a legitimate claim.

d) Property Schemes
• Inflated inventory – adding items that were never owned, or inflating values, after a real loss.
• Phony burglary or theft – staging a break-in and claiming non-existent losses.
• Paper boats – insuring a boat that exists only on paper and then reporting it sunk or stolen.
• Arson for profit – burning property to collect the insurance, often when the owner is in financial distress or the property is over-insured.

e) Life Insurance Schemes
• Fraudulent death claims – faking a death abroad with purchased death certificates, or claiming on a fictitious insured.
• Murder for profit – the beneficiary causes the death of the insured.
• Misrepresentation of health – concealing terminal illness, or substituting a healthy person for the medical exam.

f) Liability Schemes
• Slip and fall – staged falls in stores or on commercial property, often with pre-existing injuries.
• Product liability – planting foreign objects in food or products.
• Frequently involve repeat claimants, cooperating doctors, and attorneys.

g) Workers' Compensation Fraud
• Premium fraud by employers – misclassifying employees into lower-risk job codes, underreporting payroll, misstating the number of employees, or creating shell companies to escape a poor experience modification rating.
• Agent fraud – issuing fake certificates of insurance or pocketing premiums.
• Claimant fraud – faking or exaggerating injury, malingering (staying off work longer than necessary), claiming an off-the-job injury as work-related, or working another job while collecting benefits.
• Organized fraud rings – lawyers, doctors (capping, running, mill clinics) and claimants cooperating to generate large volumes of false soft-tissue injury claims.

3. How Detection Works
Red flags of a fraudulent claim (claimant behavior)
• Claimant is unusually knowledgeable about insurance terms and the claims process.
• Claimant is overly pushy for a quick settlement and willing to accept a reduced amount for fast payment.
• Claimant hand-delivers the claim or insists on cash, or uses a post office box or hotel address.
• Loss occurs shortly after policy inception, shortly after coverage was increased, or just before the policy lapses.
• Claimant has recent financial problems, multiple prior claims, or a history of frequent address or employer changes.
• No police report, or the report was filed long after the loss; claimant is reluctant to give a recorded statement or examination under oath.
• Documentation is missing, altered, photocopied, or receipts are suspiciously uniform or sequential.
• In theft claims, the stolen items are all high-value, recently purchased, and undocumented.
• In auto claims, all occupants report similar soft-tissue injuries, there are more passengers than seats, witnesses appear from nowhere, the other driver quickly admits fault, or the same body shop, attorney, and clinic keep appearing.
• In arson, the owner was conveniently absent, pets and valuables were removed, the business was failing, and the property had been recently over-insured.

Red flags of agent and application fraud
• Premiums paid in cash to the agent; customer cannot produce a policy.
• High lapse ratios, unusually high replacement activity, or many policies with the same beneficiary or address.
• Applications with the agent's office as the mailing address.
• Applicant's signature varies across documents; medical exams performed by unknown examiners.

Detection techniques and tools
• Special Investigation Units (SIUs) – dedicated insurer units that receive referrals from adjusters and investigate suspicious claims; many states require insurers to maintain them.
• Computer-generated detection reports – analytics run on claims data to flag anomalies, such as claims by adjuster, claims by agent, frequency of claims per claimant, losses close to inception, payments to the same payee, duplicate addresses or phone numbers, and body shops with abnormal part costs.
• Industry databases – ISO ClaimSearch and the National Insurance Crime Bureau (NICB) share claim histories across insurers to catch repeat claimants and duplicate claims; motor vehicle, property and public records checks.
• Link analysis – mapping common elements (addresses, phone numbers, doctors, attorneys, witnesses) to expose organized rings.
• Claim file review – verify the loss event, obtain recorded statements, interview witnesses separately, canvass the neighborhood, request examinations under oath, and verify receipts and appraisals directly with vendors.
• Independent medical examinations and surveillance – used primarily in bodily injury and workers' compensation claims to test the claimed disability.
• Premium audits – in workers' compensation, auditing payroll records, tax filings and job classifications to detect premium fraud.
• Fire investigation – origin and cause analysis, accelerant testing, and financial analysis of the owner in suspected arson.

4. How Prevention Works
• Underwriting controls – verify applicant identity and information, inspect property and vehicles before binding coverage, check prior claims history, and avoid over-insurance.
• Agent oversight – monitor commission patterns, lapse and replacement ratios, premium remittance timing, and conduct background checks on agents.
• Adjuster training – teach front-line claims staff the red flags and provide a simple referral process to the SIU.
• Antifraud plans and laws – many jurisdictions require insurers to file antifraud plans, maintain SIUs, report suspected fraud to a state insurance fraud bureau, and print fraud warning statements on applications and claim forms. Immunity statutes protect insurers that report in good faith.
• Public awareness and hotlines – consumer education and anonymous tip lines reduce tolerance for padding and encourage reporting.
• Data sharing – participation in industry databases prevents fraudsters from exploiting information gaps between insurers.

5. Exam Tips: Answering Questions on Preventing and Detecting Insurance Fraud
Tip 1 – Memorize the agent-fraud vocabulary and keep them separate. Twisting = misrepresentation to replace a policy. Churning = repeated replacement, often funded by the old policy's cash value, for commissions. Sliding = adding coverage without consent. Rebating = returning part of the commission as an inducement. The exam frequently describes one of these and asks you to name it.

Tip 2 – Know the staged-accident names. If a vehicle brakes suddenly in front of the victim after another car cuts in, it is swoop and squat. If a driver waves the victim into traffic and then hits them, it is drive down. Lane-drift in a dual turn lane is sideswipe. Intersection collision with fake witnesses is T-bone. A claim with no collision at all is a paper accident.

Tip 3 – Distinguish past posting from ditching. Past posting involves timing (buying coverage after the loss and misdating the loss). Ditching / owner give-up involves disposing of the car and reporting it stolen.

Tip 4 – For workers' compensation, separate employer premium fraud from claimant fraud. Misclassifying workers, underreporting payroll and creating shell companies are employer schemes; malingering and off-the-job injuries are claimant schemes.

Tip 5 – Red flag questions often ask which item is NOT a red flag. Read carefully. Normal behavior such as promptly filing a police report, providing original receipts, or cooperating with a recorded statement is not suspicious. Pushiness for a fast settlement, losses soon after inception or coverage increases, missing documentation, and a post office box address are red flags.

Tip 6 – Match the detection tool to the scheme. Repeat claimants and duplicate claims across insurers point to industry databases (ISO ClaimSearch, NICB). Organized rings call for link analysis. Suspicious soft-tissue injuries call for independent medical exams and surveillance. Employer premium fraud calls for a premium audit. Agent misconduct is revealed by commission, lapse and replacement ratio analysis.

Tip 7 – Remember that the best initial control is usually simple. When asked for the most effective step, the exam often favors verification at the front end (confirming the loss directly with third parties, inspecting property before binding coverage, checking claim history) over expensive measures like surveillance, which is reserved for specific suspected bodily-injury cases.

Tip 8 – Understand the regulatory environment at a high level. Know that many jurisdictions mandate SIUs, antifraud plans, reporting of suspected fraud to a fraud bureau, and fraud warning language on forms, and that insurers reporting in good faith receive statutory immunity. You do not need to know specific state statutes.

Tip 9 – Use the elimination method on scenario questions. Identify who the perpetrator is (claimant, policyholder, agent, underwriter, provider), what line of insurance is involved (auto, property, life, liability, workers' compensation), and whether the misstatement relates to the application, the premium, or the claim. This three-part classification eliminates most wrong answer choices quickly.

Tip 10 – Watch for absolute language. Statements that a single red flag proves fraud are false; red flags only indicate that further investigation is warranted. The CFE exam consistently treats red flags as indicators, not conclusions.

6. Quick Review Summary
• Insurance fraud is committed by outsiders (claimants, applicants, rings) and insiders (agents, adjusters, underwriters).
• Key agent schemes: premium theft, fictitious payees, twisting, churning, sliding, rebating.
• Key auto schemes: ditching, past posting, phantom vehicles, staged accidents, paper accidents, repair fraud.
• Key property and life schemes: inflated inventory, phony theft, arson, paper boats, fraudulent death claims.
• Key workers' compensation schemes: payroll misclassification and underreporting (employer), malingering and false injuries (claimant).
• Detection relies on red flag awareness, SIUs, computer-generated exception reports, industry databases, link analysis, statements and examinations under oath, independent medical exams and surveillance.
• Prevention relies on strong underwriting, agent monitoring, adjuster training, antifraud plans, hotlines, public awareness and data sharing.
• On the exam: name the scheme from its description, pick the genuine red flag, match the tool to the scheme, and remember that red flags indicate rather than prove fraud.