CIFI cheat sheet

Fraud detection compares claim facts with expected baselines; deviations in timing, damages, injury mechanism, or documentation are indicators, not proof.

Common red-flag categories are claim timing near policy inception or expiration, loss circumstances, claimant behavior, documentation inconsistencies, and provider or repairer patterns.

Staged auto collision indicators include abrupt late braking, multiple occupants, prior damage matching the claimed impact, rapid attorney representation, and common medical or legal providers.

Property and arson indicators include financial distress, prior losses, removed valuables, forced entry inconsistent with the loss, multiple origin points, and accelerant evidence.

Medical provider fraud indicators include billing for services not rendered, upcoding, unbundling, excessive treatment frequency, uniform diagnoses, and solicitation of claimants.

Workers' compensation indicators include Monday morning injuries, no witnesses, inconsistent physical capabilities, prior similar claims, and employer payroll discrepancies.

Premium fraud indicators include understated payroll, misclassified employees, undisclosed owners, fake certificates of insurance, and premiums below industry benchmarks.

Anomaly detection scores compare claim features with peer groups; a high score triggers review but does not by itself establish fraud.

First notice of loss details such as delayed reporting, changing dates, unusual policy knowledge, and claimant reluctance are detection signals to compare with later statements.

An SIU investigation verifies policy and coverage, establishes loss facts, collects documents, interviews witnesses, analyzes inconsistencies, documents findings, and reports conclusions.

Chain of custody records each transfer and storage of evidence; gaps can reduce admissibility and the weight evidence receives in fraud proceedings.

A recorded statement requires identity verification, authority to speak, consent to recording, preservation of the recording, and notation of corrections.

An examination under oath is a policy-condition interview under oath; questions may address coverage and material misrepresentations, and the transcript can support litigation.

Evidence categories are documentary, physical, testimonial, and digital; findings are stronger when independent sources corroborate each other.

Scene investigation documents conditions before alteration using photographs, measurements, origin and pattern analysis, and preserved samples with handler notes.

Medical record review compares itemized billing with treatment notes to identify services not rendered, upcoding, unbundling, and excessive frequency.

Surveillance is lawful public observation; documentation includes date, time, and activity, while trespass, harassment, and discriminatory targeting can taint evidence.

A fraud referral states facts, evidence, and suspected scheme, and is made to the appropriate SIU, state fraud bureau, or industry database when statutory thresholds are met.

Deterrence increases when offenders perceive high certainty of detection and response; speed and severity of sanctions also raise the perceived cost.

An anti-fraud plan is a written program covering detection, investigation, reporting, training, and monitoring; some states require insurers to maintain one.

Data sharing with industry databases and state fraud bureaus raises detection risk; reports must be accurate and comply with privacy and immunity laws.

Frontline red-flag training increases early detection when it covers scheme types, documentation standards, referral thresholds, and escalation paths.

Control environment measures such as segregation of duties, vendor screening, and duplicate claim checks reduce opportunity for fraud before payment.

Deterrence operates before loss through prevention and perceived risk; detection identifies incidents after loss; investigation proves or disproves suspected fraud.

Sanctions include policy voidance, civil recovery, criminal referral, and restitution; each requires authority in policy, statute, or regulation.

Program metrics include referral rate, confirmed fraud rate, recovery rate, and cycle time; these measure whether controls change behavior and outcomes.

Publicity about prosecutions and recoveries can produce general deterrence, but statements must be truthful to avoid defamation liability.

Professional investigator duties include accuracy, objectivity, confidentiality, competence, legal compliance, and fair treatment of all parties.

A conflict of interest exists when a relationship could impair impartiality; disclosure and recusal are required when judgment is materially affected.

Confidentiality limits claimant data to authorized persons with a need to know; external releases follow legal process and privacy requirements.

Evidence integrity requires no alteration, fabrication, or destruction; collection is documented contemporaneously and original files are preserved.

Interviews must avoid coercion, threats, false imprisonment, and deceptive promises that can invalidate statements or create liability.

Reports separate verified facts from inferences and state the basis for conclusions; errors are corrected promptly to maintain accuracy.

Competence requires current knowledge of law, investigative methods, and fraud schemes, plus recognition of when expert or legal assistance is needed.

An investigator's duty includes reporting exculpatory or unfavorable evidence; concealment undermines objectivity and professional credibility.

Professional standards prohibit discriminatory profiling and require respectful, lawful treatment of claimants, witnesses, and providers.

Common fraud elements are a false statement, materiality, knowledge or intent, reliance, and damages; exact statutory elements vary by jurisdiction.

A material misrepresentation is a false statement that would affect an insurer's decision; depending on law and policy, it may void coverage or support denial.

Common policy conditions include notice, proof of loss, cooperation, and examination under oath; material breach can prejudice coverage.

A reservation of rights letter preserves coverage defenses while investigation continues and helps avoid waiver of those defenses.

Bad faith risk arises when an insurer delays unreasonably or investigates cursorily; suspicion of fraud does not excuse failure to investigate covered claims.

Many states provide qualified immunity for reporting suspected fraud in good faith; immunity generally does not protect knowingly false or malicious reports.

Fraud defenses include lack of intent, immaterial statement, innocent error, no reliance, waiver, and estoppel, depending on the claim and jurisdiction.

Fair claims practices require prompt communication, documented decisions, and written denial reasons; unfair practices can create regulatory and civil liability.

Fraud and contract claims can have different limitation periods, and a discovery rule may delay accrual until fraud is or should be discovered.

Red flags are claim features that deviate from expected patterns and warrant review; they are indicators, not proof of fraud.

Staged collision indicators include abrupt braking, multiple occupants, prior damage, and rapid attorney or medical solicitation.

Arson indicators include financial distress, multiple origin points, accelerant evidence, removed valuables, and forced entry inconsistent with the loss.

Upcoding is billing a higher-cost service or code than documented and is detected by comparing bills with medical records and treatment notes.

Premium fraud indicators include understated payroll, misclassified workers, undisclosed owners, and fake certificates of insurance.

Anomaly detection uses statistical models to score claims against peer baselines; a high score triggers review but does not alone prove fraud.

Workers' compensation red flags include Monday injuries, no witnesses, inconsistent physical ability, and prior similar claims.

Chain of custody documents each transfer and storage of evidence; gaps can weaken admissibility and reduce evidentiary weight.

A recorded statement is a claimant interview preserved by audio or video; consent, identity verification, and correction notes support later comparison.

An examination under oath is a sworn policy-condition interview that may cover coverage and material misrepresentations and can be used in litigation.

Scene documentation uses photographs, measurements, and origin analysis before alteration; samples are preserved with notes on who handled each item.

Surveillance is lawful public observation; date, time, and activity are documented, and trespass or harassment can taint evidence.

Medical bill review compares itemized bills with records for services not rendered, unbundling, and excessive frequency, using qualified clinical interpretation.

An SIU referral states facts, evidence, and suspected scheme without conclusory accusations when indicators meet defined thresholds.

Deterrence increases when offenders perceive high certainty of detection and response; speed and severity of sanctions also affect perceived cost.

An anti-fraud plan is a written program covering detection, investigation, reporting, training, and monitoring; some states require insurers to maintain one.

Sharing verified fraud data with industry databases and state bureaus raises detection risk when reports are accurate and privacy laws are followed.

Training staff to recognize and refer red flags increases early detection when it covers scheme types, documentation, and escalation paths.

Deterrence metrics include referral rate, confirmed fraud rate, recovery rate, and cycle time, which show whether controls change behavior and outcomes.

Screening vendors and providers for exclusions, ownership links, and adverse history reduces opportunity for collusive fraud before payment.

A conflict exists when a relationship could impair impartiality; disclosure and recusal are required when judgment is materially affected or appears improper.

Investigators share claimant data only with authorized persons who need it, protect identifiers, and follow legal process for external releases.

Evidence must never be altered, fabricated, or destroyed; collection is documented contemporaneously and original files are preserved for independent verification.

Threats, false imprisonment, and deceptive promises can invalidate statements and create liability; interviews stay within legal and ethical limits.

Reports separate verified facts from inferences and state the basis for each conclusion; prompt correction maintains accuracy.

Investigators must know applicable law, methods, and scheme patterns and recognize when expert or legal assistance is beyond their competence.

Common fraud elements include a false statement, materiality, knowledge or intent, reliance, and damages; exact statutory elements vary by jurisdiction.

A material misrepresentation is a false statement that would affect an insurer's decision; depending on law and policy, it may void coverage or support denial.

A reservation of rights letter preserves an insurer's coverage defenses while investigation continues and helps avoid waiver of those defenses.

Suspecting fraud does not excuse unreasonable delay or a cursory investigation; insurers must investigate covered claims promptly and document decisions.

Many statutes give qualified immunity for reporting suspected fraud in good faith; immunity generally does not protect knowingly false or malicious reports.

Notice, proof of loss, cooperation, and EUO are common policy conditions; material breach can prejudice coverage, but prejudice rules vary by state.