WorkflowFraud, Subrogation & Recovery

Document Fraud Detection

Insurance document fraud detection that tests every claim document for edits before it is paid

Every claim document over a set amount tested for edits before it is paid.

See one case, screen by screen ↓
demo41sto test the Clearwater invoice and pin six findings on the page
demo1.84millionpast claim documents searched for the same invoice template
demo5claimson one template under five business names — $50,177.60 invoiced, $19,150.00 already paid
target100%of claim documents over $1,000 tested before payment
In short

What is Document Fraud Detection?

Testing the documents a claim is paid on — invoices, medical bills, repair estimates and receipts — for signs they were edited or made up, before the money goes out. Document Fraud Detection reads each document, inspects the file itself, redoes the arithmetic, checks the vendor or provider and searches past claim documents for the same template.

How to choose AI solutions for insurance →

Updated

The problem

Why edited invoices get paid

Invoices, medical bills, repair estimates and receipts are easy to edit, and an edited one now looks clean to the eye. The edits that matter are small: one digit in a total, a re-typed hours cell, a moved date. They pass a busy desk adjuster and the quick arithmetic of whoever is in a hurry.

Checking a document properly means calling the vendor, redoing the arithmetic, opening the file properties and comparing it against past bills — 10 to 15 minutes a document, which a desk adjuster with 140 open claims does not have. So almost nothing is checked. And serial fraud cannot be seen claim by claim at all: the same invoice template arrives under several business names, on claims handled by different adjusters in different towns.

typical10–15minto check one claim document by hand
typical$45billiona year in property-casualty insurance fraud in the U.S.
demo$19,150paidalready paid on two look-alike invoices from the same template
Where the minutes go on one claim document, checked by handestimated
By hand15 days
With the solution2.1 days
  • Redoing the arithmetic2 → 0.2 d
  • Opening the file properties and fonts3 → 0.3 d
  • Checking the vendor or provider3 → 0.3 d
  • Comparing with past bills4 → 0.3 d
  • Writing the file note or referral3 → 1 d

Estimated split in minutes for one invoice checked by hand, and with the solution — where the adjuster reads the pinned findings instead.

How it works

How a document moves

Six agents test the page, the file and its sources in under a minute; the adjuster decides and SIU accepts.

What comes in
Documents in4 kinds · invoices, medical bills, estimates, receipts
Agents at work
Document intakethreshold + fingerprint
Document readerevery value, placed
Then
File forensicsfonts, layers, history
Consistency checkerarithmetic, register
Look-alike findersame template
Then
Verdict and note writerpass · question · refer
A person decides
Claims adjusterpays, asks or refers
What comes out
Verdict with pinned proof
SIU referral, every pin cited
Template clusters
One case, step by step

One dry-out invoice, from upload to SIU

On Monday Oct 12 at 08:12, the insureds on a water loss upload a mitigation invoice through the claim portal. Here is what happens next, screen by screen, in the working solution.

  1. 0106:00 – 08:12

    Every document over the threshold, tested as it arrives

    Document intake

    Since 06:00 the agents have tested 186 claim documents, each before anyone could pay on it, in about 38 seconds each: 171 pass, 12 question, 3 refer, with $14,749.39 held. At 08:12 a new one lands — Clearwater Dry-Out & Restoration LLC, mitigation invoice, $9,812.60, on homeowners claim HO-26-31847.

  2. 0241 seconds

    Read, inspected, recomputed and matched

    The six agents

    Intake keeps the original and its fingerprint. The reader places 31 fields, 9 lines and 3 totals on the page. File forensics measures every glyph, the consistency checker redoes the sums and checks the register, and the look-alike finder compares the layout with 1.84 million claim documents. Each step shows what it found and how long it took.

    “Refer — 3 refer-level, 3 question-level findings · SIU referral drafted.” Then: “Marisol Quintero decides.”

  3. 0308:13

    The magnifier over the total

    Marisol Quintero · Senior property claims adjuster

    Marisol opens the invoice on the light-table. Six numbered pins sit on the page. She clicks pin 1, and the lens flies to the total in the Ink weight view: “$9,812.60” is set in Arial Bold at a 2.3 px stroke, while every other figure on the page — 31 of them — is Inter at 1.7 px.

    “3 refer-level findings. The fixed rules say any one is enough to refer; the decision is yours.”

  4. 04Pin 2

    The lines add up to $5,000.00 less

    Consistency checker

    The nine lines add to $4,812.60, which is the printed subtotal. Tax is $0.00, so the total should be $4,812.60. It reads $9,812.60 — exactly $5,000.00 more. Pin 3 adds that the leading “9” sits 1.4 px above the baseline of the other digits.

  5. 05Pin 4

    Edited the night before it was sent

    File forensics

    The file was made by an online invoicing app on Sep 22 at 18:04, then opened and saved again in a desktop PDF editor on Oct 11 at 21:47 — 19 days later, and ten hours before the upload. The only object added was the total, on a second text layer. Nothing on the claim explains a change on Oct 11.

    File forensics reports evidence with measurements — it never calls a document fraudulent.

  6. 06Pin 5

    A vendor nobody knows, with someone else’s tax ID

    Consistency checker

    Clearwater is not on the Larkspur vendor register and has no state contractor registration under its name. Its EIN 84-3301927 is on a Northfork Emergency Services invoice paid on claim HO-26-26390. Unit 4 is a mailbox store, the phone is a prepaid mobile activated in June, and remit-to PO Box 4471 is on three other invoices. The insured and the work dates do match the claim.

    “Claims are linked on shared identifiers and template traits, never on a name alone.”

  7. 07Pin 6

    One template, five claims, five names

    Look-alike finder

    The same invoice template is on four unrelated claims under four other business names: Summit Peak Water Restoration, Rapid Dry Pros LLC, Brightline Restoration Group and Northfork Emergency Services LLC — handled by three other adjusters. $40,365.00 across them, $19,150.00 already paid.

  8. 08Side by side

    Only the names and numbers move

    Marisol Quintero · Senior property claims adjuster

    Marisol slides the overlay between her invoice and the Northfork one, then switches to Differences: the only fields that differ are names, numbers and amounts. The trait grid marks what each invoice shares with hers: all five have the same layout grid, the footer “we keep your home dry!”, the misspelling “Dehumidifer” and a total box set 6 px low; some also share the PO box, the EIN or the heavier total.

  9. 0909:06 · signed

    Payment held, five claims referred as one

    Marisol Quintero · Owen Achterberg, SIU

    The note writer has drafted the referral from the six pins — every sentence points at one. Marisol reads it, signs, and the payment on HO-26-31847 is held. She sends it to SIU with the original file, the lens views, the file history and the look-alikes attached. At 09:21 Owen Achterberg accepts it as SIU-26-0418, for all five claims.

    “Your signature confirms the facts above; it does not accuse anyone.”

  10. 10Last 30 days

    What the tests are finding

    Grace Nwosu · Fraud manager

    4,972 documents tested: 4,511 pass, 389 question, 72 refer — $412,860 held on refer and $199,620 asked about before paying. Edit history is the busiest test with 214 findings. Template clusters show the water mitigation invoice as new today, beside a tow and storage ticket already with SIU since Sep 24.

Who it’s for

Built for everyone who touches a claim document.

The same invoice, seen by the four people who carry it — what their day looked like, and what it looks like now.

MQ
Marisol QuinteroSenior property claims adjuster, Larkspur Mutual
Claims adjuster
Before
“It looked like any other dry-out invoice. I had no way to know the total was typed in last night.”
Now
Every claim document over $1,000 reaches her already tested, with each finding pinned on the page and the referral drafted; she decides to pay, hold, ask or refer.
OA
Owen AchterbergSpecial Investigations
SIU investigator
Before
“One altered invoice is a claim. Five invoices from the same template is a ring.”
Now
Receives one referral for all five claims, every sentence cited to a pin, with the original file, its fingerprint and the look-alikes attached — and accepts or declines it.
GN
Grace NwosuFraud manager — owns the tests and thresholds
Fraud manager
Before
“I need to show the bureau why we referred it, in plain words.”
Now
Sets which documents are tested and at what level, publishes each change as a version, gives the second approval to pay against a refer, and sees 30 days of findings.
HT
Henry TsaiMedical bill reviewer, injury claims
Bill reviewer
Before
“I check the codes. Nobody checks whether the page itself was edited.”
Now
Every medical bill over $500 is tested for edits too — like the North Shore Orthopedics bill, where three dates of service sit on a second layer added after it was produced.
Built on the engine

6 agents. Each with one job, and hard limits.

Six agents test the page, the file and its sources in under a minute; the adjuster decides and SIU accepts.

Document intake

Picks up every claim document over the threshold from the portal, email, vendor uploads and bill feeds, and sorts invoices, medical bills, estimates and receipts.

  • Never changes the original file
  • Keeps the fingerprint with every finding
Document reader

Reads every field, line and total with its position on the page, so each finding can be pinned where it is.

  • Never guesses a figure it cannot read
  • Low-confidence fields go to a person
File forensics

Inspects the file itself: fonts and stroke weight, text layers, edit history, digit alignment and re-encoded image regions.

  • Reports evidence with measurements — never calls a document fraudulent
Consistency checker

Redoes the arithmetic and checks the document against its own sources: the claim, the regional price list, the vendor and provider registers.

  • Never contacts the vendor or the insured
Look-alike finder

Fingerprints the layout and searches every past claim document for the same template, tax ID, PO box or bank details on unrelated claims.

  • Never links claims on a name alone
  • Shows every shared trait
Verdict and note writer

Applies the fixed verdict rules — pass, question or refer — and drafts the claim-file note or the SIU referral with every finding cited to its pin.

  • Never holds a payment or refers by itself
  • Same evidence always gives the same verdict
Claims adjuster

Decides every question and refer; SIU accepts referrals. The agents propose; a named person decides.

Ask in plain words

Ask about any document, in plain words

Adjusters, bill reviewers and SIU can ask about any document, finding or vendor — or tell it what to change. Every answer names the agent and the pin it rests on.

Why is the Clearwater invoice a refer?

Three findings are refer-level on invoice 20931. The total “$9,812.60” is Arial Bold at a 2.3 px stroke; every other figure is 1.7 px. The lines and subtotal give $4,812.60, so the total is $5,000.00 more. And the same layout is on 4 unrelated claims under 4 other names.

Show me the other claims with this template

Four, all water-mitigation invoices from the same template: HO-26-29104 Summit Peak ($11,460.00, paid), HO-26-30552 Rapid Dry Pros ($8,975.00, open), DP-26-07718 Brightline ($12,240.00, open), HO-26-26390 Northfork ($7,690.00, paid). $19,150.00 already paid.

Has Clearwater billed us before?

No. Clearwater is not on the vendor register and has no state contractor registration. But its tax ID 84-3301927 is on a Northfork Emergency Services invoice paid on HO-26-26390 on Jul 24, and its remit-to PO Box 4471 is on three other invoices.

Draft the SIU referral for all five claims

Drafted. It covers the lead claim and the four linked ones ($50,177.60 invoiced, $19,150.00 paid), cites each of the six pins, and says what we have and have not done. It needs your signature.

Every screen

The working solution, as it ships.

13 screens from the working solution, on its sample data. Pick one to see it large.

The examine benchThe document on a light-table with six pins, the magnifier in the Ink weight lens, the findings, and the documents waiting.
How the agents tested itSix agents in 41 seconds — each step with what it found and how long it took, ending with the adjuster’s decision.
Arithmetic under the lensLines and subtotal give $4,812.60; the total reads $9,812.60 — $5,000.00 more.
The Layers lensText added on a later layer outlined on the page, with the edit history beside it.
File evidenceEdit history against the claim timeline, fonts with stroke weight, the layers and the re-encoded region.
Vendor checkWhat the invoice says against the vendor register, the state registration lookup and every other claim document.
Look-alikesOne template on five claims under five business names, with who paid what.
Overlay and shared traitsOnly names, numbers and amounts differ; the trait grid marks which traits each invoice shares with the Clearwater one.
The SIU referralDrafted from the six pins, signed by the adjuster, accepted by SIU as one case for five claims.
Documents tested todayEvery document tested since 06:00 with its verdict, amount, findings and test time.
A repair invoice to questionBody-labour hours set in 9.5 pt among 9 pt, and 7.5 h billed against 5.5 h approved.
What the tests are finding30 days of verdicts, findings by test, dollars held and template clusters for the fraud manager.
Tests and thresholdsEach test’s level, the amount thresholds, the fixed verdict rules and who decides.
Governance

Built to stand up in front of a fraud bureau: measured, decided by people, on the record.

Every finding carries a measurementEach pin names its test, its level, the measurement and the place on the page — “stroke 2.3 px, every other figure 1.7 px” — so the adjuster can put the lens on it and see it for themselves.
Agents test and explain; people decideThe adjuster decides every question and refer: pay, hold, ask the vendor or refer. SIU accepts or declines a referral. Paying against a refer needs a second approval from the fraud manager.
Same evidence, same verdictThe verdict rules are fixed: any refer-level finding gives Refer, question-level findings only give Question, none gives Pass. Paying with an open question records the reason on the claim file.
Originals kept unchangedThe original file is kept as it arrived, with its fingerprint, and travels with the referral as evidence.
Nobody is contacted or accusedThe agents never contact the insured, the vendor or the provider. A request for the original asks for the document and does not say why, and the referral states facts, not accusations.
Changes published as versionsThe fraud manager owns the tests and thresholds. Each change is published as a new version and applies to documents received after it; every decision is on the claim with time and person.
Configuration

Your tests and thresholds, not ours

Which documents are tested, how hard each test bites and who decides are settings the fraud manager owns.

SettingDefaultChoose from
Test any claim document over$1,000$0 – $5,000, in $250 steps
Test medical bills over$500 (raised from $250 on Oct 5)$0 – $2,000, in $50 steps
Every document on a claim already flaggedOnOn · Off
Ink weight, arithmetic, look-alikesReferRefer · Question · each test on or off
Text layers, edit history, baseline, claim facts, registerQuestionRefer · Question · each test on or off
Look-alike matchScore ≥ 0.95 on 2+ unrelated claimsSame template or identifiers
Second approval to pay against a referFraud managerNamed role
ChangesPublished as a new versionApply to documents received after that
Connections

Works with the sources you already have

Claim portal, email and vendor uploadsinvoices, medical bills, estimates and receipts, PDF or photo
Your claim systemdates, parties, vehicle, loss and approved amounts
Vendor and provider registernames, tax IDs, NPIs, registrations, addresses
State contractor registration lookupis the business registered under this name
Regional price listunit prices for mitigation, repair, towing, glass and medical services
Past claim documentsevery invoice, bill and receipt, searched for the same template
What it changes

The difference, in numbers.

Every figure is labelled: a target the solution is built to, an estimate, a typical published result, or a proven one.

target
100%
of claim documents over $1,000 tested before payment
By handa few
With agentsevery one
demo
41s
to test the hero invoice and pin six findings, against 10–15 minutes by hand
By hand10–15 min
With agents41 s
demo
5claims
found on one template under five business names, $19,150.00 already paid
4 unrelated claims
same template as the hero

“demo” = seen in the working solution, on its sample claim data · “target” = the design goal, measured in the live solution · “estimated” = our estimate · “typical” = published figures (Coalition Against Insurance Fraud, The Impact of Insurance Fraud on the U.S. Economy, 2022, via Triple-I — $45 billion a year in property-casualty fraud; Inscribe — 10–15 minutes to review a document by hand, vendor-reported). People, companies, claims and documents named on this page are fictional — characters and sample data in the working solution.

Questions

What claims and SIU teams ask us.

What is insurance document fraud detection?

Testing the documents a claim is paid on — invoices, medical bills, repair estimates and receipts — for signs they were edited or made up, before the money goes out. Document Fraud Detection reads each document, inspects the file itself, redoes the arithmetic, checks the vendor or provider and searches past claim documents for the same template.

How does it detect an altered invoice?

File forensics measures the fonts and stroke weight of every glyph, lists text layers and when each was added, compares the edit history with the claim timeline, and checks that digits share a baseline. On the Clearwater invoice it found the total alone in a heavier font, on a layer added the night before the upload.

Can it find the same fake invoice template across claims?

Yes. The look-alike finder fingerprints the layout and searches every past claim document for the same template, tax ID, PO box or bank details on unrelated claims. It never links claims on a name alone, and shows each shared trait — layout, footer wording, a misspelling, a total box set low.

Which documents are tested?

Any claim document over a set amount — $1,000 in the working solution — every medical bill over $500, and every document on a claim already flagged. The fraud manager sets those thresholds.

Does the AI deny claims or accuse anyone?

No. The agents test and explain; they never hold a payment, refer, contact the insured or vendor, or call a document fraudulent. The adjuster decides every question and refer, SIU accepts or declines referrals, and paying against a refer needs a second approval.

What does SIU receive?

A referral drafted from the pinned findings, where every sentence points at a pin, signed by the adjuster. It attaches the original file with its fingerprint, the lens views, the file history and fonts, the look-alikes and the vendor check — and can cover several linked claims as one case.

Does it work on medical bills, repair estimates and receipts?

Yes. Besides invoices it tests medical bills, repair estimates, tow and storage tickets, auto glass invoices and purchase receipts — checking, for example, billed hours against the approved estimate, or a VIN against the policy vehicle.

How long does it take to go live?

The Agentic Solution Engine builds and deploys it from your requirements and documents — your registers, price lists and a sample of past claim documents — and it goes live once every quality gate has passed. We will run it on your own documents first.

See it on
your claim documents.

We’ll run Document Fraud Detection on a sample of your own paid and open claim documents.