Health Insurance Fraud and AI: Detecting Synthetic Medical Evidence

Healthcare fraud is the most expensive category of insurance fraud in the United States. A 2022 study for the Coalition Against Insurance Fraud estimated health care fraud, including Medicare and Medicaid, at about US$105 billion a year — the largest share of its US$308.6 billion total.

Enforcement numbers show the scale. The HHS Office of Inspector General reported more than US$19 billion in monetary impact for fiscal year 2025 and took part in the 2025 national health care fraud takedown — the largest in Justice Department history, involving more than US$14.6 billion in intended losses. Separately, CMS estimated US$28.83 billion in Medicare fee-for-service improper payments in fiscal year 2025 — a measure of payment error, not all of it fraud.

Generative AI is now creating an entirely new attack surface. Medical records, diagnostic imaging, prescriptions, telehealth recordings, and provider documentation can all be fabricated or manipulated using freely available AI tools — at a speed and quality that strains traditional fraud detection.

The New Threat: AI-Generated Medical Evidence

Synthetic Medical Records

Large language models can generate clinically plausible medical documentation — patient histories, examination findings, diagnosis narratives, treatment plans, and progress notes — that reads like authentic physician documentation. These records can be produced in the formatting style of specific electronic health record (EHR) systems, complete with appropriate clinical terminology, ICD-10 diagnosis codes, and CPT procedure codes.

The challenge: genuine medical records vary enormously in quality, formatting, and writing style. There is no single “authentic” look. A hurried emergency physician’s notes look very different from a detailed specialist consultation. This natural variation makes it difficult to establish a baseline against which to detect AI-generated forgeries.

Fabricated Diagnostic Imaging

AI image generation can produce medical imaging — X-rays, CT scans, MRI sequences, ultrasound images — that depicts pathology supporting a fraudulent claim. Researchers have already shown that deep learning can add or remove findings in CT scans convincingly enough to mislead expert radiologists (Mirsky et al., USENIX Security 2019), and the tools have improved since.

More immediately dangerous is the manipulation of genuine imaging: real diagnostic images altered to add, enlarge, or change pathological findings. A genuine chest X-ray with no abnormalities can be manipulated to show a pulmonary nodule. A genuine MRI with minor degenerative changes can be altered to show a herniated disc.

Deepfake Telehealth Consultations

The explosive growth of telehealth — accelerated by the COVID-19 pandemic and now a permanent feature of healthcare delivery — creates a new fraud vector. Deepfake video and audio technology can fabricate telehealth consultations that never occurred:

A synthetic video of a “physician” conducting an examination
A deepfake of a “patient” presenting symptoms to justify treatment claims
Fabricated recorded consultations submitted as evidence of services rendered

The CNN-reported Hong Kong deepfake case — where a finance worker was fooled by an entire room of deepfake participants in a live video call — demonstrates that the technology is already convincing enough for real-time interactive impersonation. Pre-recorded telehealth consultations, with no live interaction required, are substantially easier to fake.

Synthetic Prescriptions and Pharmacy Records

AI-generated prescriptions — with correct drug names, dosages, DEA numbers, and prescriber information — can support fraudulent claims for medications never dispensed. When combined with fabricated pharmacy records and patient medication histories, these create a comprehensive paper trail for phantom pharmaceutical claims.

Voice-Cloned Provider Verification

When insurers call to verify services with treating providers, voice cloning technology can intercept or pre-empt these verification calls. Pindrop’s 2025 Voice Intelligence and Security Report found that deepfake fraud attempts rose more than 1,300% in 2024 and that synthetic-voice attacks on insurance companies rose 475%. Voice cloning from short audio samples means a fraudster can impersonate a specific physician during a verification call, “confirming” services that were never provided.

Why Health Insurance Is the Highest-Value Target

Claim Volume and Complexity

Health insurance processes more individual claims transactions than any other insurance line. The sheer volume — billions of claims annually across the US market — means that individual claims receive minimal manual review. Automated processing pipelines accept claims with supporting documentation at face value unless specific red flags trigger investigation.

Documentation Density

A single health insurance claim may involve:

Provider notes from multiple practitioners
Laboratory results
Diagnostic imaging and radiology reports
Prescription records
Hospital admission and discharge summaries
Procedure and operative reports
Durable medical equipment orders
Physical therapy and rehabilitation records

Each document type is a potential target for AI fabrication. The documentation density that makes health insurance claims legitimate also provides extensive surface area for fraud.

Limited Physical Verification

Unlike auto or property insurance, where damage can be physically inspected, healthcare services are inherently intangible after delivery. An insurer can’t “inspect” a medical consultation that was claimed to have occurred. The evidence is entirely documentary — exactly the type of evidence that AI can fabricate.

Provider Trust Model

The healthcare system operates on a trust model: licensed providers are generally assumed to provide services in good faith, and their documentation is accepted as authoritative. This trust model works well for the vast majority of honest providers but creates a significant vulnerability when providers are complicit in fraud — or when fraudsters impersonate legitimate providers using AI.

Detection Strategies

Medical Document Forensics

Formatting analysis. While medical records vary in style, specific EHR systems produce documents with characteristic formatting: specific fonts, header structures, page layouts, and field arrangements. AI-generated records that claim to originate from a specific system can be checked against the system’s known output format. Subtle deviations — wrong font sizes, incorrect margin spacing, non-standard field ordering — indicate fabrication.

Clinical consistency checking. AI-powered analysis can verify that the clinical content of a record is internally consistent:

Do diagnosis codes match the narrative findings?
Are prescribed medications appropriate for the documented diagnosis?
Is the treatment timeline clinically realistic?
Do laboratory values and vital signs fall within physiologically possible ranges?
Are procedure codes consistent with the documented procedure descriptions?

Writing style analysis. Genuine physician documentation has characteristic patterns: specific abbreviation conventions, dictation artifacts (from voice-to-text documentation), copy-forward text from previous encounters, and individual practitioner quirks. AI-generated text tends to be more uniform, formally written, and lacking these natural irregularities. Treat style as a weak signal for a human reviewer, though: automated AI-text detectors are unreliable on their own.

Cross-record verification. Compare documentation across multiple records in the same claim: does the patient history documented by a specialist match what the primary care physician recorded? Do laboratory results reference values consistent with the timing of specimen collection? Are there impossible overlaps (e.g., the patient documented as being in two different facilities on the same day)?

Diagnostic Imaging Verification

Source verification. Obtain diagnostic studies directly from the imaging provider rather than relying on copies, printouts or screenshots supplied with a claim, and confirm the study actually took place on the stated date.

Report consistency. Check that the radiologist’s report, the referring provider, the facility and the dates match the rest of the claim file.

Clinical plausibility. For high-value claims, have a qualified clinician assess whether the depicted pathology fits the diagnosis, the claimed condition and the clinical timeline.

Telehealth Verification

Video forensics. Recorded telehealth consultations can be analyzed for deepfake indicators: temporal inconsistencies between frames, audio-visual synchronization issues, face generation artifacts, and metadata indicating the video was produced by generation software rather than recorded by a camera.

Audio analysis. Recordings can be analyzed for synthetic-speech indicators: natural human speech has micro-variations in pitch, cadence and spectral properties that voice synthesis often fails to reproduce consistently.

Session metadata verification. Telehealth platforms generate session logs with timestamps, IP addresses, device information, and connection metadata. Cross-referencing claimed consultations against platform session data can verify whether a session actually occurred.

Provider Network Analysis

Billing pattern analysis. AI-powered analysis of billing patterns can identify providers with statistically anomalous claim profiles: unusually high volumes, unusual procedure mixes, billing for services inconsistent with their specialty, or patterns suggesting upcoding.

Referral network mapping. Mapping referral patterns between providers can reveal coordinated fraud schemes: circular referral networks, providers exclusively referring to each other, or referral patterns that don’t align with geographic or specialty logic.

Patient overlap analysis. Identifying patients appearing across multiple providers in patterns suggesting a mill operation — the same patients cycling through the same set of providers generating maximum billable services.

Implementation for Health Insurers

Priority Deployment

Medical document authentication on all claims above a value threshold — this catches the highest-value fabrications immediately
Source verification of diagnostic imaging on high-value claims that depend heavily on imaging evidence
Synthetic speech screening on recorded provider verifications, plus call-backs on independently sourced numbers
Telehealth recording analysis on claims involving telehealth consultations — a rapidly growing fraud vector

Integration Points

Pre-payment review — analyze documentation before claims are paid, not after
Prior authorization — verify supporting documentation at the authorization stage
Post-payment audit — periodic batch analysis of paid claims to identify patterns missed at the individual level
Provider credentialing — verify provider documentation during network enrollment

Regulatory Compliance

Health insurance fraud detection must operate within:

HIPAA — all evidence handling and analysis must comply with patient data protection requirements
State fraud reporting mandates — detected fraud must be reported to appropriate state agencies
CMS requirements — for Medicare and Medicaid claims, compliance with Centers for Medicare & Medicaid Services fraud and abuse regulations
False Claims Act — documentation standards for pursuing fraud recoveries under federal and state false claims statutes

The Scale of Opportunity

Healthcare fraud represents the single largest category of insurance fraud by dollar value. The combination of claim volume, documentation complexity, limited physical verification, and the trust-based provider model makes it both the most targeted and the most difficult to defend.

AI-powered detection — particularly medical document authentication and media forensics — addresses the specific evidentiary challenges that make healthcare fraud so difficult to catch through traditional methods. As AI-generated medical evidence becomes more prevalent, these detection capabilities transition from competitive advantage to operational necessity.

deetech™ helps insurers and claims teams check supporting evidence: structural, arithmetic and fabrication checks on supported documents, detection of AI-generated or edited images, and synthetic-media screening for uploaded audio and video. Findings are explainable and designed for review by your investigators and their experts. Request a demo.

Sources cited in this article: