State Insurance Fraud Reporting Requirements: A Compliance Guide

Insurance fraud reporting is not optional. In most US states, insurers are legally required to report suspected fraud to state authorities, and failure to comply can lead to regulatory action and reputational damage.

But reporting is only as good as detection. Reporting duties are triggered by knowledge or a reasonable belief of fraud — so fraud an insurer never recognizes never reaches its reporting pipeline. As AI-generated evidence creates fraud patterns that legacy tools were not designed to catch, the gap between fraud committed and fraud referred can widen.

This guide maps the regulatory landscape and explains how AI-powered media detection can support the investigations that lead to reports.

The Regulatory Framework

National Bodies

Insurance is regulated primarily at the state level in the US, but several national organizations play significant roles in fraud enforcement:

National Association of Insurance Commissioners (NAIC). The NAIC is the standard-setting organization of state insurance regulators, not a federal agency. It develops model laws that many states adopt, including the Insurance Fraud Prevention Model Act (Model #680), and it operates the Online Fraud Reporting System (OFRS) that many states use for insurer referrals. NAIC models aren’t binding until a state enacts them, but they shape state legislation and compliance programs.

Federal Bureau of Investigation (FBI). The FBI investigates insurance fraud as part of its financial crimes mandate. The FBI’s insurance fraud page estimated that non-health insurance fraud exceeds US$40 billion per year and costs the average US family US$400–700 a year in higher premiums; those figures are more than a decade old rather than a current FBI estimate.

National Insurance Crime Bureau (NICB). The NICB is a not-for-profit organization supported by the insurance industry that partners with law enforcement to combat insurance fraud, analyzes industry data and assists with investigations.

State-Level Requirements

According to the Coalition Against Insurance Fraud:

48 states make insurance fraud a specific crime (Oregon is the only state without an insurance fraud law of any kind)
43 states and the District of Columbia require insurers to report suspected fraud to the state fraud bureau or other designated agency
42 states and the District of Columbia have an insurance fraud bureau
30 states make insurer fraud (fraud committed by insurance companies) a specific crime

Mandatory and Voluntary Reporting

Mandatory reporting states (43 states + DC): Insurers are legally required to report suspected fraud to the designated authority. Failure to report can lead to administrative penalties or other regulatory action.

Other states: Insurers may report suspected fraud voluntarily, and are typically protected when they do so in good faith.

Many states also require insurers to maintain an anti-fraud plan or a special investigations unit (SIU) — California, New York and Florida are prominent examples — and regulators can examine those programs alongside reporting compliance.

Common Elements of Reporting Obligations

While specific requirements vary by state, common elements include:

Who must report:

Licensed insurers and, in many states, their agents and other licensees
Self-insured employers (workers’ compensation) in some states
Third-party administrators and managing general agents in some states

What must be reported:

Known or suspected fraudulent insurance acts
Claims believed to involve material misrepresentation
Applications or policies believed to involve fraud

When to report:

The trigger is usually knowledge or a reasonable belief that fraud may have occurred — not proof
Deadlines vary. New York requires a report within 30 days after the insurer determines a transaction appears fraudulent (Insurance Law §405). California requires a report to the Department of Insurance’s Fraud Division within 60 days after the insurer’s SIU concludes that fraud may have occurred (Insurance Code §1872.4). Florida requires reporting but sets no fixed deadline in the statute (§626.989(6))
The NAIC model leaves the manner of reporting to each state’s commissioner

How to report:

Many states accept electronic referrals through the NAIC’s Online Fraud Reporting System (OFRS)
Some states require submission through their own fraud bureau portal or forms
Specific forms and documentation requirements vary by state

Consequences and protections:

Failure to report can lead to administrative fines and other regulatory sanctions, which vary by state
Reporting failures can surface in market conduct examinations
Most reporting statutes grant immunity from civil liability for reports made in good faith or without malice (for example, NAIC Model #680, California Insurance Code §1872.5 and Florida Statutes §626.989(4))

State Fraud Bureaus: What They Do

State fraud bureaus serve several functions:

Investigation. Bureaus investigate suspected fraud referred by insurers, law enforcement and the public. Many employ investigators with law enforcement authority.

Prosecution support. Bureaus work with district attorneys and state attorneys general to build cases for prosecution, providing investigative support and case documentation.

Intelligence sharing. Bureaus share fraud intelligence across jurisdictions, helping identify multistate schemes. Many receive referrals through the NAIC’s OFRS and work with the NICB.

Public awareness. Bureaus run public education campaigns and reporting hotlines.

Insurer compliance. Bureaus and insurance departments monitor insurer compliance with reporting and anti-fraud plan requirements.

Key Industry Partnerships

The NICB

The NICB serves as the primary industry-level anti-fraud organization. Key capabilities:

Investigative support. NICB field investigators assist with complex fraud cases, particularly those involving organized rings operating across multiple states and insurers.

Analytics. NICB provides analytics and fraud indicators to member companies.

Training. NICB offers fraud awareness and investigation training for insurer SIU teams, claims staff and law enforcement.

ISO ClaimSearch

ISO ClaimSearch, operated by Verisk, is the industry’s shared claims database; Verisk says it holds more than 1.8 billion claims. Insurers contribute claims data and search it to spot duplicate claims, suspicious claimant histories and provider anomalies.

Coalition Against Insurance Fraud

The Coalition is a national alliance of insurers, government agencies and consumer organizations that:

Advocates for stronger fraud laws and enforcement
Publishes research and statistics on insurance fraud trends
Tracks state insurance fraud laws and regulations
Provides public awareness resources

How AI Detection Supports Reporting

The Detection Gap

Here’s the fundamental problem: insurers are required to report suspected fraud, but they can only report what they recognize. Because reporting duties turn on knowledge or reasonable belief, an undetected fake doesn’t itself breach a reporting statute — but the fraud goes unreported, unrecovered and unaddressed.

When a claims adjuster reviews AI-generated photos of vehicle damage and sees nothing suspicious, no referral is made. When a forged medical record passes a visual check, no referral is made. When a cloned voice passes phone verification, no referral is made.

The fraud occurred. The insurer never formed a suspicion. Nothing reached the fraud bureau.

Closing the Gap

AI-powered media detection addresses this gap directly:

Automated screening of all incoming claim media. Screening every photo, document and recording that arrives is proportionate because it is non-intrusive: it happens in the background and doesn’t burden legitimate claimants. Human investigation is triggered only when risk signals appear. Detection can surface signs of AI generation or editing that are hard to spot in manual review — giving investigators grounds to open a case that may lead to a report.

Documentation. Detection tools generate forensic reports documenting what was analyzed, what was found and the limitations of the analysis. This documentation supports the SIU’s investigation and the eventual referral.

Audit trail. Automated detection creates timestamped audit records of the evidence analyzed. This helps demonstrate to regulators that the insurer has a systematic fraud detection process — not just ad hoc manual review.

Consistency. Automated detection applies the same analysis to every file. That reduces the variability of manual review, where detection depends on an individual adjuster’s experience, attention and workload.

Regulatory Positioning

Insurers with AI-powered detection can show regulators:

Systematic detection capability — technology that screens claims media consistently, not just claims that happen to trigger manual suspicion
Current threat coverage — detection that addresses AI-generated evidence, not just traditional fraud patterns
Documented methodology — analysis that qualified experts can review (see our article on forensic reports that hold up to expert scrutiny)
Continuous improvement — detection that is updated as generation techniques evolve
Proportionate response — escalation calibrated to risk, with defined referral workflows

As regulators pay more attention to AI-enabled fraud, insurers that have already deployed detection will be positioned as proactive. Those that haven’t may face questions about how their anti-fraud plans address a known and growing threat.

Building a Detection-to-Referral Program

Step 1: Map Your Reporting Obligations

Identify the specific requirements in every state where you write business:

Is reporting mandatory or voluntary?
What triggers the duty, and what is the deadline?
What documentation is required?
Who is the designated recipient (state fraud bureau, insurance department, other)?
What anti-fraud plan or SIU requirements apply?

Step 2: Integrate Detection Into Your Referral Workflow

Connect AI detection output to your SIU and compliance process:

Detection flags → SIU review → referral decision → report filing
Documentation generated for the elements each report requires
Tracking and audit trail for every flagged claim from detection through report filing

Step 3: Establish Thresholds and Escalation

Not every detection flag warrants a fraud report. Establish clear thresholds:

Strong manipulation indicators → escalation to SIU → reporting assessment as soon as a reasonable belief forms (statutory clocks may start at that point, not at final confirmation)
Ambiguous findings → adjuster review → additional evidence requested → escalation if warranted
Minor metadata anomaly only → note on file → monitor for patterns

Document these thresholds and apply them consistently. Regulators want to see a defined process, not ad hoc judgment.

Step 4: Train Your Teams

Ensure claims staff, SIU investigators and compliance officers understand:

How AI detection tools work at a practical level
How detection findings relate to reporting obligations
The documentation requirements for fraud reports
The deadlines for reporting in each relevant state

Step 5: Monitor and Report

Track program metrics:

Detection volume (claim files analyzed)
Flag rate (percentage of files flagged)
Escalation rate (percentage of flags escalated to SIU)
Report rate (percentage of escalated claims resulting in fraud reports)
Timeliness (percentage of reports filed within the required timeframe)

These metrics show regulators that your program is functioning as designed.

The Regulatory Horizon

Insurance regulators are beginning to address AI more directly. Several trends are clear:

NAIC AI guidance. The NAIC’s Model Bulletin on the Use of AI Systems by Insurers, adopted in 25 states and DC as of August 2026, covers AI used across insurance practices — including claims administration and fraud detection. It governs how insurers use AI; it does not impose a specific duty to detect AI-generated fraud.

State-level AI rules. Several states have their own rules on AI in insurance, and more are likely to follow.

Regulatory expectations. Even without explicit AI fraud detection mandates, anti-fraud plan requirements expect insurers to maintain detection capabilities that fit the risks they face. An insurer that relies solely on pre-AI methods when AI-generated evidence is a known and growing problem may find its anti-fraud plan questioned.

The direction of travel is toward demonstrable capability to detect AI-generated fraud. Investing now puts your organization ahead of that expectation rather than catching up after the fact.

deetech™ provides analysis outputs, forensic reports and audit records that can support a qualified fraud-reporting review. It does not determine whether a report is required, guarantee regulatory acceptance, or replace jurisdiction-specific legal advice. Request a demo to see how it fits your SIU workflow.

Sources cited in this article:

This article is for informational purposes only and does not constitute legal, regulatory, or compliance advice. Insurers should consult qualified legal and compliance professionals for guidance specific to their circumstances and jurisdiction.