WHITE PAPER  ·  2026

Emerging Fraud Trends in California

Workers’ Compensation

The shift from isolated misrepresentation to organized, multi-party schemes — and what it means for carriers, third-party administrators, and self-insured employers.

California Private Investigator License #21067  ·  apexpi.com

Sacramento, CA  ·  Serving Northern California, Southern California, and Texas

EXECUTIVE SUMMARY

California workers’ compensation fraud is changing shape. For years, the dominant risk was the individual claimant who misrepresented an injury, concealed outside work, or exaggerated a disability. That risk has not disappeared. What has changed is that isolated misrepresentation is increasingly overshadowed by organized, multi-party schemes that recruit workers, manufacture claims, control medical treatment, and conceal payroll — with employers, staffing companies, attorneys, providers, marketers, interpreters, vocational schools, and pharmacies each playing a defined role.

Enforcement data reflects the transition. Suspected-fraud referrals to the California Department of Insurance (CDI) have moderated in volume, yet the dollar exposure behind individual cases has grown, and a small number of coordinated networks can now drive a disproportionate share of annual losses. During fiscal year 2023–2024, CDI and county prosecutors reported roughly $1.2 billion in chargeable fraud, 260 convictions, and more than $31.5 million in restitution ordered.

$1.2B Chargeable fraud reported, FY 2023–2024

~2,800 Annual suspected-fraud referrals since 2022

$7B Provider liens stayed cumulatively (Mar. 2024)

The practical implication is direct: the strongest emerging fraud indicators are no longer confined to the claimant’s conduct. Effective review now requires examining the entire claim ecosystem — reporting source, attorney intake, employer payroll structure, affiliated entities, provider ownership, referral relationships, repeat vendors, interpreter usage, vocational vouchers, medical-legal patterns, liens, and overlapping claims or employment. Relationship analysis and data integration have become as important as scrutinizing any single document in isolation.

This paper outlines six trends reshaping the California workers’ compensation fraud environment in 2026 and translates each into concrete investigative focus areas for Special Investigation Units (SIUs) and claims organizations.

THE LANDSCAPE

A More Organized, More Specialized Threat

The overall direction is unmistakable. California workers’ compensation fraud is shifting from primarily isolated claimant misrepresentation toward networks engineered to generate claims, conceal payroll, direct medical treatment, or extract money from benefit programs. Traditional claimant fraud remains significant, but recent enforcement actions increasingly involve arrangements in which multiple parties — marketers, attorneys, providers, interpreters, vocational schools, pharmacies, and vendors — coordinate around a common revenue stream.

The reported numbers require careful reading. Suspected-fraud claims reported to CDI declined modestly, from 3,405 in calendar year 2020 to 2,796 in 2024 — a decrease of roughly 18 percent — while referrals have held relatively stable at approximately 2,800 to 2,900 annually since 2022. These figures are enforcement indicators, not a reliable estimate of total fraud: suspected-fraud reports rest on a reasonable-suspicion standard, and a small number of large cases can materially move annual loss totals.

That last point matters. As schemes become more organized, a single coordinated network can account for tens of millions of dollars in exposure — which means declining referral counts should not be mistaken for declining risk. The concentration of loss into fewer, larger, better-structured operations is itself the trend.

TREND 01

01   Claim Solicitation Is More Organized, Digital, and Cross-Border

California is seeing increasingly sophisticated “claim harvesting.” Marketers or cappers locate workers, persuade them to file claims, and then sell or refer those workers to attorneys and medical providers. Telemarketing, electronic signatures, multilingual scripts, and remote intake procedures allow claims to be generated at scale — and, increasingly, across borders.

In a 2025 CDI case, prosecutors alleged that a Mexico-based call center contacted Spanish-speaking California workers, promised them money for filing workers’ compensation claims, and caused some to sign documents they did not fully understand. The operation was alleged to have sold more than 1,100 prospective clients to Southern California attorneys, with referral payments exceeding $550,000 and estimated claim exposure above $14.5 million.

Investigative focus

This elevates the source of the claim to a primary line of inquiry. Reviews should establish who first contacted the worker, whether the claimant understood the forms being signed, whether multiple employees from the same workplace were routed through the same attorney or vendor, and whether treatment began before the worker independently reported an injury.

TREND 02

02   Vocational-Training and SJDB Voucher Fraud Is a Distinct Category

Fraud involving the Supplemental Job Displacement Benefit (SJDB) voucher has become a visible enforcement priority. Recent allegations include vocational schools billing for training that was never provided, enrolling injured workers without their knowledge, using forged signatures, obtaining signatures on blank forms, exchanging nearly the entire voucher value for a low-value laptop, and paying unlawful referral fees.

A 2026 prosecution alleged that vocational-business operators fabricated enrollment documents and exhausted injured workers’ education benefits for schools the workers never attended or had never heard of. Earlier matters involved allegedly unqualified students, inadequate training, self-referrals, coercion to attend particular schools, and documents submitted without the injured workers’ review. The Department of Industrial Relations (DIR) has separately flagged unlicensed or fictitious schools, and the use of inexpensive equipment to consume the full voucher, as areas of concern.

Investigative focus

Voucher fraud warrants treatment as its own workstream: verify school licensure and legitimacy, confirm the injured worker’s actual enrollment and attendance, authenticate signatures and enrollment documents, and scrutinize equipment-for-voucher exchanges and referral-fee arrangements.

TREND 03

03   Provider Fraud Remains Networked and Lien-Driven

Provider fraud increasingly operates through coordinated referral chains rather than a single provider submitting an isolated false bill. DIR has described arrangements linking cappers, attorneys, medical providers, interpreters, diagnostic facilities, pharmacies, durable medical equipment suppliers, and testing companies — with referral payments or kickbacks at multiple points along the chain.

Recurring patterns

–   Impossible treatment hours and billing for services not rendered

–   Medically unnecessary treatment and repeated diagnostic testing

–   Excessive durable medical equipment, upcoding, and unbundling

–   False diagnoses and compounded medications designed to circumvent fee schedules

California’s provider-suspension and lien-stay system has become a major fraud-control mechanism. Cumulatively through March 2024, DIR reported that approximately 1,326 providers had been suspended and roughly 866,000 liens had been stayed — representing about $7 billion in requested payments. Approximately 81,000 liens had been consolidated or dismissed, representing about $836 million in requested payments.

Investigative focus

Follow ownership and referral relationships rather than individual bills. Map the provider network behind a claim, identify repeat vendor clusters across unrelated files, and treat lien activity as a data source for relationship analysis — not merely a payment dispute.

TREND 04

04   Cumulative Trauma and Psychiatric Medical-Legal Activity Are Expanding

The WCIRB has reported increased cumulative-trauma claim frequency, slower claim closures, and substantial growth in medical-legal evaluations involving psychological or psychiatric conditions during 2024. These are legitimate claim trends and should not be treated as evidence that any individual claim is fraudulent.

The distinction is essential. The existence of a cumulative-trauma or psychiatric claim is not a fraud indicator. These claim types do, however, create additional opportunities for attorney-driven solicitation, late reporting, overlapping employment allegations, expansive body-part pleadings, multiple medical-legal evaluations, and coordinated vendor referrals.

Investigative focus

The relevant signals are patterns, not diagnoses: claim clustering, identical narratives among coworkers, undisclosed concurrent employment, inconsistent injury dates, overlapping claims against multiple employers, questionable referral sources, and treatment that appears vendor-driven rather than medically driven.

TREND 05

05   Traditional Claimant Fraud Persists — but the Evidence Is Now Digital

The familiar claimant-fraud patterns endure: working while collecting temporary disability, concealing concurrent employment, misrepresenting physical capabilities, staging injuries, reporting nonindustrial conditions as industrial, and giving inconsistent histories to physicians, qualified medical evaluators, employers, or in deposition.

What has changed is detection and proof. Evidence increasingly comes from payroll databases, EDD records, social media, electronic payment records, gig-economy work, surveillance, geolocation and transaction data, employment websites, medical-appointment metadata, and cross-claim comparison. A claimant’s assertion that they have not worked or have no income can now be tested against a far broader record set than traditional employer wage verification alone.

Investigative focus

Surveillance remains decisive, but it is most powerful when integrated with data. The strongest claimant-fraud cases pair field observation with corroborating records — building a single, consistent evidentiary narrative rather than relying on any one source.

TREND 06

06   Employer Premium Fraud Is Larger and Structurally Complex

Some of the most consequential recent cases involve employers underreporting payroll, misclassifying employees, paying in cash, shifting employees between affiliated entities, using shell companies, or representing that workers are employed by an insured company when they are in fact employed by an uninsured business.

Representative allegations

–   Farm labor: an operation that underreported approximately $29.2 million in payroll and allegedly moved payroll to another company to avoid increased workers’ compensation costs.

–   Delivery: companies that reported roughly $1.4 million in payroll when actual payroll exceeded $25 million, with injured employees of uninsured companies reportedly placed under another company’s policy.

–   Towing: businesses that allegedly reported approximately $3 million in payroll when actual payroll exceeded $16 million, partly through an uninsured shell company and cash payments.

These investigations increasingly combine workers’ compensation premium fraud with unemployment-insurance tax evasion, income-tax violations, labor violations, and uninsured-employer exposure.

Investigative focus

Premium fraud demands entity-level analysis: reconcile reported payroll against independent records, map affiliated and successor entities, trace cash-payment and misclassification patterns, and identify coverage placed on the wrong policy.

WHAT IT MEANS FOR INVESTIGATION

From Document Review to Ecosystem Analysis

Across all six trends, a single organizing principle emerges. The center of gravity in workers’ compensation fraud has moved from the individual claim document to the relationships surrounding it. Schemes are increasingly designed so that each participant performs a limited role — soliciting the worker, filing the claim, directing treatment, producing evaluations, billing ancillary services, or concealing payroll — which makes data integration and relationship analysis more important than reviewing any single claim in isolation.

For SIUs and claims organizations, the operational takeaway is to widen the aperture. The table below maps each trend to the factors most worth examining.

 

Focus area	What to examine
Claim source	Who first contacted the worker; comprehension of signed forms; coworker clustering through a common vendor; treatment preceding self-report.
SJDB vouchers	School licensure and legitimacy; verified enrollment and attendance; signature authenticity; equipment-for-voucher and referral-fee arrangements.
Provider networks	Ownership and referral chains; repeat vendor clusters across files; lien activity as relationship data; impossible hours and billing anomalies.
CT / psychiatric	Claim clustering and identical narratives; undisclosed concurrent employment; inconsistent dates; vendor-driven treatment patterns.
Claimant conduct	Field surveillance corroborated by payroll, EDD, gig, transaction, geolocation, and social-media data into one narrative.
Employer premium	Reported vs. independent payroll; affiliated and successor entities; cash and misclassification patterns; coverage on the wrong policy.

THE APEX PERSPECTIVE

Built for the Networked Claim

APEX Investigation was built around the same principle these trends now demand: that the most reliable conclusions come from integrating evidence, not accumulating it. Our practice spans workers’ compensation surveillance, claims investigation, background investigation, and SIU support across Northern California, Southern California, and Texas.

Where isolated file review once sufficed, today’s cases reward the ability to connect a claim to its wider environment — the referral source behind an intake, the ownership behind a provider, the entity structure behind a payroll figure, and the corroborating data behind a surveillance observation. That integration is where APEX concentrates its work.

The firm operates on its proprietary case-management platform, CaseLink, which consolidates surveillance, investigation, and reporting into a single evidentiary record — and increasingly applies structured analysis to surface the relationship patterns described in this paper. The objective is unchanged from the day APEX was founded: defensible findings that hold up where it counts.

By the numbers

300K+ Claims investigated

$100M+ In identified exposure and savings

Hundreds Of fraud convictions supported

ABOUT APEX INVESTIGATION

About the Firm

APEX Investigation is a Sacramento-headquartered business-to-business private investigation firm specializing in workers’ compensation surveillance and insurance fraud and SIU investigations. The firm serves carriers, third-party administrators, self-insured employers, and the attorneys who represent them, operating across Northern California, Southern California, and Texas under California Private Investigator License #21067.

APEX combines experienced field investigators with a proprietary case-management platform, CaseLink, to deliver integrated, compliance-forward investigations — from surveillance and background research through SIU case development and courtroom-ready reporting.

apexpi.com   ·   Sacramento, California   ·   CA PI License #21067