Last Updated: March 2026
Red Flags That May Indicate a Fraudulent WCB Claim
A red flag is an indicator, not proof. No single red flag establishes that a workers’ compensation claim is fraudulent. Most WCB claims are legitimate, and workers do get injured on the job. What matters is the combination and context of multiple indicators, and whether they point to a specific, documentable inconsistency between the worker’s claimed limitations and their actual behavior.
This guide is designed to help BC employers recognize patterns that may warrant further inquiry or professional investigation. It is organized into six categories covering timing, incident circumstances, medical factors, post-injury behaviour, historical patterns, and communication. Each red flag includes a description and, where applicable, a practical example.
Before acting on any red flag, employers should review the sections on reasonable suspicion and prohibited action complaints to understand the legal framework that governs how employers can and cannot respond to suspected claim fraud. A preliminary OSINT review of publicly available information can be a reasonable first step, but employers who are considering covert surveillance or other intrusive investigation methods should consult with independent legal counsel before proceeding.
In This Article
- Category 1: Timing and Circumstance
- Category 2: Incident Circumstances
- Category 3: Medical Inconsistency
- Category 4: Post-Injury Behaviour
- Category 5: Historical Patterns
- Category 6: Communication Red Flags
- What to Do When You Identify Red Flags
- What NOT to Do
- Red Flag Strength Assessment
- FAQ: Red Flags in WCB Claims
Category 1: Timing and Circumstance
Red flags in this category relate to when and how the injury was reported. Suspicious timing patterns do not prove fraud on their own, but they can be a meaningful starting point when combined with other indicators.
The “Monday Morning” Claim
The injury allegedly occurred first thing Monday morning, or occurred late Friday but was not reported until Monday. This pattern can indicate an injury that actually happened during off-work hours over the weekend.
Example: A warehouse worker reports a back injury at 7:15 AM Monday. No incident was witnessed. The worker had no issues at the end of their Friday shift.
The “Vacation Trap”
The worker requested specific dates off, was denied, and then reported a disabling injury for those exact dates. The correlation between the denied leave request and the claim onset is the indicator.
Example: An employee requests two weeks off in July for a family event. The request is denied. The employee reports a disabling injury on June 28 and is off work through mid-July.
The “Exit Strategy” Claim
The injury is reported immediately before or after an event that would end or disrupt employment: a scheduled layoff, a seasonal shutdown, the end of a probationary period, a performance-related disciplinary meeting, or a notice of termination.
Example: An employee who was issued a final written warning on Thursday reports a stress-related injury on Friday morning and begins an absence.
The “Convenient Timing” Pattern
The injury coincides suspiciously with personal events or obligations: a planned move, a spouse’s relocation, the start of a child’s school year, or a known secondary employment opportunity.
Example: A worker reports an injury two days before their spouse’s planned relocation to another city, and the worker subsequently fails to attend local medical appointments.
Category 2: Incident Circumstances
Red flags in this category relate to how the injury allegedly occurred. Inconsistencies in the incident description, the absence of witnesses, or resistance to documentation can be relevant indicators.
The “Vanishing Witness”
The injury allegedly occurred in a populated area such as a busy warehouse, open office, or active job site, yet no one witnessed it. Alternatively, witness accounts are suspiciously identical in their wording, suggesting coordination or rehearsal.
Example: A worker claims a heavy box fell on their foot in a busy shipping area during peak operations, but no co-worker saw or heard the incident, and no incident was logged by the supervisor on duty.
Vague or Shifting Descriptions
The worker provides inconsistent accounts of how the injury occurred. Details change between the initial report, the WCB claim form, and conversations with supervisors or medical providers. The mechanism of injury is vague or implausible for the workplace environment.
Example: The initial report states the worker was “lifting a box,” the WCB form describes a “slip and fall,” and the worker tells a co-worker they “twisted their back reaching for something.”
Delayed Reporting
A significant gap between when the injury allegedly occurred and when it was reported. While some delayed reporting is legitimate (the worker may not immediately recognize the severity), extended delays combined with other indicators raise concern.
Example: A worker reports an injury that allegedly occurred “two or three weeks ago” but cannot specify the date, the task, or whether anyone else was present.
Refusal to Complete Incident Reports
The worker is reluctant or unwilling to provide a detailed written account of the incident, resists completing the employer’s incident investigation forms, or provides only the minimum information required.
Category 3: Medical Inconsistency
Red flags in this category relate to the medical aspects of the claim. Discrepancies between reported symptoms, objective medical findings, and recovery timelines can indicate that the claim may not accurately reflect the worker’s actual condition.
Subjective Symptoms Without Objective Support
The worker reports severe, debilitating symptoms (such as pain, immobility, or inability to perform basic tasks) but objective medical testing reveals no structural cause or pathology that would explain the reported severity.
Example: A worker reports inability to sit for more than 10 minutes due to back pain, but two MRIs show only minor age-related degeneration with no acute findings.
Abnormal Recovery Timeline
The worker’s recovery period is significantly longer than the typical timeline for the diagnosed injury, without a documented medical explanation for the delay. This is particularly notable for injuries with well-established recovery benchmarks.
Example: A worker with a diagnosed Grade 1 ankle sprain (typical recovery of two to four weeks) remains off work after six months with no documented complications or secondary diagnosis.
Treatment Avoidance
The worker consistently misses physiotherapy appointments, cancels specialist referrals, avoids prescribed rehabilitation programs, or refuses independent medical examinations without a valid medical or logistical reason. A worker who is genuinely injured typically pursues treatment.
Example: A worker has missed 8 of their last 12 physiotherapy appointments and has cancelled two specialist referrals, each time citing non-specific “personal reasons.”
Doctor Shopping
The worker changes treating physicians frequently, particularly after a previous physician expressed an opinion that the worker could return to some form of modified duties. Each new physician starts the assessment process from scratch, effectively resetting the recovery timeline.
Pre-Existing Condition Concealment
Evidence emerges that the worker had a pre-existing condition affecting the same body part or system, which was not disclosed at the time of the claim. While pre-existing conditions do not automatically invalidate a claim (aggravation of a pre-existing condition can be compensable), concealment raises questions about the claim’s narrative.
Category 4: Post-Injury Behaviour
Red flags in this category relate to the worker’s conduct during the claim period. Observable behaviour that contradicts reported limitations is often the strongest basis for establishing reasonable suspicion.
Social Media Contradictions
The worker’s publicly available social media posts show them engaging in physical activities that directly contradict their reported functional limitations. This is one of the strongest indicators because it provides contemporaneous, self-documented evidence of capability.
Example: A worker who claims inability to lift more than 5 lbs posts a video on Instagram of themselves carrying bags of concrete for a home renovation project.
Important: If you identify a social media contradiction, screenshot it immediately with visible timestamps and URLs. Social media posts can be deleted at any time. Do not interact with the post (like, comment, or share) or alert the worker in any way. The screenshot becomes part of your reasonable suspicion documentation. Employers may also consider engaging a licensed private investigator to conduct a professional OSINT review, which produces independently documented evidence with consistent archiving standards and avoids the platform association risks that can arise when employers view a claimant’s profiles from personal or work accounts.
The “Ghost” Worker
The worker becomes consistently unreachable during normal recovery hours. They do not answer calls, do not respond to messages within reasonable timeframes, use a P.O. Box rather than a residential address, or are never home when correspondence is delivered. This pattern can indicate the worker is spending time away from their reported residence, potentially at secondary employment.
The “Double-Dipper”
Evidence or credible reports suggest the worker is performing paid work (formal or cash-in-hand) while simultaneously receiving WCB wage-loss benefits. Receiving wage-loss benefits while working for pay without disclosure constitutes fraud under the Workers Compensation Act.
Example: A co-worker reports seeing the injured worker operating a landscaping business on weekends, or the worker’s spouse mentions in a social setting that the worker has been “doing some side work.”
Observed Physical Inconsistency
A supervisor, co-worker, or other credible person directly observes the worker performing physical activity that contradicts their reported limitations. This is the most direct form of reasonable suspicion.
Example: A supervisor sees the injured worker at a local hardware store carrying a 50 lb bag of gravel to their truck, despite a medical restriction of “no lifting over 10 lbs.”
Resistance to Return-to-Work
The worker resists all return-to-work proposals, including genuinely modified duties that accommodate their restrictions. They reject light-duty offers without trying them, claim that any workplace exposure will worsen their condition, or insist that only complete absence from work is acceptable, contrary to their treating physician’s recommendations.
Category 5: Historical Patterns
Red flags in this category relate to the worker’s claim history and behaviour patterns. These indicators add context but are generally not sufficient on their own to establish reasonable suspicion.
Multiple Claims Across Employers
The worker has a history of filing WCB claims with multiple employers, particularly for similar injury types or with similar timing patterns. While some workers are genuinely injury-prone (particularly in high-risk occupations), a pattern of claims across different employers warrants attention when combined with other indicators specific to the current claim.
Important: A history of previous claims alone is not sufficient reasonable suspicion. It becomes relevant only when combined with specific indicators relating to the current claim. Never use claim history as the sole basis for a surveillance investigation.
Unusual System Knowledge
The worker demonstrates an unusually sophisticated understanding of WCB processes, appeal mechanisms, entitlement calculations, and legal strategies, beyond what a typical claimant would know. They may reference specific policy numbers, cite precedent decisions, or know exactly how long they can be off work before certain thresholds are triggered.
Early Legal Engagement for Minor Injuries
A lawyer or worker’s advocate is retained immediately after a relatively minor incident, before the severity of the injury is established. Alternatively, the worker pushes for a lump-sum settlement before a full diagnosis or recovery assessment is complete.
Example: A worker stubs their toe on a pallet, files a claim the same day, and has a lawyer send a representation letter to WorkSafeBC within 48 hours.
Pattern of Claims Around Employment Events
Claims consistently coincide with employment events: probation periods ending, seasonal work concluding, layoff notices being issued, or performance reviews being due. Each individual claim may appear legitimate, but the pattern across time is the indicator.
Category 6: Communication Red Flags
Red flags in this category relate to how the worker communicates about the claim and their condition. These are often more subtle than behavioural indicators but can add meaningful context to a file.
Rehearsed or Scripted Responses
When asked about the injury, the worker provides responses that sound scripted or rehearsed: using medical terminology inconsistently, repeating the same phrases verbatim across different conversations, or reciting details in a way that suggests memorization rather than genuine recall.
Evasiveness About Daily Activities
The worker becomes defensive or evasive when asked generally about how they are spending their time during recovery. While workers are not required to provide a detailed account of their personal lives, marked evasiveness about physical activities, particularly in contrast to their usual openness, can be an indicator.
Threats of Legal Action When Questioned
The worker responds to routine administrative questions about the claim with immediate threats of legal action, complaints to WorkSafeBC, or accusations of harassment. While workers have every right to seek representation, using legal threats as a shield against basic administrative processes can indicate an intent to prevent scrutiny.
Contradictory Statements to Different Parties
The worker provides different accounts of their capabilities to different people: telling the employer they cannot perform any tasks, telling the physiotherapist they can manage light activities, and telling a friend they are “doing fine.” Inconsistencies across communications to different audiences are a strong indicator.
What to Do When You Identify Red Flags
Step 1: Document Immediately
The moment you observe or become aware of a red flag, write it down. Record the date you identified it, the specific observation or report (what was seen, heard, or reported), who observed or reported it (and their credibility), and the exact medical restriction it appears to conflict with. Do this the same day. Contemporaneous documentation is far more credible than notes reconstructed days or weeks later.
Step 2: Do NOT Confront the Worker
Do not discuss your suspicions with the worker, their supervisor, or their co-workers. Do not ask the worker to “prove” their injury. Do not express scepticism. Any of these actions can be characterized as intimidation or coercion under Section 47(2)(d) of the Workers Compensation Act and may form the basis of a prohibited action complaint.
Step 3: Consider Less Intrusive Steps First
Before engaging an investigator for covert surveillance, consider whether less intrusive approaches could resolve the concern. Review the worker’s publicly available social media profiles, or engage a licensed private investigator to conduct a professional OSINT review that produces independently documented evidence without the risk of alerting the claimant through platform notifications. Request updated functional capability information from the treating physician, or request a Functional Capacity Evaluation. Contact WorkSafeBC’s fraud tip line to report your concerns and document the outcome. For the full escalation framework, see our guide on reasonable suspicion and less intrusive alternatives.
Step 4: Assess Whether You Meet the Threshold
Ask yourself two questions:
- Can I identify a specific, documentable conflict? Do I have evidence of behaviour or capability that directly contradicts a specific reported medical restriction? Not a general feeling, but a specific conflict.
- Would I investigate even without the claim? If this employee had not filed a WCB claim, would the evidence I have still justify an investigation? If the answer is no, I may not have sufficient reasonable suspicion.
Step 5: Contact a Licensed Private Investigator
If you can answer yes to both questions in Step 4, contact a licensed investigation firm for a confidential consultation. Have your documentation ready: the red flag details, the worker’s known medical restrictions, and any less intrusive steps you have already taken. A professional firm can begin with a standalone OSINT review if one has not already been conducted, or proceed directly to surveillance if the existing evidence is sufficient to support it. If you are unsure whether your evidence meets the reasonable suspicion threshold under PIPA and the Workers Compensation Act, consult with independent legal counsel before commissioning covert surveillance.
What NOT to Do
The following actions create serious legal exposure and should be avoided entirely:
- Do not conduct amateur surveillance. Having a supervisor or co-worker follow the injured worker, drive past their house, or “keep an eye on them” is unprofessional, likely to produce unusable evidence, and may itself constitute a prohibited action.
- Do not test the worker. Assigning tasks designed to see whether the worker “really” has the claimed limitation is not the employer’s role and could be characterized as harassment.
- Do not discuss suspicions in the workplace. Gossip about a suspected fraudulent claim can constitute a hostile work environment and provides the worker with evidence that any investigation was motivated by personal bias rather than objective evidence.
- Do not withhold benefits or delay claim processing. Even if you suspect fraud, you must process the claim in accordance with your WCB obligations. Withholding benefits is a prohibited action.
- Do not retaliate in any form. No changes to schedule, duties, location, pay, or seniority. No performance reviews timed to coincide with the claim. No “checking in” more frequently than normal. Nothing that could be construed as adverse.
Red Flag Strength Assessment
Not all red flags carry equal weight. The following framework helps you assess how indicators build toward the reasonable suspicion threshold.
Standalone Indicators
These are strong enough that a single documented instance likely meets the reasonable suspicion threshold on its own: social media posts showing activity that directly contradicts specific medical restrictions, direct observation by a credible witness of activity contradicting specific restrictions, or confirmed secondary employment while receiving WCB wage-loss benefits. If you have a standalone indicator, document it immediately and consult a professional investigator.
Strong Indicators (Two or More Combined)
When two or more of these appear together, the combination likely meets the threshold: suspicious timing combined with medical inconsistency, treatment avoidance combined with the “ghost worker” pattern, or a vanishing witness combined with vague descriptions and delayed reporting. Document all indicators with dates and sources, consider less intrusive steps, and consult a professional investigator.
Supporting Indicators
These add context but are generally not sufficient on their own: Monday morning claims, unusual system knowledge, early legal engagement, evasiveness about daily activities, and resistance to return-to-work without clear medical justification. Supporting indicators strengthen a file that already has a strong or standalone indicator. Document them, but do not rely on them as the sole basis for an investigation.
Insufficient Indicators
The following are not red flags at all. They are biases, and they do not contribute to reasonable suspicion: the claim being expensive, the worker being a poor performer, the injury being soft tissue, the worker hiring a lawyer, or general distrust or personal dislike of the employee. If these are your only reasons for wanting to investigate, do not proceed.
Frequently Asked Questions
No. A red flag is an indicator, not proof. Most red flags have innocent explanations when taken in isolation. What matters is the combination and context of multiple indicators, and whether they point to a specific, documentable inconsistency between the worker’s claimed limitations and their actual behaviour.
Screenshot it immediately with visible timestamps and URLs. Do not interact with the post or alert the worker. Social media evidence showing physical activity that contradicts reported medical restrictions is one of the strongest forms of reasonable suspicion and may be sufficient on its own to support a formal investigation.
No. Confronting the worker about your suspicions can be characterized as intimidation or coercion under Section 47(2)(d) of the Workers Compensation Act and may trigger a prohibited action complaint. Document the red flag, consider less intrusive steps, and consult a professional investigator or legal counsel before taking any action.
A credible co-worker tip that describes specific physical activity contradicting the worker’s reported medical restrictions can contribute to reasonable suspicion. The tip should be documented with the date, the source, and the specific activity described. An anonymous tip with no verifiable details is weaker than a named source providing specific observations. In many cases, a credible tip combined with one other indicator is sufficient to meet the threshold.
There is no fixed number. What matters is whether you can identify a specific, documentable conflict between the worker’s reported limitations and their actual behaviour. A single standalone indicator (such as a social media post directly contradicting medical restrictions) may be sufficient. Weaker indicators typically need to be combined with others. If you are unsure, a professional investigation firm can assess your evidence during a confidential consultation and advise whether the threshold has been met.
No. Claim cost is a financial concern, not evidence of fraud. Many legitimate claims are expensive. Investigating a worker solely because the claim is costly, without specific evidence of inconsistency between their reported limitations and their actual behaviour, does not meet the reasonable suspicion threshold and could expose you to a prohibited action complaint.
Related Knowledge Pages
- Injury Claim Investigations in BC Guide (Pillar Page)
- Reasonable Suspicion: What BC Employers Need Before Hiring a PI
- Prohibited Action Complaints in BC: What Every Employer Must Know
- The WorkSafeBC FID Disbanding: What It Means for BC Employers in 2026
- What Employers Should Do After Receiving Investigation Results
References
- Workers Compensation Act, Division 6 (Sections 47-50)
- BC Personal Information Protection Act (PIPA)
- WorkSafeBC, Report Suspected Fraud
Concerned About a Pattern You Are Seeing?
If you are a BC employer who has identified one or more of these red flags and wants to understand your options, contact Shadow Investigations by phone at 604-657-4499 or through the confidential inquiry form below. We will assess whether your evidence meets the reasonable suspicion threshold and advise you on the most appropriate next step, whether that is a formal investigation, a social media review, or simply guidance on how to document what you are observing. All consultations are free, confidential, and carry no obligation.
Contact Form for Investigation Inquiries
"*" indicates required fields
About the Author
