If you are a claims adjuster, SIU supervisor, or claims director with a backlog of flagged claims that your team cannot possibly investigate at current throughput, this guide is for you. The backlog is not an anomaly - it is the default state of most US P&C carriers. Approximately 75% of claims flagged by fraud detection systems never receive full investigation because investigator capacity runs out before the flagged queue does.
The five interventions below are sequenced by cost and impact. Deploy them in order. Each one is meaningful on its own, and compounding effects matter: the later interventions assume the earlier ones are in place.
This piece complements the broader operational view in why 75% of flagged insurance claims are never fully investigated and the capacity analysis in benchmarking SIU performance in 2026.
The math of the backlog
Before intervening, compute the gap. The calculation is simple and usually sobering:
The capacity gap formula
Monthly gap = (flagged claims/month) - (investigators x ~10 cases/month). For a mid-size regional carrier with 10 investigators and 2,000 flagged claims/month, the gap is 2,000 - 100 = 1,900 cases/month. That is the backlog. Every month that gap is not closed adds to the cumulative volume of uninvestigated claims.
The backlog compounds because detection systems continue to generate flags at the input rate regardless of investigator capacity. A 1,900-case monthly gap means ~22,800 uninvestigated flagged claims per year - not all fraud, but all cases where a fraud signal was strong enough to warrant investigation and none happened.
The economic implication is claim leakage. If 15-25% of uninvestigated flagged claims involve actual fraud, and typical fraud inflation runs 20-40% of claim value, the leakage math reaches $5-50M annually for mid-size carriers. See insurance claims leakage for the detailed calculation.
Five interventions in priority order
Intervention 1: Ruthless triage
The highest-leverage thing you can do with existing capacity is investigate the right subset of flagged claims. Most SIU teams triage informally - investigators pick up cases from a queue based on a mix of severity score, age, and adjuster referral pressure. Formalising triage with explicit criteria (claim value threshold, specific red flag combinations, line of business) concentrates investigator time on the highest-yield cases.
Expected impact: 20-40% improvement in confirmed fraud per investigator-month. Cost: low (process work, no new technology). Limitation: does not close the coverage gap - the 75% still do not get investigated, they just become the right 25%.
Intervention 2: Documentation automation
Investigators spend 25% of their time on report writing and another ~20% on administrative logging. Templated report structures, form-filling automation, and structured data capture reduce documentation time by 30-50%. This reclaims ~1-2 cases per investigator per month. Cost: moderate (process change, some software).
Intervention 3: Database query automation
Investigators manually query NICB, ISO ClaimSearch, state DMVs, and public records for each case - typically ~2-4 hours per investigation across sources. Automated query orchestration (submit queries in parallel, results returned in a single dashboard) reduces this to minutes. Reclaims ~2-3 cases per investigator per month. Cost: moderate (integration work).
Intervention 4: Autonomous AI investigation downstream of detection
The intervention with the largest throughput impact. Autonomous investigation agents run the full 15+ phase investigation for every flagged claim in 2-4 hours, producing an audit-ready report the investigator reviews in 30-60 minutes. Investigator throughput goes from ~10 to 800+ cases per month. Coverage goes from 25% to 100%.
The remaining investigator role is decision-making and exception handling - reviewing AI findings, escalating ambiguous cases, handling external parties. For evaluation criteria, see evaluating AI fraud investigation vendors. For the architecture, see parallel processing in SIU.
Intervention 5: Detection precision improvement
Once investigation coverage reaches 100%, the new bottleneck is detection quality. A detection platform running at a 60-85% false positive rate (standard for rules-based systems) consumes review time on claims that turn out to be legitimate. Tuning detection thresholds, adding model-based scoring, and incorporating findings from completed investigations into detection rules raises precision and reduces review burden. This is a longer-horizon intervention but compounds the earlier ones.
Triage protocols that actually work
Under manual workflows, triage is necessary because capacity runs out. Under AI-augmented workflows, triage is still useful for prioritisation but no longer a gatekeeper. Effective triage criteria across both regimes:
- Claim value threshold - above a carrier-specific amount, investigate with priority.
- Specific red flag combinations - late reporting + recent policy + high severity should trigger within 48 hours.
- Prior claims history - claimants with prior investigated claims or fraud flags bypass general triage queue.
- Provider network patterns - claims routed through flagged providers prioritise.
- Line-of-business priority - lines with higher fraud density (workers' comp, auto BI) get faster triage turnaround.
- External referral - law enforcement, regulator, or anonymous tip triggers immediate review.
Document the protocol. Investigators making triage calls on intuition produce inconsistent outcomes; the same flagged claim might be investigated by one investigator and closed by another. Written criteria remove that variance.
Where automation fits
Automation opportunities in SIU work fall into three categories:
- Fully automatable - document forensics, database queries, OSINT, medical record analysis, timeline reconstruction, report generation. These are where autonomous investigation agents deliver their throughput gain.
- Partially automatable - witness statement analysis (AI does cross-referencing; human does nuance), fraud ring identification (AI flags patterns; human investigates), claim denial communication (AI drafts; human sends).
- Human-only - fraud determination sign-off, SAR filing, testimony, law enforcement coordination, complex investigator judgement on unusual cases.
The ratio of fully-automatable work to human-only work is roughly 80:20 across a typical SIU case mix. The 80% is where throughput compounds; the 20% is where investigator judgement and experience matter.
Measurement and retrospective
Measure the backlog quarterly at minimum. The key metrics:
- Monthly flagged volume and monthly investigation throughput - is the gap closing or widening?
- Cumulative uninvestigated backlog - tracked as a running total; target: decreasing.
- Confirmed fraud rate among investigated cases - should be stable or rising; rising indicates triage is improving.
- Time-to-close - from referral to investigation complete; target: decreasing.
- Leakage estimate - dollar value of uninvestigated claims multiplied by estimated fraud density and inflation; target: decreasing.
- Investigator workload satisfaction - qualitative but important; cases-per-investigator staying within reason keeps morale and quality high.
Run a quarterly retrospective. Review which interventions shifted the numbers, which did not, and where the next bottleneck is. The backlog is a systems problem; it will not close from one intervention alone.
Key takeaways
- The capacity gap formula: monthly gap = flagged claims/month minus (investigators x ~10 cases/month). Most mid-size carriers have a 1,000-2,000 monthly gap; top-20 carriers have tens of thousands.
- Five interventions in priority order: ruthless triage, documentation automation, database query automation, autonomous AI investigation, detection precision tuning. Deploy sequentially; effects compound.
- Autonomous AI investigation is the single highest-impact intervention (+790 cases/investigator/month) and the one that closes the coverage gap from 25% to 100% without adding headcount.
- Triage protocols should be documented, not intuitive. Written criteria across claim value, red flag combinations, prior history, provider patterns, and line of business remove investigator-to-investigator variance.
- Measure the backlog quarterly: monthly flagged volume, investigation throughput, cumulative uninvestigated backlog, confirmed fraud rate, time-to-close, leakage estimate. Run retrospectives.