---
title: "Staged accident anatomy: a six-phase investigation playbook"
description: "A staged accident is an organized business, not opportunistic fraud. Here is the six-phase investigation playbook - triage, reconstruction, network analysis, medical forensics, statements, documented resolution."
date: "2026-06-17"
lastModified: "2026-06-17"
author: "Pankaj Dhariwal"
tags: ["Guides"]
canonical: "https://gethesperai.com/blog/staged-accident-anatomy-investigation/"
---

# Staged accident anatomy: a six-phase investigation playbook

> **TL;DR** A staged accident is a coordinated scheme run by rings tied to law offices and medical clinics, which is why a one-pass fraud score never resolves it. This playbook lays out the six phases an investigator works - triage, scene and vehicle reconstruction, claimant network analysis, medical-mill forensics, statement cross-reference and EUO prep, and documented resolution - and shows why running them in parallel collapses 14+ days into 2-4 hours.
>
> - Six phases: triage, reconstruction, network, medical, statements, resolution
> - FBI estimates ~$20B/year in staged-accident claims
> - Parallel phases lift coverage from ~25% to 100% of flagged claims

- **~$20B** - Staged-accident claims per year (FBI estimate cited by Insurance Journal)
- **~25%** - Auto liability claims with a fraud element (Insurance Research Council)
- **5,366** - Staged-auto claims in California (2023) (Highest of any state)
- **$40M** - One NY no-fault staged-accident ring (Leaders sentenced to 15, 12, 7 years (DOJ))

## Staged accidents are organized businesses, not opportunistic fraud

A staged accident is a coordinated, repeatable scheme - which is exactly why a one-pass fraud score does not resolve it. The collision is manufactured, the injuries are scripted, and the payout is engineered through inflated soft-tissue treatment and bodily-injury settlements rather than vehicle damage. These are not lone opportunists exaggerating a fender-bender. The National Insurance Crime Bureau describes staged-accident rings as "as organized as legitimate businesses," controlled by individuals tied to specific law offices and medical clinics, with complicit passengers steered through multiple clinics for unverifiable soft-tissue injuries.

The scale tells the same story. The FBI estimates staged accidents account for roughly $20 billion in fraudulent claims a year, a number cited in a September 2025 [Insurance Journal](https://www.insurancejournal.com/news/national/2025/09/19/839747.htm) viewpoint, and the Insurance Research Council estimates roughly 25% of auto liability claims carry a fraud element. That sits inside the $45 billion in annual US property-casualty insurance fraud and the broader $308 billion total across all lines reported by the [Coalition Against Insurance Fraud](https://insurancefraud.org/fraud-stats/), which also finds fraud in about 10% of property-casualty losses.

The organized structure is the reason a documented investigation matters more here than almost anywhere else in the book of business. In a New Orleans scheme prosecuted by the Department of Justice that ran from roughly December 2011 to December 2024, attorneys paid "slammers" to crash into vehicles - often 18-wheelers carrying large commercial policies - used "spotters" as getaway drivers and "recruiters" to assemble passengers, then steered those passengers toward medically unnecessary neck and back surgeries to inflate settlements. In New York, leaders of a $40 million no-fault auto insurance fraud were sentenced in 2024 to 15, 12, and 7 years. Defined roles, repeat infrastructure, and a settlement engine: that is a business, and a single fraud score does not unwind a business.

For the loss-cost owner, this is where the coverage gap becomes a P&L problem. Organized rings exploit volume - they file enough flagged claims that a manual SIU can fully work only about 25% of them, and the rest are paid, denied without full work, or queued. This post is the phase-by-phase investigation playbook; for the typology-and-rings primer that sets up how these schemes are detected, start with our guide to [auto insurance fraud investigation and staged accidents](/blog/auto-insurance-fraud-investigation-staged-accidents).

## The six typologies an investigator must recognize

Six recurring patterns account for most staged-accident activity, and each leaves a distinct evidentiary signature the investigation has to target. Recognition comes first; the phases that follow are how you test the pattern. This is deliberately a short recognition list rather than a deep typology breakdown - the sibling guide above covers the rings in detail.

| Typology | How it is staged | Evidentiary signature to target |
| --- | --- | --- |
| Swoop-and-squat | A swoop car cuts off the squat car so the victim rear-ends it; a third box-in car can trap the victim | Claim of a "phantom" vehicle that cut in; multiple soft-tissue passengers in the squat car |
| Drive-down | Fraudster waves the victim forward, then accelerates into them and denies the gesture | Right-of-way dispute with no third-party witness; merge or parking-lot geometry |
| Panic stop | Fraudster brakes hard without cause so the trailing driver hits them | Sudden-stop braking with no road hazard; rear-end at low closing speed |
| T-bone / right-of-way | Staged intersection collision blaming the victim for running a signal | Disputed signal phase; intersection impact angle vs. claimed approach |
| Paper accident | No real collision occurs; the crash is fabricated on paper | No corroborating physical damage; report filed late or remotely |
| Jump-in / phantom passengers | Passengers added after the fact who were not in the vehicle | Occupants appearing on the claim but not the scene; recurring across unrelated claims |

The swoop-and-squat is the canonical case because the human narrative is the giveaway. The [National Insurance Crime Bureau](https://www.nicb.org/prevent-fraud-theft/staged-auto-accident-fraud) describes the setup as a swoop vehicle cutting off a squat car, forcing it to brake so the unsuspecting victim hits it from behind, after which the swoop and box-in cars flee. The tell is the claimant who reports that an unknown vehicle suddenly cut in - that phantom car is part of the ring, and it never appears in any corroborating evidence.

## Phase 1 - Triage and red-flag scoring

The investigation begins where detection ends. A claim arrives flagged - by a carrier's rules engine, by a detection vendor, or by an adjuster's referral - and Phase 1 is reading the flag against the red-flag indicators that suggest a staged event rather than a real one. The strongest indicators are mismatches between physical evidence and the human narrative: a low-speed impact with high reported soft-tissue injury, multiple passengers unrelated to the driver, immediate representation by the same attorney and treatment at the same clinic, and high prior-claim density across the same people, addresses, or vehicles.

No single flag confirms fraud, which is the whole reason an investigation exists. Rules-based detection carries a 60-85% false-positive rate, so the flag is a hypothesis, not a verdict. The job of Phase 1 is to convert the flag into a structured set of questions the later phases will answer - not to confirm or clear it on the indicators alone. For the full list of indicators an SIU works from, see the [insurance fraud red flags checklist](/blog/insurance-fraud-red-flags-checklist).

This is also the cleanest place to draw the line between detection and investigation. Detection is upstream; investigation is downstream. A detection score tells the SIU which staged-accident claims look suspicious. It does not run the scene reconstruction, pull the event data recorder, cross-reference the medical-mill billing, or map the claimant network. After the flag, the 14+ day manual workflow still has to happen - and Phases 2 through 6 are that workflow.

> **The flag is the input, not the answer**
>
> Detection tools - FRISS, Shift Technology, Verisk, BAE NetReveal - flag the suspicious claim or surface the ring connection. That is genuinely valuable upstream work. But a flag is a hypothesis with a 60-85% false-positive rate. The investigation exists to test it. Hesper AI sits downstream of detection and runs the test end-to-end. Carriers run both layers.

## Phase 2 - Scene and vehicle reconstruction

Physical evidence either supports or contradicts the claimed dynamics, and in a staged accident it usually contradicts them. Phase 2 reconstructs the collision from the data the vehicles and the scene actually recorded: event data recorder (EDR) readings on speed and braking, telematics where available, delta-V from the change in velocity at impact, and the damage geometry that shows whether the impact angle matches the story.

A staged narrative rarely survives the physics. In a swoop-and-squat, the squat driver claims they "had to stop quickly for an unknown vehicle" - but the EDR shows a deliberate hard brake with no hazard, and the closing speed is too low to produce the soft-tissue injuries claimed by three passengers. A panic-stop case shows the same signature: hard braking with nothing on the road to brake for. Damage geometry catches the drive-down and the T-bone, where the impact angle does not match the claimed approach. The point of reconstruction is to find the gap between what the metal records and what the people say.

In a manual workflow this phase waits on EDR downloads, scene photos, and the police report, and it competes for the investigator's time with every other open case. In an AI investigation it is one of 15+ phases running in parallel - the reconstruction does not have to wait its turn behind the network analysis or the medical review, because the agent's per-case attention is not the bottleneck a human investigator's is.

## Phase 3 - Claimant and network analysis

Staged accidents repeat, and the repetition is what exposes the ring. The same passengers, addresses, vehicles, attorneys, and clinics recur across claims that are supposed to be unrelated. Phase 3 maps those connections - link analysis across the claimant network - to turn a single suspicious claim into a pattern. A jump-in passenger who appears on three unrelated rear-end claims in eighteen months is not a coincidence; an attorney and clinic that pair on a dozen low-speed soft-tissue claims is the infrastructure the NICB describes.

The role structure from prosecuted cases tells the investigator what to look for. The New Orleans DOJ case ran on slammers, spotters, and recruiters - defined people performing defined functions across many staged crashes. The geographic concentration is just as telling: based on 2023 data cited by Insurance Journal, California recorded 5,366 staged-auto claims, New York 1,729, and Florida 1,110, with year-over-year growth of 14% in New York and 58% in New Jersey between 2022 and 2023. Those are the no-fault and high-litigation markets where medical-mill and attorney-referral infrastructure can monetize staged injuries most efficiently.

This is the phase where detection vendors and the investigation layer most clearly complement each other. BAE NetReveal is genuinely strong at network and link detection - it surfaces ring connections across claims - and Verisk's cross-carrier ClaimSearch data flags repeat claimants across carriers. That upstream signal is real value. The gap it leaves is that even after the ring surfaces, each member's individual claim still needs an end-to-end investigation: the reconstruction, the medical forensics, the EUO prep, the documented trail. Hesper investigates each ring member's flagged claim. The carrier runs the network detection and the per-claim investigation together.

## Phase 4 - Medical-mill and billing forensics

The payout in a staged accident is almost never the car - it is the treatment. Phase 4 examines the medical and billing record for the signatures of a mill: unverifiable soft-tissue injuries, identical treatment templates applied across unrelated patients, billing for services that map to a script rather than a diagnosis, and the clinic-attorney referral loop that recycles the same patients. The NICB pattern is explicit on this point - complicit passengers are sent to multiple clinics for soft-tissue injuries that cannot be objectively confirmed.

Prosecuted cases show how far the inflation runs. In the New Orleans ring, passengers were steered toward medically unnecessary neck and back surgeries specifically to drive up settlement value, and the New York scheme that produced 15, 12, and 7-year sentences was a $40 million no-fault fraud built on exactly this kind of treatment billing. The forensic job is to separate the legitimate care from the manufactured care - to show, with the billing record and the treatment timeline, where the medicine stops matching the injury the physics in Phase 2 could actually have produced.

Run by hand, medical-record forensics is slow and document-heavy, and it is one of the reasons a single staged-accident case can consume 14+ days. Run as a parallel phase, the medical review proceeds at the same time as the reconstruction and the network analysis, and the contradictions surface together rather than one report at a time.

## Phase 5 - Statement cross-reference and EUO prep

Inconsistencies are the leverage, and Phase 5 assembles them. Every recorded statement, the police report, the medical history, and the physical reconstruction get cross-referenced against each other, and the contradictions become the spine of the examination under oath. When the squat driver's statement says they stopped for a vehicle the EDR shows was never there, when a passenger's account of where they were sitting does not match the impact geometry, when the treatment dates predate the claimed onset - those are the questions that get asked under oath.

Done well, this phase changes what the EUO is for. Instead of a fishing expedition, it becomes a structured confrontation with documented contradictions, each one tied back to a source. The investigator walks in with the inconsistency map already built. This is also the point in the lifecycle where the role of the human investigator is clearest: the agent assembles the cross-reference and surfaces the contradictions, and the investigator's role shifts from execution to decision-making - deciding which contradictions matter, how to sequence them, and where the case goes next.

For the broader view of how an SIU runs this lifecycle end to end - referral, investigation, disposition - see [how insurance companies investigate fraud](/blog/how-insurance-companies-investigate-fraud). Phase 5 is where that lifecycle turns from gathering evidence into building the case the carrier will have to defend.

## Phase 6 - Documented resolution and audit-ready report

The case closes with a defensible decision chain, not a score. Phase 6 produces the audit-ready report: every finding tied to its source, the reasoning behind each conclusion, and timestamps across the whole investigation, structured so it can support a denial, an examination under oath, a Suspicious Activity Report, or a referral to a state fraud bureau. For a staged accident headed toward litigation, the difference between a number and a documented chain is the difference between a position the carrier can defend and one it cannot.

This is where the audit trail stops being a nice-to-have and becomes a regulatory requirement. An output that is logged with its sources, reasoning, and timestamps is what satisfies California's 10 CCR 2698.36 documented-decision requirement and appears in an antifraud plan filed under NAIC Model Act #680, adopted in 48 states. A black-box conclusion - "this claim scored 0.87" - does not. The whole point of working six phases is to produce a record a state DOI examiner, a deposition, or a SAR reviewer can read end to end and follow the carrier's reasoning.

> A fraud score tells you a claim is suspicious. A six-phase investigation tells you why, with the sources to prove it. For an organized staged-accident ring, only the second one survives a deposition or a DOI audit.
>
> - Hesper AI product research

This is the move from fraud detection to fraud resolution. Detection produces the flag; the six phases produce the resolution - a documented determination the carrier can act on and defend. Built-in detection plus a full investigation is what closes the loop, and the documented report is the artifact that proves the loop closed.

## Why the six phases collapse from weeks to hours

A human runs these six phases sequentially, and that sequence is the bottleneck. The reconstruction waits on the EDR download, the network analysis waits on the reconstruction, the medical review waits behind both, and the whole case waits behind every other case on the investigator's desk. That is why a manual staged-accident investigation takes 14+ days per case, why one investigator carries 200+ cases, and why a manual team closes only about 25% of flagged claims fully.

An AI investigation agent runs 15+ phases in parallel on every flagged claim. The reconstruction, the network analysis, the medical forensics, the statement cross-reference, and the prior-claim history are independent workstreams, so they run at the same time rather than one after another. The case that took 14+ days closes in 2-4 hours, at roughly $150 instead of roughly $2,500, and the coverage moves from about 25% of flagged claims toward 100%. For the mechanics of how parallel execution compresses the lifecycle, see [parallel processing across SIU investigation phases](/blog/parallel-processing-siu-investigation-phases).

| Phase | Manual time | AI time (parallel) | Evidence pulled |
| --- | --- | --- | --- |
| 1 - Triage and red-flag scoring | Hours to days | Minutes | Flag, indicators, prior-claim density |
| 2 - Scene and vehicle reconstruction | Days (waits on EDR) | Runs in parallel | EDR, telematics, delta-V, damage geometry |
| 3 - Claimant and network analysis | Days | Runs in parallel | Recurring people, addresses, vehicles, attorneys, clinics |
| 4 - Medical-mill and billing forensics | Days (document-heavy) | Runs in parallel | Treatment templates, billing patterns, referral loops |
| 5 - Statement cross-reference and EUO prep | Days | Runs in parallel | Recorded statements, police report, contradiction map |
| 6 - Documented resolution and report | Days | Minutes | Audit-ready chain: sources, reasoning, timestamps |
| Full case | 14+ days | 2-4 hours | Same evidence, run simultaneously |

| Manual SIU vs. AI investigation on a staged-accident claim (Hesper internal benchmarks) | Value | Share |
| --- | --- | --- |
| Cost per investigated case | ~$2,500 manual vs ~$150 AI | 100% |
| Cycle time per case | 14+ days manual vs 2-4 hours AI | 95% |
| Coverage of flagged claims | ~25% manual vs 100% AI | 75% |
| Cases per investigator per month | ~10 manual vs 800+ AI | 90% |

The coverage number is the one that matters most for the loss-cost owner. Organized rings are built to exploit the gap: they file enough flagged claims that a manual SIU can only fully work a quarter of them, and the unworked three-quarters are where the leakage lives. Lifting coverage from about 25% toward 100% is the single biggest lever on staged-accident loss cost, because it means the ring no longer gets to play the odds that most of its claims will be paid without a full investigation.

## Key takeaways

- A staged accident is a coordinated business run by rings tied to law offices and medical clinics, so a one-pass fraud score cannot resolve it - it needs a full investigation.
- The investigation runs in six phases - triage, scene and vehicle reconstruction, claimant network analysis, medical-mill forensics, statement cross-reference and EUO prep, and documented resolution - each targeting a distinct evidentiary signature.
- Detection is upstream and investigation is downstream: FRISS, Shift, Verisk, and BAE NetReveal flag the claim or surface the ring, but each flagged claim still needs an end-to-end investigation, which is the layer Hesper occupies.
- Manual SIU runs the six phases sequentially over 14+ days per case; an AI agent runs 15+ phases in parallel and closes the case in 2-4 hours at roughly $150 instead of $2,500.
- Closing the coverage gap from about 25% to 100% of flagged claims is the biggest loss-cost lever against organized staged-accident rings, because it removes their ability to play the odds on uninvestigated volume.

## Frequently asked questions

### What is a staged accident in insurance?

A staged accident is a collision deliberately caused or fabricated to file fraudulent injury and property claims. Unlike opportunistic fraud, staged accidents are usually run by organized rings - the National Insurance Crime Bureau describes them as "as organized as legitimate businesses," often tied to specific law offices and medical clinics. Common patterns include swoop-and-squat, drive-down, panic stop, and paper accidents where no real collision occurred. The payout typically comes from inflated soft-tissue injury treatment and bodily-injury settlements rather than vehicle damage. The FBI estimates staged accidents account for roughly $20 billion in claims a year, a subset of the $45 billion in annual US property-casualty insurance fraud reported by the Coalition Against Insurance Fraud.

### How do you investigate a staged accident claim?

A staged-accident investigation runs in six phases: triage and red-flag scoring; scene and vehicle reconstruction using EDR and telematics; claimant and network analysis to expose the ring; medical-mill and billing forensics; statement cross-reference and examination-under-oath preparation; and a documented, audit-ready resolution. Each phase targets a specific evidentiary signature - delta-V that does not match the claimed impact, passengers who recur across unrelated claims, identical treatment templates from the same clinic. Manual SIU teams run these phases sequentially over 14+ days per case. AI investigation agents run 15+ phases in parallel and close the same case in 2-4 hours, which is what lets a carrier investigate 100% of flagged claims instead of the roughly 25% a manual team can reach.

### What are the red flags of a staged accident?

The strongest red flags are mismatches between physical evidence and the human narrative. Watch for low-speed impacts with high reported soft-tissue injury; multiple passengers who are unrelated to the driver or appear after the fact, the jump-in passengers; immediate representation by the same attorney and treatment at the same clinic; a phantom vehicle the claimant says cut in front of them, which is the classic swoop-and-squat setup; and high prior-claim density across the same people, addresses, or vehicles. No single flag confirms fraud. The investigation exists to test the flag, because rules-based detection systems carry a 60-85% false-positive rate. The full 20-indicator red-flag checklist covers the rest.

### What evidence matters most in a staged accident investigation?

Four evidence classes carry most staged-accident cases. First, vehicle data - event data recorder (EDR) and telematics readings on speed, braking, and delta-V that rarely match a staged narrative. Second, scene and damage geometry, which shows whether impact angles are consistent with the claimed dynamics. Third, claimant network data - the recurring people, addresses, vehicles, attorneys, and clinics that expose a ring across multiple claims. Fourth, medical-billing forensics, since the payout lives in inflated, often medically unnecessary soft-tissue treatment. In one New Orleans ring prosecuted by the Department of Justice, attorneys steered staged-collision passengers toward unnecessary neck and back surgeries specifically to inflate settlements.

### What is a swoop-and-squat scheme?

Swoop-and-squat is one of the most common staged-accident patterns. A squat vehicle pulls in front of the target. A swoop vehicle then cuts off the squat car, forcing it to brake hard so the unsuspecting victim rear-ends it. In the more organized version, a third box-in car traps the victim so they cannot change lanes to avoid the collision. After the crash the swoop and box-in cars flee, leaving the victim's insurer to pay a claim for staged injuries among the squat car's occupants. The tell is the claimant's statement that an unknown vehicle suddenly cut in - that phantom car is part of the ring and never appears in corroborating evidence.

### How much does staged-accident fraud cost insurers?

The FBI estimates staged accidents account for roughly $20 billion in fraudulent claims a year in the United States. That sits inside the $45 billion in annual property-casualty insurance fraud reported by the Coalition Against Insurance Fraud, and the broader $308 billion total across all insurance lines. The Insurance Information Institute reports auto insurers lose at least $29 billion a year to fraud overall, and that up to 14% of personal auto premiums go toward covering fraud-related costs. Staged-accident activity is rising: between 2022 and 2023, staged-auto claims grew 14% in New York and 58% in New Jersey, according to data cited by Insurance Journal.

### Can AI investigate staged accidents, or just detect them?

Detection and investigation are different layers. Detection tools - FRISS, Shift Technology, Verisk, BAE NetReveal - flag a claim as suspicious or surface a ring connection across carriers. That is upstream work, and it is valuable. It does not run the scene reconstruction, pull the EDR, cross-reference the medical-mill billing, prepare the examination under oath, or produce a defensible report. That is investigation, and historically only a human SIU could do it. Hesper AI sits downstream of detection and runs the full six-phase investigation autonomously, producing an audit-ready report a human SIU lead reviews. The model is from fraud detection to fraud resolution, and carriers run detection and investigation tools together.

### Which states have the most staged accidents?

Based on 2023 staged-auto claim data cited by Insurance Journal, California recorded the most staged-auto claims at 5,366, followed by New York at 1,729 and Florida at 1,110. Growth is concentrated in the Northeast: staged-auto claims rose 14% year over year in New York and 58% in New Jersey between 2022 and 2023. These are also no-fault and high-litigation markets, which is why organized rings - including the $40 million New York scheme whose leaders were sentenced to 15, 12, and 7 years in prison - cluster there. The concentration reflects where medical-mill and attorney-referral infrastructure can monetize staged injuries most efficiently, not where collisions are most likely by chance.