Information verification

Verify key information from requests or claims with an independent and credible source.

This control targets both internal and external fraud risks.

Examples

Examples of this control include: 

  • cross-referencing the provider number with provider register(s)
  • verifying claim eligibility by cross-referencing details held by another programme or organisation
  • requesting original or certified documents instead of photocopies or screenshots
  • obtaining corresponding evidence from both a client and provider
  • verifying academic and professional qualifications with the education provider
  • confirming business details.

Risks from control gap 

Not verifying the information that you receive can lead to: 

  • fraudsters providing false information or evidence to support a request or claim
  • fraudsters hiding information that would affect their entitlements
  • fraudsters successfully using forged documents to support a request or claim
  • difficulties in responding to fraud.

Assessing effectiveness

Methods to evaluate the effectiveness of this control include:

  • confirming that reference and guidance materials regarding information verification processes are easy to understand
  • confirming that information is verified by reviewing a sample of completed requests or claims
  • confirming that processes cannot be circumvented by doing pressure testing or a process walkthrough
  • reviewing procedures and guidance to confirm they clearly specify the requirements for verifying information
  • confirming that employees have a consistent and correct understanding of how to verify information
  • confirming that verification requirements are clearly communicated to employees, customers and third parties
  • confirming that employees cannot bypass or manipulate the verification requirements, even when pressure or coercion is applied
  • confirming that employees receive training about how to verify information.

Complementary controls

Other capability, prevention, detection and response controls that can enhance this control’s effectiveness:

Related fraudster personas

Types of behaviour this control is designed to mitigate:

The deceiver

The fabricator

The impersonator

The organised

Download the complete fraud control catalogue

Explore a range of controls that can be put in place to reduce the risk of fraud happening in your organisation.

Download PDF