Government benefits fraud
Pay the claimant. Not the identity thief.
Benefit fraud rings file with stolen identities and the identities of people who have died, and redirect genuine claimants' payments to accounts they control. Omnareth checks every claim and payment change against the case before money moves, and recognizes the account, device or address behind a ring across cases.
| # | Event | Decision |
|---|---|---|
| 1 | Genuine weekly claim, paid to the verified account | ALLOW |
| 2 | A claim under a stolen identity, paid to the ring's account | DENY IDENTITY_NOT_VERIFIED |
| 3 | A claim in the name of a deceased person, same device and account ▲ Repeat offenders; three identities watched |
DENY CLAIMANT_DECEASED · ACCOUNT_NOT_VERIFIED |
| 4 | A genuine claimant's payments redirected to the ring's account ▲ One account across three cases: case opened |
DENY PAYMENT_CHANGE_UNVERIFIED · WATCHLIST_MATCH · REPEAT_OFFENDER · CASE_HOPPING |
| 5 | A week claimed twice | DENY DUPLICATE_WEEK |
| 6 | A genuine claim filed while travelling abroad | FLAG FOREIGN_FILING |
| – | Analyst confirms the account case ▲ Account blocked everywhere |
analyst · state |
| 7 | After a caseworker marks its account verified, the ring claims again | DENY WATCHLIST_BLOCK · REPEAT_OFFENDER · CASE_HOPPING |
| 8 | Genuine weekly claim | ALLOW |
How it fits
A check before money moves
Public benefit programs pay at scale, and organized rings target them with stolen identities. Each claim looks like one more applicant; the ring only shows across cases. Your system sends each request to Omnareth and acts only on what it allows.
The benefit case
Status, weekly benefit, weeks paid and verified payment accounts.
Claims and account changes
A claim needs a verified, living claimant, a verified account and an unpaid week; an account change needs re-verification.
One account, many cases
The ring's account, device and address are held responsible, never the people whose identities were stolen.
Reference rules
14 rules, ready to adapt
Authorization checks fail closed, and every rule names who it holds responsible when it fires.
| Threat | What Omnareth checks | Rule code | Decision |
|---|---|---|---|
| Payment to Unverified Account | Benefits are paid only to accounts verified for the claimant. | ACCOUNT_NOT_VERIFIED | DENY |
| Case Not Active | Benefits are paid only on active cases. | CASE_NOT_ACTIVE | DENY |
| Claimant Deceased | No benefits are paid for a person whose identity matches a death record. | CLAIMANT_DECEASED | DENY |
| Week Already Paid | Each week is paid once. | DUPLICATE_WEEK | DENY |
| Filed From Abroad | Flag claims filed from outside the country. | FOREIGN_FILING | FLAG |
| Identity Not Verified | A claim is paid only after the claimant's identity is verified. | IDENTITY_NOT_VERIFIED | DENY |
| Over Weekly Benefit | A weekly claim may not exceed the case's weekly benefit. | OVER_WEEKLY_BENEFIT | DENY |
| Employer Reports Still Employed | Flag a claim when the employer reports the claimant is still employed. | EMPLOYMENT_CONFLICT | FLAG |
| Payment Account Change Unverified | A change of payment account takes effect only after the claimant is verified again. | PAYMENT_CHANGE_UNVERIFIED | DENY |
| Account or Device Across Cases | Flag an account, device or address implicated in denials on 2+ other cases in 24 hours. | CASE_HOPPING | FLAG |
| Identity on Several Cases | A national ID on another case may be stolen or claimed twice. | IDENTITY_REUSE | FLAG |
| Repeat Offender | Flag events involving an identity implicated in two or more denied events in the last 30 days. | REPEAT_OFFENDER | FLAG |
| Blocked Identity | Identities blocked on the fraud watchlist may not take part in any benefit case event. | WATCHLIST_BLOCK | DENY |
| Watched Identity | Identities under watch may proceed only with a flag for review. | WATCHLIST_MATCH | FLAG |
The insider case
Marked verified. Still not paid.
After the analyst confirms the case, a caseworker marks the ring's account as verified on a case. The next claim passes every case check. Omnareth refuses it on the watchlist, and the audit record shows the block it acted on.
Victims are not suspects
Only the identities a rule implicates are held responsible. Genuine customers named in a fraud attempt are never counted against.
Policy as rules
Your checks run on every request, with the reason and a remediation step recorded.
For auditors and regulators
Every refused request is sealed with what was known at the time, and verifiable later.
Adapt the model
The BenefitCase model, its rules and its fraud identifiers are plain JSON you can change.
Pilot program
Put government benefits fraud prevention to work in 90 days
One lane, facility or process, in shadow mode, with results measured against criteria we agree with you. Qualified companies and organizations can apply.