Employee Sickness Fraud Investigation Explained

A suspected false absence can put an employer in a difficult position. An employee sickness fraud investigation may be justified where concerns are supported by facts, but it must never become a reaction to rumour, frustration or an employee’s medical condition. The objective is straightforward: establish what has happened, obtain reliable evidence where necessary, and make a fair decision that can stand up to scrutiny.

For many organisations, the cost is not limited to sick pay or lost output. Repeated unexplained absence can place pressure on colleagues, affect service delivery and create a sense that policies are not being applied consistently. Equally, a poorly handled investigation can damage trust, expose the business to legal risk and cause real harm to an employee who is genuinely unwell.

When is an employee sickness fraud investigation justified?

Sickness absence is not evidence of misconduct. Employees may be dealing with conditions that are not visible, may require flexible recovery arrangements, or may be able to undertake some activities while being unfit for their normal role. Someone signed off from manual work, for example, may still be capable of attending a family event or taking a short walk. Context matters.

Concerns become more credible when there is a clear and documented pattern. This might include repeated absences immediately before or after declined annual leave, sickness coinciding with another job, conflicting accounts of an injury, or information suggesting the employee is undertaking activities plainly incompatible with the reason given for absence.

The distinction is critical. A pattern identifies a question to investigate. It does not answer it.

Before taking any investigative step, employers should review the absence record, relevant communications, fit notes, return-to-work discussions and the terms of their sickness absence policy. This establishes whether there is a genuine factual basis for concern and helps ensure similar cases have been treated consistently.

Start with fair internal checks

A proportionate process usually begins inside the business. A return-to-work meeting gives the employee an opportunity to explain their absence, raise support needs and clarify any points that do not appear to align with the information held. The discussion should be respectful, private and properly recorded.

Managers should avoid leading questions or accusations. Asking an employee to account for an apparent inconsistency is very different from announcing that they have committed fraud. At this stage, there may be an innocent explanation, a communication error or a health issue that needs occupational health input rather than disciplinary action.

It is also sensible to check whether the employee’s role, working pattern or medical restriction changes the picture. A person may be unable to drive, lift, concentrate for long periods or safely carry out frontline duties, while still having enough capacity for limited personal activity. Treating every public sighting or social media post as proof of dishonesty is a common and costly mistake.

If concerns remain after internal checks, the employer should decide whether further enquiries are necessary and proportionate. That decision should be documented, including why less intrusive measures would not resolve the issue.

What evidence can establish the facts?

The best evidence is objective, relevant and lawfully obtained. It should address the specific concern, not create a broad picture of an employee’s private life. Depending on the circumstances, this may include business records, witness accounts, publicly available material, vehicle movements where a lawful basis exists, or professionally conducted surveillance.

Surveillance is not a routine absence-management tool. It may be appropriate where there is a defined suspicion of deliberate deception, the potential impact on the organisation is significant, and the proposed activity is limited in time and scope. It should be planned around a clear investigative question, such as whether an employee who claims to be unable to work is carrying out physically demanding work elsewhere.

A professional investigator will not speculate, trespass, harass an individual or attempt to obtain information through deception that cannot be justified. Their role is to observe and report facts accurately. Where surveillance is used, contemporaneous notes, time-stamped imagery and clear reporting can provide an evidential record that is far more dependable than hearsay or assumptions.

Social media requires similar care. Content visible to the public may form part of an enquiry, but it should be assessed cautiously. Photographs can be old, captions can be misleading, and a short clip rarely explains a person’s physical capacity over an entire working day. Employers should not ask colleagues to gain access to private accounts or create false profiles to obtain material.

Privacy, data protection and proportionality

An investigation into suspected sickness fraud involves personal data and, in many cases, sensitive health information. Employers must therefore consider their obligations under UK data protection law, their own policies and the employee’s contractual rights. The more intrusive the proposed step, the stronger the justification needs to be.

A clear purpose is essential. The business should identify what information it needs, why it needs it, who will have access to it, and how long it will be retained. Information that is irrelevant to the allegation should not be collected or circulated simply because it has been encountered during an enquiry.

Covert activity demands particular restraint. It is not appropriate because a manager is dissatisfied with an employee’s absence level or wants reassurance. It should be considered only where there is a specific concern, overt methods are unlikely to be effective, and the potential evidence is material to a legitimate business issue. Employers should seek appropriate HR and legal guidance for their individual circumstances, particularly where disability, pregnancy, mental health or long-term illness may be involved.

The same principle applies to disclosure. Investigation material should be handled confidentially and shared only with those who genuinely need it to make or advise on a decision. Casual discussion of a suspected case can cause reputational damage long before any finding has been made.

Employee sickness fraud investigation: avoiding weak cases

Cases often unravel because the employer has treated suspicion as certainty. The most defensible investigations are controlled, specific and fair from the outset. They do not rely on a single photograph, a colleague’s personal grievance or a manager’s belief about what someone with a particular condition should be able to do.

There are several recurring errors. The first is failing to distinguish between sickness absence and incapacity for every activity. The second is allowing an investigation to expand beyond its original purpose. The third is moving straight to discipline without giving the employee a proper opportunity to respond to the evidence.

A fair disciplinary process should disclose the substance of the allegation and the evidence relied upon, subject to any legitimate confidentiality considerations. The employee should have a chance to provide their explanation, supporting information and, where appropriate, medical evidence. Decision-makers should remain open to the possibility that the evidence supports a conclusion other than dishonesty.

The outcome will depend on the facts. In some cases, further support, an occupational health referral or an adjusted return to work will be the right response. In others, the evidence may demonstrate serious misconduct. A well-run process allows the employer to take either route with confidence because the decision is based on evidence rather than instinct.

When independent investigators add value

Independent support can be useful where allegations are sensitive, internal relationships are strained, or management needs an impartial account of events. It can also reduce the risk of poorly planned surveillance or evidence gathering that later becomes difficult to rely upon.

The Lancer Group conducts discreet, evidence-led enquiries for employers who need to establish the facts surrounding suspected absenteeism. Experienced investigators plan each assignment around the allegation, the available intelligence and the need for lawful, proportionate activity. The aim is not to justify a pre-decided outcome. It is to provide a clear factual record that helps the client decide what to do next.

For urgent cases, timing can matter. An employee may only be suspected of undertaking outside work on particular days, at a particular location or during a limited period of absence. Early, controlled action can preserve the opportunity to gather relevant evidence while avoiding unnecessary intrusion.

A sickness fraud concern should be handled with discipline rather than drama. Record the facts, test the explanation, protect the employee’s privacy and only investigate as far as the evidence genuinely requires. That approach gives a genuine employee the fairness they deserve and gives an employer a sound basis to act where misconduct is proven.