The Ghost on the Payroll: How Fictitious Employer Schemes Drain Public Programs

Malcolm Jeffrey's company had no employees—but it collected $16 million in unemployment benefits on their behalf.

Jeffrey registered a business called Down N Dirty Transportation LLC with the Georgia Department of Labor. The company owned no trucks and employed no drivers. Instead, Jeffrey used stolen identities to create fictitious employees, submitted fabricated wage records, and filed thousands of fraudulent unemployment insurance (UI) claims. Benefit payments were directed to prepaid debit cards controlled by Jeffrey and his co-conspirators. His operation ultimately stole more than $16 million and was part of a broader criminal enterprise responsible for more than $45 million in fraudulent claims across more than twenty state unemployment programs.

Unfortunately, Jeffrey's scheme was not unique. While identity theft dominated headlines during the pandemic, organized fraud rings have increasingly evolved toward "two-sided" fraud schemes in which both the employer and the employee are fabricated. These schemes expose a structural weakness in the unemployment insurance system—one that continues to threaten state trust funds today.

How the Scheme Works 

A fictitious employer scheme is a carefully structured fraud operation designed to manufacture eligibility for unemployment benefits.

The process begins with the creation of a business that appears legitimate on paper. In many states, registering an employer account requires little more than an Employer Identification Number (EIN), a business name, and an address. An EIN itself can be obtained online from the IRS in minutes. Once an employer account is established, the fraudster submits fabricated wage records for individuals who never worked for the company.

Those "employees" are often victims of identity theft, deceased individuals, incarcerated persons, or identities purchased from data breaches.

Because unemployment benefits are calculated from reported wages, the fabricated payroll records establish both eligibility and the amount of benefits that will later be paid. Once the wage history is accepted, fraudulent claims are submitted and payments are routed to bank accounts or prepaid debit cards controlled by the criminal organization.

Sophisticated fraud rings rarely stop with a single state. They often repeat the process simultaneously across multiple jurisdictions, taking advantage of the fact that unemployment systems are administered independently and historically have shared limited investigative intelligence.

The Scale of the Problem 

The COVID-19 pandemic exposed vulnerabilities that had existed for years.

Congress authorized approximately $878 billion in pandemic-era unemployment benefits, creating an unprecedented opportunity for organized fraud. The Government Accountability Office estimates that between $100 billion and $135 billion may have been lost to fraud during this period.

The Department of Labor's Office of Inspector General separately identified nearly $47 billion in potentially fraudulent unemployment payments made between March 2020 and April 2022 alone. Since April 2020, the Inspector General has secured more than 2,000 indictments, 1,500 convictions, and over $1.1 billion in investigative recoveries related to unemployment fraud. Those recoveries represent only a small portion of total losses.

The overwhelming majority of fraudulent payments were never recovered.

Why These Schemes Continue 

The persistence of fictitious employer fraud is not primarily a technology problem—it is a structural one.

Unemployment insurance systems were designed to administer benefits efficiently for legitimate workers, not to defend against organized criminal enterprises using automation, stolen identities, and coordinated multi-state operations.

Two gaps are particularly significant.

The first is pre-payment verification. Fictitious employer schemes depend on newly registered employers being accepted without meaningful legitimacy checks and on fraudulent wage records being incorporated into benefit determinations before anyone verifies the employer or employee.

The second is information sharing. Organized fraud rings intentionally operate across multiple states because they understand that each state has historically investigated fraud independently.

Important progress has been made. The National Association of State Workforce Agencies' Integrity Data Hub has prevented billions of dollars in improper payments by enabling participating states to exchange fraud intelligence. More recently, the Employer Data Module allows agencies to identify previously known fictitious employers, suspicious financial routing information, and other fraud indicators during the employer registration process.

These initiatives represent meaningful advances, but their effectiveness depends on broad participation and continued expansion of shared intelligence.

Closing the Gap 

Preventing fictitious employer fraud requires intervention before benefits are paid—not months later during an audit or criminal investigation.

That means evaluating the legitimacy of newly registered employers before wage records are accepted. It also means identifying claims associated with deceased individuals, incarcerated persons, and other high-risk identities before payments leave the trust fund.

The necessary data already exists. The challenge is bringing together business registrations, ownership information, public records, sanctions, legal filings, addresses, and relationship intelligence quickly enough to support real-time decisions.

Every fraudulent payment weakens state unemployment insurance trust funds, increases administrative costs, and ultimately shifts the financial burden to employers and taxpayers.

Looking Beyond Identity Verification 

For years, unemployment fraud prevention focused primarily on verifying claimants' identities. While that remains essential, fictitious employer schemes demonstrate that identity verification alone is no longer sufficient.

Stopping these schemes requires verifying both sides of the employment relationship. Agencies need the ability to determine whether an employer is legitimate before fabricated wage records become the foundation for fraudulent claims.

That requires more than checking names against exclusion lists. It requires connecting ownership records, business registrations, addresses, litigation, sanctions, public records, and organizational relationships to produce a complete picture of employer legitimacy.

As organized fraud continues to evolve, so too must the tools used to protect public programs. The states that combine strong interagency collaboration with modern employer intelligence will be best positioned to stop fictitious employer schemes before public dollars are lost.