Sickness absence fraud — the practice of claiming sick pay or sick leave for periods when an employee is not genuinely ill — is one of the most widespread and least confronted categories of employee dishonesty. It is widespread because the opportunity is ever-present: anyone with an employment contract has access to sick leave. It is least confronted because many managers find the subject uncomfortable to raise, because the medical certificate system creates an appearance of legitimacy that discourages scrutiny, and because the individual cost of any single period of absence is usually modest enough not to trigger a proportionate response.
In my experience, the cost is not modest when it is viewed cumulatively, and it is not limited to the direct cost of sick pay. The operational disruption of a team member’s repeated absence, the cumulative cost of cover arrangements, the impact on colleagues who manage the additional workload, and the cultural signal sent to the wider team when fraudulent absence goes unaddressed are each significant in their own right.
This article sets out what sickness absence fraud looks like in practice, the warning signs that distinguish it from genuine illness, and what employers should consider before launching an investigation.
What Is Sickness Absence Fraud?
Sickness absence fraud occurs when an employee reports sick and claims sick pay or sick leave for a period during which they are not genuinely incapacitated by illness or injury. It ranges from the relatively minor — taking a day off when hungover and describing it as illness — to the seriously dishonest: extended periods of absence claimed against a medical certificate while the employee works elsewhere, undertakes physical activities incompatible with the reported condition, or is simply functioning normally.
The legal characterisation of sickness absence fraud matters. An employee who obtains sick pay by falsely representing that they are unable to work may be guilty of obtaining a financial benefit by deception, which is a criminal offence. In employment terms, a deliberate misrepresentation about health status to obtain sick pay is likely to constitute gross misconduct, justifying summary dismissal where the investigation has produced sufficient evidence. Employers who fail to investigate credible concerns about sickness fraud not only absorb the direct cost of the fraud — they expose themselves to the argument, if challenged, that the conduct was tolerated.
How Common Is Sick Leave Abuse?
Reliable data on the prevalence of sickness absence fraud is difficult to obtain because the conduct is, by definition, misrepresented in the records that track it. Industry estimates vary, but surveys of employers consistently suggest that a significant minority of absences — estimates typically range between 15% and 30% of sick days — are not attributable to genuine medical incapacity. Research by employment organisations suggests that a substantial proportion of employees have at some point taken sick leave when they were not genuinely ill.
What is clear from the investigation cases we handle is that sickness absence fraud is not a rare fringe behaviour. It is a category of conduct that occurs in organisations of every size and sector, that it is most likely to occur where absence is managed inconsistently or where the culture has signalled that scrutiny is unlikely, and that individual instances are almost always part of a longer pattern rather than isolated events.
Warning Signs of Fraudulent Absence
Frequent Monday or Friday Absences
The pattern of absence that is most reliably associated with fraudulent sick leave is the Friday and Monday cluster: absences that extend weekends, that create three or four-day breaks from work without formally using holiday entitlement. This pattern appears in the Bradford Factor analysis of virtually every case we have investigated involving suspected short-term absence fraud.
It is important to note that this pattern does not prove fraud. Some medical conditions — migraines, certain musculoskeletal complaints, mental health conditions — are genuinely more likely to affect an employee at certain points in the week. What the pattern does is provide a starting point for closer attention: when it is combined with other indicators, it becomes more significant.
Repeated Absence Around Holidays
Absences that occur immediately before or after annual leave periods, bank holidays, or significant personal events — family celebrations, sporting events, travel that the employee is known to have planned — are a consistent indicator in sickness fraud cases. The pattern suggests that the absence is being used to extend a period of unavailability rather than because the employee is genuinely ill.
The combination of a public holiday and a sick day on the adjoining working day is one of the most common patterns in the cases we are asked to investigate. An employee who takes this extension more than once or twice in a year, particularly if the pattern coincides with other indicators, has created a concern that warrants management attention.
Inconsistent Medical Explanations
Where employees self-certify absence (for periods up to seven days in England and Wales), the explanation given to the employer is the employee’s own description of their condition. Where that description is vague, changes between absences, or is inconsistent with the employee’s behaviour observed before or after the absence period, it is a relevant indicator.
Longer absences that are covered by a fit note from a GP raise a different set of questions. A GP who issues a fit note does so on the basis of the patient’s self-reported symptoms. The note is not a clinical certification of incapacity — it is a professional opinion based on what the patient has described. Where there is credible reason to doubt the accuracy of what the patient has told their GP, the fit note does not close the investigation question; it provides a clinical description that can be tested against the employee’s actual activities during the absence period.
Social Media Activity
Social media has become one of the most productive sources of evidence in sickness absence investigations, and one that employees routinely fail to account for when planning fraudulent absence. An employee who is absent from work claiming inability to perform their duties, and who simultaneously posts photographs or updates that demonstrate physical activity, travel, socialising, or work for another employer, has created direct evidence that is inconsistent with their reported absence.
The approach to social media evidence in sickness investigations requires care: gathering only publicly available information, ensuring the evidence is properly documented and preserved, and understanding how it will be presented in a disciplinary process. These points are addressed in more detail in the articles on social media evidence and legal considerations in this series.
When Should Employers Investigate?
The threshold for investigation is not certainty of fraud. It is a credible concern, based on observable indicators, that the absence may not be genuine. An employer who waits for certainty before investigating will wait until the evidence has deteriorated and the employment relationship has reached a point where resolution is more difficult.
The practical test is this: taken together, do the indicators create a reasonable basis for believing that the absence may be fraudulent? If yes, an investigation is appropriate. The investigation may confirm the concern, in which case a disciplinary process follows. It may refute it, in which case the matter is closed. It may be inconclusive, in which case closer management of future absences is warranted. None of these outcomes is worse than allowing a suspected fraud to continue uninvestigated.
Legal Considerations
Before instructing any investigation, employers should understand the legal framework within which it must operate. The key requirements are: any investigation must have a legitimate purpose proportionate to the intrusion involved; personal data gathered must be processed in compliance with UK GDPR; any covert surveillance must comply with the Investigatory Powers Act 2016 and the Information Commissioner’s guidance on workplace monitoring; and the investigation must be conducted fairly, with the employee given a reasonable opportunity to respond to any findings before disciplinary action is taken.
An investigation that gathers evidence improperly may produce findings that cannot be used in disciplinary proceedings, or that expose the employer to a data protection claim. Using a professional investigation service that understands these requirements is the most reliable way to ensure that the investigation is conducted correctly and that its findings are legally usable.
Professional Investigation Options
Professional investigators add value in sickness absence cases in several distinct ways. Covert surveillance by a trained investigator can establish, with video evidence, what an employee is actually doing during their reported absence — whether they are physically capable of activities incompatible with their reported condition, whether they are working elsewhere, or whether they are engaged in activities that contradict their medical explanation. Social media investigation can identify and preserve publicly available evidence in a form suitable for disciplinary proceedings. Corporate and financial intelligence can establish whether an employee is working elsewhere or operating a business during their absence.
The value of professional investigation is not just the evidence it produces. It is the reliability of that evidence in a disciplinary or tribunal context. Evidence gathered by trained investigators, within the legal framework, using documented methodology, is substantially more robust than evidence gathered informally by managers or through colleagues’ observation.
Concerned about sickness absence fraud? Contact iSpy Detectives for confidential employee sickness investigations.