BeerCon2 - Day 2

### Overview In this talk presented at BeerCon2, speaker Gerard discusses his background transitioning from a chemistry degree into customer service and ultimately financial crime investigation at a large UK insurance company. Focusing specifically on application fraud rather than staged accidents, Gerard examines how stolen personal data from corporate data breaches is operationalized by organized criminal entities—particularly "ghost brokers"—to perpetrate motor insurance fraud and facilitate broader criminal enterprises.

### Key Topics - **Mechanics of Insurance Fraud Prior to Major Breaches:** Historically, fraudsters relied on crude tactics to keep insurance premiums artificially low. They often registered policies to false rural addresses (such as Aberdeen, Inverness, Cornwall, or Exeter) because rural areas yielded cheaper rates. This allowed criminals to minimize payments on stolen credit cards and avoid triggering banking fraud detection systems. In addition, fraudsters routinely forged No Claims Discount (NCD) or Proof of Bonus (POB) documents—sometimes as crudely as pasting paper over existing paperwork. - **The Rise of Ghost Brokers:** The Insurance Fraud Bureau defines ghost brokers as fraudsters who sell drivers cheap, apparently valid motor insurance deals, but issue policies that are invalid or worthless. These operators aggressively target demographics facing prohibitively high insurance premiums, such as young drivers aged 17–24 (who often face quotes ranging from £900 to nearly £2,000) and vulnerable individuals, including recent immigrants with limited English language proficiency who rely on community figures. - **Adoption of Data Breaches and Identity Theft:** Ghost brokers advertise openly on platforms like Instagram using hashtags such as cheap insurance or convicted driver insurance. While the public release of Companies House director data in 2015 provided an early boost to identity fraud, major corporate data breaches (e.g., Equifax, TalkTalk, British Airways, and an unprotected Facebook server exposing 18 million UK records) flooded dark web markets with low-cost credentials and "fullz" (full identities sold for around $42). Criminals began matching stolen identities to local areas where drivers actually operate, avoiding police suspicion associated with out-of-area registrations. - **Impact on Victims:** Victims experience fraud from multiple angles. Drivers purchasing fake policies end up paying hundreds of pounds to fraudsters, surrender their personal documents, face vehicle confiscation, receive £1,000 fines, and risk accumulating six penalty points (resulting in license revocation for new drivers). Simultaneously, innocent citizens whose identities are stolen are pursued for debt collection on unpaid policy balances or receive unexpected police penalty notices for driving infractions committed by others. - **Connections to Organized Crime:** Stolen identities and fraudulent policies serve as critical logistical cover for organized crime groups. Insured vehicles are used to transport personnel, traffic people, and run "county lines" drug operations between major urban hubs like London and rural areas like Devon and Cornwall, without alerting automatic number plate recognition systems.

### Technical Details - **Reporting Services & Industry Bodies:** Fraud investigations coordinate with the Association of British Insurers (ABI), Action Fraud, the Insurance Fraud Bureau (IFB), and Cifas. - **Fraud Figures:** In 2019, nearly 750,000 application frauds were reported to the ABI, while Action Fraud documented an average victim loss of £769 to ghost brokers. - **Dark Web Economics:** Dark web index data (cited from Privacy Affairs and Cifas's *Rules at the End of the Internet*) highlights how cheap stolen financial and identity data has become, enabling high-volume fraud.

### Takeaways - Cyber data breaches have direct, tangible impacts far beyond initial corporate compromise, driving real-world financial loss, legal penalties, and emotional distress for innocent individuals. - Suspected insurance fraud in the UK can be submitted via the Insurance Fraud Bureau’s Cheatline. - Community awareness campaigns like "Tell Two" are vital for educating friends, family, and vulnerable groups about the dangers of buying unofficial insurance through social media platforms.