8 Mortgage Fraud Red Flags MLOs Must Know

A mortgage fraud red flag can involve manipulated valuations, false borrower information, concealed liabilities or funds, occupancy misrepresentation, rapid resale patterns, or improper referral incentives. In Q2 2025, fraud risk appeared in 0.86% of mortgage applications, about 1 in 116, so MLOs should pause, document, verify independently, and escalate rather than accuse a borrower.

You’re reviewing a file that looks orderly. The application is signed, the pay stubs appear consistent, the bank statements are uploaded, and the appraisal supports the requested loan amount. Then one detail breaks the rhythm. The borrower’s employment story doesn’t align with the deposits, the property value seems unusually high, or a referral partner is pushing you to use a particular service provider.

That’s where mortgage fraud red flags matter. A red flag is an indicator that requires documented verification, not automatic proof of wrongdoing. FinCEN identifies warning signs including invalid documents, incomplete files, unlicensed agents, repeated debt-elimination packages prepared by the same notary, and borrowers who refuse to provide additional information. FinCEN-reported mortgage loan fraud suspicious activity reports increased 1,411% between 1997 and 2005, demonstrating how quickly fraud became a major compliance concern in housing finance. FinCEN’s mortgage loan fraud advisory provides the underlying guidance.

Your role is practical and important. Protect the borrower, lender, license, and professional reputation by identifying the inconsistency, comparing independent records, asking neutral questions, preserving the file, and escalating through company procedures. A due-diligence process such as PartnerScanX’s investigation resource can also support broader third-party review.

NMLS-approved online education and exam preparation, including the program offered by 24hourEDU, can help future MLOs build foundational knowledge without treating compliance as an afterthought.

1. Inflated Property Appraisals

An appraisal becomes a concern when the value appears designed to make the transaction work rather than reflect the property’s actual market position. A prior sale at $200,000 followed by a $280,000 appraisal only six months later, with no documented improvements, deserves careful review. The same applies when an appraisal lands at precisely the value needed to avoid a larger down payment or when several properties in a declining area show unusual appreciation.

That pattern doesn’t prove collusion. It does create a valuation question that an MLO shouldn’t dismiss because the number supports the borrower’s desired loan structure. The lender needs a credible opinion of value, supported by appropriate comparables, property condition, and methodology.

What to verify in the report

Start with the appraisal itself, not a borrower-provided valuation or informal estimate. Review the selected comparables, adjustments, location differences, property condition, and explanation for any unusual appreciation. The property appraisal process provides useful context for understanding how valuation information should be developed and reviewed.

Check recent comparable sales and whether the market supports the reported increase. A comparable from a different neighborhood or a stale sale may not support the conclusion. Also review whether the appraiser has relied on a narrow selection of favorable properties while ignoring more relevant sales.

Practical rule: A value that solves the financing problem still needs to make sense independently of the financing problem.

How to document and escalate

Record the specific discrepancy, the documents reviewed, questions sent to underwriting or the appraiser, and the responses received. Don’t pressure an appraiser to reach a target value, and don’t rewrite concerns into vague notes such as “value reviewed.” If the methodology remains unsupported, follow the lender’s reconsideration, quality-control, and fraud-escalation procedures.

2. Falsified Income Documentation

Income documentation should tell one coherent story across the application, pay records, tax information, employment verification, and bank activity. A borrower who reports $8,000 in monthly salary but shows only $3,000 in monthly employment deposits has created a material inconsistency. It may reflect a timing issue, multiple accounts, or an error, but the file needs an explanation supported by records.

Self-employed applicants require the same discipline. Tax returns showing business income are harder to rely on when the business license and EIN registration cannot be verified. A recent graduate claiming three years with an employer that has no record of hiring them also needs independent confirmation.

Compare the story across documents

Request original or securely transmitted documents when company policy permits. Examine names, dates, employer details, formatting, account information, and unexplained alterations. A polished document isn’t necessarily a reliable document, and a plain-looking document isn’t necessarily fraudulent.

Use approved tax transcript and third-party employment verification processes. Compare stated income with deposits over the review period, and contact the employer through independently sourced contact information rather than relying only on a phone number supplied by the borrower.

• Verify the employer: Confirm the company through public business records, official websites, or approved verification providers.
• Reconcile deposits: Identify whether deposits match payroll, business revenue, transfers, or another source.
• Clarify transitions: Document employment gaps, recent changes, bonuses, commissions, and overlapping jobs.
• Preserve the evidence: Keep verification results and borrower explanations in the loan file.

Ask neutral questions

Avoid language that assumes deception. Ask, “Can you help me reconcile the income shown on the application with the deposits in these statements?” Then document the answer and request support for each material point.

If the employer cannot be verified, documents conflict, or the explanation changes, stop relying on the questionable information and escalate. Training in document review through an NMLS-approved program can strengthen an MLO’s ability to spot inconsistencies, but the file still needs independent verification and a clear audit trail.

3. Undisclosed Liabilities and Debts

A borrower’s repayment capacity can look materially stronger when debts, judgments, support obligations, or other liabilities are omitted. The MLO’s task isn’t to treat every incomplete application as intentional fraud. It’s to reconcile the borrower’s answers with the credit file, statements, and required verification sources.

For example, an applicant may state a debt-to-income ratio of 28%, while the credit report reveals three credit cards with $45,000 in balances that the borrower didn’t mention. Another applicant may report no outstanding loans even though the credit report shows an active auto loan with a $22,000 balance. A family-court obligation of $1,200 per month also affects repayment analysis when it applies to the borrower.

Reconcile every obligation

Begin with the credit report and compare every account to the application. Review open accounts, recent inquiries, collections, judgments, liens, and payment obligations. Request written explanations where required, especially when a borrower says an account is closed, paid, disputed, or unrelated.

Manual verification can be appropriate for large or unclear debts. Request current creditor statements and other permitted records rather than accepting a verbal explanation alone. Recalculate the relevant ratios using verified income and verified obligations.

Open-ended questions often work better than yes-or-no prompts. Ask the borrower to describe all monthly debt payments, financial commitments, and obligations they’re currently making. This approach may surface debts that a borrower didn’t understand needed to be listed.

A discrepancy is not a verdict. It’s a reason to replace assumptions with records.

If the borrower refuses reasonable documentation, provides inconsistent explanations, or the verified liabilities materially change eligibility, document the issue and escalate under the lender’s procedures. MLO education that includes fraud detection and ethics can help professionals understand the importance of thorough reconciliation.

For broader identity-risk context, teams can also review guidance on how to protect against identity theft in Australia, while applying U.S. lending requirements and company policy to the loan file.

4. Suspicious Cash Gifts and Down Payment Sourcing

A last-minute wire from a family friend, deposits spread across several accounts, or a gift letter that conflicts with donor records can create a source-of-funds concern. An MLO should review the evidence in the file rather than judge the funds by appearance.

Down payment and closing-cost funds need a lawful, documentable origin. Legitimate family assistance may be permitted when the program allows it and the file supports the donor’s identity, relationship, ownership of the funds, transfer, availability, and lack of repayment expectations. Risk increases when the donor cannot show control of the money, the funds were borrowed, or the transaction trail is incomplete.

Trace the funds from origin to closing

Start with the borrower’s account statements. Identify material deposits, transfers, and rapid movement between accounts, then trace each amount to its originating account through permitted bank records. Donor tracing and recordkeeping also support source of funds verification for disputes, particularly when the parties later describe the transfer differently.

A gift letter should match the actual arrangement. If donor records suggest repayment, or if the transfer passes through an unrelated third party, request a clear explanation and supporting documentation. The pattern may have an innocent explanation, but the borrower and donor should provide consistent accounts.

• Confirm the donor: Verify identity and relationship with approved documentation.
• Confirm ownership and availability: Review donor statements and required evidence showing the donor controls the funds.
• Confirm the transfer: Match the donor’s outgoing funds to the borrower’s receipt.
• Confirm the terms: Establish that the gift is not a concealed repayable obligation.
• Document and escalate: Record the discrepancy, requests, responses, and unresolved concerns. Refer the file to compliance under lender procedures instead of waiving documentation to meet closing.

The gift funds for a down payment guide can help future MLOs understand why each document matters. An MLO should not label funds illegal based on an initial appearance, yet unexplained or contradictory sourcing requires resolution before approval or closing.

5. Occupancy Misrepresentation

Occupancy affects underwriting risk and loan terms, so the borrower’s stated intent must align with the surrounding facts. A borrower claiming a Florida property as a primary residence while maintaining employment and a lease in California, with no documented relocation plan, presents a question that requires more than a signed certification.

The same concern can arise when a borrower owns multiple rental properties but claims a new property as a primary residence without a coherent explanation. A property far from the borrower’s employment, children’s school, and current home may be legitimate, but distance and circumstances deserve neutral follow-up.

Test the occupancy story against the file

Ask where the borrower lives now, where they work, where their household is located, and what will change after closing. Request permitted supporting records such as a current lease, mortgage statement, employment verification, or relocation documentation. Review property ownership history and existing rental activity where required by the applicable underwriting process.

FinCEN specifically identifies owner-occupancy claims on properties far from the borrower’s employer or in another home state as potential indicators of misrepresented principal-residence intent. FinCEN’s mortgage loan fraud assessment also emphasizes that isolated anomalies are weak signals, while multiple independent red flags materially increase concern.

Ask the question behind the certification: Where will the borrower actually live, and what evidence supports that answer?

Don’t decide that a borrower is fraudulent because a property is distant or because they own other properties. Instead, document the explanation, compare it with independent records, and escalate when the facts remain inconsistent. Cotality’s reporting identifies investment and multifamily applications as especially high-risk categories. Its Q3 2025 estimate placed indications of fraud at 1 in 45 investment applications and 1 in 26 multifamily applications, compared with 1 in 118 overall. Cotality’s report on risk as prices drop also discusses warnings involving undisclosed property activity and misrepresented occupancy.

6. Property Flipping Schemes and Quick Resales

A rapid resale deserves a timeline review. The concern grows when a property is purchased for $180,000 on January 15, listed for $265,000 on February 1, and appraised at that same higher price without documented improvements. Title transfers through related entities, a large price increase, and a refinance based on newly created equity can point to a coordinated transaction rather than ordinary market movement.

Speed alone isn’t proof of fraud. Legitimate renovations, changing market conditions, or an arm’s-length sale can explain a price change. The MLO should establish which explanation applies by reviewing records, not by relying on the seller’s or borrower’s narrative.

Build the property timeline

Order the required title and ownership history for the relevant review period. Compare prior sale prices, listing history, current contract terms, appraisal details, inspection findings, and documented improvements. Contractor invoices, permits, photographs, and other permitted records should support claims that renovations created value.

Look for relationships among the buyer, seller, agents, appraiser, contractors, and entities holding title. A common address, repeated participants, or connected ownership doesn’t automatically establish wrongdoing, but it can make independent review more important.

The Cotality 2025 annual fraud report estimated that 0.86% of mortgage applications contained fraud risk in Q2 2025, about 1 in 116, up from 0.81% in Q2 2024. The same analysis identified clusters involving income, transaction structure, occupancy, and property signals, including rapid resales within a year. Cotality’s annual fraud report supports treating the timeline as a core part of file review.

If the value increase remains unsupported, document each missing link and escalate. Don’t alter the file, conceal an adverse document, or encourage a participant to produce evidence after the fact.

7. Employment Fraud and Job History Misrepresentation

Employment verification fails when the MLO relies on contact information supplied only by the borrower. A claimed senior executive position at a company with no verifiable business presence, a verification request answered through a personal cell phone by someone unfamiliar with the employer, or a self-employed income claim that conflicts with tax returns all require a closer look.

A recent graduate may accidentally overstate prior experience, while an organized actor may fabricate an employer or job title. The MLO shouldn’t determine intent from the first inconsistency. The professional obligation is to verify employment through reliable channels and document what was learned.

Use independent employment sources

Start with an approved third-party verification service when available. If direct contact is necessary, use a publicly listed number from the employer’s official website, business registration, or licensing record. Compare the result with pay stubs, W-2 forms, tax returns, stated job duties, start dates, and compensation.

For self-employed applicants, verify the business through appropriate Secretary of State records, licensing databases, and other approved sources. Business income should reconcile with tax documentation and the underwriting method being used.

A focused conversation can reveal whether the applicant understands the role they reported. Ask about department structure, supervisor, work location, responsibilities, and recent job changes. Then record the response without editorial language.

• Confirm the entity: Verify that the employer or business exists.
• Confirm the role: Match title, duties, status, and tenure.
• Confirm compensation: Reconcile stated income with permitted records.
• Confirm continuity: Explain gaps, transitions, and overlapping employment.
• Confirm the contact: Ensure the verifier is connected to the employer.

When records still conflict, pause the underwriting path that depends on the disputed employment and escalate through the designated channel. Strong training helps, but independent verification protects the file.

8. Kickback Schemes and Steering Practices

A referral relationship can become a fraud concern when money or personal benefits influence who receives the borrower’s business. Examples include an appraisal company offering a $500 gift card to a loan officer for each referral, a title company offering a $1,000 closing-cost rebate tied to referrals from a branch, or a contractor paying a loan officer for steering borrowers to a particular inspection or repair service.

These incentives distort judgment. They can also conceal poor service, inflated charges, or coordinated activity elsewhere in the transaction. The borrower may believe a provider was recommended because of quality when the actual reason was compensation.

Separate referrals from compensation

Maintain transparent, compliant referral practices. Select qualified providers based on legitimate service considerations, not gifts, cash, rebates, or other personal benefits. Affiliated business arrangements require the disclosures and procedures applicable to the relationship, and a disclosure doesn’t make an otherwise prohibited payment acceptable.

RESPA Section 8 compliance should be part of daily practice, not a topic reserved for annual training. Don’t accept a benefit because someone calls it a marketing contribution, thank-you gift, or customary referral payment. Ask what the payment is for, who receives it, and whether the arrangement has been reviewed by compliance.

Escalate the relationship, not just the payment

Preserve emails, agreements, invoices, gift offers, and referral records. Report suspected kickbacks to compliance or legal personnel using the company’s process. Don’t confront a suspected participant in a way that could compromise an investigation, and don’t promise the borrower absolute confidentiality if the company has reporting obligations.

Fannie Mae’s appraisal identity-theft guidance identifies suspicious appraisal files that may omit the licensed appraiser’s name, show mismatched contact information, contain forged or cut-and-pasted signatures, or route appraisal fees to an unlicensed appraiser’s mailing address. Fannie Mae’s appraiser identity-theft guidance shows why referral and provider review should include the people behind the documents, not just the document format.

8-Point Mortgage Fraud Red Flags Comparison

Red flag	🔄 Complexity (process)	⚡ Resources & speed (efficiency)	📊 Expected outcomes (impact)	💡 Ideal use cases (when to prioritize)	⭐ Key advantages (effectiveness)
Inflated Property Appraisals	Medium, requires appraisal review & comps	Moderate, MLS/historical data, independent appraisal; moderate time	Prevents over‑lending and collateral shortfalls	High‑value loans, rapid market appreciation areas	⭐⭐⭐, protects lender collateral and reputation
Falsified Income Documentation	High, forgeries can be sophisticated	High, VOE, IRS transcripts, forensic review; time‑consuming	Ensures true borrower ability to repay	Self‑employed borrowers, sudden income jumps	⭐⭐⭐⭐, critical to avoid approval of unqualified borrowers
Undisclosed Liabilities & Debts	Medium, reconciling credit reports and disclosures	Moderate, tri‑merge reports, manual reconciliation; timely	Accurate DTI, reduced hidden default risk	Applicants with sparse disclosures or recent inquiries	⭐⭐⭐, exposes hidden obligations that affect underwriting
Suspicious Cash Gifts & Down Payment Sourcing	High, AML considerations and tracebacks	High, donor statements, notarized gift letters, bank tracing; slow	Verifies legitimate funds and AML compliance	Large last‑minute deposits, multiple small transfers	⭐⭐⭐, prevents money‑laundering exposure and improper funding
Occupancy Misrepresentation	Low–Medium, interview + public record checks	Low, lease/mortgage statements, public records; relatively quick	Correct loan pricing and risk classification	Multiple properties, relocation claims, unusual commute	⭐⭐, ensures correct product use and pricing
Property Flipping Schemes & Quick Resales	Medium, title/MLS history and appraisal correlation	Moderate, title search, MLS, inspection docs; moderate time	Detects manufactured equity and collusion	Properties resold within 30–90 days or rapid price jumps	⭐⭐⭐, prevents loans based on fabricated appreciation
Employment Fraud & Job History Misrepresentation	High, employer verification & background checks	High, VOE services, tax returns, business registration; time‑intensive	Accurate income validation and loan sizing	Claimed high incomes, unverifiable employers, gaps	⭐⭐⭐⭐, vital to avoid approvals on false income claims
Kickback Schemes & Steering Practices	Medium, requires audit of referrals & payments	Moderate, fee disclosures, audits, compliance reporting	Regulatory compliance; avoids fines and criminal risk	Unusual referral fees, repeated vendor favoritism	⭐⭐⭐⭐, protects license, avoids penalties, preserves integrity

Protect the File, the Borrower, and Your License

Good fraud prevention starts with a controlled pause. Stop relying on the questionable information, compare it with independent records, ask neutral follow-up questions, record the discrepancy and explanation, and route the issue through the lender’s compliance or fraud-investigation channel. That workflow protects the borrower from an unsuitable transaction and gives the lender a defensible record of what the MLO did after noticing a concern.

The response should be factual. Don’t accuse a borrower because one document looks unusual, and don’t promise confidentiality beyond what your employer’s procedures and applicable reporting requirements allow. Don’t alter, remove, backdate, or conceal documents. Preserve the original record, identify the source of each clarification, and make sure the next reviewer can understand the sequence without relying on your memory.

Multiple signals deserve more attention than one isolated defect. FinCEN and Fannie Mae guidance emphasize that a single anomaly may be weak, while recurring documentation inconsistencies, repeated participants, distant occupancy claims, or several connected property and income concerns can materially change the risk assessment. Cotality’s broader estimates show why this discipline matters. Its 2022 estimate found indications of fraud in 0.76% of U.S. mortgage applications, roughly 1 in 131, with higher risk in investment purchases at 1 in 57 and two- to four-unit properties at 1 in 34. Cotality’s mortgage fraud risk update provides those figures and identifies misrepresented income, assets, debts, occupancy, and property use as recurring fraud types.

Ethical verification is a career advantage for Mortgage Loan Originators, Mortgage Brokers, and Mortgage Loan Officers. It helps professionals serve borrowers fairly, communicate clearly with underwriting, and protect the license they worked to obtain. It also makes the job more sustainable because a well-documented decision is easier to defend than a rushed file moved forward on instinct.

For candidates preparing to enter the profession, 24hourEDU offers online NMLS-approved education through Provider ID 1405107, including a 20-hour SAFE course, online instructor-led video lessons, an e-textbook, a bonus state law module, and a free exam preparation package. The platform also provides support and complimentary NMLS hours reporting, helping make licensing preparation straightforward for career changers and busy professionals who want an online path into mortgage lending. The course includes fraud detection and ethics content, which gives new MLOs a useful foundation for the verification habits that continue after licensing.

---

24hourEDU offers NMLS-approved online MLO pre-licensing education, a free exam preparation package, support, and fraud detection and ethics training relevant to reviewing mortgage fraud red flags. Visit 24hourEDU to explore the course and start building a compliance-focused path toward your Mortgage Loan Originator license.