Mortgage Fraud Typologies: A Compliance Guide
Reglith Editorial Team · November 2026
Mortgage fraud typologies are the recurring behavioral patterns — not just criminal statutes — that compliance teams use to detect, categorize and investigate mortgage fraud risk. Most schemes fall into two categories: fraud for profit, where insiders and borrowers collude, and fraud for property, where a borrower misrepresents facts to obtain a loan. Mapping schemes to typologies helps a compliance management system target monitoring where risk concentrates.
What are the two main categories of mortgage fraud?
Fraud for profit involves collusion between an industry insider — a loan originator, appraiser, real estate agent, title agent or broker — and a borrower or straw buyer. The goal is to extract cash from the lender, often across multiple transactions, and the same parties may repeat the scheme. Fraud for property involves a borrower acting alone, typically misrepresenting income, employment, assets or occupancy to qualify for a home they intend to live in. The dollar loss per incident tends to be smaller, but the volume can be high.
The two categories map to different risk profiles. Fraud for profit usually shows up in patterns across files — shared addresses, rapid resales, inflated appraisals, common settlement agents — and is best detected through portfolio-level analytics. Fraud for property usually surfaces at the individual file level, through income verification, occupancy checks and discrepancies between the application and supporting documents. Servicers face a different mix than originators, because post-closing schemes often involve payment diversion, loss mitigation misrepresentation or foreclosure rescue.
Typologies are behavioral patterns, not just statutes. A scheme can be a breach of contract, a misrepresentation under state law, a violation of federal lending rules or a criminal offense — the compliance team's job is to recognize the pattern and route it correctly.
What are the four types of mortgage fraud?
The four primary operational typologies track the loan lifecycle:
- Application fraud — misstatements of income, employment, assets, debts or occupancy at the point of origination. This is pre-loan.
- Closing fraud — manipulation of the settlement process: straw buyers, undisclosed second liens, forged payoff letters, inflated settlement charges or altered closing disclosures. This is at-closing.
- Servicing fraud — payment diversion, escrow manipulation, unauthorized account changes or misrepresentation during loss mitigation. This is post-closing.
- Foreclosure fraud — schemes targeting distressed borrowers, including foreclosure rescue scams and illegal property flipping around the foreclosure sale.
These categories overlap. Equity skimming is a servicing-stage scheme that can begin with an application-stage misrepresentation of the borrower's intent. Illegal property flipping involves closing fraud and often application fraud on the end loan.
| Typology | Lifecycle stage | Primary detection point |
|---|---|---|
| Application fraud | Pre-loan | Underwriting and pre-funding QC |
| Closing fraud | At-closing | Settlement and post-closing review |
| Servicing fraud | Post-closing | Payment and escrow monitoring |
| Foreclosure fraud | Default | Loss mitigation and default servicing |
How do common schemes like equity skimming and illegal flipping work?
Equity skimming typically involves a buyer or investor who takes title subject to an existing loan without assuming it, then collects rent from occupants while making little or no mortgage payment. The lender eventually forecloses and the occupants are displaced. In a related variant, unauthorized withdrawals are made from a borrower's escrow or payment account after closing. Red flags include payments that stop shortly after a new owner takes possession, rental income not reflected in the file, and undisclosed title transfers.
Illegal property flipping involves acquiring a property, often at a distressed price, arranging an inflated appraisal or a fraudulent rehabilitation claim, and reselling it quickly to an unsuspecting or complicit buyer using a new loan based on the inflated value. The lender's collateral is worth far less than the loan amount. Red flags include short holding periods, large value jumps between purchases, the same appraiser or broker appearing on both sides, and repairs that cannot be documented.
The common thread is an incentive to extract proceeds rather than to own or repay.
What role do identity theft and occupancy fraud play in mortgage fraud?
Identity theft in mortgage lending takes two main forms: a fraudster uses a real person's identifiers to obtain a loan (application identity theft), or a fraudster uses a forged or stolen identity to transfer title and extract equity (title identity theft). The victim may not learn of the loan until collections or a credit report surfaces it. Detection relies on identity verification at application, authentication at closing and post-closing review of signature and notary records.
Occupancy fraud is the misrepresentation of a property's intended use — most often, a borrower claims a primary residence to obtain a lower rate or more favorable terms while actually intending to rent it out. It can also run the other direction, with a second-home or investment label used to obscure owner-occupancy rules tied to a particular program.
Regulation Z and the TRID disclosure framework (12 CFR 1026) require specific disclosures about the loan and its terms, and the integrated closing disclosure puts the borrower's stated intentions and costs in a documented record. That record is useful evidence in an occupancy review, though whether a specific misstatement rises to fraud depends on facts that may require qualified counsel.
How do mortgage fraud typologies impact compliance management systems?
Typologies feed directly into the risk assessment that drives a Building a Mortgage Compliance Management System (CMS): Policies, Monitoring, Audits, and Regulatory Change. If fraud for profit is concentrated in a particular channel, geography or counterparty, the monitoring plan should reflect that. A CMS that treats fraud as a generic category rather than a set of specific, testable patterns produces monitoring that cannot detect them.
Quality control teams use typology-based checks — file-level tests tied to application, closing, servicing and default patterns — to sample for anomalies that generic checklists miss. Under the SAFE Act and the NMLS licensing framework, individuals and entities in the mortgage business are licensed and tracked; ongoing monitoring includes confirming that licensed parties remain in good standing and that conduct tied to a fraud finding is escalated appropriately.
The broader federal framework applies to many of these activities, and The Complete Guide to Federal Mortgage Compliance Regulations is a useful map of the statutes and rules involved.
What are the regulatory consequences of undetected mortgage fraud?
Undetected fraud can expose an institution to enforcement attention from the Consumer Financial Protection Bureau (CFPB), the Office of the Comptroller of the Currency (OCC) for national banks and federal savings associations, the Federal Reserve and FDIC for other depository institutions, the National Credit Union Administration (NCUA) for credit unions, and state mortgage regulators. The specific exposure depends on charter, licensing and the conduct at issue, so applicability turns on facts and should be confirmed against the rule text and with qualified counsel.
The compliance consequences often flow less from the fraud itself than from how the institution handled it. RESPA and Regulation X (12 CFR 1024) impose servicing and loss mitigation requirements; HMDA and Regulation C (12 CFR 1003) require accurate reporting of loan-level data. If fraudulent loans are reported inaccurately — or if servicing practices around them violate Regulation X — the resulting examinations can be more costly than the original loss.
Documenting fraud detection efforts matters. A regulatory examination will look at whether the institution had a reasonable monitoring program, whether it followed its own procedures, and whether it escalated and remediated findings consistently.
How should institutions integrate fraud typology detection into their quality control plan?
The practical steps a compliance team can take:
- Embed typology-specific tests into the mortgage quality control plan so that application, closing, servicing and default-stage checks are tied to named patterns rather than a single generic fraud screen.
- Cross-reference fraud indicators with ability-to-repay and qualified mortgage standards (Regulation Z, 12 CFR 1026) so that files with income, debt or occupancy discrepancies receive heightened review.
- Align fraud review with fair lending analysis, because inconsistent treatment of similar files is a fair lending risk. Fair Lending Compliance: The Complete Guide for Mortgage Lenders covers the monitoring structure.
- Run regulatory change management that updates fraud detection protocols when agency guidance, investor requirements or state licensing rules change. A California Mortgage Fraud Scheme Nets $3 Million Refund: Lessons for Lender Compliance shows how a single scheme can generate years of downstream remediation.
- Track state-by-state variations through State mortgage licensing requirements and State rules by topic, since fraud reporting and licensing obligations differ across jurisdictions.
- Keep a documented source record of the rules and guidance your detection logic rests on; Sources Reglith tracks lists many of them.
Frequently asked questions
What are fraud typologies?
Fraud typologies are the recurring behavioral patterns that describe how a particular kind of fraud is carried out — the parties involved, the documents manipulated and the stage of the transaction where the scheme occurs. Compliance teams use typologies to design monitoring, train staff, and route findings to the right investigation, remediation or reporting process.
What are the 7 types of fraud?
The commonly cited seven fraud typologies in mortgage lending are application fraud, occupancy fraud, identity theft, income or employment fraud, appraisal and property valuation fraud, closing or settlement fraud, and servicing or foreclosure fraud. State regulators and investors may group them differently, and some frameworks combine income and employment misrepresentation into a single category.
How does mortgage fraud differ from other financial fraud?
Mortgage fraud is transaction- and collateral‑specific. It depends on the property, the appraisal, the title record and the settlement process, and it is usually detected through loan‑file and transaction‑level review rather than account activity monitoring alone. The regulatory framework for mortgage lending includes several specific statutes and rules that shape detection and reporting.
What are the most common red flags for mortgage fraud?
Frequent indicators include income or employment that cannot be verified, occupancy inconsistent with the borrower's stated intent, short holding periods or sharp price jumps in the transaction history, the same parties appearing across unrelated loans, undisclosed second liens, payments stopping shortly after closing, and escrow or payment account changes that the borrower did not initiate.
How do regulators define mortgage fraud for enforcement purposes?
Regulators generally focus on the conduct and its effect on consumers, the institution's safety and soundness, and whether the institution violated specific rules — such as Regulation Z, RESPA and Regulation X, or HMDA reporting requirements — rather than on a single definition of fraud. Whether a given pattern is treated as fraud, a violation or both depends on the facts and the applicable rule text.
What is the difference between fraud for profit and fraud for property?
Fraud for profit involves collusion between industry insiders and borrowers or straw buyers, usually across multiple transactions, and is detected through portfolio‑level patterns. Fraud for property involves a borrower acting alone, misrepresenting facts to qualify for a home they intend to occupy, and is usually detected file by file. The two require different monitoring strategies.