How insurers investigate a stolen car claim

Yes, the pointed questions about keys, your loan and when you bought the policy are normal. Every stolen-car claim gets a basic check that the loss happened the way it was reported and that the car was yours, insured and not about to be repossessed, and the questions are how that check is done. Being asked does not mean you are suspected, and the insurance industry's own investigator guide says no investigation should start with a preconceived conclusion about whether a loss is valid.

This article walks through the process in the order most insurers work it, from the first call to the settlement check, and explains what each step is for. It is written for the person whose car was actually taken. How owners fake a theft is the subject of owner give-ups: how staged vehicle thefts get investigated; the investigation described here is built to tell the two situations apart.

Why the process feels like an interrogation

A theft is one of the claims where the insurer cannot see the loss. There is no wreck to photograph and no repair shop estimate, only your account, a police report and a missing car. The National Insurance Crime Bureau (NICB), a not-for-profit group whose members are insurers and which fights insurance crime, publishes a Vehicle Theft Claim Investigation Guide for claim professionals and police. The edition available on its site is dated 2018. It describes the questions investigators ask, and it is blunt about two points that are useful for a victim to know.

First, it tells investigators to keep an open mind and reminds them that the large majority of reported claims are valid. Second, it says the presence of fraud indicators does not prove fraud, and that an investigation should end with the claim classed as supported by the evidence, unsupported or undeterminable (NICB Vehicle Theft Claim Investigation Guide). The guide is a menu of possible steps, not a script every insurer follows, and companies set their own procedures. But its questions match what drivers report being asked, so it is a reasonable map.

Step 1: the police report and first notice of loss

You have two reports to make, and the insurer will compare them. The police report goes into the national stolen-vehicle system and gives you a report number. The first notice of loss is your call or app submission to the insurer.

The standard personal auto policy form from Insurance Services Office (ISO), edition 09 18, which many insurers use as the basis for their own, says the insurer must be notified promptly of how, when and where the loss happened, and that a person seeking coverage for damage to the car must promptly notify the police if the car is stolen (ISO PP 00 01 09 18, as filed with the Virginia SCC). Your own policy may word this differently.

The NICB guide lists what a claim representative checks in the report of loss: who reported it and how, when it was reported to the insurer and to police, whether there were delays, whether the reports are "out of sequence" (for instance, the insurer was told before the police), and whether the facts contradict the police report or a witness. It also tells investigators to get the police report before any detailed interview, and to compare what the reporting party told police with what the claim says about the time, the vehicle, the contents and whether the owner had the keys.

What to do with that: report to police first, get the report number, and give the same time, place and key information to both. If you realize later that you said something wrong, say so and explain; a correction is much less damaging than an inconsistency someone else finds. The broader first-day checklist is in what to do if your car is stolen.

Step 2: the keys

Expect the most detailed questions here. The guide's suggested questions include how many sets of keys there were when you got the car and when it disappeared, where each set was when the car was last seen and where each is now, whether anyone else has a set, whether duplicates were made and by whom, whether there is a valet key or a hidden key, whether remote start is factory or aftermarket, and whether you ever loaned the car or keys.

The reason is mechanical. Most modern cars use a transponder or electronic key system, and the guide says that duplicates normally require identification and proof of ownership. It tells investigators that an ignition system showing no sign of being defeated is a strong indicator that a key was used to move the car. In the next breath it warns investigators to be careful before accusing the owner of a false claim, because criminals may be able to get duplicate keys through dealers without the owner knowing. It also says that professional thieves now have tools that open almost any vehicle without leaving visible signs of forced entry.

So the key count is a lead, not a verdict. If you are missing one, do not guess or hide it. Say who last had it, when, and what you did about it. If the car was taken with the key inside, see keys left in the car or engine running: will theft coverage still pay?; relay and keyless attacks are covered in relay attacks and keyless theft: how it works and what is covered.

Step 3: databases, recovery systems and location data

While you answer questions, the insurer is also searching. The NICB guide describes the vehicle data an insurer can pull through the Insurance Services Office's ClaimSearch database, much of it supplied by police and manufacturers:

• VIN verification. The VIN is checked against the manufacturer's shipping and assembly records and a mathematical check on the 17-character format. A VIN that fails raises a question, though the guide notes a mistyped letter O for a zero is a common cause.
• Theft records. Police entries into the national crime database are mirrored in the insurer's search, and the status changes to inactive when the car is recovered, which shows which agency found it.
• Impound and export records. Records of vehicles impounded for reasons other than theft, and of vehicles presented for export at selected ports, are included.
• License plate readers. The guide says police and U.S. Customs and Border Protection use plate readers, that an officer is alerted in real time when a plate with an active theft record is read, and that a plate read at a border crossing creates a record of the vehicle leaving the country.
• Prior claims and salvage. Earlier thefts, losses and salvage sales for the same VIN or the same people show up.

Separately, if the car has a factory connected-services plan or an aftermarket tracker, its location history may help police find the car and may also be used to check your timeline. A Claims Journal article by two forensic engineers (November 2023) notes that infotainment and telematics units in some vehicles keep GPS tracklogs for the preceding days and sometimes longer, and that investigators use them to test the date, time and place of a reported loss (Claims Journal). If you have a tracking subscription, tell the police and the adjuster at once. A location trail that supports your account is strong evidence, and it can also help police find the car.

Step 4: your policy, your loan and your finances

This is the part that makes honest owners feel judged. The guide tells investigators to review the coverage: when the policy was bought and how, whether coverage was added or increased shortly before the loss, whether a cancellation notice was recently sent, whether there is a lienholder, whether the policy's application information is accurate, and what your claim history is. It also lists financial "indicators": a recent layoff or divorce, bankruptcy, a high loan or lease payment, being behind on obligations, or an income that does not fit the vehicle.

Those questions exist because an owner who cannot afford a car, or owes more on it than it is worth, has a motive to want it gone. That is the logic behind the searches. It does not mean financial strain makes a claim false. The guide itself says that confirming financial problems is not proof that the insured is submitting a fraudulent claim, and it warns investigators to follow the Fair Credit Reporting Act: a credit report should not be obtained without written authorization from the person on whom it is requested, and only when it is a pertinent step in an open investigation.

Practical points:

• The loan. Tell the adjuster the lender's name and your account number. If the lender holds the title, it is paid first, up to what you owe.
• Missed payments. Do not pretend you were current if you were not. The insurer can check, and a wrong answer on a sworn statement is worse than a missed payment.
• Coverage changes. If you added comprehensive coverage or raised a limit shortly before the theft for a real reason, such as a new loan requiring it, keep the paperwork showing why.
• Bankruptcy. If you are in one, tell your attorney early; the guide notes the bankruptcy trustee may have a claim on insurance proceeds.

Step 5: your statement, documents and, rarely, an examination under oath

The first detailed contact is usually a recorded statement. The guide recommends the insurer get permission before recording, explain the coverage and any rental benefit first, and record the interview where possible. Its question list for the owner runs long: who last drove the car, who saw it last, exactly where it was parked, whether it was locked, whether the alarm was on, where it was serviced, its mileage, what was inside, and what you were doing before and after the theft. It tells investigators not to accept a vague account along the lines of parking the car and coming back to find it gone.

You do the best job by preparing before you are called, within reason. Gather:

1. The police report number and the officer's name.
2. The lender's name, account number and your most recent statement.
3. The title or registration and the purchase paperwork.
4. All keys and fobs you still hold, including the spares.
5. Service records, receipts for equipment you added, and any photos of the car.
6. A written timeline of the last day you saw the car, with times and the names of people who can confirm it.
7. A list of everything inside, with serial numbers where you have them.

If the insurer needs to investigate further, it may ask for a sworn proof of loss or an examination under oath. The ISO form requires a person seeking coverage to cooperate in the investigation, submit to recorded statements and examination under oath as often as reasonably required, and submit a proof of loss when required. An examination under oath is a formal question-and-answer session with a court reporter, usually by an attorney for the insurer, and it is covered in the cooperation clause: records, interviews and exams under oath. If the claim is referred to the special investigations unit, My claim is under SIU review: what to expect and your rights explains the stages. Whichever stage you are at, answer from knowledge and not from guesswork, and ask for the date of any item you do not remember rather than estimating.

If the car turns up

Recovery changes the investigation. The guide describes what an examiner looks at on a recovered car: whether the ignition or steering column damage is real or cosmetic, whether the engine, wiring and injectors have been damaged or carefully stripped, whether a gear shift lock is still engaged, whether parts were removed suspiciously neatly, and whether old damage was already there. It also says to look at where the car was found relative to your home, your work and the repair shop. If the car has an event data recorder, the guide notes the data may help, though retrieval needs special equipment and, in some cases, the owner's permission; see event data recorders as evidence in claims and fraud cases.

On the payment side, the ISO form says that if the insurer returns stolen property it pays for any damage resulting from the theft, and that it may keep all or part of the property at an agreed or appraised value. How the claim then proceeds, as a repair or a total loss, is the subject of your stolen car was recovered: three ways the insurance claim can go. If you find or hear about the car yourself, tell the adjuster and the police before you touch it.

How long this can take

The investigation runs alongside the claims-handling rules, and the two do not always move at the same speed. The National Association of Insurance Commissioners (NAIC) publishes a model claims-practices regulation, Model Regulation 902, which states may adopt in their own versions. In the model, an insurer acknowledges a claim within 15 days, advises a first-party claimant of acceptance or denial within 21 days after receiving a properly executed proof of loss, and, if it needs more time, tells the claimant why within those 21 days and again every 45 days. The same section relieves the insurer of those requirements where there is a reasonable basis, supported by specific information available to the regulator, to suspect the claimant fraudulently caused or contributed to the loss, provided the claimant is told of the decision within a reasonable time for a full investigation (NAIC Model Regulation 902).

Two points follow. The clock in the model starts with your proof of loss, so delays in returning forms are on your side of the ledger. And a fraud investigation can legitimately take longer than a routine one. Each state has its own deadlines and wording, so check your state's rules or the state car insurance requirements lookup and your insurance department's claim pages. For what the insurer usually does with a car that has not been found, including how long it typically waits, see an unrecovered stolen car: the waiting period and settlement.

Rental coverage while you wait

Rental is a separate benefit with its own limits. In the ISO form, "transportation expenses" are paid without a deductible up to a maximum of $900 in total, with temporary transportation expenses not exceeding $30 per day, if the declarations page shows other-than-collision coverage. For a theft of the whole car, the form pays only expenses incurred from 48 hours after the theft until the car is returned to use or the insurer pays for its loss. Policies differ: many insurers sell a rental reimbursement endorsement with a different daily limit. Look at your declarations page for the actual figures, and read rental reimbursement coverage and rental cars after a claim: reimbursement, loss of use and daily limits before you book anything long-term.

The settlement and the total-loss valuation

If the car is not found, the claim becomes a total loss and the insurer pays the actual cash value, less your comprehensive deductible. The ISO form limits the payment to the lesser of the car's actual cash value or the cost to repair or replace it, and says a payment in money includes the applicable sales tax. The NAIC model regulation adds that a cash settlement for a total loss should be based on the cost of a comparable car including taxes, license fees and other transfer fees, derived from comparable cars in the local market within the previous 90 days or from a valuation source that meets stated criteria, and that if you tell the insurer within 35 days of receiving the payment that you cannot buy a comparable vehicle for the market value, the insurer is to reopen the file. Those are model terms; your state's version may differ. See how insurers calculate actual cash value and the total loss payout estimator.

A worked example with invented numbers

Say your car is worth $18,000 in actual cash value on the day it was stolen, you owe $21,500 on the loan, and your comprehensive deductible is $500. The insurer's offer, before any tax and fee additions your state requires, is $18,000 minus $500, or $17,500. Because a lender holds a lien, that money goes to the lender first. You still owe $21,500 minus $17,500, which is $4,000, unless you have gap coverage or a loan or lease payoff endorsement. This is why a theft claim can leave a borrower paying for a car they no longer have. what happens if your car is totaled and you still owe money covers it in detail.

Questions to put to the adjuster

• "Which documents do you need from me, and by what date?"
• "Has the claim been referred for further review, and if so, what will that involve?"
• "Is the loss being handled under comprehensive coverage, and what is my deductible?"
• "When does my rental coverage start and what is the daily limit and cap?"
• "What is the date by which you expect to decide, and will you tell me in writing if that changes?"
• "If the car is found, who inspects it and who pays for storage?"

Keep notes of the answers; the method in keeping a claim diary to protect yourself is built for this.

Common questions

Can they refuse to pay because there was no sign of forced entry?

Lack of visible forced entry is one of the things investigators note, but the NICB guide itself says that professional thieves use tools that often leave no visible sign. It is a reason to look further, not a coverage exclusion. Any denial must rest on policy language and facts, and the NAIC model rule requires a denial to be in writing and to cite the policy provision relied on; check your state's version.

Will they pull my credit report?

Only for a permissible reason. The NICB guide says that investigators should follow the Fair Credit Reporting Act and should not get a credit report without written authorization from the person it concerns. If you are asked to sign one, you may ask why it is needed and what it covers.

What if I cannot find one of my keys?

Say so, and tell the adjuster who last had it and when. A missing key is a common innocent fact, and a clear explanation costs less than an evasive one.

Does a referral to the special investigations unit mean they think I did it?

No. Insurers refer claims for many reasons, including routine criteria. Cooperate, keep records, and use the department of insurance if you believe the process is unreasonable.

Key takeaways

• Pointed questions about keys, loans and policy timing are routine in theft claims, and the insurance industry's own investigator guide says indicators are not proof and most claims are valid.
• The steps run in a predictable order: the police report and first notice, the keys, database and location checks, your policy and finances, a statement and documents, and then valuation.
• Keep your accounts consistent, supply documents promptly and correct any mistake yourself, because the insurer compares everything you say with the police report and with records.
• The model claims rules give an insurer 21 days after your proof of loss to decide or explain the delay, but they relieve it of those deadlines when it has a reasonable basis to suspect fraud, and your state's rules vary.
• If the car is not found, expect actual cash value less the deductible, paid to the lender first, and check your rental limits and any gap coverage right away.