Before hiring a private investigator on a WSIB claim, Ontario employers should document red flags in writing: conflicting statements, activity that contradicts restrictions, delayed reporting, and return-to-work resistance without clear medical support. Clean internal notes make later investigation faster, cheaper, and easier to defend.
Many employers call an investigator too early, with a hunch and a handful of hallway comments. Others wait too long and discover that key dates, witnesses, and screenshots were never preserved. The middle path is disciplined documentation. You are not building a courtroom brief yet. You are creating a reliable record so counsel, your insurer, and, if needed, a licensed investigator can decide what verification is warranted.
This checklist is for WSIB claim integrity concerns. It is not a guide to investigating harassment, affairs, or general misconduct. Those matters belong under a separate workplace investigation. When the question is functional capacity and claim consistency, your next hub is WSIB claim investigations.
Why documentation comes before surveillance
Investigators work best when the client can answer basic questions: What was reported? When? Who saw what? What medical or RTW documents sit on file? Without that foundation, fieldwork becomes a fishing trip. With it, surveillance and activity checks can target the right windows and the right inconsistencies.
Ontario employers preparing a WSIB claim file should treat early notes as evidence hygiene, not gossip. Record the date and time of each observation, the name of the person who reported it, and whether the information is first-hand or second-hand. Save emails and forms as they arrived. Avoid editing screenshots after the fact. When a licensed investigator later reviews the package, that chronology helps separate rumour from pattern and supports court-usable documentation if the file escalates. Confidential consults with Investigation Hotline often start by sorting what you already have before any public observation begins.
Which WSIB red flags should employers write down?
Not every awkward claim is fraudulent. Some injured workers are careful, compliant, and still slow to recover. Red flags matter when they cluster and when they conflict with stated limits.
- Injury description changes between first report, Form 7 content, and later conversations
- Claimant is seen performing physical tasks that exceed documented restrictions
- Social posts show sports, heavy labour, or travel inconsistent with claimed limits
- Medical appointments are repeatedly missed without explanation
- Return-to-work offers are refused while the person appears active elsewhere
- Coworkers report side work, cash jobs, or unexplained absences tied to claim timing
- Surveillance by managers was attempted informally and created process risk
What to capture for each red flag
For every item, capture who, what, when, where, and how you know. If a manager saw the claimant loading drywall into a truck on a Saturday, write that sentence with the date. Do not write “he is faking.” Facts travel. Labels do not.
- Date and approximate time of the observation or report
- Exact behaviour or statement observed
- Location (public street, job site, social platform, email thread)
- Witness names and whether they will speak to HR or counsel
- Any related claim documents already on file
How should you handle social media and coworker tips?
Social media can be a useful lead. It is rarely a complete file. Preserve URLs, capture dates, and avoid logging into accounts that are not yours. Do not create fake profiles to “friend” the claimant. That shortcut can poison the investigation and create liability.
Coworker tips need the same discipline. Thank the person, write the tip down, and stop the rumour mill. Do not authorize unofficial stakeouts by supervisors in personal vehicles. If public activity needs verification, use licensed tracking and surveillance under a defined mandate.
What internal records strengthen a claim review?
Before an investigator is engaged, assemble the claim packet your team already controls:
- Initial incident report and employer WSIB filing copies
- Job description and physical demands information
- Offer letters or emails for modified duties
- Attendance records around the injury date
- Prior similar claims or safety incidents, if relevant and lawfully retained
- Any insurer correspondence already received
Keep medical documents in the proper confidential channel. Investigators and counsel will tell you what they need. Dumping an entire HR file into an email thread is not the same as controlled disclosure.
When is it time to call a private investigator?
Call when documentation shows a pattern, when return-to-work is stalled without clarity, or when counsel or your insurer asks for independent activity verification. Do not wait until settlement pressure peaks and key dates are forgotten. Early, lawful observation is usually more useful than late reconstruction.
A practical threshold many Ontario employers use is this: if two or more independent red flags are documented, and the claim cost or duration is material, seek professional advice. Investigation Hotline can review your notes in a confidential consult and tell you whether the next step is claim investigation, further internal documentation, or a different service entirely. Claim fraud concerns outside WSIB may belong under insurance fraud investigations.
Employers who document before they investigate protect themselves as much as the claim file. Written chronologies reduce the risk that a later report looks opportunistic. They also help investigators avoid watching the wrong person, on the wrong day, for the wrong reason. Licensed Ontario investigators still must work within privacy and trespass limits, but clean client intake makes lawful work more efficient. The result is a tighter package for claims handlers and lawyers who need to understand what was known, when it was known, and what remains unverified.
Common documentation mistakes that weaken files
- Relying on group chats instead of dated incident notes
- Altering or cropping images without keeping originals
- Mixing misconduct allegations into a claim verification memo
- Interviewing the claimant aggressively without counsel guidance
- Promising coworkers confidentiality you cannot keep
What happens after you hand over a clean file?
A typical next step is a scoped engagement for activity verification. Investigators plan observation around the inconsistencies you already noted. You receive written findings designed for professional review. You do not receive a guarantee about WSIB outcomes. Boards and tribunals decide claims. Investigators document facts.
If your notes point more to policy breach than to claim capacity issues, pause and re-scope. Crossing wires between WSIB verification and workplace discipline can complicate both processes.
How to brief counsel or your insurer with your notes
Organize the package as a timeline, not a folder dump. Lead with the injury date, the current restrictions, and the three strongest inconsistencies. Attach source documents behind that summary. Busy claims professionals will engage faster when they can see the story in two pages before diving into exhibits.
Ask counsel whether informal managerial observation should stop. Once lawyers are involved, continued amateur surveillance can create disclosure and safety issues. Licensed investigators are easier to defend as a controlled process than a rotating cast of supervisors with phone cameras.
What “enough documentation” looks like in practice
Enough does not mean perfect. It means a dated pattern that a stranger can follow. Two coworker tips with no dates are weak. Six dated entries from two sources, plus a refused RTW email thread, are usually enough to justify a professional consult. If you only have one dramatic social post, preserve it and keep collecting. Do not hang an entire strategy on a single screenshot.
- Pattern across time, not a one-off anecdote
- Independence of sources where possible
- Alignment with a specific claimed restriction
- Preservation of originals and metadata when available
Regional practicalities for Ontario employers
Claimants live and move across the GTA and wider Ontario. Activity may appear at a secondary address, a relative’s property, or a cash job site far from the workplace. Your notes should include any known alternate locations. Investigators plan coverage around real geography, not the employer’s head office postal code.
Shift work and seasonal trades also change observation windows. Tell us the claimant’s likely schedule. Night-shift injuries with daytime side work are a different planning problem than office roles with weekend sports.
Connecting documentation to the WSIB service hub
Once your chronology is in order, the next step is usually a scoped engagement under WSIB claim investigations for employers. That hub owns activity verification. This article owns the pre-hire documentation discipline. Keeping those roles separate helps search clarity and keeps your internal process honest about what stage you are in.
Get a confidential review of what you have documented
Bring your chronology, not just your suspicions. Call Investigation Hotline at +1 416-205-9114 or use the contact form for a confidential consult. We will help you decide whether documentation is enough, whether WSIB claim investigation is warranted, or whether another investigative path fits better.
To learn more, contact Investigation Hotline at
