Mortgage lenders are under real pressure. Margins are thin, volumes swing quarter to quarter, and every clean loan has to keep moving. Fraudsters understand this speed-and-scale dynamic, so they’ve become far more sophisticated in how they target the industry.
The core challenge for 2026 is pinpointing the 1% of loans that deserve a closer look, without slowing the 99% that keep revenue flowing.
Q4 2025: A snapshot of the risk landscape
According to Cotality’s Q4 2025 Mortgage Fraud Report, the industry is seeing a "decoupling" of volume and risk. While application volume dipped slightly, fraud (and the complexity that comes with it) is climbing.
- Overall fraud risk: Increased 1.5% year-over-year.
- The frequency: 1 in every 118 applications now shows fraud indicators.
- The hot spots: Risk continues to be highest in investment and multifamily (2–4 unit) loans.
The "refinance paradox": Why traditional logic is failing
Historically, a shift toward refinance activity signals a lower-risk environment. Not anymore.
In Q4 2025, refinance activity surged 19% year-over-year. Under normal market conditions, this should have dragged the overall fraud rate down. Instead, fraud risk continued to edge higher. This suggests that today’s threats are evolving beyond transaction types — borrowers and investors are becoming more aggressive in their tactics regardless of the loan purpose.
Hot spots for fraud
More fraud threats are emerging in the investment and multifamily segments. As volume in these segments accelerates, partially fueled by the growing popularity of DSCR (Debt Service Coverage Ratio) loans, a larger share of overall risk is concentrating there.
- Multifamily: 1 in 27 applications showed fraud risk.
- Investment: 1 in 43 applications showed fraud risk.
- Growth: Volume in these categories skyrocketed 110% and 79% respectively.
The fastest-growing fraud type: Undisclosed real estate
While most fraud categories (Identity, Income, Occupancy) saw decreases in 2025, one category jumped: Undisclosed Real Estate fraud risk rose 8.6%.
Calling this a "clerical error" misses what it is: a systemic attempt to hide existing mortgage debt, mask foreclosure history, or misrepresent occupancy. As investors juggle multiple properties across fragmented lenders, these blind spots become a breeding ground for layered leverage and potential defaults.
Fraud alerts point to troubling trends
Of the six main fraud risk categories, while only Undisclosed Real Estate fraud risk was up across the board, fraud alerts in subsets of the other five categories were up as well. While alerts do not indicate actual fraud, they do highlight how macroeconomic shifts can influence borrower behavior, documentation patterns, and potential risks. Cotality data shows emerging risk signals in these three categories:
- Unverified income: Alerts related to employer information that cannot be validated.
- Suspicious flipping: Alerts for properties that have doubled in value within 24 months, which may indicate an artificial price hike or "propped up" appraisal.
- Incorrect occupancy: Alerts that a primary or a second home will not be occupied as disclosed, including a primary property refinance with a different tax mailing address.
Fraud rarely happens in a vacuum. We are seeing a rise in risk clusters. When income anomalies, occupancy inconsistencies, and layered debt appear together, the likelihood of material misrepresentation increases significantly.
Industry response: More visibility, more accountability
The industry is fighting back with unprecedented transparency. From the National Private Lenders Association (NPLA) launching a bad actor watch list to Freddie Mac’s Tip Referral Tool, the message is clear: the shadows are shrinking.
For an individual lender, broad visibility doesn’t always help. Fraud is a given. The challenge is catching it in the loans sitting in your pipeline on a random Tuesday morning.
Precision over volume: The LoanSafe® solution
For 2026, focus on the right files. Indiscriminate or blanket manual reviews are the enemy of profitability.
Cotality’s LoanSafe changes the approach to uncovering fraud from guesswork to focused precision. Fraud Risk Scores informed by machine learning and trained on millions of applications allows LoanSafe to move beyond generic alerts and provide:
- Prioritized triage: Instead of a wall of unranked alerts, your team gets a weighted score. High-risk files get the microscope; low-risk files get the fast track.
- Explainable insights: LoanSafe pairs the score with the reasons, tying together income anomalies, identity conflicts, and layered debt patterns.
- Operational velocity: By reducing false positives, you maintain competitive turn times while protecting your operational efficiency and market reputation.
The bottom line
In a market defined by scrutiny, lenders will win by replacing broad defenses with data-backed optimization. Smart triage is a practical risk strategy and a way to keep up with complex fraud at speed.
.jpg)
