00 The big picture
The two projects look different, but both answer the same underlying question: how does the insurance industry handle risks it cannot carry alone on its own balance sheet?
CAT Bonds = a mechanism by which catastrophe risk (too large for traditional reinsurance) is transferred to the capital markets. The answer to a capacity problem.
Fraud = what happens when the founding assumption of insurance — uberrimae fidei, utmost good faith — is deliberately breached. The answer to an integrity problem.
One thread that links both topics and works in any essay: insurance only works if risk is correctly transferred and honestly disclosed. CAT bonds expand who can bear risk; fraud corrupts how it is disclosed. If you open or close an answer with this idea, you show understanding, not just memorisation.
A Catastrophe Bonds
Insurance-Linked Securities that transfer the risk of rare but severe events (hurricanes, earthquakes, pandemics) directly to capital-market investors.
1 · Definition & concept
A CAT bond is a debt instrument whose principal is contingent on the occurrence (or non-occurrence) of a predefined catastrophic event during a specified risk period.
- If the event does NOT occur: investors receive their coupons + principal at maturity.
- If the trigger is breached: investors lose part or all of their principal, which goes to the sponsor to pay claims.
A CAT bond is a hybrid between a reinsurance contract and a tradable fixed-income security. The coupon = risk-free yield of the collateral + a risk spread compensating for the catastrophe risk.
2 · History & origins
The origin is tied to two catastrophes that exposed the fragility of traditional reinsurance:
| Event | Year | Insured losses | Consequence |
|---|---|---|---|
| Hurricane Andrew | 1992 | ~USD 15.5 bn | Bankrupted at least 8 insurers; mass withdrawal from Florida |
| Northridge Earthquake | 1994 | USD 12–15 bn | Near-total withdrawal from California residential quake market |
The structural problem: world reinsurance capital was ~USD 200 bn, but a single mega-event could exceed USD 50–100 bn. The solution — tapping capital from global financial markets (tens of trillions in fixed-income assets).
Symbolic birth of the market: the USD 477 million "Residential Re" issuance sponsored by USAA in 1997, transferring U.S. hurricane risk. Earlier private deals (Hannover Re's K series, Swiss Re's Winterthur structure) had paved the way.
3 · Structural mechanics & the 5 parties
A typical CAT bond involves five parties. Memorise them as a list — they appear often in mechanics questions:
| Party | Role |
|---|---|
| Sponsor (cedant) | (re)insurer, government or corporation seeking protection |
| SPV / SPR | bankruptcy-remote vehicle issuing the notes; domiciled in Bermuda, Cayman, Ireland |
| Investors | dedicated ILS funds, hedge funds, pension funds, sovereign wealth funds |
| Swap counterparty / collateral manager | converts coupon flows and secures principal protection |
| Modelling firm | RMS, AIR Worldwide / Verisk, KCC, Moody's RMS — calibrates the loss model |
The three-step flow
- The sponsor pays a periodic premium to the SPV in exchange for protection.
- The SPV issues notes to investors and invests the proceeds in a collateral account (money-market funds / U.S. T-bills).
- No event → principal returned at maturity (typically 3–5 years). Event → SPV liquidates collateral up to the contractual loss amount and pays the sponsor.
Three features that make them attractive
1. Full collateralization (no credit risk on the reinsurer) · 2. Multi-year protection (3–5 years, locks in pricing) · 3. Low correlation (catastrophe risk is nearly uncorrelated with financial markets → diversifier).
4 · Trigger types
The most important design choice. It determines when the principal is reduced. The key tension: speed vs. basis risk.
| Trigger | Based on | Advantage | Disadvantage |
|---|---|---|---|
| Indemnity | sponsor's actual loss | no basis risk; like reinsurance | requires disclosure; slow payout (24–36 months) |
| Industry-loss | aggregate losses (PCS in U.S., PERILS in Europe) | reduces moral hazard; faster | basis risk (index ≠ own portfolio) |
| Parametric | physical parameters (wind speed, magnitude) | extremely fast payout (days) | maximum basis risk |
| Modeled-loss | parameters fed into a third-party model | balance of speed / basis risk | depends on model credibility |
| Hybrid | combination (e.g. parametric + industry) | for sovereign sponsors: speed + accuracy | complexity |
5 · The three examples (essential)
Chosen to span 3 sponsor types and 3 trigger types. In the exam, if asked for "examples", these are the three you write.
① USAA Residential Re — private sponsor, indemnity trigger
USAA (U.S. mutual insurer for military families) = the most prolific CAT bond sponsor in the world. The Res Re programme has been issued almost annually since 1997. Over 30 tranches, cumulative issuance > USD 11 bn.
The lesson: an indemnity trigger — once considered too opaque — can be placed at scale if the sponsor has data discipline. Tranches partially triggered by Ike (2008), Harvey & Irma (2017), Michael (2018), the 2017–2018 California wildfires. It works as designed — and yet investor appetite remains robust.
② World Bank PEF — supranational sponsor, parametric trigger (the cautionary tale)
Pandemic Emergency Financing Facility, launched 2017 after Ebola 2014–16. Insurance window USD 320 m (Class A USD 225 m for flu/coronavirus at 6.5%; Class B USD 95 m at 11.1% over LIBOR). Modeller: AIR Worldwide.
The critical lesson: ultra-parametric triggers (WHO PHEIC declaration + case counts + deaths + number of countries + growth rate). It paid out USD 195.84 m in April 2020 — but too late, once COVID was already widespread. The Lancet called it "a series of mathematical thresholds rather than a humanitarian response mechanism." The World Bank did not renew it. The structure worked per its terms but missed the humanitarian goal.
③ Mexico MultiCat / IBRD CAR (FONDEN) — sovereign sponsor, parametric trigger (the success story)
Mexico = the first sovereign sponsor (CAT-MEX 2006). The World Bank's MultiCat programme (IBRD, 2009) gives multiple sovereigns standardized access.
The flagship example: IBRD CAR 113–117 (2017, USD 360 m), parametric trigger on magnitude + depth. Triggered by the Tehuantepec earthquake (M 8.2) in Sept. 2017, it paid USD 150 m to Mexico within weeks. A speed benchmark — a direct contrast with PEF.
6 · The debate: CAT Bonds vs. traditional reinsurance
Pros (in favour)
- Capacity: capital markets ~USD 130 tn vs. ~USD 700 bn of reinsurance capital
- Full collateralization — no credit risk
- Multi-year fixed pricing — isolates from the hard/soft cycle
- Diversification for investors (low correlation)
- Speed of payout (parametric, days)
- Transparency (Reg. 144A, disclosed model assumptions)
Cons (against)
- Basis risk — uncovered residual losses
- Model risk — model recalibration shifts value
- Higher cost in soft markets (yield floor)
- Complexity operational & legal (SPV, multi-jurisdiction)
- Limited flexibility — trigger can't change mid-cycle
- Ethical concerns (the PEF case)
- Investor concentration — "trapped collateral" (2017–18, 2022)
The balanced conclusion (use it as your closing position): CAT bonds and traditional reinsurance are complements, not substitutes. The optimal combination = traditional reinsurance for the working layers + CAT bonds for the tail layers. The market's continued growth, even after the heavy 2017–18 seasons and Hurricane Ian 2022, confirms this consensus.
7 · Market statistics (the numbers that matter)
Market growth & distribution
- The market has grown almost continuously since 2001; slowdowns in 2008 (crisis, Lehman as swap counterparty) and 2018–19 (heavy seasons). Strong acceleration from 2020, records in 2023 and 2024.
- By trigger (2024): Indemnity ≈64% · Industry-loss ≈18% · Parametric ≈11% · Modeled ≈5% · Hybrid ≈2%. Indemnity dominates — large private sponsors avoid basis risk.
- By peril: U.S. hurricane ≈47% (spread 650–1,200 bps), U.S. multi-peril ≈22%, U.S. earthquake ≈12%, the rest (Europe, Japan, sovereigns) under 10% each.
Performance vs. high-yield
Swiss Re Cat Bond Total Return Index (since 2002): annualised return ~7–8%, max drawdown ~10% (2017–18). U.S. high-yield corporate: ~6–7% return but >30% drawdown in 2008 and much higher correlation with equities. The message: comparable return, milder and uncorrelated risk.
8 · Essay scaffold — CAT Bonds
- Definition + why they exist — ILS, contingent principal, the capacity problem (Andrew & Northridge).
- Mechanics — the 5 parties, bankruptcy-remote SPV, the premium→collateral→payout flow, the 3 features.
- Triggers — the 4–5 types on the speed vs. basis-risk axis.
- One example per sponsor type — USAA (private/indemnity), PEF (failure), Mexico (success). Use the PEF↔Mexico contrast.
- Pro/con debate + market figures (50 bn, 19.7% in 2023, indemnity 64%).
- Conclusion: complementary to reinsurance; structural, not cyclical; rising relevance via climate change + investor appetite for uncorrelated assets.
9 · Flashcards — test yourself (CAT Bonds)
What happens to the principal if the trigger is breached?
Investors lose part or all of their principal, which the sponsor uses to pay the catastrophe claims. If NOT breached — they receive coupon + principal at maturity.
What was the first recognised public CAT bond?
Residential Re, USD 477 m, sponsored by USAA in 1997 (U.S. hurricane risk).
Name the 5 parties to a CAT bond.
Sponsor (cedant), SPV/SPR, investors, swap counterparty / collateral manager, modelling firm.
Which trigger has zero basis risk and which has the maximum?
Indemnity = zero basis risk (but slow payout). Parametric = maximum basis risk (but payout in days).
Why is PEF a cautionary tale?
Its ultra-complex parametric triggers delayed payment during COVID — the funds (USD 195.84 m) arrived only in April 2020, too late for containment. The structure worked technically but missed its humanitarian purpose. It was not renewed.
What is the dominant trigger type in 2024 and why?
Indemnity (~64%), because large private sponsors (USAA, Allstate, Chubb, Munich Re) prefer to minimise basis risk.
CAT bond return and drawdown vs. high-yield?
CAT: ~7–8% annualised, ~10% drawdown, uncorrelated. U.S. high-yield: ~6–7% but >30% drawdown in 2008, correlated with equities. 2023 was the CAT record: 19.7%.
B Fraud in Insurance
Fraud = the deliberate breach of the principle of utmost good faith (uberrimae fidei). Not just a loss for the insurer — a systemic tax on every honest policyholder.
1 · Definition & the three elements
Insurance fraud = any act committed with the intent to obtain a fraudulent outcome from an insurance process — through false claims, misrepresentation, premium diversion, or internal manipulation.
Three constitutive elements appear in every serious treatment (aligned with IAIS ICP 21 and EIOPA):
| Element | Meaning |
|---|---|
| Intent | distinguishes fraud from negligence / honest error |
| Material misrepresentation | a false statement influencing underwriting / claims decisions |
| Unjust enrichment | financial benefit without legitimate contractual entitlement |
If any is missing → it's more accurately a dispute, error or moral hazard, not fraud.
Typologies: the four-quadrant matrix
Two axes: premeditation (hard vs. soft) × origin (external vs. internal).
| Axis | Hard Fraud | Soft Fraud |
|---|---|---|
| External (customer/third party) | staged collisions, arson for profit, planned thefts, organised "crash-for-cash" rings | padding a genuine claim, exaggerated whiplash, opportunistic over-claiming |
| Internal (insurer/intermediary) | premium diversion, ghost broking, sham reinsurance, deliberate reserve manipulation | mis-selling for commission, KYC corner-cutting, soft underwriting |
2 · Why international fraud is different
Cross-border fraud thrives in the gaps between national legal systems. Four aggravating factors:
| Factor | How it works |
|---|---|
| Jurisdictional arbitrage | different limitation periods / evidentiary rules — a fraud found in one country may be time-barred in another |
| Currency/valuation distortion | FX volatility hides padded reserves and inflated cross-border claims (marine, aviation, property) |
| Digital impersonation | generative-AI produces medical reports, invoices, synthetic identities; deepfakes in travel/health claims |
| Limited data sharing | GDPR-style regimes slow evidence transfer between supervisors; cross-border pools are voluntary |
3 · Regulatory framework — 6 bodies
| Body | Jurisdiction | Mandate |
|---|---|---|
| IAIS | Global | sets ICP 21, promotes information exchange |
| FCA | UK | supervises conduct; FraudSMART programme |
| EIOPA | EU | convergence, peer reviews, Solvency II equivalence |
| NAIC | U.S. | coordinates state regulators; Insurance Fraud Reporting model law |
| ABI | UK | industry body; annual report; runs the IFB |
| ASF | Romania | prudential & conduct supervisor; co-author of the 2023 Anti-Fraud Strategy |
They operate on different horizons: IAIS & EIOPA — slow-moving principles; NAIC & ASF — react quickly through model laws/circulars; FCA & ABI — annual data that drives immediate operational change. Result: the strategic direction is aligned, but the operational toolkit of a Romanian or Italian claims handler can lag a UK/U.S. peer by years.
THEORETICAL BACKGROUND (4 syllabus sources): Dorfman & Cather (moral hazard vs. morale hazard) · Vaughan & Vaughan (principle of indemnity → any payment beyond = unjust enrichment) · Bennett (Romanian risk-transfer vocabulary) · Williams & Heins (the avoidance–reduction–retention–transfer model; fraud prevention = a form of risk reduction).
4 · The three cases (essential)
Chosen to span: external organised / internal governance / hybrid digital-era opportunism.
① Operation Dino (UK) — external organised "crash-for-cash" fraud
Investigation 2017–2020, led by the City of London Police IFED + the Insurance Fraud Bureau. The Manchester / West Yorkshire / West Midlands motorway corridors.
Modus operandi: a network of drivers braked suddenly in front of victims to provoke rear-end collisions → whiplash, courtesy-car, passenger-injury claims. "Phantom passengers", complicit medics, fictitious garages.
Figures: >GBP 18 m claimed, ~200 staged collisions, 47 convictions (Fraud Act 2006). Response: modernised Cheatline (+40% tips), telematics as a screening standard, expanded CUE database.
② AIG Reserve Misstatement — internal governance fraud
Investigation 2005–2010 (conduct from 2000). The largest insurance-related accounting settlement in modern U.S. history.
The conduct: a sham finite-reinsurance contract with General Re (Berkshire) to inflate reserves by ~USD 500 m — a form of reinsurance with no real risk transfer. Deeper manipulations: ~USD 3.9 bn of restated earnings; resignation of founder "Hank" Greenberg.
Settlements: AIG paid ~USD 1.6 bn (SEC + states, 2006) + ~USD 500 m class-action. The lesson: not a technical error but a governance failure — board, audit committee and external auditor each had opportunities to challenge and didn't. It fed Solvency II Pillar 2 and the UK Senior Managers Regime.
③ COVID-19 Business-Interruption (2020–2023) — hybrid digital opportunism
The largest shock since 9/11; the first wave with a measurable role for generative-AI. Lines affected: BI, event cancellation, travel, credit.
Patterns: inflated revenue projections, falsified payroll, duplicate claims across insurers, fabricated invoices, AI-generated synthetic documents.
Figures: +30% digital fraud 2020–2023 vs. the 2017–19 baseline; travel +22% specifically; estimated global cost 2022 (all lines): ~USD 80 bn. Key legal response: the UK Supreme Court judgment (Jan. 2021, FCA v Arch Insurance) clarified contested BI wordings and shrank the pool of legitimate disputes behind which fraudulent claims could hide.
The debate questions (cite them to show nuance)
- D1 (Dino): Should EU insurers be able to share claims data cross-border by default? A sectoral GDPR exemption (like AML in banking) vs. voluntary pools?
- D2 (AIG): Where is the line between aggressive earnings management and fraud? Mandatory pre-approval of finite-reinsurance contracts above a materiality threshold?
- D3 (COVID): Should governments fund a public digital-ID & document-attestation layer (à la eIDAS / EU Digital Identity Wallet) to detect AI forgeries?
5 · Global statistics
Distribution by line of business (CAIF 2023)
| Line | Share | Types |
|---|---|---|
| Motor / Auto | 38% | crash-for-cash, whiplash, ghost broking |
| Health & Medical | 22% | inflated treatment, fictitious providers, duplicates |
| Property & Casualty | 18% | arson, exaggerated theft, inflated BI |
| Travel | 9% | fake medical certificates, fabricated cancellations |
| Workers' Comp | 7% | faked workplace injuries |
| Life | 4% | faked deaths, hidden pre-existing conditions |
| Other/Speciality | 2% | crop, marine, cyber, aviation (low volume, high value) |
Stable conclusion: motor + health absorb ~60% of detected fraud → which is why national strategies allocate most detection investment to these two lines.
The effect of technology (indicative, self-reported reductions)
- AI/ML screening: −42% undetected fraud at industrial scale
- Telematics: −28% motor fraud
- Cross-insurer pools (CUE UK, ICAR Italy): −35% duplicates & ghost broking
- Biometric/liveness intake: −21% synthetic-identity fraud
METHODOLOGICAL CAUTION (score points here): these figures are approximate, overlapping and self-reported — they are NOT additive. The correct conclusion is qualitative: every well-implemented technique meaningfully reduces fraud; the one with the highest leverage is the one not yet deployed.
Romanian context
The dominant line: RCA (motor third-party liability), reflecting market fragility after the failures of City Insurance (2021) and Euroins (2023). ASF patterns: staged collisions on foreign-registered vehicles, inflated repair estimates, double-claiming under RCA + CASCO. Response: the 2023 Anti-Fraud Strategy (expanded reporting + mandatory anti-fraud function). Estimate: RON 350 m+ (likely understated).
6 · The two perspectives (individual conclusions)
The project offers two intentionally divergent views of the same evidence. In the exam, present both, then the synthesis — it shows mature thinking.
Perspective 1 — Fraud is a technology problem
- Insurance is a data business — without pools & real-time AI you can't keep up with organised fraud
- Regulation lags innovation — rings move on before harmonisation
- Detection ROI is undeniable (−42% AI, −35% pools)
- Optimal lever: fast technology deployment + data sharing (with a sectoral GDPR exemption)
Perspective 2 — Fraud is a governance & culture problem
- AIG was not a tech failure — sophisticated controls, a major auditor, yet governance gave way (so did City/Euroins)
- Consumer trust is the cheapest defence — fair claims handling cuts soft fraud (the demand side)
- Overdue international harmonisation = the biggest enabler of organised fraud
- Optimal lever: governance, culture, cross-border harmonisation
The synthesis: the perspectives are not mutually exclusive — they differ only on prioritisation: which lever you pull first. The industry needs both — AI for organised external fraud, governance reform for internal fraud and the legitimacy of the good-faith contract. The question to debate is not whether to invest, but in what order.
7 · Essay scaffold — Fraud
- Why it matters — uberrimae fidei; fraud = a systemic tax on the honest policyholder.
- Definition + 3 elements (intent, misrepresentation, unjust enrichment) + the hard/soft × internal/external matrix.
- Why international differs — the 4 aggravating factors + the 6 regulatory bodies.
- Three cases — Dino (external), AIG (internal), COVID-BI (hybrid digital). One lesson per case.
- Statistics — 10% global, 308 bn U.S., motor+health 60%, the technology effect (with the methodological caveat).
- Conclusion: the two perspectives (technology vs. governance) + the synthesis "not whether, but in what order".
8 · Flashcards — test yourself (Fraud)
What are the 3 constitutive elements of fraud?
Intent (vs. error), material misrepresentation (influences the decision), unjust enrichment (no contractual entitlement). If any is missing → dispute/error/moral hazard, not fraud.
Hard vs. soft fraud — which is larger by value?
Soft fraud. For every euro of detected hard fraud there are 3–5 euros of undetected soft fraud (especially motor & travel).
Why is AIG a governance case, not a technology case?
A sham finite-reinsurance contract with General Re (~500 m reserve inflation) — with no real risk transfer. The controls and auditor existed; what gave way was the board / audit committee. No AI would have caught it. AIG paid ~USD 1.6 bn.
The key figures by region?
~10% of payments globally; U.S. USD 308.6 bn (includes soft fraud); UK GBP 1.1 bn (detected hard only); EU EUR 13 bn cross-border; Romania RON 350 m+. Note: U.S. and UK are not directly comparable (different definitions).
Which lines absorb ~60% of detected fraud?
Motor (38%) + Health & Medical (22%). Travel is the fastest-growing (+22% YoY post-2020).
Why aren't the technology reductions additive?
They are approximate, overlapping and self-reported. The conclusion is qualitative: each well-implemented technique meaningfully reduces fraud; you don't add −42% + −35% etc.
What was the UK Supreme Court's role in the COVID-BI wave?
The Jan. 2021 judgment (FCA v Arch Insurance) clarified contested BI wordings, reducing the population of legitimate disputes behind which fraudulent claims could hide.
The Romanian fraud context?
RCA dominant, against the backdrop of the City Insurance (2021) and Euroins (2023) failures. Response: the ASF 2023 Anti-Fraud Strategy (expanded reporting + mandatory anti-fraud function).
C Cross-cutting questions
If the exam asks you to link the two topics or poses a conceptual question, here are angles that impress.
How do CAT bonds and fraud relate to the good-faith principle?
Insurance works only if risk is correctly transferred and honestly disclosed. CAT bonds expand who can bear risk (capital markets), solving a capacity problem. Fraud corrupts disclosure, attacking the integrity of the contract (uberrimae fidei). Both concern the fundamental condition of a functioning insurance market.
The role of modelling appears in both projects — how?
In CAT bonds: modelling firms (RMS, AIR) calibrate triggers and price — model risk is a key disadvantage. In fraud: AI/ML screening models cut undetected fraud (~42%). In both, the third-party model is both solution and source of risk/limitation.
Comparison: when did each instrument "fail"?
CAT bonds: PEF — the structure worked technically but missed the humanitarian goal (poorly designed trigger for a slow event). Fraud: AIG — controls existed but governance gave way. The shared lesson: technical/formal compliance doesn't guarantee the right outcome; design and governance matter more than the mechanism.
The role of cross-border regulation in both?
CAT bonds: SPVs domiciled in Bermuda/Cayman/Ireland, multi-jurisdiction compliance (complexity). Fraud: jurisdictional arbitrage is the biggest enabler of organised fraud; harmonisation (Solvency II, IAIS peer reviews) is the slow solution. Both show that jurisdictional fragmentation shapes the market.
D Numbers cheat sheet
Read it 10 minutes before the exam. These are the figures and proper names that separate a vague answer from a precise one.
CAT Bonds — must-know
- 1997 — first public issuance (USAA Res Re, USD 477 m)
- 1992 Andrew (15.5 bn) · 1994 Northridge (12–15 bn)
- Market ~USD 50 bn (2024) · ILS >110 bn
- 2024 issuance ~17.7 bn · 2023 return record: 19.7%
- Trigger 2024: Indemnity 64% / Industry 18% / Parametric 11%
- U.S. hurricane ~47% of market
- Historical trigger rate: 6–7% (50–60 of >850 tranches)
- Index return ~7–8%, drawdown ~10%
- PEF: 320 m window, payout 195.84 m (Apr. 2020)
- Mexico IBRD CAR 113: M8.2 Tehuantepec → 150 m in weeks
Fraud — must-know
- ~10% of global payments = fraud
- U.S. USD 308.6 bn · UK GBP 1.1 bn · EU EUR 13 bn · RO RON 350 m+
- Motor 38% + Health 22% = ~60%; Travel +22% YoY
- Dino: >GBP 18 m, ~200 collisions, 47 convictions (Fraud Act 2006)
- AIG: reserves inflated ~500 m, restatement 3.9 bn, settlement 1.6 bn
- COVID-BI: +30% digital fraud, global cost ~80 bn (2022)
- FCA v Arch Insurance — UK Supreme Court, Jan. 2021
- Technology: AI −42%, pools −35%, telematics −28%, biometric −21%
- 6 bodies: IAIS, FCA, EIOPA, NAIC, ABI, ASF
- RO: City Insurance (2021), Euroins (2023)
Two golden sentences for your conclusions:
— CAT Bonds: "They are complementary to reinsurance, not substitutes — a structural innovation, not a cyclical one."
— Fraud: "Technology and governance are not mutually exclusive; the question is not whether to invest, but in what order."