Skip to main content

Expedited Assistance for Victims of Hurricanes Katrina and Rita: FEMA's Control Weaknesses Exposed the Government to Significant Fraud and Abuse

GAO-06-655 Published: Jun 16, 2006. Publicly Released: Jun 16, 2006.
Jump To:
Skip to Highlights

Highlights

In the wake of Hurricanes Katrina and Rita, the Federal Emergency Management Agency (FEMA) faced the challenge of providing assistance quickly while having sufficient controls to provide assurance that benefits were paid only to those eligible under the Individuals and Households Program (IHP). On February 13, 2006, GAO testified on the initial results of its ongoing work related to whether (1) controls are in place and operating effectively to limit assistance to qualified applicants, (2) indications exist of fraud and abuse in the application for and receipt of assistance payments, and (3) controls are in place and operating effectively over debit cards to prevent duplicate payments and improper usage.

Recommendations

Recommendations for Executive Action

Agency Affected Recommendation Status
Federal Emergency Management Agency The Secretary of the Department of Homeland Security (DHS) should direct the Director of the Federal Emergency Management Agency to address the weaknesses we identified in the administration of IHP. To address the concerns raised in our February 13, 2006, testimony, DHS and FEMA should establish an identity verification process for Individuals and Households Program (IHP) registrants applying via both the Internet and telephone, to provide reasonable assurance that disaster assistance payments are made only to qualified individuals. Within this process DHS and FEMA should establish detailed criteria for registration and provide clear instructions to registrants on the identification information required, create a field within the registration that asks registrants to provide their name exactly as it appears on their Social Security Card in order to prevent name and Social Security Number (SSN) mismatches, fully field test the identity verification process prior to implementation, ensure that call center employees give real-time feedback to registrants on whether their identities have been validated, and establish a process that uses alternative means of identity verification to expeditiously handle legitimate applicants that are rejected by identity verification controls.
Closed – Implemented
In June 2006, FEMA implemented new edit controls intended to ensure that social security numbers and names submitted by IHP disaster assistance registrants are both appropriately matched and valid. FEMA's improved control procedures in this area should improve upfront controls over the registration process to better ensure that only valid applicants receive IHP payments, thereby helping to reduce fraudulent IHP payments based on invalid registration data.
Federal Emergency Management Agency The Secretary of the Department of Homeland Security (DHS) should direct the Director of the Federal Emergency Management Agency to address the weaknesses we identified in the administration of IHP. To address the concerns raised in our February 13, 2006, testimony, DHS and FEMA should develop procedures to improve the existing review process of duplicate registrations containing the exact same SSN and to identify the reasons why registrations flagged as invalid or as potential duplicates have been overridden and approved for payment.
Closed – Implemented
FEMA implemented a new IHP registration automated edit procedure that identified and denied duplicate IHP payments to a single social security number. In addition, FEMA instituted revised procedures to prevent duplicate registrations with the same social security number at their call centers. These changes should eliminate duplicate IHP applications to the same social security number and reduce the potential for fraudulent IHP payments.
Federal Emergency Management Agency The Secretary of the Department of Homeland Security (DHS) should direct the Director of the Federal Emergency Management Agency to address the weaknesses we identified in the administration of IHP. To address the concerns raised in our February 13, 2006, testimony, DHS and FEMA should establish an address verification process for IHP registrants applying via both the Internet and telephone, to provide reasonable assurance that disaster assistance payments are made only to qualified individuals. Within this process DHS and FEMA should create a uniform method to input street names and numbers and apartment numbers into the registration, institute procedures to check IHP registration damaged addresses against publicly available address databases so that payments are not made based on bogus property addresses, fully field test the address verification process prior to implementation, ensure that call center employees can give real time feedback to registrants on whether addresses have been validated, and establish a process that uses alternative means of address verification to expeditiously handle legitimate applicants that are rejected by address verification controls.
Closed – Implemented
Under a contract with Choicepoint, a private sector company, FEMA instituted a process to confirm the existence of an address provided by an IHP registrant prior to disbursing an IHP payment based on that address. FEMA's implementation of this address verification procedure prior to disbursing IHP payments should help minimize improper payments based on invalid damaged property addresses.
Federal Emergency Management Agency The Secretary of the Department of Homeland Security (DHS) should direct the Director of the Federal Emergency Management Agency to address the weaknesses we identified in the administration of IHP. To address the concerns raised in our February 13, 2006, testimony, DHS and FEMA should explore entering into an agreement with other agencies, such as the Social Security Administration, to periodically authenticate information contained in IHP registrations.
Closed – Implemented
FEMA took action to explore such agreements and reported it is in the process of developing a real time verification mechanism with SSA. By exploring other available sources to verify IHP registration data, FEMA will be better positioned to respond to future disasters while also reducing the opportunity for fraud.
Federal Emergency Management Agency The Secretary of the Department of Homeland Security (DHS) should direct the Director of the Federal Emergency Management Agency to address the weaknesses we identified in the administration of IHP. To address the concerns raised in our February 13, 2006, testimony, DHS and FEMA should establish procedures to collect duplicate expedited assistance payments or to offset these amounts against future payments. Such duplicate payments include the payments made to IHP recipients who improperly received the $2,000 debit cards and an additional $2,000 EA check or Electronic Funds Transfer (EFT) and the thousands of duplicate EA payments made to the same IHP registration number.
Closed – Implemented
In March 2006, FEMA began actions to recoup these duplicate disaster relief payments. As of July 2006, FEMA reported it had recouped substantially all, about $16.8 million, in duplicate FEMA disaster assistance payments to Hurricane Katrina and Rita disaster victims using debit cards, checks, and electronic fund transfers.
Federal Emergency Management Agency The Secretary of the Department of Homeland Security (DHS) should direct the Director of the Federal Emergency Management Agency to address the weaknesses we identified in the administration of IHP. To address the concerns raised in our February 13, 2006, testimony, DHS and FEMA should ensure that any future distribution of IHP debit cards includes instructions on the proper use of IHP funds, similar to those instructions provided to IHP check and EFT recipients, to prevent improper usage.
Closed – Implemented
FEMA took action to eliminate debits cards from its plans to provide expedited disaster financial assistance. Consistent with the intent of our recommendation, FEMA's actions effectively limited the vulnerabilities we found associated with the use of debits cards to provide expedited financial assistance following disasters.

Full Report

Office of Public Affairs

Topics

AccountabilityCheck disbursement or controlData miningDisaster relief aidEligibility determinationsErroneous paymentsFraudHurricane KatrinaHurricane RitaHurricanesIdentity verificationInternal controlsNatural disastersProgram abuses