7 COI Red Flags Operations Teams Can't Afford to Miss

Even experienced operations teams miss critical warning signs when reviewing certificates of insurance, creating liability gaps that only surface when claims arise. Knowing what to watch for can save your organization from expensive coverage disputes and project delays.

The Certificate Looks Perfect — But Is It?

A professionally formatted certificate isn't always a valid one. Fraudulent certificates are a growing concern, and common mistakes like expired certificates, wrong entity names, missing endorsements, and mismatched limits create compliance gaps that only become visible after a claim. Here are the seven most critical red flags every operations team should recognize immediately.

Red Flag #1: Certificate Dates Don't Cover Your Project Timeline

Short-dated certificates where the dates don't extend through project completion mean that if work runs over, the COI is technically out of date even if the policy has renewed. Always verify that coverage dates span your entire project duration with buffer time.

A roofing contractor provides a certificate that expires two weeks into a month-long project. Even if their policy renews, you're left scrambling for updated documentation mid-project.

Red Flag #2: "Additional Insured" Listed Without Actual Endorsement

Additional insured status is added by endorsement to the underlying policy, not just by listing someone on the certificate. A COI that claims additional insured status but is not backed by an actual policy endorsement creates a documentation mismatch. This is one of the most dangerous gaps because you think you're covered when you're not.

The policy endorsements are what legally extend coverage to you. CG 20 10 (ongoing) and CG 20 37 (completed operations) are the two endorsements that matter for general liability additional insured.

Red Flag #3: Coverage Limits Below Contract Requirements

Insufficient limits mean providing a COI with $500,000 limits when the contract requires $1,000,000. The certificate satisfies a checkbox but the underlying contract requirement isn't met. Don't accept certificates that fall short of your specified minimums, regardless of vendor explanations.

Red Flag #4: Certificate Holder Information Is Incorrect

Incorrect certificate holder details — wrong company name, old address, or missing project information — signal sloppy documentation practices. If the vendor can't get basic information right, question their attention to coverage details.

Red Flag #5: Missing Workers' Compensation for Contractors With Employees

If one of their workers gets hurt on your jobsite and they don't have workers' comp, you could be held responsible as the controlling employer. Always verify workers' compensation coverage for any contractor bringing employees to your site.

Red Flag #6: The Certificate Is Too Perfect

Receiving a piece of paper that says "Certificate of Insurance" is only the first step. To ensure you are truly protected, you must verify the document's authenticity. Fraudulent COIs are a growing concern. Certificates with no exclusions, perfect formatting, or unusually comprehensive coverage may warrant additional verification.

Red Flag #7: Policy Numbers or Carrier Information That Can't Be Verified

Call the insurance broker directly and ask: "Is [Contractor Name]'s policy [Policy Number] currently active and in good standing?" If you can't reach the listed agent or carrier, or if they can't confirm the policy details, investigate further before accepting the certificate.

Creating Your COI Review Checklist

Developing a checklist for reviewing COIs can help ensure nothing is overlooked. Your verification process should include:

• Coverage dates extend through project completion
• All required coverage types are present with adequate limits
• Additional insured endorsements are confirmed (not just listed)
• Workers' compensation coverage is verified for contractors with employees
• Certificate holder information is accurate and complete
• Policy numbers and carrier information can be independently verified
• Agent contact information is current and responsive

Don't rely on visual inspection alone. Proof of insurance coverage should always come directly to you from the insurer, never from the vendor. Every insurance company has processes and procedures in place to send you the documentation you'll need.

Manual certificate review is error-prone and time-consuming, especially when managing multiple vendors. Consider implementing automated COI tracking solutions that can flag these red flags instantly and maintain audit trails for compliance reviews. For organizations serious about scaling their vendor management, explore comprehensive COI compliance automation that eliminates these risks.

FAQ: How can I verify a suspicious certificate?

Contact the insurance agent or carrier listed on the certificate directly. Ask for confirmation of the policy number, coverage dates, and specific endorsements. Never accept verbal confirmations from the contractor themselves.

FAQ: What should I do if I find red flags in a certificate?

Immediately notify the contractor of the deficiencies and request a corrected certificate before allowing work to begin. Document your findings and don't proceed until compliance is verified.

FAQ: How often should certificates be reviewed during long-term projects?

COIs should be re-collected at every policy renewal — typically annually, or whenever the vendor changes carriers. Best practice is to start the renewal request at 60 days before expiration. Set automatic renewal reminders to prevent coverage gaps.

Check Your COI Compliance Instantly

Try unifi.ai free — no signup required.