Abstract: Methods, systems, and articles of manufacture consistent with embodiments of the present invention perform a fraud detection process that organizes collected documents into one of a set of categories based on selected variables and information included in the documents. Each category of documents has one or more category types, which in turn, are associated with at least one variable that is further associated with certain threshold limits. The fraud detection process identifies one or more category types that are indicative of fraud based on an analysis of threshold violations for each variable in each category type. Based on the results of the analysis, and possibly filtering logic, selected documents are extracted from the identified category types and targeted for fraud analysis that may include validating the information included in each extracted document.