FMLA Abuse: How to Investigate Suspected Misuse

A supervisor forwards you a photo. An employee who called off this morning on approved intermittent FMLA leave for a back condition is, according to a coworker's social media feed, at a lake with a boat. The supervisor wants him fired today.

Maybe he should be. Or maybe his certification restricts lifting and prolonged standing at a press, not sitting in a boat, and firing him would hand him an interference claim. Suspected FMLA abuse is one of the few HR problems where both doing nothing and acting quickly are dangerous. The answer is an investigation that uses the tools the regulations give you, in the right order, before anyone decides anything.

This guide covers what those tools are under 29 CFR Part 825, where surveillance fits, how the honest-belief defense works and why it differs by court, and how to keep an abuse inquiry from becoming a retaliation case.

What Counts as FMLA Abuse, and What Does Not

The regulations address fraud directly: an employee who fraudulently obtains FMLA leave is not protected by the FMLA's job restoration or maintenance of health benefits provisions (29 CFR 825.216(d)). That is the legal footing for acting on real misuse.

In practice, FMLA abuse usually means one of three things:

Obtaining leave through a false or altered certification
Using approved leave for a purpose other than the certified reason
Using more leave than the condition requires

These are not abuse on their own:

A pattern. Monday and Friday absences are a reason to look, not a finding.
Activity while on leave. An employee on leave is not required to stay home unless the certification says the condition is incapacitating in that way. The question is whether the activity is inconsistent with the certified restrictions.
Heavy but certified use. If the certification supports the frequency, the leave is protected even when it is operationally painful.

The Legal Guardrails: Interference and Retaliation

Before the tools, the limits. Under 29 CFR 825.220, an employer may not interfere with, restrain, or deny the exercise of FMLA rights, and may not use the taking of FMLA leave as a negative factor in employment actions such as hiring, promotions, or disciplinary actions. FMLA leave may not be counted under no-fault attendance policies.

Two types of claim follow from that, and an abuse investigation can trigger either:

Claim	What the employee must show, in general	How abuse investigations create it
Interference	The employee was entitled to an FMLA benefit and was denied it	Denying or revoking leave that turns out to have been legitimate; discouraging future use
Retaliation	The employer took adverse action because the employee used FMLA leave	Discipline that tracks the leave itself, hostile comments by supervisors, treating FMLA users more harshly than others

Keep these in view at every step. For more background, see FMLA Abuse and Retaliation: A Guide for HR Professionals and Employer Rights Under the FMLA and Their Limits.

How to Investigate Suspected FMLA Abuse: Seven Steps

Step 1: Take the matter away from the supervisor

Supervisors are usually the source of the suspicion and often the source of the retaliation evidence. HR or the leave administrator should own the inquiry. Tell the supervisor not to question the employee about the condition, not to comment on the leave, and to send you what they have. Note that the regulations bar the employee's direct supervisor from contacting the employee's health care provider under any circumstances (29 CFR 825.307(a)).

Step 2: Compare usage to the certification

Pull the certification and the attendance record side by side. Look at certified frequency and duration against actual use, the stated restrictions, and the timing of absences. A documented gap, such as two episodes a month certified and nine taken, is an objective basis for the next steps. A feeling is not. Our FMLA Intermittent Leave: Complete HR Guide explains how certified frequency and duration should be written.

Step 3: Use recertification

Recertification under 29 CFR 825.308 is the main lawful tool, and it has precise limits:

General rule. You may request recertification no more often than every 30 days, and only in connection with an absence.
Longer certified duration. If the certification states a minimum duration longer than 30 days, you generally must wait until it expires. In all cases you may request recertification every six months in connection with an absence.
Sooner than 30 days. You may ask earlier if the employee requests an extension, if circumstances described by the previous certification have changed significantly, or if you receive information that casts doubt on the employee's stated reason for the absence or the continuing validity of the certification.
Timing. The employee must be given at least 15 calendar days to provide it.
Absence pattern. You may give the health care provider a record of the employee's absence pattern and ask whether the condition and need for leave are consistent with it.
Cost and limits. Recertification is at the employee's expense unless you provide otherwise, and no second or third opinion may be required on a recertification.

The absence-pattern question is underused. It puts the pattern in front of the one person who can say whether it is medically explained, and it does so in writing.

Step 4: Authenticate or clarify the certification

If a certification looks altered or unclear, you may contact the health care provider to authenticate or clarify it, but only after giving the employee a chance to cure any deficiency, and only through a health care provider, an HR professional, a leave administrator, or a management official (29 CFR 825.307(a)). You may not ask for information beyond what the certification form covers.

A second opinion, at the employer's expense and from a provider you do not regularly employ, is available when you have reason to doubt the validity of an initial certification. The employee is provisionally entitled to FMLA benefits while it is pending. The details are in our article on medical certification, recertification and second opinions.

Step 5: Enforce the rules that apply to everyone

Several neutral controls are expressly allowed:

Call-in procedures. For unforeseeable leave, an employee must comply with the employer's usual and customary notice and procedural requirements, absent unusual circumstances (29 CFR 825.303(c)). Calling in "sick" without more is not sufficient notice to trigger FMLA obligations (825.303(b)).
Status reports. You may require an employee on leave to report periodically on status and intent to return, if the policy is not discriminatory (29 CFR 825.311(a)).
Outside employment. A uniformly applied policy governing outside or supplemental employment may continue to apply during FMLA leave (29 CFR 825.216(e)).

Uniformly is the operative word. A call-in rule enforced only against FMLA users is evidence of retaliation.

Step 6: Gather evidence, with care around surveillance

Ordinary sources come first: timekeeping, badge records, the employee's own statements to coworkers, publicly visible social media that someone brings to you, records of a second job.

The FMLA regulations do not mention surveillance, so they neither authorize nor prohibit it. Courts have accepted surveillance evidence in abuse cases. In one Seventh Circuit case described in a later opinion, an employer's off-duty police officer observed an employee mowing lawns on a morning that coincided with back-to-back leave requests for migraines, and that was enough to support the employer's honest suspicion. The same court later made clear that surveillance is not required before disciplining for FMLA abuse (Juday v. FCA US LLC, 7th Cir. 2023).

If you consider it, apply limits:

Have a documented, specific reason first. Surveillance on a hunch looks like targeting.
Observe only public conduct. No entry onto property, no recording of private conversations, no pretext contact.
Use a properly licensed vendor where state law requires one. Check private investigator licensing rules in the state where the surveillance occurs.
Check state law before you start. State privacy, recording, GPS-tracking, and off-duty-conduct statutes, the NLRA, and any union contract may restrict surveillance; confirm with counsel.
Treat what you see as a question, not an answer. Activity must be compared with the certified restrictions.

Step 7: Interview the employee before deciding

Do not skip this. Present the facts and ask for an explanation: where were you, what were you doing, how does that fit your restrictions? Document the answers. In Juday, the employer interviewed both spouses about overlapping leave, and their inability to explain the pattern was central to the court's conclusion that the employer acted on an honest suspicion.

An interview also catches the innocent explanation, such as a medical appointment in the morning and the lake in the afternoon, before it becomes a lawsuit. Follow the same discipline you would in any inquiry; see the HR investigation process, step by step, and where the employee's account conflicts with other evidence, apply a structured credibility assessment.

The Honest-Belief Defense, and Why It Varies by Circuit

If you discipline for abuse and the employee sues, a central question is often not whether the employee actually abused leave but what the employer believed and why. Courts call this the honest-belief or honest-suspicion rule. It is not uniform.

Third Circuit. In Capps v. Mondelez Global, LLC (2017), the court held that where an employer provides evidence that the reason for the adverse action was an honest belief that the employee was misusing FMLA leave, that is a legitimate, nondiscriminatory justification that defeats a retaliation claim, even if the belief was mistaken.
Sixth Circuit. As Capps describes it, the Sixth Circuit uses a modified version that requires the employer's reason to be honest and also reasonably based on particularized facts.
Seventh and Eighth Circuits. Capps notes that both decline to follow the Sixth Circuit's modification. In Juday, the Seventh Circuit applied its honest-suspicion standard to both the interference and the retaliation claims.

The interference side is less settled. In Capps itself, the interference claim failed for a different reason: the employee had not been denied a benefit. Some courts are reluctant to let an employer's state of mind defeat a claim that turns on entitlement. Confirm with employment counsel how the honest-belief rule is applied to interference and retaliation claims in your circuit.

The practical lesson is the same everywhere. Investigate as if you will have to show particularized facts: what you knew, when, how you checked it, and what the employee said. That file satisfies the stricter version and the looser one.

Deciding and Documenting

Base any discipline on the conduct the investigation established, such as dishonesty, falsifying a record, or violating the call-in or outside-employment policy, and name the policy. Do not write "excessive absences." Check how you have treated comparable dishonesty by employees who were not on leave. Have someone who was not involved in the suspicion review the decision.

If the evidence does not support abuse, close the file, restore any leave that was questioned, and make sure the supervisor understands that the employee's future leave is protected. The FMLA Compliance Checklist and Managing Suspected Leave Abuse are useful references for the administrative side.

Investigating potential FMLA abuse is listed as a topic in the Internal Investigations Certificate Program, and there is a shorter How to Identify and Investigate FMLA Abuse webinar for leave administrators who need the focused version.

Frequently Asked Questions

Can an employer fire an employee for FMLA abuse?

Yes, if the evidence supports it. An employee who fraudulently obtains FMLA leave loses the FMLA's job restoration and benefits protections. The decision should rest on documented misconduct established through an investigation, not on the amount of leave taken.

Can an employer follow or surveil an employee on FMLA leave?

The FMLA regulations do not address surveillance, and courts have accepted surveillance evidence in abuse cases. State privacy and licensing laws, the NLRA, and union contracts may limit it, so get legal advice first and observe only public conduct.

How often can I ask for recertification when I suspect abuse?

Generally no more than every 30 days and only in connection with an absence. You may ask sooner if you receive information that casts doubt on the stated reason for the absence or on the continuing validity of the certification. Allow at least 15 calendar days.

Can I send the employee's attendance record to the doctor?

Yes. On recertification you may provide the health care provider with a record of the absence pattern and ask whether the condition and need for leave are consistent with it.

Is posting vacation photos proof of FMLA abuse?

Not by itself. Compare the activity with the certified restrictions and ask the employee to explain. Some conditions prevent the job without preventing ordinary activity.

What is the honest-belief defense?

It is a rule courts apply when an employer disciplines for suspected leave misuse: the question becomes whether the employer honestly believed misuse occurred. The Sixth Circuit also requires that the belief rest on particularized facts, and the rule's reach differs by circuit.

The Bottom Line

FMLA abuse cases are won or lost on process. Use recertification and the absence-pattern question before anything more aggressive, enforce neutral policies evenly, interview the employee, and write down the specific facts you relied on. Then discipline for the dishonesty, not the leave.

For the wider framework, see the Workplace Investigations Guide. To build the interviewing and documentation skills this kind of case demands, review the Internal Investigations Certificate Program.

Investigating Suspected FMLA Abuse: A Step-by-Step Guide for HR