The workers compensation policy number from the state contractor record appeared on certificates of insurance the small business owner had never issued.
The residential painting company carried a real, active policy. An unaffiliated subcontracting crew placed that carrier name and policy number on certificates presented to general contractors so the crew could bid work it could not otherwise accept. Several general contractors treated the paper as valid until one office asked the carrier for direct confirmation. The carrier reported that no certificate had been issued and that the policy number had been used without authorization.
The state contractor license record listed the carrier relationship and, in that jurisdiction, the policy number as part of public license verification. That field was enough to build a document that passed informal job site checks. The small business owner did not lose premium dollars in the first wave. The damage arrived as reputational exposure and potential liability if the fraudulent crew caused a loss on a job where the forged certificate had created the appearance of coverage under his name.
For a small business owner in a licensed trade, the license file is required to keep working. The same file indexes insurance identifiers that the industry treats as trust tokens. Cleaning one certificate dispute does not remove the policy number from the public record, and it does not tell the owner how many other jobs accepted a copy before anyone called the carrier. Sequencing carrier notices, general contractor communications, and any claim that later cites the forged paper is not a single phone call. Missing a node leaves the original policy holder still attached to work he never performed.
This is what the Default Setup leaves behind. It isn't obvious unless someone knows where to look. The RuleDraft Small Business Isolation Manual walks Small Business Owners through the steps to separate their business from their personal lives.