HOW DO YOU ACTUALLY GO ABOUT FLAGGING INSURANCE SCAMS?

Had a weird situation recently where I found out someone I know is definitely scamming their insurance company. Felt kinda off about it, so I looked into how to report it. Turns out you gotta gather some solid evidence first - dates, documents, conversations if you have 'em - and then contact the insurance company's fraud hotline or your state's insurance department. Seems straightforward enough, but idk, feels kinda awkward. Anyone done this before or know an easier way to handle it?