In this paper, we provide a comprehensive review of methodology for detecting anomalies based on the literature, industry expert and our findings. We elicit links between health service providers based on their shared customer base. Looking at the connections of providers, their geographical arrangements and statistical comparison of profile attributes, we highlight links which could be classified as suspicious or fraudulent behaviour.