Federal prosecutors said the man used variations on a single Gmail address to bypass states' fraud-detection systems en route to collecting nearly $290,000 in phony claims.