The Healthcare Fraud Enforcement Landscape
Healthcare fraud enforcement in the United States involves multiple federal agencies working in coordination:
Department of Justice (DOJ): Prosecutes criminal healthcare fraud cases and brings civil False Claims Act actions. The DOJ Healthcare Fraud Prevention and Enforcement Action Team (HEAT) coordinates federal, state, and local law enforcement.
HHS Office of Inspector General (OIG): Investigates fraud, waste, and abuse in Medicare and Medicaid. Issues advisory opinions, compliance guidance, and maintains the exclusion list.
Centers for Medicare & Medicaid Services (CMS): Administers Medicare and Medicaid and has authority to deny claims, suspend payments, and revoke provider enrollment for fraud.
Drug Enforcement Administration (DEA): Enforces controlled substance laws, investigates diversion, and can revoke DEA registrations for prescribing violations.
FBI: Investigates complex healthcare fraud schemes, including organized crime involvement in healthcare fraud.
The enforcement environment has intensified significantly. Data analytics allow CMS and OIG to identify billing anomalies and outlier prescribers with unprecedented precision. Whistleblower cases under the False Claims Act have generated billions in recoveries.
The False Claims Act: What Every Provider Must Know
The False Claims Act is the most powerful tool in the federal healthcare fraud enforcement arsenal. Key provisions:
Liability: Any person who knowingly submits a false or fraudulent claim to the federal government is liable for treble damages plus civil penalties of $13,000-$27,000 per false claim.
Qui tam provisions: Private individuals — including employees, competitors, and patients — can file False Claims Act lawsuits on behalf of the government and receive 15-30% of any recovery. This creates powerful incentives for whistleblowers.
Reverse false claims: Knowingly retaining an overpayment from Medicare or Medicaid is itself a False Claims Act violation. Providers who discover overpayments must report and return them within 60 days.
Common triggers: Billing for services not rendered, upcoding, unbundling, billing for medically unnecessary services, and kickback arrangements that result in false claims.
Anti-Kickback Statute and Stark Law
Anti-Kickback Statute (AKS): The AKS prohibits any remuneration — cash, free services, discounts, gifts — intended to induce or reward referrals of federal healthcare program business. The statute has broad application:
- Paying physicians for referrals (even indirectly through consulting fees or medical directorships) - Providing free or below-market services to referral sources - Offering discounts or rebates tied to referral volume - Lab specimen collection arrangements that compensate referring providers
Safe harbors exist for certain arrangements (employment, personal services, space rental) but must be carefully structured. Consult a healthcare attorney before entering any financial arrangement with a referral source.
Stark Law: Stark Law prohibits physician self-referrals for designated health services (DHS) to entities with which the physician has a financial relationship. DHS includes laboratory services, imaging, physical therapy, and other services. Stark Law is strict liability — no intent required. Exceptions exist but must be precisely met.
Schedule a Healthcare Strategy Session
Get StartedDEA Diversion and Controlled Substance Compliance
DEA diversion enforcement targets healthcare providers who prescribe controlled substances outside the bounds of legitimate medical practice. Key risk areas:
Pill mills: Clinics that prescribe opioids or other controlled substances without adequate medical evaluation, in exchange for cash, or in quantities inconsistent with legitimate medical need.
Prescribing without a valid patient relationship: Prescribing controlled substances via telehealth without meeting DEA requirements, or prescribing to patients the provider has never evaluated.
Pharmacy diversion: Pharmacies that dispense controlled substances without valid prescriptions, fill forged prescriptions, or participate in drug diversion schemes.
Record-keeping violations: Failure to maintain DEA-required records for controlled substance prescriptions and inventory.
Providers who prescribe controlled substances should conduct regular self-audits of their prescribing patterns, use prescription drug monitoring programs (PDMPs), and maintain thorough documentation of the clinical rationale for every controlled substance prescription.
Building a Compliance Program
The OIG recommends seven elements for an effective healthcare compliance program:
1. Written policies and procedures covering billing practices, AKS/Stark compliance, and controlled substance management 2. Compliance officer responsible for program oversight 3. Training and education for all staff on compliance requirements 4. Effective communication channels for reporting concerns 5. Internal monitoring and auditing of billing and clinical practices 6. Enforcement and discipline for compliance violations 7. Prompt response to detected offenses, including self-disclosure when appropriate
A compliance program does not guarantee immunity from enforcement, but it demonstrates good faith and can significantly reduce penalties if violations are discovered.
- ✓Written compliance policies covering billing, AKS, Stark, and controlled substances
- ✓Designated compliance officer with clear authority and reporting structure
- ✓Annual compliance training documented for all staff
- ✓Confidential reporting mechanism for compliance concerns
- ✓Regular internal billing audits (at least annually)
- ✓OIG exclusion list screening for all employees and contractors
- ✓Prompt investigation and response to all compliance concerns
AJ Pakpour Perspective
Healthcare fraud enforcement is not abstract. I have seen physicians lose their licenses, their practices, and their freedom because they did not understand the rules — or because they chose to ignore them.
The most dangerous situations are often not the obvious ones. It is the medical director who signs off on protocols without reviewing them. The clinic that accepts a "consulting fee" from a lab that refers patients. The telehealth company that prescribes controlled substances without adequate patient evaluation.
The rules are complex, but the core principle is simple: every clinical and financial decision should be made in the best interest of the patient, not to maximize billing or referrals. If a financial arrangement feels like it might be a kickback, it probably is. Get a healthcare attorney to review it before you proceed.