They never walked through the door. They never sat in the waiting room. They never spoke to a doctor or received a single minute of care. But in the billing system, they exist and they are generating thousands of dollars in insurance claims every month.
Ghost patients are precisely what the name suggests: fabricated or misappropriated patient identities used to submit claims for healthcare services that never happened. It is one of the oldest and most brazen forms of healthcare fraud in existence and according to a March 2026 FinCEN advisory, Bank Secrecy Act reporting on healthcare fraud surged 330% from 2020 through 2025, peaking in 2025 with a record of over 3,800 suspicious activity reports filed by financial institutions. The schemes behind many of those reports involved exactly this: billing for services never rendered.
From small physical therapy clinics to multi state telehealth platforms to organized crime rings operating under the guise of legitimate providers, ghost patient billing is draining Medicare, Medicaid, and private insurers of billions of dollars annually. Here’s how it works, what the real cases look like, and how organizations can detect and report it.
What Are Ghost Patients and How Does Phantom Billing Work?
At its core, ghost patient fraud also called phantom billing involves submitting a claim for a medical service that was never delivered to a real patient who was never treated. The FBI formally defines phantom billing as charging for a service visit or supplies the patient never received.
In practice, ghost patient schemes operate through several distinct mechanisms:
Completely fabricated patients. A clinic invents patient identities or purchases stolen insurance credentials on the black market and submits claims as if those individuals received care. The “patients” don’t exist, or they exist but have no idea their insurance information is being used.
Real patients, fabricated visits. A clinic has genuine patients on record but submits claims for appointments that never occurred, procedures never performed, or supplies never dispensed. The patient is real; the care is invented.
Credential misuse without provider knowledge. A fraudulent operator uses a physician’s National Provider Identifier (NPI) their billing credential to submit claims for services the physician neither provided nor authorized. In a December 2025 case, Nosson Sklar pled guilty in the Southern District of New York to submitting over $20 million in fraudulent rehabilitation claims by falsely attributing physical therapy services to a physician who had no involvement with his facilities and never authorized the use of their credentials.
Ghost factories for durable medical equipment. Fraudsters establish shell companies that appear to be legitimate DME suppliers wheelchairs, hospital beds, medical devices and bill Medicare for equipment never ordered, never shipped, and never received. In the DOJ’s June 2024 national healthcare fraud action, 193 defendants across 32 states were charged with operating wound care, genetic testing, and DME ghost factory schemes totaling $2.75 billion in false billings.
What all of these variants share is the fundamental structure of ghost patient fraud: a claim for payment in which either the patient, the provider, the service, or the supplies are fictional.
Why Ghost Patient Fraud Is So Hard to Detect Until It Isn’t
The persistence of ghost patient schemes is not accidental. It exploits specific structural vulnerabilities in how healthcare claims are processed, reviewed, and audited.
Volume based processing obscures individual fraud. Medicare alone processes hundreds of millions of claims annually. Automated systems approve the vast majority before any human review occurs the “pay and chase” model that the government has been trying to reform for decades. A well constructed ghost patient scheme that stays within statistically plausible parameters can generate fraudulent payments for months or years before a pattern emerges.
Patients don’t notice because they have no reason to. A ghost patient whose insurance credentials are used without their knowledge never sees a doctor. They may receive an Explanation of Benefits document but many people don’t review EOBs carefully, and the services described may not raise immediate alarm for someone unfamiliar with billing codes.
Documentation is fabricated alongside the claims. Sophisticated ghost patient operations don’t just submit bare claims they generate supporting documentation: clinical notes, signatures, treatment plans. In one case prosecuted by Cotiviti’s fraud investigation team, participants in a Medicaid billing scheme paid parents and guardians of actual patients to sign blank nursing notes that were later used to support fraudulent billing for nursing services that were never delivered or were vastly overstated.
Organized crime has industrialized the model. As our post on how AI powered fraud is reshaping corporate security in 2026 discusses, fraud networks increasingly combine AI tools, stolen identity databases, and sophisticated money laundering infrastructure to run ghost patient operations at scale. What was once a solo practitioner crime is now an organized enterprise.
Real Cases: The Scale and Sophistication of Ghost Patient Fraud
The case files from the DOJ, HHS OIG, and state prosecutors reveal the true scope of what ghost patient billing looks like in practice.
Arizona couple, $1.2 billion in Medicare fraud. A couple pled guilty in 2024 to submitting over $1.2 billion in fraudulent Medicare claims for unnecessary amniotic wound grafts on elderly patients. The scheme involved staged care for billing purposes patients who did visit clinics but received procedures they didn’t need to generate claims.
Arizona Medicaid behavioral health ring, $55 million. Eight people, including a former Arizona Department of Health employee, were indicted for billing the state’s Medicaid agency for phantom behavioral health services. They used multiple business entities to submit fraudulent claims and received nearly $55 million in payments before the scheme was disrupted.
Los Angeles hospice and diagnostic fraud, $54 million. Two Los Angeles residents were charged with a Medicare fraud scheme involving false claims for hospice and diagnostic testing services. One allegedly received over $23 million in inappropriate reimbursements before attempting to launder the proceeds purchasing $6 million in gold bars and coins using false identities.
COVID 19 testing lab fraud, $227 million. Owners of COVID 19 testing labs were charged in January 2025 with submitting $227 million in fraudulent Medicare claims for testing services that were either never provided or not medically necessary.
These cases are not anomalies. FinCEN’s March 2026 advisory notes that healthcare fraud with phantom billing as a dominant component has become one of the largest sources of illicit proceeds in the United States, driven partly by the explosion of telehealth and digital billing platforms that created new surface area for ghost patient fraud.
How Ghost Patient Fraud Is Detected
Despite the structural advantages fraudsters exploit, ghost patient schemes are ultimately detectable and the detection tools have never been stronger.
Explanation of Benefits review. Every patient on a health plan receives an EOB when a claim is submitted in their name. When a ghost patient scheme uses real individuals’ credentials, those individuals can identify services they never received. Insurers and compliance teams increasingly encourage beneficiaries to review their EOBs and report discrepancies a practice that has surfaced numerous schemes.
Statistical outlier analysis. Providers who bill for an implausible volume of patients within a given time period, or whose claim patterns include procedures never clinically associated with their specialty, are flagged by CMS’s Fraud Prevention System and private insurer Special Investigations Units. Billing 30 physical therapy patients per day when the facility’s capacity supports 10 is an arithmetic red flag.
Pattern matching across claims data. Modern fraud analytics platforms like those deployed by Cotiviti for major health plans cross reference claims against clinical records, appointment logs, and physical location data. A claim submitted for a home health visit when the patient was hospitalized on that date is an immediate red flag. Our post on what evidence fraud investigators actually look for explains how investigators reconstruct these patterns from claims data.
Whistleblowers. The majority of ghost patient schemes that are successfully prosecuted originate with insider tips. A billing coder who notices claims being submitted for patients not in the appointment system. A nurse who realizes documentation is being created for visits she never participated in. A physician whose NPI appears on claims for services at facilities they’ve never visited. Our guide on how to report corporate fraud anonymously is essential reading for anyone in this position.
What Healthcare Organizations and Insurers Can Do Right Now
Ghost patient fraud isn’t only a government problem. Employer sponsored health plans, commercial insurers, and healthcare organizations all bear direct financial exposure and can take concrete action.
For healthcare providers and compliance officers:
- Regularly audit claims submitted under your facility’s NPI against your actual appointment and treatment records
- Implement controls requiring clinical documentation to be created contemporaneously not retrospectively or through copy paste from prior visits
- Monitor for credentialing anomalies: claims submitted under your physicians’ NPIs at locations or times inconsistent with their schedules
- Establish anonymous reporting channels so billing staff can surface concerns without retaliation (see our post on whistleblower retaliation protections)
For insurers and employer health plans:
- Encourage beneficiaries to review their EOBs through regular, plain language communications
- Deploy prepayment integrity analytics to flag claims before payment rather than relying on post payment recovery
- Investigate providers with claim volumes statistically inconsistent with their licensed capacity
- Share SIU findings with peer insurers and law enforcement through established data sharing channels
A forensic accounting investigation is often required to reconstruct the full scope of a ghost patient scheme tracing fraudulent payments across multiple entities, accounts, and time periods in a format that supports criminal prosecution and civil recovery.
Frequently Asked Questions (FAQ)
Q1: What is the difference between ghost patients and upcoding? Ghost patient fraud involves billing for services, procedures, or patients that don’t exist the encounter itself is fabricated. Upcoding involves a real patient encounter but inflates the billing code to reflect a more expensive service than was actually delivered. Both violate the False Claims Act, but ghost patient fraud is generally treated as more severe because the entire encounter is fabricated rather than misrepresented.
Q2: Can a real patient’s insurance be used in a ghost patient scheme without their knowledge? Yes, and it happens frequently. Fraudsters purchase stolen insurance credentials or obtain them through identity theft, then submit claims as if the real beneficiary received services. The legitimate patient typically discovers the fraud through an unexpected EOB, a bill for a procedure they never received, or in rare cases, when their insurance benefits are exhausted by fraudulent claims.
Q3: Who is liable when a physician’s NPI is used without their knowledge? The primary liability rests with whoever submitted the fraudulent claims. However, physicians whose NPIs appear on fraudulent claims may face OIG inquiries, credentialing complications, and reputational damage. The False Claims Act does not require intent for civil liability but prosecutors generally pursue those who knowingly submitted false claims, not unwitting victims of credential theft.
Q4: How much of Medicare’s budget is lost to ghost patient and phantom billing schemes? The full scope is difficult to quantify because many schemes go undetected. HHS OIG reported improper payments in Medicare Part B exceeded $25 billion in 2024, with fraud and billing errors accounting for a significant share. The DOJ’s 2025 national healthcare fraud takedown alone identified $14.6 billion in intended losses from schemes including phantom billing.
Q5: What should an insurer do if it suspects a provider is billing for ghost patients? Immediately refer the case to the insurer’s Special Investigations Unit (SIU) if one exists. Preserve all claims data and supporting documentation. Contact HHS OIG if Medicare or Medicaid is involved. Do not alert the provider before evidence is secured premature disclosure can trigger document destruction. The fraud investigation process requires careful sequencing to avoid compromising the evidentiary record.
Q6: Are employees who unknowingly participate in ghost patient billing liable? Generally, no criminal liability requires knowing and willful participation in fraud. Employees who created documentation or submitted claims without understanding they were fraudulent are typically treated as witnesses rather than defendants. If an employee realizes they have been participating in a ghost patient scheme, they should consult a whistleblower attorney immediately. The False Claims Act provides financial rewards and legal protections for those who come forward.
Conclusion: Ghost Patients Are Real And So Is the Enforcement
Ghost patients are not a theoretical fraud risk or an edge case. They are the basis of multi billion dollar criminal enterprises documented in prosecutions from Arizona to New York, from Medicaid behavioral health to Medicare DME. The FinCEN data is unambiguous: healthcare fraud with phantom billing as a core mechanism has grown dramatically since 2020 and shows no signs of declining.
The enforcement response has grown proportionally. The DOJ’s AI powered detection tools, the FBI’s healthcare fraud task forces, and the HHS OIG’s exclusion authorities represent a formidable apparatus. But the most consistent source of detection remains human beings insiders who recognize that the billing records don’t match the care actually delivered.
If your organization has identified suspicious billing patterns, suspected ghost patient fraud, or wants to build detection systems that protect your plan and your patients, contact FraudOrder today to speak with a fraud investigation professional.
References
- FinCEN (Financial Crimes Enforcement Network). (2026, March). Healthcare Fraud Advisory. https://www.fincen.gov/system/files/2026 03/FinCEN Advisory Health Care Fraud.pdf
- U.S. Department of Justice. (2025, June 30). National Health Care Fraud Takedown Results in 324 Defendants Charged in Connection with Over $14.6 Billion in Alleged Fraud. https://www.justice.gov/opa/pr/national health care fraud takedown results 324 defendants charged connection over 146
- U.S. Department of Justice. (2024, June 27). National Health Care Fraud Enforcement Action Results in Charges Against 193 Individuals for $2.75 Billion in False Billings. https://www.justice.gov/archives/opa/pr/national health care fraud enforcement action results 193 defendants charged and over 275 0
- WCHSB Insights. (2025, December 22). The Shadow of Ghost Billing: A $20 Million Rehab Fraud and Its Wake Up Call for American Physicians. https://insights.wchsb.com/2025/12/22/the shadow of ghost billing a 20 million rehab fraud and its wake up call for american physicians/
- Cotiviti. (2025, December). FWA Insights: Billing for Services Not Rendered. https://resources.cotiviti.com/fraud waste and abuse/fwa insights billing for services not rendered
- Cotiviti. (2025, March). Busted: The Top Healthcare Fraud Schemes of Q4 2024. https://resources.cotiviti.com/fraud waste and abuse/busted the top healthcare fraud schemes of q4 2024
- Ethos Risk Services. (2025, June 26). The Hidden Business of Healthcare Fraud Rings. https://ethosrisk.com/blog/the hidden business of healthcare fraud rings/
- Federal Bureau of Investigation. Health Care Fraud. https://www.fbi.gov/investigate/white collar crime/health care fraud
- U.S. Department of Justice. (2025, January 10). Owners of COVID 19 Testing Labs Charged for $227 Million Medicare Fraud Scheme. https://www.justice.gov/opa/pr/owners covid 19 testing labs charged 227 million medicare fraud scheme
- Khalaf Khatib and Caudill LLP. (2025). What is Phantom Billing in Healthcare? https://kkc.com/frequently asked questions/what is phantom billing in healthcare/
Disclaimer: This article is provided for informational purposes only and does not constitute legal, financial, compliance, or professional advice. No attorney client or consulting relationship is created by reading or sharing this content. Healthcare fraud laws, enforcement priorities, and liability standards vary by jurisdiction, payer type, and individual case facts. Always consult a qualified healthcare attorney, certified fraud examiner, or compliance professional for guidance specific to your situation. For questions about FraudOrder services, visit https://fraudorder.co/