Medicare and Medicaid fraud

In June 2026, federal prosecutors charged 455 people across 56 federal districts in the largest health care fraud takedown in U.S. history by number of defendants, tied to more than $6.5 billion in alleged false claims. A few months earlier, the Department of Justice (DOJ) reported a record $6.8 billion in False Claims Act recoveries for fiscal year 2025, and more than $5.7 billion of it came from health care.

Those headlines involve organized schemes, but the tools behind them now reach every provider that bills a government program. Whether you run a clinic, a home health agency, a lab, or a medical equipment supplier, you need to understand how Medicare and Medicaid fraud cases actually begin and how quickly the costs pile up.

What Counts as Medicare and Medicaid Fraud (and What Does Not)

Not every billing problem is Medicare and Medicaid fraud. The Centers for Medicare & Medicaid Services (CMS) estimated a 6.55% improper payment rate for Medicare fee-for-service and 6.12% for Medicaid in fiscal year 2025. CMS notes that most Medicaid improper payments stem from insufficient documentation, which is generally not a sign of fraud.

The legal line is intent and knowledge. Medicare and Medicaid fraud usually involves one or more of these laws:

  • The False Claims Act (FCA): civil liability for knowingly submitting false claims, including through “reckless disregard.”
  • The Anti-Kickback Statute: a criminal law against paying or receiving anything of value for patient referrals.
  • The Stark Law: limits physician self-referrals to entities where the physician has a financial interest.
  • The criminal health care fraud statute (18 U.S.C. § 1347): covers schemes to defraud any health care benefit program.

The practical takeaway is simple. An honest mistake becomes a fraud problem when it is ignored, repeated, or covered up. For a closer look at common schemes, see our guide to upcoding, phantom billing, and kickbacks.

What Triggers a Medicare and Medicaid Fraud Investigation

Medicare and Medicaid fraud investigations rarely start with a random audit. They usually start with a signal. The most common triggers include:

  • Data analytics outliers. DOJ’s Health Care Fraud Unit now runs a Data Fusion Center with HHS-OIG, the FBI, and other agencies, and CMS has opened its claims data repository to DOJ analytics tools. Billing far above peers, sudden volume spikes, and impossible patient counts get flagged fast.
  • Whistleblowers. Whistleblowers filed 1,297 qui tam lawsuits in fiscal year 2025, the highest number on record and a 32% jump over the prior year. Many come from billing staff, nurses, and former managers.
  • Managed care referrals. Medicaid Fraud Control Units (MFCUs) received 5,991 fraud referrals from managed care organizations in fiscal year 2025.
  • Contractor audits. CMS contractors review claims through programs such as Comprehensive Error Rate Testing and targeted audits, and repeated errors can escalate into fraud referrals.
  • High-risk service categories. Durable medical equipment, genetic and lab testing, telehealth, and wound care products featured heavily in the 2026 takedown.
  • Patient complaints. Beneficiaries who receive statements for services they never had remain an important source of leads.

Speed has changed too. In one 2026 case, investigators moved from opening the matter to an arrest in about seven months. Medicare and Medicaid fraud enforcement is now data-driven, coordinated, and fast.

What Happens Once an Investigation Begins

Many providers first learn about an investigation through a subpoena, a Civil Investigative Demand (CID), or an agent knocking on the door. Others discover it when CMS suspends their payments while allegations are reviewed.

Here is a realistic scenario. A home health agency’s billing manager notices that one physician signs hundreds of certifications each month for patients the clinicians never saw. She raises it internally, nothing changes, and she files a qui tam complaint. Months later, the agency receives a CID requesting years of records. By then, the government already has internal emails, billing data, and a cooperating witness.

That pattern is common. Investigators often know more than the organization does when the first letter arrives. This is why the first steps matter so much, and our guide to the first 48 hours after discovering fraud explains how to preserve evidence and avoid missteps.

What Medicare and Medicaid Fraud Actually Costs

The financial exposure in Medicare and Medicaid fraud cases is larger than most owners expect, because penalties are counted per claim.

  • FCA damages and penalties. The FCA allows up to three times the government’s losses, plus a civil penalty for each false claim. For penalties assessed after July 3, 2025, that penalty ranges from $14,308 to $28,619 per claim. Just 500 false claims could mean more than $7 million in penalties before damages are even counted.
  • Criminal penalties. Health care fraud carries up to 10 years in prison per count, and kickback violations can bring prison time and substantial fines.
  • Exclusion. MFCU cases alone led to the exclusion of 900 individuals and entities from federal health care programs in fiscal year 2025. Exclusion can end a business that depends on Medicare or Medicaid patients.
  • Payment suspensions. Cash flow can stop while an investigation is pending, often for months.
  • Hidden costs. Legal fees, forensic reviews, staff turnover, and reputational damage often continue long after a settlement.

Recovery efforts are significant. MFCUs reported nearly $2 billion in combined criminal and civil recoveries in fiscal year 2025, returning $4.64 for every dollar they spent.

Practical Steps to Reduce Your Medicare and Medicaid Fraud Risk

You cannot control whether the government looks at your claims. You can control what it finds. Start with these steps:

  1. Audit yourself first. Run quarterly internal reviews of your highest-volume and highest-paid codes and compare them against peer benchmarks.
  2. Vet every referral relationship. Document fair market value for physician contracts, marketing arrangements, and medical director agreements.
  3. Fix documentation gaps. Train clinicians on medical necessity and make sure records support every claim before it is billed.
  4. Take internal complaints seriously. Most qui tam cases start with an employee who felt ignored. A fast, documented response reduces that risk. The fraud triangle explains why pressure inside billing teams can push good people toward bad decisions.
  5. Return overpayments promptly. Federal rules require identified overpayments to be reported and returned, and keeping them can create FCA liability.
  6. Strengthen controls. Separate billing, coding, and payment approval duties. Our post on internal controls that actually stop theft covers which safeguards hold up in practice.

Conclusion: Find the Problem Before the Government Does

Medicare and Medicaid fraud investigations now start with data, whistleblowers, and coordinated agencies that move quickly. The costs, including per-claim penalties, exclusion, and suspended payments, can threaten an organization’s survival. The good news is that most risk is visible from the inside first, if someone is looking.

If you suspect billing problems or have received a subpoena or CID, an independent review can clarify your exposure and protect your position. Learn more about FraudOrder’s healthcare fraud investigation services, or contact our team for a confidential conversation.

Frequently Asked Questions

1. What is the most common trigger for a Medicare fraud investigation?

Data analytics and whistleblower complaints are the two biggest triggers today. Billing patterns that stand out from peers get flagged automatically, while employees and former staff file a growing number of qui tam lawsuits.

2. Is a billing error the same as Medicare fraud?

No. Fraud requires knowledge or intent, which can include reckless disregard of the rules. However, repeated errors that go uncorrected, or overpayments that are identified but not returned, can turn a mistake into potential liability.

3. How much can a False Claims Act case cost a provider?

Liability can include up to three times the government’s losses plus $14,308 to $28,619 per false claim. Because penalties multiply across hundreds or thousands of claims, even a small practice can face seven-figure exposure.

4. What should we do if we receive a subpoena or CID?

Preserve all relevant records immediately, suspend routine document deletion, and contact experienced health care counsel. Avoid discussing the matter widely or altering any records.

5. Can FraudOrder audit our billing before regulators do?

Yes. FraudOrder conducts independent reviews of billing patterns, referral relationships, and documentation to identify risk areas early. Our findings help you correct problems and decide next steps with your counsel.

6. Does FraudOrder help organizations already under investigation?

Yes. We support counsel with forensic analysis of claims data, loss calculations, and document review. Clear, defensible numbers can make a significant difference in how a matter is resolved.

References

Disclaimer

This article is for informational purposes only and does not constitute legal, financial, or professional advice. Reading it does not create a client relationship with FraudOrder. The scenario described is illustrative. Consult qualified professionals about your specific situation. For questions about FraudOrder services, visit https://fraudorder.co/