You work in healthcare, and you’ve seen something that doesn’t add up. Procedures billed that weren’t performed. Diagnosis codes that don’t match the patient in front of you. A billing department that seems to know exactly which codes generate the highest reimbursements regardless of what actually happened in the exam room.
You know it’s wrong. But you also know that saying something could cost you your job, your professional relationships, and potentially your career.
Here’s what you may not know: reporting healthcare fraud is one of the most legally protected acts in American employment law and in FY2025, it was also one of the most financially rewarding. The DOJ announced a record $6.8 billion in False Claims Act recoveries in FY2025, with whistleblowers filing 1,297 qui tam lawsuits the highest annual total ever recorded. Of the more than $85 billion recovered under the FCA since 1986, a substantial share came from healthcare insiders who reported exactly what you may be witnessing right now.
This guide explains how to report healthcare fraud, what legal protections apply to you, how qui tam cases work, and what you can do right now to protect yourself before you make a single call.
Step 1: Document What You Know Before You Report Anything
The single most important action you can take before reporting healthcare fraud is to document the evidence carefully. The quality and specificity of your documentation directly determines how seriously investigators treat your report, whether a qui tam case succeeds, and whether you share in any financial recovery.
Effective documentation includes:
- Specific claims or transactions: Dates, patient encounters (not patient names), billing codes submitted, and the actual service performed
- Pattern evidence: If the fraud is systematic upcoding on every Level 5 visit, or routine unbundling of specific procedures document the pattern across multiple instances
- Internal communications: Emails, memos, or meeting notes in which billing decisions were discussed or directed
- Your own observations: Contemporaneous notes describing what you witnessed, when, and who was involved
Two critical cautions at this stage: do not remove patient records from your employer’s systems, and do not take physical documents that belong to your employer without legal guidance. Consulting a whistleblower attorney before collecting evidence is strongly recommended what you can legally retain varies by jurisdiction and circumstance. Our post on what evidence fraud investigators actually look for explains what documentation frameworks are most valuable in practice.
Step 2: Understand Your Legal Protections Before You Act
The fear of retaliation is the primary reason healthcare fraud goes unreported. It’s a legitimate fear but one that the law addresses directly and specifically.
The False Claims Act (FCA) is the foundational protection for healthcare fraud whistleblowers. Under Section 3730(h), any employee, contractor, or agent who is fired, demoted, harassed, threatened, or otherwise retaliated against for reporting or attempting to stop FCA violations has the right to sue in federal court. Remedies include reinstatement, double back pay, and additional damages.
Additional protections stack on top of the FCA depending on your role and employer:
- The Whistleblower Protection Act (WPA) covers federal government employees and HHS employees specifically, protecting them from adverse personnel actions for disclosures to authorized recipients
- HIPAA anti retaliation provisions prohibit healthcare employers from retaliating against employees who report potential HIPAA violations
- State False Claims Acts: As of January 2026, more than 30 states have enacted their own false claims statutes with whistleblower protections many paralleling or expanding federal FCA provisions
These protections exist because Congress deliberately designed the FCA to encourage insiders to come forward. The statute of limitations for a retaliation claim under the FCA is three years from the date of the retaliatory act giving whistleblowers substantial time to assert their rights even after termination.
It’s worth understanding that the law specifically contemplates whistleblowers who participated in the fraud under employer pressure. Employees who were required to participate in fraudulent billing to keep their jobs may still file qui tam cases though a court may reduce their financial award. Our post on whistleblower retaliation covers the full scope of protections and how to assert them.
Step 3: Consult a Whistleblower Attorney First Not Your Compliance Department
This may be counterintuitive, but it is one of the most important pieces of guidance any fraud professional or employment attorney will give you: consult a whistleblower attorney before reporting to your employer’s compliance department, before calling a hotline, and before contacting any government agency.
Here’s why. The False Claims Act’s qui tam provisions operate under a “first to file” rule: if two whistleblowers report the same fraud, only the one who files first is eligible for a financial award. If the fraud you’ve witnessed has already been publicly disclosed in government reports, news articles, or prior litigation your case may be barred entirely. A whistleblower attorney can evaluate these eligibility questions in a confidential consultation before you take any public facing step.
Additionally, most reputable whistleblower attorneys handle FCA cases on contingency they receive no fee unless the case succeeds making legal counsel accessible regardless of your financial situation.
The qui tam complaint is filed in federal court under seal, meaning it remains confidential from your employer during the government’s investigation period. The government then has an initial 60 day period to decide whether to intervene a period that is commonly extended for months or years in complex cases. Your identity as the relator is legally protected throughout this sealed period. Our guide on how to report corporate fraud anonymously covers the mechanics of this process in more detail.
Step 4: Know Your Reporting Channels and When to Use Each
Once you’ve consulted legal counsel, you’ll have a clearer picture of which reporting path best serves your situation. The primary channels for reporting healthcare fraud are:
The HHS Office of Inspector General (OIG): The primary federal agency for investigating healthcare fraud involving Medicare, Medicaid, and other HHS programs. Reports can be submitted via the OIG Hotline at 1 800 HHS TIPS (1 800 447 8477) or online at oig.hhs.gov. OIG reports do not automatically trigger qui tam protections or financial awards they are administrative reports, not legal filings.
The Department of Justice Civil Division: Formal qui tam complaints under the FCA are filed through a whistleblower attorney directly with the U.S. District Court in the relevant jurisdiction. This is the path that triggers both legal protections and potential financial rewards. The DOJ has recovered more than $85 billion under the FCA since 1986, with whistleblowers collectively receiving more than $7.8 billion in awards during that period.
State attorneys general: Many states have independent healthcare fraud enforcement programs and accept reports directly. States with strong False Claims Acts may pursue state specific violations that fall outside federal jurisdiction.
Your employer’s compliance hotline: This is appropriate for minor issues or good faith errors. For systemic fraud the kind that generates qui tam exposure reporting internally first may not adequately protect you and may alert the organization before you have taken the legal steps needed to protect your interests.
Knowing when not to report internally is as important as knowing when to do so. If you suspect the compliance function itself is compromised or if the fraud is being directed by senior leadership internal reporting may trigger retaliation before legal protections are firmly in place.
What Happens After You Report: The Qui Tam Process
Understanding how qui tam cases actually unfold helps whistleblowers set realistic expectations and make informed decisions.
When a qui tam complaint is filed, the case is placed under seal and transmitted to the DOJ and relevant agency (typically HHS OIG for healthcare cases). The government investigates reviewing billing records, clinical documentation, and financial data. In FY2025, the government opened 401 new fraud investigations and ultimately intervened in a significant number of whistleblower initiated cases.
If the government intervenes, it takes primary responsibility for the case. The whistleblower (called the “relator”) works with government attorneys providing evidence, witnesses, and information. If the case settles or results in judgment, the relator receives 15–25% of the recovery when the government intervenes, and up to 30% if the government declines and the whistleblower pursues the case independently.
If the government declines to intervene, the whistleblower and their attorney may proceed independently. In FY2025, more than $2.3 billion in FCA recoveries came from declined cases a record share demonstrating that government non intervention is not the end of the road.
Major healthcare qui tam recoveries in 2025–2026 illustrate the financial scale:
- Kaiser Foundation Health Plan agreed to pay $581 million to settle whistleblower lawsuits alleging improper Medicare Advantage practices
- Insurance brokers agreed to pay $135 million to settle Affordable Care Act fraud allegations
- A wound care company settled for $309 million following a whistleblower’s qui tam filing
For organizations that want to understand the full landscape of how fraud investigations work and what triggers formal versus internal processes, our dedicated guide covers the key decision points.
Protecting Yourself Throughout the Process
Even with legal protections in place, whistleblowers should take practical steps to protect their professional position:
- Maintain your standard work performance retaliation claims are weakest when the employer can point to prior performance problems; documentation of consistently strong performance strengthens your position
- Keep personal copies of your documentation secured outside your employer’s systems, following your attorney’s guidance on what is legally permissible
- Do not discuss your report with colleagues before or during the sealed period disclosures that undermine confidentiality can complicate the legal case and put you at risk
- Document any adverse treatment that follows your report: schedule changes, performance reviews, reassignments, or changes in management behavior these become evidence in a retaliation claim
- Know that retaliation is legally actionable: if you are fired, demoted, or harassed after reporting healthcare fraud, you have the right to sue under FCA Section 3730(h) for reinstatement, double back pay, and damages
Our post on can anonymous tips trigger a fraud investigation is relevant reading for whistleblowers who want to understand how investigations typically begin and how tip confidentiality is handled in practice.
Frequently Asked Questions (FAQ)
Q1: Can I report healthcare fraud anonymously and still receive a financial award? Strictly anonymous reports to hotlines like the OIG Hotline do not generate qui tam awards those require a formal legal filing with the court, which identifies the relator to the government (though not the defendant) under seal. Some degree of identified participation is required to receive FCA awards. An attorney can advise on how to structure reporting to maximize both confidentiality and eligibility for financial rewards.
Q2: What percentage of a recovery does a healthcare fraud whistleblower receive? Under the False Claims Act, whistleblowers receive 15–25% of the government’s recovery when the DOJ intervenes, and up to 30% when the government declines and the relator pursues the case independently. Since 1986, FCA whistleblowers have collectively received more than $7.8 billion in awards. Award percentages vary based on the significance of the relator’s contribution to the case.
Q3: Can my employer fire me for reporting healthcare fraud? Retaliation for reporting healthcare fraud is illegal under the False Claims Act’s anti retaliation provisions, HIPAA, and various state whistleblower statutes. If you are fired, demoted, or harassed after making a protected report, you can sue in federal court for reinstatement, double back pay, and additional damages. The statute of limitations for FCA retaliation claims is three years from the date of the adverse action.
Q4: What if I participated in the fraud myself because my employer required it? The FCA specifically anticipates this scenario employees who were pressured or required to participate in fraud to keep their jobs may still file qui tam cases. Courts may reduce the whistleblower’s award percentage if they find the relator planned or initiated the fraud, but participation alone does not bar a report or a recovery.
Q5: How long does a qui tam healthcare fraud case take? Timelines vary significantly. The government’s initial investigation period is 60 days but is routinely extended many healthcare qui tam cases remain under seal for one to three years or longer while the government investigates. After the seal is lifted, litigation or settlement negotiations may add additional months or years. How long fraud investigations take depends heavily on case complexity and government caseload.
Q6: What types of healthcare fraud can I report under the False Claims Act? The FCA covers any false or fraudulent claim submitted to a federal healthcare program, including Medicare and Medicaid. This includes upcoding, unbundling, phantom billing, medically unnecessary procedures, kickbacks, identity fraud, and telemedicine fraud schemes. Our posts on what is medical billing fraud and how doctors commit insurance fraud describe the most common reportable schemes in detail.
Conclusion: Reporting Healthcare Fraud Is the Right Decision and You Have More Protection Than You Think
Most people who witness healthcare fraud stay silent not because they don’t care, but because they don’t know how much protection the law actually provides or how significantly the enforcement landscape has shifted in their favor.
In FY2025, 1,297 qui tam cases were filed a record. Government recoveries hit $6.8 billion another record. Whistleblower awards topped $7.8 billion cumulatively since 1986. These numbers exist because Congress built the FCA to make reporting both safe and financially meaningful for the people with the best view of fraud: the insiders who see it happen every day.
The first step is confidential. The consultation with a whistleblower attorney costs you nothing. And the difference between speaking up and staying silent could mean billions recovered for taxpayers and a meaningful financial outcome for you.
If you’ve witnessed healthcare fraud and need guidance on how to protect yourself while reporting it, contact FraudOrder today to speak with a professional who can help you navigate next steps safely and strategically.
References
- U.S. Department of Justice. (2026, January 12). False Claims Act Settlements and Judgments Exceed $6.8 Billion in Fiscal Year 2025. https://www.justice.gov/opa/pr/false claims act settlements and judgments exceed 68b fiscal year 2025
- Jackson Lewis P.C. (2026, February 3). DOJ Announces All Time High in False Claims Act Recoveries. https://www.jacksonlewis.com/insights/doj announces all time high false claims act recoveries healthcare providers government contractors crosshairs
- Phillips & Cohen LLP. (2026). What is Qui Tam? Whistleblower Guide. https://www.phillipsandcohen.com/what is a qui tam case/
- Phillips & Cohen LLP. (2026). Medicare Billing Fraud: How to Report & Whistleblower Info. https://www.phillipsandcohen.com/failing report medicare billing errors risky business/
- Khalaf Khatib and Caudill LLP. (2025). False Claims Act Guide for Healthcare Whistleblowers. https://kkc.com/frequently asked questions/false claims act guide for healthcare whistleblowers/
- Khalaf Khatib and Caudill LLP. (2025). What is Qui Tam? https://kkc.com/frequently asked questions/what is qui tam/
- U.S. Department of Health and Human Services, Office of Inspector General. Whistleblower Protection Information. https://oig.hhs.gov/fraud/whistleblower/
- Federal Bar Association. (2024). Understanding the Basics of Qui Tam Law. https://www.fedbar.org/blog/understanding the basics of qui tam law/
- National Whistleblower Center. What is the False Claims Act? https://www.whistleblowers.org/protect the false claims act/
- U.S. House Whistleblower Ombuds Office. (2026, January 28). Selected State Statutes on Whistleblower Protections. https://whistleblower.house.gov/sites/evo subsites/whistleblower evo.house.gov/files/CRS_Selected_State_Statutes_on_Whistleblower_Protections.pdf
Disclaimer: This article is provided for informational purposes only and does not constitute legal, financial, or professional advice. No attorney client or consulting relationship is created by reading or sharing this content. Whistleblower protections, qui tam eligibility, and reporting obligations vary significantly by jurisdiction, employer type, and individual circumstances. Always consult a qualified whistleblower attorney before taking any action related to reporting healthcare fraud. For questions about FraudOrder services, visit https://fraudorder.co/