“Incident to” Billing Rules Clarified by CMS for 2026

By Fisher, JD, CHC, CCEP

Incident-to Billing, Physician Supervision, and False Claims Act Enforcement Risk

Key Takeaways Incident-to billing remains valuable, but physician supervision and provider-identity gaps can create FCA exposure.Recent DOJ and HHS activity shows continued, data-driven scrutiny of health care claims.Providers should audit physician supervision, workflows, documentation, schedules, and claims before issues become enforcement matters.

Executive Summary

Medicare incident-to billing continues to offer an important reimbursement pathway for physician practices, clinics, and health systems, but it remains a high-risk area for compliance and enforcement. CMS currently describes “incident to” services as Medicare-covered services and supplies furnished by auxiliary personnel as an integral, although incidental, part of a physician’s or non-physician practitioner’s professional services. CMS guidance, last modified April 30, 2026, confirms that qualifying services must meet requirements relating to the treatment course, the supervising practitioner’s ongoing involvement, the office or clinic setting, direct supervision, and the identity of the billing practitioner.

Recent False Claims Act settlements show that federal and state enforcement authorities continue to scrutinize whether services billed at the physician rate were actually furnished or properly supervised by the practitioner identified on the claim. The risk is not limited to large institutions. Recent matters have involved family medicine practices, hospitals, behavioral health providers, specialty practices, and organizations using nurse practitioners, physician assistants, or other auxiliary personnel in multi-location care models.

Why Incident-to Billing Matters Now for Health Care Providers

False Claims Act enforcement remains active and consequential. The Department of Justice announced that False Claims Act settlements and judgments exceeded $6.8 billion in fiscal year 2025, the highest annual total in the statute’s history. DOJ also reported 1,297 new qui tam lawsuits and 401 government-opened investigations during that fiscal year. Health care matters accounted for more than $5.7 billion of FY 2025 recoveries. In 2026, DOJ and HHS have continued to emphasize coordinated, data-driven health care fraud enforcement, including the DOJ-HHS False Claims Act Working Group and the June 2026 National Health Care Fraud Takedown, which charged 455 defendants in alleged schemes involving more than $6.5 billion in false claims. Against that enforcement backdrop, incident-to billing can present FCA exposure when a provider bills Medicare, Medicaid, TRICARE, or another government program at a higher rate based on physician supervision or provider identity that the documentation, schedules, staffing model, or actual care delivery does not support.

Recent FCA Enforcement Updates

Several 2026 developments reinforce why provider organizations should revisit billing controls now. In January 2026, Kaiser Permanente affiliates agreed to pay $556 million to resolve allegations that they submitted invalid Medicare Advantage diagnosis codes to increase risk-adjustment payments. In March 2026, Aetna agreed to pay $117.7 million to resolve allegations that it submitted or failed to withdraw inaccurate Medicare Advantage diagnosis codes. In June 2026, Matrix Medical Network, HealthFair, and HealthFair’s founder agreed to pay $56.5 million to resolve allegations involving false or invalid Medicare Advantage diagnosis codes. These matters do not involve traditional “incident to” office billing, but they show DOJ’s current focus on whether claims and supporting documentation truthfully reflect the services, diagnoses, provider involvement, and reimbursement assumptions submitted to federal health care programs.

The 2026 National Health Care Fraud Takedown further underscores the government’s current posture. DOJ reported charges against 455 defendants, including 90 doctors and other licensed medical professionals, in cases involving more than $6.5 billion in alleged false claims. DOJ also highlighted CMS suspensions and revocations, HHS-OIG exclusions and civil monetary penalty actions, civil settlements, and DEA administrative actions. For “incident to” billing, the practical lesson is that enforcement agencies are increasingly able to compare claims data, provider schedules, location information, medical records, and supervision documentation to identify outlier billing patterns.

The DOJ-HHS False Claims Act Working Group also signals continued coordination between DOJ’s Civil Division, HHS-OIG, CMS program integrity personnel, HHS legal leadership, and U.S. Attorneys’ Offices. Although the Working Group’s announced priorities focus on areas such as Medicare Advantage, drug and device pricing, patient-access barriers, kickbacks, defective devices, and manipulation of electronic health records, those priorities are relevant to “incident to” programs because the same data-driven enforcement tools can be used to test whether billing records match actual supervision, provider identity, and care delivery.

Current CMS Incident-to Billing Rule Framework

Under current CMS guidance, Medicare pays for services and supplies furnished “incident to” a physician’s or other listed practitioner’s professional services only when the requirements are satisfied. The service must be an integral part of the patient’s normal treatment after the physician or other listed practitioner personally performed an initial service and remains actively involved in the course of treatment. The service must be commonly furnished without charge or included in the physician’s or practitioner’s bill, must be an expense to the physician or practitioner, and must be commonly furnished in the office or clinic. The service also must be provided under direct supervision by a physician or other listed practitioner, and only the practitioner who supervises the incident-to service may bill for it.

CMS recognizes that non-physician practitioners, including nurse practitioners, certified nurse-midwives, clinical nurse specialists, and physician assistants, may bill and receive payment for qualifying “incident to” services furnished by auxiliary personnel they supervise. CMS also distinguishes reimbursement depending on who bills and supervises the service. NPP-supervised “incident to” services may be reimbursed at 85% of the physician fee schedule amount, while services furnished as auxiliary personnel incident to the professional services of a supervising physician or listed practitioner may be reimbursed at 100% when all requirements are met. CMS also recognizes general supervision standards for certain care management and behavioral health services furnished incident to a physician’s or listed practitioner’s professional services.

Physician Supervision Clarification for Incident-to Billing

CMS regulations issued in November 2015 remain central to the current risk analysis. Before the clarification, the physician supervising auxiliary personnel did not necessarily need to be the same physician whose professional service formed the basis for the incident-to service. The 2015 rule removed language that permitted one physician to supervise while another physician billed. The result is a more direct link between actual physician supervision and billing responsibility: the practitioner who supervises the incident-to service must be the practitioner whose billing number is used for the claim.

False Claims Act Liability for Incident-to Billing Errors

Enforcement actions generally frame improper incident-to billing as false or fraudulent claims for payment because the provider allegedly sought the higher physician-rate reimbursement without satisfying physician supervision, provider identity, enrollment, or treatment-plan requirements. The theory is straightforward: when a claim represents that a service was furnished by or properly supervised by a billing practitioner, and the facts do not support that representation, the claim may be treated as false. FCA exposure may include treble damages, per-claim penalties, whistleblower litigation, government investigations, repayment obligations, and collateral compliance consequences.

Recent Incident-to Billing Enforcement Examples

The recent enforcement record illustrates the recurring fact patterns that can create incident-to billing risk. In August 2024, the U.S. Attorney’s Office for the Southern District of New York announced a $600,000 settlement with Orange Medical Care, P.C. and its physician owners resolving allegations that primary care services were billed to Medicare and Medicaid as if rendered or supervised by the physician identified on the claim, when the services allegedly were rendered by non-credentialed providers and the physicians had no personal involvement or supervision. In July 2023, the U.S. Attorney’s Office for the Western District of Michigan announced a $671,310 settlement with Sparrow entities resolving allegations that services rendered by mid-level providers were improperly billed under a physician’s name and reimbursement rate when incident-to criteria were not met. In January 2020, the U.S. Attorney’s Office for the Eastern District of Tennessee announced a $285,000 settlement involving allegations that nurse practitioner services were billed to Medicare, TennCare, and TRICARE at the physician rate even when the nurse practitioners were not directly supervised.

Other enforcement actions reinforce the same theme even outside the classic office-practice “incident to” setting. In July 2024, the U.S. Attorney’s Office for the Southern District of Texas announced a $1.083 million settlement with Texas Behavioral Health PLLC and United Psychiatry Institute LLC resolving allegations that mental health services were billed to Medicare, TRICARE, and Medicaid as if physicians rendered or directly supervised them, including services allegedly furnished when physicians were outside the United States or could not have supervised services across multiple locations. In August 2016, the U.S. Attorney’s Office for the Eastern District of Pennsylvania announced a $690,441 settlement resolving allegations that services performed by non-physicians were billed as “incident to” physician services when supervising physicians were away from the office or otherwise incapable of supervising. In May 2022, the U.S. Attorney’s Office for the District of Maryland announced a $296,870 settlement involving alleged billing for outpatient radiation therapy and diagnostic services without required physician supervision, underscoring that supervision failures can trigger FCA scrutiny beyond evaluation and management services.

Common Incident-to Billing and Physician Supervision Risk Factors

Providers should pay particular attention to staffing models in which physicians and NPPs rotate among multiple sites, care is delivered by auxiliary personnel or APPs while the billing practitioner is elsewhere, new patients or new problems are treated without a documented initial service and treatment plan by the billing practitioner, templates fail to identify the actual supervising practitioner, or claims are billed under a physician number because it produces higher reimbursement. Enforcement actions also show risk where non-enrolled or non-credentialed personnel furnish services that are then billed under another provider’s identifier.

Compliance Implications for Incident-to Billing Programs

Incident-to billing should be treated as a controlled billing pathway, not as an automatic default for services furnished by APPs or auxiliary personnel. Organizations should be able to demonstrate, on a claim-by-claim basis, that the billing practitioner personally performed the initial service when required, remained actively involved in the course of treatment, was present and immediately available when direct physician supervision was required, and was the practitioner who actually supervised the service. Practices should also account for exceptions and special rules, including services subject to general supervision standards, behavioral health services, transitional care management, chronic care management, and state-law scope-of-practice requirements.

Recommended Action Steps for Incident-to Billing Compliance

Providers should consider the following incident-to billing compliance steps:

• Review policies: Update incident-to billing policies to reflect current CMS guidance and supervision requirements.
• Confirm billing workflows: Ensure workflows capture the actual supervising practitioner for each incident-to service.
• Audit claims: Review a representative sample of incident-to claims across locations and specialties.
• Compare records: Reconcile schedules, location data, medical records, supervision documentation, and claim submissions.
• Verify personnel: Confirm that NPPs and auxiliary personnel are properly enrolled, credentialed, licensed, and operating within scope.
• Train teams: Train physicians, NPPs, billers, coders, and practice managers on direct billing versus incident-to billing.
• Escalate questionable claims: Implement pre-submission escalation procedures for claims with supervision, documentation, or billing-identity concerns.

Where historical billing issues are identified, providers should evaluate repayment, disclosure, and corrective-action obligations with counsel.

Taken together, these steps can help providers move incident-to billing from an informal operational practice to a documented compliance control. The goal is to ensure that physician supervision, provider identity, treatment documentation, and claim submission are aligned before a payer, whistleblower, or enforcement agency tests the record.

Conclusion: Managing Incident-to Billing and Physician Supervision Risk

Incident-to billing remains a legitimate and important Medicare payment mechanism, but it should be used only where the facts, documentation, physician supervision model, and billing record align. In the current enforcement environment—marked by record False Claims Act recoveries, coordinated DOJ-HHS initiatives, and increasing reliance on data analytics—technical billing assumptions can quickly become repayment, disclosure, or enforcement issues. Providers that use incident-to billing should reassess their policies, training, documentation templates, supervision practices, and claim-submission controls. A focused review now can help identify and correct issues before they become the subject of a payer audit, whistleblower complaint, or government investigation. Organizations with questions about historical billing practices or proposed operational changes should consult experienced health care regulatory counsel to evaluate risk and determine an appropriate path forward.

Call to Action: Review Incident-to Billing and Physician Supervision Controls

Health care providers that rely on incident-to billing should consider conducting a focused compliance review of physician supervision, documentation, provider enrollment, credentialing, billing workflows, and claim-submission controls. A timely review can help identify gaps, support corrective action, and reduce the risk that routine billing practices become the subject of a payer audit, whistleblower complaint, or government investigation.

If your organization has questions about incident-to billing compliance, physician supervision requirements, or potential historical billing concerns, consult health care regulatory counsel before making operational changes, submitting corrective claims, or evaluating repayment and disclosure obligations.