By Fisher, JD, CHC, CCEP

Fraud, Abuse, Overpayment — When Does a Mistake Become Fraud?

Why Enforcement Matters

Anyone involved in the health care system should understand that the federal government continues to devote significant resources to the investigation and prosecution of health care fraud and abuse. From the government’s standpoint, enforcement is not only a compliance priority; it is also a financial strategy. Historically, fraud-and-abuse enforcement has returned several dollars to the government for every dollar invested. When an enforcement program produces that kind of return, it is not surprising that the government continues to fund it aggressively.

It is important, however, to recognize that health care fraud and abuse enforcement is not limited to people who deliberately set out to steal from Medicare, Medicaid, or another government health care program. There are certainly individuals and organizations that engage in intentional fraudulent schemes. But the fraud-and-abuse framework also reaches much broader conduct, including billing errors, coding mistakes, documentation failures, supervision problems, and misunderstandings of complex reimbursement rules.

When an Error Creates an Overpayment

A simple mistake can create an overpayment. For example, a physician practice may bill for a service believing that all supervision requirements were met. Later, the practice may discover that the applicable supervision rule was different from what the physician or billing staff understood at the time. No one may have intended to mislead the government. No one may have falsified a record or created a sham arrangement. Still, if the claim should not have been paid as submitted, the practice has received money to which it was not entitled. That is the type of situation often described as abuse or a technical overpayment rather than intentional fraud.

Why the Provider’s Response Matters

What happens after the mistake is discovered is often what determines whether the matter remains a correctable overpayment or escalates into a fraud case. If the provider promptly investigates, determines the scope of the problem, reports and returns the overpayment, and documents the corrective action, the issue may remain a compliance matter. If the provider ignores the problem, delays action, or continues submitting similar claims after learning of the issue, the government may view the conduct very differently.

The 60-Day Rule and the Point of Escalation

Reporting and Returning Identified Overpayments

Federal law requires providers and suppliers that receive an identified overpayment from a federal health care program to report and return it within the required deadline, generally 60 days after identification or, where applicable, by the date a corresponding cost report is due. Retaining an identified overpayment beyond that deadline can create exposure under the federal False Claims Act, sometimes referred to as a “reverse false claim.”

How Delay Can Increase Liability

This is the point where a mistake can become much more serious. The original error may have been unintentional, but once the provider knows, or acts with reckless disregard or deliberate ignorance, that money has been improperly received or retained, the government may argue that continued retention is knowing misconduct. Under the False Claims Act, liability can include treble damages and per-claim penalties, meaning that a relatively modest overpayment can grow into a significant enforcement matter if it is not addressed promptly.

Civil Fraud Versus Criminal Conduct

Civil Liability

Not every False Claims Act case is a criminal case. Civil fraud liability does not necessarily require proof that the provider specifically intended to steal from the government. It may be enough to show actual knowledge, deliberate ignorance, or reckless disregard of the truth or falsity of the claim. Criminal exposure, by contrast, generally requires a higher level of intent and proof that the conduct was knowing and willful. Examples that may raise criminal concerns include falsifying records, billing for services never rendered, paying or receiving kickbacks, using sham arrangements to generate referrals, or continuing a billing practice after being clearly warned that it is improper.

Why Intent Often Develops Later

The practical lesson is that intent often develops from conduct after the initial mistake. A billing error may be explainable. A failure to investigate credible information may be much harder to defend. Continuing to bill the same way after the issue is known may be harder still. The longer a provider waits, and the less the provider does to investigate and correct the problem, the easier it becomes for the government to characterize the situation as something more than an innocent mistake.

What Providers Should Do When a Mistake Is Found

Immediate Response

When a provider discovers a possible overpayment, the first step should be to stop and evaluate the issue promptly. That does not mean every allegation is true or every discrepancy is fraud. It does mean the provider should treat credible information seriously, preserve relevant records, identify the affected claims, determine whether the problem is isolated or systemic, and involve compliance personnel or legal counsel when appropriate.

Core Response Steps

A sound response generally includes the following steps:

• Investigate the facts quickly and in good faith.
• Determine the legal or billing rule that applies.
• Identify the claims and time period affected.
• Calculate the amount of any overpayment as accurately as possible.
• Report and return the overpayment through the appropriate process.
• Correct the underlying problem through education, policy changes, coding review, or billing system updates.
• Document the investigation, decision-making, repayment, and corrective action.

Examples of Fraud Cases

Common Fraud Patterns

Fraud cases often begin with facts that look different from a one-time mistake. The following examples illustrate patterns that can cause the government to view a matter as intentional or reckless rather than merely accidental:

• Billing for services not provided: A provider submits claims for patient visits, therapy sessions, diagnostic tests, or medical equipment that were never furnished. This is one of the clearest examples of fraud because the claim represents that a service occurred when it did not.
• Upcoding: A practice consistently bills a higher-level evaluation and management code than the documentation supports. A single coding error may be a mistake, but a repeated pattern of using higher-paying codes despite warnings, audits, or payer denials may support an allegation of knowing misconduct.
• Medically unnecessary services: A laboratory, imaging center, or physician orders tests or procedures that are not reasonable or necessary for the patient’s condition. The risk increases when the provider uses standing orders, automatic testing panels, or marketing scripts that generate claims without individualized medical judgment.
• Kickbacks for referrals: A provider, laboratory, pharmacy, or durable medical equipment supplier pays or receives money, gifts, free services, inflated compensation, or other benefits in exchange for referrals. Claims resulting from kickback-tainted referrals may be treated as false claims even if the underlying service was actually performed.
• False documentation: A provider creates, alters, or backdates records to make a claim appear payable. Examples include documenting examinations that did not occur, changing records after an audit request, or using cloned notes that do not accurately reflect the patient encounter.
• Retaining known overpayments: A provider discovers that claims were paid incorrectly but fails to investigate, quantify, report, and return the money. The original billing issue may have been accidental, but knowingly retaining the overpayment can create False Claims Act exposure.

What These Examples Show

Recent enforcement actions also show the same themes in practice. Government health care fraud cases frequently involve allegations of medically unnecessary laboratory testing, durable medical equipment ordered in exchange for kickbacks, billing for services that were not rendered, false therapy or treatment records, and arrangements that improperly reward referrals. These cases demonstrate that fraud risk increases when a provider’s billing practices are driven by revenue targets, referral incentives, or documentation created after the fact rather than by the patient’s actual medical needs.

Recent Enforcement Examples

Recent Case Themes

Recent federal enforcement activity shows how these theories arise in practice. The examples below are based on publicly announced allegations, charges, pleas, convictions, or settlements. They are useful compliance examples because they show recurring patterns rather than isolated technical mistakes:

• National Health Care Fraud Takedown: In 2025, the Department of Justice announced criminal charges against 324 defendants in connection with more than $14.6 billion in alleged health care fraud. The announcement included allegations involving medically unnecessary services, fraudulent claims, telemedicine, durable medical equipment, prescription drugs, and kickback-driven arrangements.
• Telehealth and durable medical equipment: A 2025 enforcement action in the Western District of New York alleged that a physician billed Medicare for audio-only telehealth visits that were brief or did not occur and certified durable medical equipment orders without regard to medical necessity. The alleged scheme involved millions of dollars in telehealth and DME claims.
• Genetic testing and DME kickbacks: In 2024, a Georgia chiropractor admitted participating in a health care fraud and kickback conspiracy involving durable medical equipment and cancer genetic testing. According to the government, the scheme used marketing call centers and telemedicine companies to obtain orders and disguise kickback payments, causing more than $14.9 million in Medicare losses.
• Medically unnecessary respiratory pathogen panels: In 2025, diagnostic laboratories agreed to resolve False Claims Act allegations involving respiratory pathogen panel testing that the government alleged was medically unnecessary or obtained through kickbacks. In those matters, the government alleged that COVID-19 specimens from long-term care facilities were used to bill for broader, more expensive panels without individualized medical need.
• Laboratory kickback settlements: In 2025, the Department of Justice announced settlements involving alleged laboratory kickbacks disguised through management service organization arrangements, marketing agreements, or payments to physicians and marketers. These cases highlight the risk of arrangements that tie compensation to the volume or value of referrals.
• DME schemes involving false orders: Recent HHS-OIG enforcement summaries describe DME cases involving allegations that companies used call centers, marketers, or paid orders to generate claims for braces and other equipment that were medically unnecessary, not properly ordered, or not eligible for reimbursement.

Key Takeaway from Recent Cases

These examples reinforce the same practical point: a fraud case usually involves more than a single billing mistake. The government is more likely to allege fraud when it sees patterns such as payments for referrals, claims driven by marketing rather than medical judgment, documentation created to justify billing after the fact, repeated warnings that go unaddressed, or continued retention of money after an overpayment has been identified.

In summary, the recent cases share several common features: claims were often generated through volume-driven arrangements, marketing channels, or referral relationships rather than individualized patient need; documentation was sometimes missing, inaccurate, or created to support payment after the fact; and the alleged misconduct frequently continued over time rather than appearing as a single isolated error. For providers, the key lesson is that fraud risk increases when billing practices become disconnected from medical necessity, accurate records, and timely correction of known overpayments.

Main Compliance Tips

Practical Checklist

• Treat credible information seriously: Do not ignore billing concerns, audit findings, payer notices, employee reports, or repeated denials that suggest a potential overpayment.
• Investigate promptly: Determine whether the issue is isolated or systemic, identify the affected claims, and assess the applicable billing, coding, supervision, or medical necessity rules.
• Document the response: Keep a clear record of what was discovered, who reviewed it, how the overpayment was calculated, and what corrective action was taken.
• Return identified overpayments on time: Once an overpayment is identified, report and return it within the required timeframe and through the appropriate repayment process.
• Correct the root cause: Use training, policy revisions, coding reviews, billing system updates, or monitoring to prevent the same problem from continuing.
• Watch for referral and compensation risks: Review arrangements with physicians, marketers, laboratories, pharmacies, DME suppliers, and management companies for kickback or referral-based compensation concerns.
• Keep billing tied to medical necessity: Claims should be supported by individualized patient need, accurate documentation, and services actually provided.
• Escalate when needed: Involve compliance leadership or legal counsel when the issue involves significant dollars, repeated conduct, possible kickbacks, false records, or potential government disclosure obligations.

Conclusion

The line between mistake, abuse, civil fraud, and criminal conduct is not always drawn by the original billing error alone. It is often drawn by what the provider does after the problem is discovered. A prompt, documented, good-faith response can keep a mistake from becoming an enforcement crisis. Ignoring an overpayment, delaying repayment, or continuing the same conduct after the issue is known can transform a technical compliance problem into a False Claims Act case and, in extreme cases, a criminal investigation.