Real-World Examples of Healthcare Fraud, Waste, and Abuse: Reporting Checklist

Check out the new compliance progress tracker


Product Pricing Demo Video Free HIPAA Training
LATEST
video thumbnail
Admin Dashboard Walkthrough Jake guides you step-by-step through the process of achieving HIPAA compliance
Ready to get started? Book a demo with our team
Talk to an expert

Real-World Examples of Healthcare Fraud, Waste, and Abuse: Reporting Checklist

Kevin Henry

Risk Management

November 12, 2024

8 minutes read
Share this article
Real-World Examples of Healthcare Fraud, Waste, and Abuse: Reporting Checklist

Healthcare Fraud Schemes

Fraud involves intentional deception for financial gain. Below are real-world patterns that investigators and compliance teams repeatedly encounter, along with red flags you can spot in everyday operations.

Common schemes and how they appear

  • Upcoding: Billing higher-complexity evaluation and management (E/M) or procedure codes than the documentation supports, often showing an implausible spike in level-4/5 visits.
  • Unbundling: Submitting separate claims for services that should be billed under a single comprehensive code, frequently seen in laboratory panels and surgical packs.
  • Phantom billing: Charging for visits, tests, or supplies that never occurred; identity theft and misuse of beneficiary numbers often accompany this pattern.
  • Medically unnecessary services: Ordering diagnostics or procedures without clinical justification to inflate revenue, a frequent precursor to False Claims Act exposure.
  • Kickbacks and self-referrals: Payments or benefits for referrals violating the Anti-Kickback Statute, or physician self-referrals prohibited by the Stark Law.
  • DME and telemarketing fraud: Durable medical equipment shipped without valid orders or consent, sometimes tied to call centers and sham telehealth consults.
  • Pharmacy and opioid schemes: Dispensing without valid prescriptions, pill mills, or billing for brand drugs while dispensing generics.
  • Risk-score gaming: Inflating hierarchical condition categories (HCC) through unsupported diagnoses to boost capitated payments.

Red flags you can recognize quickly

  • Copy‑paste documentation with identical histories and exams across many patients or repeated “cloned” notes.
  • Impossible volumes (e.g., procedures exceeding daily capacity) or sudden shifts toward the highest-paying codes.
  • Outlier use of modifiers (25, 59, 22) or repeated add-on codes with thin justification.
  • Unusual referral patterns tied to vendors, marketers, or physician-owned entities with high downstream revenue.
  • Telehealth visits with scant documentation or mass ordering of DME after brief encounters.

The Office of Inspector General frequently highlights these patterns in enforcement actions, and they often intersect with Anti-Kickback Statute or Stark Law risks.

Wasteful Healthcare Practices

Waste is overuse, underuse, or misuse of resources lacking intent to deceive but still draining budgets and capacity. Distinguishing waste from fraud is crucial for targeted remediation and fair provider relations.

Frequent sources of waste

  • Duplicate testing due to poor interoperability, missing records, or reflexive order sets.
  • Failure to substitute generics or therapeutically equivalent alternatives when appropriate.
  • “One‑size‑fits‑all” order panels that exceed clinical need, such as daily labs for stable inpatients.
  • Extended length of stay from preventable delays in consults, imaging, or discharge planning.
  • Supply and implant wastage from inventory mismanagement or preference variability.
  • No‑show and cancellation management gaps that leave idle capacity unchecked.

How to identify and reduce waste

  • Benchmark ordering and imaging rates by specialty; target outliers for education and workflow redesign.
  • Audit order sets and EHR defaults to remove low‑value tests and require clinical indications.
  • Track generic dispense rate, duplicate imaging rate, and unused supply write‑offs.
  • Run focused Compliance Audits on units with high variation; pair findings with rapid-cycle improvement.
  • Leverage Fraud Detection Algorithms and analytics to flag extreme utilization even when intent is unclear.

Abuse in Medical Billing

Abuse reflects practices inconsistent with sound fiscal, business, or medical standards that result in unnecessary costs. Unlike fraud, intent may be ambiguous, but the financial impact is real and correctable.

Examples and operational signals

  • Systematic use of high-level E/M codes for low-acuity visits, or routine modifier 25 without distinct services.
  • Excessive frequency of therapy, diagnostic tests, or follow-ups without timely re-evaluation of necessity.
  • Facility fee inflation or inappropriate site-of-service billing when lower-cost settings are appropriate.
  • Patterns of balance billing where contracts or program rules prohibit it.

Documentation and coding guardrails

  • Align notes, medical necessity, and code selection; avoid template text that obscures true complexity.
  • Use peer comparison reports to validate distribution of codes by provider and location.
  • Conduct periodic Compliance Audits on modifiers, time-based services, and high-dollar drugs or devices.
  • Escalate persistent outliers to education, pre-bill review, or corrective action plans.

Reporting Mechanisms

Use this reporting checklist to escalate suspected fraud, waste, or abuse quickly and responsibly. Acting early reduces financial loss and protects patients and programs.

Ready to simplify HIPAA compliance?

Join thousands of organizations that trust Accountable to manage their compliance needs.

Reporting checklist

  • Capture specifics: who, what, when, where, and how; include dates of service, provider name/NPI, codes, and amounts.
  • Preserve evidence: explanation of benefits, invoices, messages, and relevant screenshots; do not access records beyond your role.
  • Use internal channels first: your organization’s compliance officer, hotline, or incident portal; request a case number.
  • Report externally when appropriate: payer Special Investigations Unit, the Office of Inspector General hotline, state Medicaid Fraud Control Unit, or contacts under the Medicaid Integrity Program.
  • Consider legal pathways: for large-scale schemes or retaliation risk, consult counsel about options under the False Claims Act.
  • Submit a concise narrative: summarize the issue, attach evidence, and list affected patients or claims without editorializing.
  • Protect yourself: document actions and dates; follow non‑retaliation policies; avoid workplace confrontations about the case.

What to include in a report

  • Claim numbers, dates of service, CPT/HCPCS/DRG codes, quantities, and billed/paid amounts.
  • Names and roles of individuals involved, including marketers or vendors.
  • Why it concerns you: medical necessity gaps, coding contradictions, or referral/ownership conflicts.

Fraud, waste, and abuse exposure spans civil, criminal, and administrative remedies. Understanding these frameworks strengthens your reporting and prevention strategies.

Key statutes and penalties

  • False Claims Act: treble damages, per‑claim penalties, whistleblower (qui tam) provisions, and anti‑retaliation protections.
  • Anti-Kickback Statute: criminal liability for remuneration to induce referrals; penalties include fines, imprisonment, and program exclusion.
  • Stark Law: strict-liability civil statute prohibiting certain physician self-referrals; consequences include repayment, penalties, and potential False Claims Act exposure.
  • Administrative actions: exclusion by the Office of Inspector General, Corporate Integrity Agreements, license discipline, and mandatory refunds.

Organizations that self-disclose and remediate promptly often reduce penalties, while willful misconduct and concealment escalate sanctions.

Preventive Strategies

Effective programs weave policy, people, and analytics into daily workflows. Prevention costs less than recovery and strengthens patient trust.

Build a resilient compliance program

  • Establish tone at the top, clear policies, training, and confidential hotlines with non‑retaliation guarantees.
  • Schedule risk‑based Compliance Audits, including documentation, coding, and vendor arrangements.
  • Vet physician relationships and contracts for Anti-Kickback Statute and Stark Law compliance before payments flow.
  • Use data-driven monitoring: Fraud Detection Algorithms, peer benchmarks, pre-bill edits, and post‑payment reviews.
  • Strengthen revenue cycle controls: prior authorization checks, medical necessity prompts, and accurate charge masters.
  • Engage patients: encourage review of explanation of benefits and easy reporting of discrepancies.
  • Coordinate with payers and programs, including the Medicaid Integrity Program, to share trends and close gaps.

Case Studies of Fraud

Case 1: Primary care upcoding

A clinic’s E/M distribution shifted to 80% level‑4/5 visits in one quarter. Analytics and chart review found templated exams that overstated complexity. After self-disclosure, repayments and education were implemented, averting harsher False Claims Act exposure.

Case 2: Lab unbundling and kickbacks

A laboratory billed separate high-priced assays instead of bundled panels while paying “processing fees” to referral sources. An internal report and payer SIU inquiry led to Anti-Kickback Statute and Stark Law scrutiny, refunds, and a Corporate Integrity Agreement.

Case 3: DME telemarketing scheme

Beneficiaries received braces they never requested after brief telehealth calls. Claims lacked valid orders and showed identical notes. OIG referral and state coordination stopped billing, triggered exclusions, and recovered payments.

Case 4: Home health phantom visits

Visit logs and GPS data conflicted with billed encounters. A frontline scheduler reported concerns using the hotline. The agency repaid funds, terminated implicated staff, and enhanced visit verification controls.

Case 5: Imaging self-referral loops

Referrals flowed to a physician-owned facility with unusually high advanced imaging rates. A compliance review flagged Stark Law risks, leading to restructuring, refunds, and a monitoring plan.

Conclusion

This guide pairs real-world patterns with a practical reporting checklist so you can act decisively. By recognizing red flags, documenting clearly, and leveraging oversight pathways, you help protect patients, programs, and your organization.

FAQs

What are common examples of healthcare fraud?

Frequent examples include upcoding, unbundling, billing for services not rendered, kickbacks for referrals, medically unnecessary procedures, DME scams, and risk-score inflation. Many of these schemes implicate the False Claims Act, the Anti-Kickback Statute, or the Stark Law.

How can waste be identified in healthcare?

Analyze ordering and imaging rates against peers, review EHR order sets, track duplicate tests and unused supplies, and perform targeted Compliance Audits. Use analytics and Fraud Detection Algorithms to surface extreme outliers for review.

What are the consequences of healthcare abuse?

Abuse can trigger repayments, civil penalties, pre‑payment review, contract actions, and exclusion from payer networks. Persistent or egregious behavior may escalate into False Claims Act liability or referrals to the Office of Inspector General.

How do you report suspected fraud?

Document specifics, preserve evidence, and notify internal compliance. If needed, report to the payer SIU, the Office of Inspector General hotline, your state’s Medicaid Fraud Control Unit, or contacts within the Medicaid Integrity Program. For large cases, consider legal advice about the False Claims Act.

Share this article

Ready to simplify HIPAA compliance?

Join thousands of organizations that trust Accountable to manage their compliance needs.

Related Articles