Health Care Fraud by Service Providers

Why This Topic Matters
Health care is one of the largest sectors of the economy in most developed countries, and in the United States alone it accounts for trillions of dollars in annual spending. Because payments flow through third-party systems (government programs such as Medicare and Medicaid, and private insurers) where the person receiving the service is rarely the person paying the bill, the environment is uniquely vulnerable to abuse. The National Health Care Anti-Fraud Association (NHCAA) conservatively estimates that tens of billions of dollars are lost to health care fraud every year, and some estimates place the figure as high as 10 percent of total health care expenditures.

For the Certified Fraud Examiner, this subject sits within the Financial Transactions and Fraud Schemes section of the CFE Exam. Provider fraud is the single largest category of health care fraud by dollar volume, far outstripping fraud committed by patients or insiders. Fraud examiners working in insurance special investigation units (SIUs), government program integrity offices, hospital compliance departments, and law firms are regularly called upon to detect, investigate, and prove these schemes. Understanding how providers manipulate billing systems is therefore an essential professional competency, not merely an exam topic.

What Health Care Fraud by Service Providers Is
Provider fraud is any intentional deception or misrepresentation made by a health care provider (or someone posing as a provider) that results in an unauthorized benefit, typically payment from a government program, insurer, or patient. The provider can be an individual (physician, dentist, chiropractor, psychologist, nurse practitioner, pharmacist, therapist) or an institution (hospital, nursing home, home health agency, clinical laboratory, durable medical equipment supplier, ambulance company, hospice, or pharmacy).

It is critical to distinguish fraud from abuse and error:
- Fraud requires intent. The provider knowingly submits a false claim or misrepresents facts to obtain payment.
- Abuse involves practices inconsistent with sound medical, business, or fiscal standards that result in unnecessary cost, but without proof of intent to deceive (for example, excessive ordering of tests that are of marginal value).
- Error is an unintentional mistake in coding or billing.
On the exam, the presence or absence of knowing and willful intent is often the deciding factor in whether a scenario describes fraud.

Key Legal Framework (United States Focus)
The CFE Exam expects familiarity with the principal statutes used against provider fraud:
- False Claims Act (FCA): Imposes civil liability on anyone who knowingly presents, or causes to be presented, a false claim for payment to the federal government. It includes qui tam (whistleblower) provisions allowing private citizens to sue on behalf of the government and share in the recovery. Treble damages plus per-claim penalties apply.
- Anti-Kickback Statute (AKS): A criminal statute prohibiting the knowing and willful offer, payment, solicitation, or receipt of anything of value to induce or reward referrals of items or services reimbursable by federal health care programs. Certain safe harbors protect legitimate arrangements.
- Stark Law (Physician Self-Referral Law): A civil, strict-liability statute prohibiting physicians from referring Medicare or Medicaid patients for designated health services to entities in which the physician (or an immediate family member) has a financial relationship, unless an exception applies. Note the contrast: Stark does not require proof of intent, while the AKS does.
- Health Insurance Portability and Accountability Act (HIPAA): Created the federal crime of health care fraud (applying to all health benefit programs, public and private), established the Health Care Fraud and Abuse Control Program, and introduced privacy and security rules.
- Civil Monetary Penalties Law and exclusion authority of the Office of Inspector General (OIG) of the Department of Health and Human Services, which can bar providers from participating in federal programs.

How Provider Fraud Schemes Work
Provider schemes generally exploit one of three weaknesses: the payer cannot easily verify that a service occurred, the payer cannot easily verify that the service was medically necessary, or the coding system allows the same service to be described in ways that produce different reimbursement. The major schemes are described below.

1. Fictitious Providers (Phantom Providers)
Criminals establish a sham clinic, DME company, or laboratory, obtain a provider number, and submit claims for patients who were never treated. Often they purchase or steal lists of patient identification numbers and physician provider numbers. The operation is frequently a shell with a mail drop address, no equipment, and no staff. Once payments arrive, the perpetrators close the operation and move on. Red flags include a provider with a post office box address, a sudden high volume of claims from a newly enrolled provider, and claims for patients geographically distant from the provider.

2. Billing for Services Not Rendered (Phantom Billing)
A legitimate provider bills for procedures, visits, tests, or supplies that were never provided. Variations include billing for a full visit when the patient only picked up a prescription, billing for no-show appointments, and billing for deceased patients. Detection relies on comparing claims to medical records, appointment logs, and patient interviews or surveys.

3. Upcoding
The provider bills for a more expensive service than the one actually performed by using a Current Procedural Terminology (CPT) code or Diagnosis Related Group (DRG) that carries a higher reimbursement. Examples include billing a brief office visit as a comprehensive examination, coding a simple laceration repair as a complex repair, or assigning a DRG with complications when no complications existed. Statistical analysis of a provider's distribution of evaluation and management codes compared with peers is the classic detection tool.

4. Unbundling (Fragmentation)
Many procedures are reimbursed under a single comprehensive code that covers all component steps. Unbundling occurs when the provider bills each component separately to receive a higher total payment. A common example is billing individual laboratory tests separately when they are normally reimbursed as a single panel. Payers use claims-editing software (such as the National Correct Coding Initiative edits) to detect this.

5. Misrepresenting the Nature of the Service
The provider changes the description of a non-covered service to make it appear covered. Cosmetic surgery billed as reconstructive surgery, a routine physical billed as a diagnostic visit, or experimental treatment billed under a code for an approved therapy all fall into this category.

6. Misrepresenting Dates, Locations, or Providers
Services are billed as though performed on multiple dates to evade limits on daily charges, performed in a hospital rather than an office to obtain a higher facility rate, or performed by a physician when they were actually performed by an unlicensed or lower-level practitioner (sometimes called incident-to abuse when the supervision requirements are not met).

7. Medically Unnecessary Services
The provider performs and bills for tests, procedures, or admissions that are not justified by the patient's condition. This is one of the most difficult schemes to prove because it requires medical expert review. Extreme examples include unnecessary cardiac stent placements and unneeded surgeries. Utilization patterns far outside peer norms are the primary indicator.

8. Kickbacks and Self-Referrals
Physicians receive cash, gifts, free rent, sham consulting fees, or lavish entertainment in exchange for referring patients to a particular hospital, lab, pharmacy, or DME supplier. Alternatively, physicians refer patients to facilities they own. Kickbacks drive overutilization and corrupt medical judgment. Exam questions often describe a sham medical director agreement or above-market payments for minimal services; these are kickbacks disguised as legitimate compensation.

9. Durable Medical Equipment (DME) Fraud
DME suppliers bill for wheelchairs, hospital beds, orthotics, diabetic supplies, or oxygen that were never delivered, were not medically necessary, or were cheaper items than those billed (for example, delivering a standard wheelchair and billing for a motorized one). Suppliers may use telemarketing to recruit beneficiaries and pay physicians for signed certificates of medical necessity without seeing the patient.

10. Rolling Labs and Mobile Diagnostic Schemes
Mobile units set up at shopping centers, retirement communities, or health fairs offering free screenings. They collect insurance information and bill for a battery of unnecessary tests, often using the provider number of a physician who is paid to sign the orders. The operation moves before complaints accumulate.

11. Home Health and Hospice Fraud
Agencies bill for visits never made, falsify certifications that patients are homebound or terminally ill, keep patients on service long after they qualify, and pay recruiters to find beneficiaries. Hospice fraud is particularly troubling because patients may be denied curative care they still need.

12. Pharmacy and Prescription Drug Schemes
Pharmacies may bill for brand-name drugs while dispensing generics, bill for prescriptions never filled, split prescriptions to collect multiple dispensing fees, or engage in drug diversion. Compounding pharmacies have been a major focus of enforcement for billing extremely expensive topical creams with minimal medical justification. Prescribers may run pill mills dispensing controlled substances without legitimate medical purpose.

13. Clinical Laboratory Schemes
Labs may add tests the physician did not order (sink testing, where samples are discarded and results fabricated), unbundle panels, or pay physicians for specimen referrals.

14. Waiver of Copayments and Deductibles
Routinely waiving the patient's share of the cost while billing the insurer at full price is fraudulent because it misrepresents the provider's actual charge and acts as an inducement to the patient. Genuine hardship waivers made case by case are generally permitted, but routine advertised waivers are not.

15. Hospital and Institutional Schemes
Hospitals may submit false cost reports (shifting non-allowable costs into allowable categories), engage in DRG creep through systematic upcoding, bill outpatient services as inpatient admissions, or misreport outlier payments. Nursing homes may bill for a higher level of care than provided or bill for services to residents who have died or been discharged.

Red Flags of Provider Fraud
Fraud examiners should be alert to indicators such as:
- Billing patterns that deviate sharply from peer providers in the same specialty and geographic area.
- A high percentage of claims at the most expensive code levels.
- Impossible days, where billed time exceeds 24 hours or billed procedures exceed physical capacity.
- Identical diagnoses and procedures for a large proportion of patients.
- Claims for patients who live far from the provider or who are deceased.
- Providers who routinely waive copayments or advertise free services conditioned on insurance.
- Rapid growth in claim volume from a newly enrolled provider.
- Patient complaints about explanation-of-benefits statements listing services they did not receive.
- Medical records that are missing, templated, cloned across patients, or altered.
- Physicians ordering unusually high volumes of DME, lab tests, or home health services, especially when linked to a single supplier.

Detection and Investigation Techniques
- Data analytics: Peer comparison, trend analysis, outlier detection, Benford's Law on claim amounts, and link analysis connecting providers, suppliers, and beneficiaries.
- Claims editing systems: Automated pre-payment edits that catch unbundling, duplicate claims, and gender or age mismatches with procedures.
- Medical record review: Comparing documentation with billed codes; involving qualified clinical reviewers for medical necessity.
- Beneficiary interviews and verification letters: Asking patients whether they received the billed services.
- Site visits: Verifying that the provider has a physical location, staff, equipment, and patient traffic consistent with claim volume.
- Undercover operations: Investigators posing as patients to document what is actually performed versus what is billed.
- Review of financial relationships: Examining contracts, lease agreements, consulting fees, and ownership interests for kickback and Stark Law issues.
- Whistleblower channels: Many major cases originate from employees filing qui tam actions or using compliance hotlines.

Prevention Measures
Payers and institutions reduce provider fraud through rigorous provider enrollment screening, payment suspension authority when credible allegations exist, prepayment review of high-risk providers, effective compliance programs following OIG guidance (written policies, a compliance officer, training, auditing, open lines of communication, enforcement, and corrective action), and sharing information across public and private payers.

Exam Tips: Answering Questions on Health Care Fraud by Service Providers
1. Identify the scheme by its mechanism, not its label. Exam questions typically describe a scenario and ask which scheme it represents. Ask yourself: Was the service rendered at all (phantom billing)? Was it rendered but coded as something more expensive (upcoding)? Was a single service split into pieces (unbundling)? Was something of value exchanged for referrals (kickback)? Did the physician refer to an entity he or she owns (self-referral)?
2. Master the upcoding versus unbundling distinction. This is one of the most frequently tested pairs. Upcoding is billing a different, higher-paying code for one service. Unbundling is billing multiple codes for components that should be one code. If the scenario mentions separate charges for parts of a single procedure, the answer is unbundling.
3. Know the intent requirements of the major statutes. The Anti-Kickback Statute requires knowing and willful conduct and is criminal. The Stark Law is strict liability and civil; intent is irrelevant. The False Claims Act requires knowledge, defined to include deliberate ignorance and reckless disregard, not just actual knowledge. Questions that hinge on whether intent must be proven are testing exactly this.
4. Remember that the False Claims Act is the government's primary civil tool and features qui tam provisions. If a question involves a whistleblower sharing in a recovery or treble damages, think FCA.
5. Recognize that routine copayment waivers are fraudulent. Candidates sometimes assume a provider is being generous. On the exam, routine or advertised waivers that are not based on individual financial hardship misrepresent the true charge to the insurer and are a fraud indicator.
6. Fictitious provider schemes are about the provider's existence, not the service. If the scenario describes a mail drop, no equipment, stolen patient numbers, and a short operating period before disappearing, the answer is a fictitious or phantom provider scheme.
7. Rolling labs are mobile and recruit through free screenings. If the question mentions a van, a health fair, or a shopping center and a battery of tests, look for the rolling lab answer.
8. Medical necessity questions usually require clinical review. When asked how to prove that services were unnecessary, the best answer generally involves qualified medical professionals reviewing records, not merely statistical analysis, although analytics identify the targets.
9. Distinguish fraud from abuse when asked. If a scenario describes wasteful or excessive practice without any indication of deliberate misrepresentation, the correct classification is abuse rather than fraud.
10. For detection questions, choose the technique matched to the scheme. Peer comparison and code distribution analysis detect upcoding; claims-editing software detects unbundling and duplicates; beneficiary verification detects phantom billing; review of contracts and payments detects kickbacks; site visits detect fictitious providers.
11. Eliminate answers that confuse the roles of parties. Provider fraud is committed by or through the provider. If an option describes a patient lending an insurance card or an employee of the insurer altering claims, that is a different category (beneficiary fraud or insider fraud) and is a distractor.
12. Read for the words most and best. Several answers may be partially correct. Select the one that most completely or directly addresses the fact pattern, consistent with the ACFE Fraud Examiners Manual terminology.
13. Manage your time. Health care fraud questions can be long. Skim for the key verbs (billed, referred, waived, delivered, documented) to locate the scheme quickly, then confirm with a second careful read.

Summary
Health care fraud by service providers exploits the separation between the recipient and payer of services and the complexity of medical coding. The principal schemes are fictitious providers, billing for services not rendered, upcoding, unbundling, misrepresentation of services or circumstances, medically unnecessary care, kickbacks and self-referrals, and specialized schemes in DME, laboratories, home health, hospice, and pharmacy. The False Claims Act, Anti-Kickback Statute, Stark Law, and HIPAA form the legal backbone of enforcement. Success on the CFE Exam depends on recognizing each scheme from its mechanics, understanding the intent standards of the relevant laws, and matching the appropriate detection technique to the scheme described.