Healthcare Fraud: How to Recognize and Report It
Healthcare fraud costs the United States an estimated $100 billion annually, according to the FBI's financial crimes division — a figure that lands somewhere between "staggering" and "hard to picture." This page breaks down what healthcare fraud actually is, how it operates in practice, what it looks like in everyday scenarios, and where the line falls between honest billing errors and deliberate deception. Understanding these distinctions matters whether someone is a patient reviewing an Explanation of Benefits, a clinician navigating billing practices, or a healthcare worker who suspects something is wrong at their facility.
Definition and scope
Healthcare fraud is the intentional misrepresentation of medical services, credentials, or information to obtain payment or benefit that would not otherwise be authorized. The U.S. Department of Health and Human Services Office of Inspector General (HHS OIG) draws a formal distinction between fraud — which requires intent — and abuse, which involves practices that are inconsistent with sound clinical or fiscal standards but may lack deliberate deception.
Federal statutes governing this space include the False Claims Act (31 U.S.C. §§ 3729–3733), the Anti-Kickback Statute (42 U.S.C. § 1320a-7b(b)), and the Stark Law (42 U.S.C. § 1395nn). Together, these create a legal perimeter around Medicare, Medicaid, and other federally funded programs — though private insurance fraud is addressed by parallel state statutes in all 50 states.
The scope is broad. Perpetrators range from large hospital systems to individual practitioners to organized criminal enterprises that operate fictitious clinics. Medicare and Medicaid are the most heavily targeted programs, in part because of their scale: Medicare alone covered 65 million beneficiaries as of 2023, according to the Centers for Medicare & Medicaid Services (CMS).
How it works
Most healthcare fraud exploits the gap between service delivery and payment verification. Payers — whether federal programs or private insurers — cannot independently confirm every clinical encounter. That gap creates leverage.
The mechanics typically follow one of four structural patterns:
- Billing for services not rendered — Submitting claims for appointments, procedures, or tests that never happened. This is the most straightforward form and the one most easily flagged by pattern analysis.
- Upcoding — Billing for a more expensive procedure than was actually performed. A routine office visit billed as a complex consultation, for instance.
- Unbundling — Submitting separate claims for procedures that should be billed together at a lower combined rate, artificially inflating reimbursement.
- Kickbacks and referral schemes — Paying or receiving remuneration — cash, gifts, free office space — in exchange for patient referrals to specific providers or facilities, which distorts clinical decision-making and inflates utilization.
Fraud involving healthcare costs and billing is particularly difficult to detect at the patient level because most patients never see an itemized claim — they see only a summary or nothing at all.
Common scenarios
Healthcare fraud surfaces in recognizable patterns across different sectors of the system.
Durable Medical Equipment (DME): Suppliers bill for wheelchairs, braces, or CPAP machines for patients who never requested them or don't qualify. HHS OIG has identified DME as a persistent high-risk area, with coordinated criminal rings sometimes using stolen beneficiary identification numbers.
Home health fraud: Agencies bill for skilled nursing visits or physical therapy sessions that were never provided, or certify patients as homebound when they demonstrably are not.
Prescription drug schemes: Physicians or pharmacies submit claims for prescriptions never written or dispensed, or participate in schemes where patients receive unnecessary controlled substances later diverted and sold. The Drug Enforcement Administration (DEA) has documented organized "pill mill" operations prosecuted alongside fraud charges.
Telehealth fraud: Following the expansion of telehealth and virtual care during and after 2020, fraudulent telehealth schemes emerged in which providers billed Medicare for consultations that were either superficial check-ins or entirely fabricated, sometimes pairing them with unnecessary DME orders.
Credential misrepresentation: Billing under a licensed provider's identifier for services actually performed by unlicensed staff — or billing for a physician's supervision when no physician was present.
Decision boundaries
Not every billing irregularity is fraud. The distinction matters both legally and practically.
Fraud vs. billing error: Fraud requires intent. A miscoded procedure resulting from a documentation error or software default is an error — potentially requiring a corrected claim and repayment, but not a criminal act. The False Claims Act specifically excludes mistakes, negligence, and good-faith disagreements about coding interpretations from its definition of knowing submission of a false claim.
Fraud vs. abuse: Abuse involves practices that are wasteful or medically unnecessary but lack the deceptive intent of fraud. Ordering an excessive number of diagnostic tests for low-risk patients may constitute abuse under CMS definitions without rising to fraud — unless the over-ordering is tied to a kickback arrangement.
The reporting threshold for a patient or employee who suspects fraud is intentionally low. The HHS OIG fraud hotline accepts tips without requiring the reporter to prove intent — investigators make that determination. The False Claims Act's qui tam provisions allow private individuals with direct knowledge of fraud against the federal government to file suit on the government's behalf and receive between 15% and 30% of recovered funds.
For anyone trying to make sense of where healthcare fraud fits within the broader structure of the American healthcare system, it helps to understand that fraud isn't a peripheral problem — it's a structural stress that inflates costs, erodes trust between patients and providers, and diverts funds from legitimate care. Recognizing it is, in a quiet way, a form of civic participation.