CMS Fraud Defense Operations Center Explained: How Real-Time Claims Analytics Flags Providers for Audit

Introduction

For decades, Medicare fraud prevention worked largely on a "pay and chase" basis. Claims were paid first, and if they were later found to be improper, the government tried to recover the money. In 2025, the Centers for Medicare & Medicaid Services (CMS) launched a new initiative designed to change that model: the Fraud Defense Operations Center, commonly called the FDOC or the "Fraud War Room."

The Fraud Defense Operations Center brings together data analysts, investigators, health policy experts, legal advisors, and law enforcement to review Medicare billing data in near real time and stop suspicious payments before they are made. CMS has reported that the FDOC has suspended billions of dollars in potentially fraudulent Medicare payments since its launch, and in April 2026 CMS extended the model to Medicaid with the Medicaid Fraud War Room.

For healthcare providers, understanding how the CMS Fraud Defense Operations Center works is increasingly important. Real-time claims analytics can flag a provider for pre-payment review, payment suspension, or further investigation based on billing patterns alone. Most providers flagged for review are not committing fraud, but every provider benefits from understanding what the data shows, why certain patterns attract attention, and how to prepare.

This article explains what the FDOC is, how it developed, how real-time claims analytics and Medicare program integrity tools work, what types of billing patterns can lead to a review, what happens after a provider is flagged, and what steps providers can take to strengthen audit readiness.

What Is the CMS Fraud Defense Operations Center?

The Fraud Defense Operations Center is a program integrity initiative run by the CMS Center for Program Integrity (CPI). CMS describes the FDOC as a cross-functional strike force that unites data analysts, investigators, health policy experts, legal advisors, and law enforcement under one roof. Its stated mission is to stop fraud before taxpayer dollars are lost, using data-driven intelligence to detect threats in real time, coordinate rapid intervention, and shut down inappropriate billing before claims are paid.

In earlier CMS materials, the FDOC is described as integrating cross-functional expertise through a specialized team that uses rigorous, data-driven analysis to proactively detect, address, and prevent fraud, waste, and abuse in real time, with the goal of halting improper payments before Medicare incurs a financial loss.

CMS has also described the FDOC as using advanced artificial intelligence and machine learning technologies to detect and respond to suspected fraudulent activity. In its fiscal year 2025 financial report, CMS stated that it had permanently established the FDOC to deliver a dynamic, real-time response to suspected Medicare fraud.

In short, the FDOC is not a single software program. It is an operating model that combines technology, data, and people from different disciplines so that suspicious billing can be identified and acted on quickly.

Why CMS Created the Fraud War Room: From "Pay and Chase" to "Stop and Caught"

CMS has explained the motivation behind the FDOC in its 2025 annual program integrity report. Historically, CMS focused its fraud prevention efforts on a "pay and chase" model, in which claims were paid and later investigated. If an audit or investigation found that a payment was improper, CMS or its contractors would issue an overpayment demand to recover the funds. CMS noted that the delay between payment and identification sometimes made it impossible to recover the full amount because funds had been spent or providers had disappeared.

In 2025, CMS stated that it significantly strengthened what it calls a "stop and caught" approach, which aims to stop suspicious dollars before they go out the door. The FDOC is one of the central tools in this effort, alongside the long-standing Fraud Prevention System, pre-payment medical review, automated edits, and administrative actions such as payment suspensions and revocations.

A Timeline of the Fraud Defense Operations Center

The Pilot: March to May 2025

CMS launched the Fraud Defense Operations Center in March 2025. It began as a pilot, and CMS has published results from the FDOC pilot, which ran from March 31 to May 1, 2025. During that pilot, CMS reported that the FDOC:

• Assessed 106 providers, more than four per business day.

• Suspended payments to 50 providers due to suspected fraud.

• Implemented pre-payment review on 40 providers.

• Revoked the Medicare billing privileges of two providers.

• Suspended $105 million in payments.

CMS described several examples from the pilot, including a laboratory that submitted about $10 million in claims, averaging $1 million in services per day, for beneficiaries whose Medicare Beneficiary Identifiers (MBIs) were likely obtained improperly, and a Texas laboratory that billed Medicare for genetic tests that beneficiaries confirmed they never received.

Permanent Operations and 2025 Results

After the pilot, CMS expanded the FDOC and made it permanent. In its 2025 fact sheet, CMS reported that FDOC efforts in 2025 resulted in more than $1.8 billion in Medicare payments suspended. CMS reported that the FDOC investigated 347 providers, more than five per business day, and suspended payments to 249 providers due to suspected fraud. These suspensions included more than $1.5 billion related to suspect durable medical equipment (DME) billing, more than $170 million related to suspect skin substitute billing, and more than $100 million related to suspect laboratories. CMS's annual report also stated that CMS later revoked the billing privileges of 127 of the providers and suppliers whose payments were suspended.

2026 Activity

CMS has continued to publish FDOC results in 2026. In an updated fact sheet covering January 1 through June 30, 2026, CMS reported that FDOC efforts resulted in more than $371 million in suspended Medicare payments and payment suspensions for 267 providers and suppliers due to suspected fraud. CMS broke these figures down as follows:

• More than $226 million related to suspect DME billing.

• More than $53 million related to suspect skin substitute billing.

• More than $39 million related to suspect laboratories.

• More than $23 million related to suspect hospice providers.

CMS noted that these figures are subject to change.

Expansion to Medicaid: The Medicaid Fraud War Room

In April 2026, CMS launched the Medicaid Fraud War Room in direct collaboration with the White House Task Force to Eliminate Fraud. CMS describes it as a cross-functional strike force that uses advanced data analytics to identify high-risk providers, develop investigative leads, and coordinate rapid action, using existing state and federal program integrity tools such as provider exclusions, civil monetary penalties, overpayment recovery, and state payment suspensions. CMS reported that, since its launch on April 23, 2026, the Medicaid Fraud War Room coordinated actions against 50 unique high-risk Medicaid providers representing approximately $203 million in Medicaid payments during its first 88 days.

CMS has also published resources to help states set up their own Medicaid Fraud War Rooms, including a standard operating procedure, a sample agenda, exclusion referral templates, case presentation briefs, and data request forms, as part of its Medicaid and CHIP program integrity guidance.

How Real-Time Claims Analytics Works

CMS has not published the specific algorithms, models, or thresholds the FDOC uses, and for good reason: publishing them would make it easier for bad actors to avoid detection. However, CMS has described the general tools and data sources involved in its program integrity work. Understanding these tools helps providers see why certain billing patterns attract attention.

The Fraud Prevention System

CMS operates the Fraud Prevention System (FPS), which CMS describes as using hundreds of models to monitor outlier billing by providers and suppliers, along with automated edits that proactively deny inappropriate claims. In congressional testimony in March 2026, CMS explained that the FPS uses advanced data analytics and predictive modeling to identify aberrant billing patterns in real time.

Linking Multiple Data Sources

CMS has explained that by linking Medicare and Medicaid claims data, provider ownership information, pharmacy records, and external data sources, it can identify patterns that might otherwise go unnoticed. CMS also stated that artificial intelligence and machine learning tools improve anomaly detection and allow CMS to continuously refine its risk models.

This matters because a single claim may look normal on its own, while the same claim viewed alongside ownership records, the beneficiary's history, other providers' billing, and pharmacy data may reveal an unusual pattern.

Provider Screening Tools

CMS uses provider screening and monitoring systems to check enrollment information. In its 2026 testimony, CMS described an Advanced Provider Screening (APS) system that screens, monitors, and alerts on ineligible providers and maintains a centralized repository of criminal activity, licensure status, and identity information. In Medicaid, CMS described the Data Exchange (DEX) system, which shares provider termination and revocation data among CMS and state programs.

Interagency Data Sharing

The FDOC works alongside other federal data initiatives. In 2025, the Department of Justice announced that it was working with HHS-OIG, the FBI, and other agencies to create a Health Care Fraud Data Fusion Center to use cloud computing, artificial intelligence, and advanced analytics to identify emerging health care fraud schemes. CMS has stated that it participates in the Data Fusion Center. CMS also launched a Banking Alliance Project in September 2025, a multiagency initiative involving HHS-OIG, DOJ, CMS, and the Department of the Treasury that works with major financial institutions to alert on large or frequent transactions that may indicate health care fraud.

CMS also participates in the Healthcare Fraud Prevention Partnership (HFPP), a voluntary public-private partnership that detects and prevents health care fraud through data sharing among federal and state agencies, private health plans, and other organizations.

The Human Element

The FDOC model pairs data analytics with expert review. When data identifies an unusual pattern, analysts, investigators, clinicians, policy experts, and legal advisors review the findings to decide whether action is appropriate. This combination of automated detection and human judgment is what allows the FDOC to move quickly while considering the context of a provider's billing.

What Billing Patterns Can Flag a Provider for Review?

Because CMS does not publish its models, no one outside the agency can list exactly what triggers a review. However, the examples CMS has published, along with long-standing program integrity principles, point to several general categories of patterns that analytics are designed to identify. Many of these patterns can have legitimate explanations, but they are the kind of patterns that may lead to closer review.

Sudden Billing Spikes

CMS examples include a dormant DME supplier that suddenly began billing more than $100 million for orthotics using illegally obtained MBIs, and a California laboratory that billed millions of dollars for COVID-19 tests immediately after enrolling in Medicare. A rapid increase in claims volume or dollars, especially from a newly enrolled or previously inactive provider, is one of the clearest signals analytics can detect.

Billing Inconsistent With Capacity

CMS described a laboratory whose offices were empty, with no staff or equipment, and a sham clinic that had no location, no patients, and no staff. Billing that exceeds what a provider could realistically deliver, given its staffing, equipment, or location, is a recognized indicator.

Unusual Service Intensity for a Single Patient

In one pilot example, CMS described a dermatologist who billed $16 million for skin substitutes for a single beneficiary with no supporting medical history. Billing far more services for one patient than would normally be expected can attract attention.

Services Inconsistent With Diagnosis or History

CMS described a laboratory that billed for genetic tests to identify epilepsy and Parkinson's disease for beneficiaries who had neither condition. When services billed do not match a beneficiary's diagnoses or medical history, analytics may flag the claims.

Repeated "Once-in-a-Lifetime" Services

The Medicaid Fraud War Room identified a laboratory that billed repeatedly for genetic tests that are normally performed only once in a patient's lifetime. Repetition of services that should be rare or one-time is a common analytic flag.

Outlier Billing Compared With Peers

The Fraud Prevention System monitors outlier billing. Providers whose billing for a particular service, code, or patient population is far outside the range of similar providers may be selected for review even when there is no indication of fraud. This is one reason providers should understand how their own billing compares with peers.

Beneficiary Identity Concerns

Several CMS examples involve the use of stolen or misused MBIs. Patterns such as large numbers of new patients with no prior relationship to the provider, beneficiaries spread across distant geographic areas, or beneficiary complaints about services never received may indicate identity misuse. CMS has reported that 1-800-MEDICARE received fraud-related complaints from more than 307,000 beneficiaries in 2025, which shows how beneficiary reports also feed program integrity work.

High-Risk Service Categories

CMS's published FDOC results consistently identify DME, skin substitutes, laboratories, and hospice as major areas of suspended payments. Providers in these categories are more likely to be subject to analytic review simply because of the risk profile of the services they bill.

What Happens When a Provider Is Flagged?

Being flagged by real-time claims analytics does not automatically mean a provider will face penalties. A flag usually starts a review process. Depending on the findings, CMS and its contractors may take one or more of the following actions.

Additional Documentation Requests and Medical Review

A Medicare Administrative Contractor (MAC), Unified Program Integrity Contractor (UPIC), or other contractor may send an Additional Documentation Request (ADR) asking for medical records to support specific claims. If records are not provided by the deadline, the claims may be denied.

Pre-Payment Review

CMS may place a provider on pre-payment review, in which claims are reviewed before payment is made. During the FDOC pilot alone, CMS placed 40 providers on pre-payment review. In 2025, CMS reported denying 122,658 Medicare claims for unnecessary items and services through pre-payment review.

Payment Suspension

CMS may suspend Medicare payments under 42 CFR 405.371, based on reliable information that an overpayment exists or a credible allegation of fraud. Payment suspension is the action most often reported in FDOC results. Notice requirements, duration, and extension rules are set out in 42 CFR 405.372. Under 42 CFR 405.374, providers generally have the opportunity to submit a rebuttal statement explaining why the suspension should be removed. In Medicaid, 42 CFR 455.23 requires states to suspend payments when there is a credible allegation of fraud, unless a good-cause exception applies.

Revocation of Billing Privileges

CMS may revoke a provider's Medicare enrollment under 42 CFR 424.535 for reasons that include noncompliance with enrollment requirements, misuse of billing numbers, abusive billing patterns, and certain felony convictions. A revocation generally comes with a re-enrollment bar. Providers have appeal rights, which typically begin with a request for reconsideration.

Referral to Law Enforcement

When CMS identifies potential fraud, it may refer the matter to HHS-OIG and the Department of Justice. CMS reported that law enforcement accepted 372 CMS fraud referrals in 2025, encompassing $3.7 billion in billing.

Outreach and Education

Not every flag leads to enforcement. CMS has also used educational outreach. For example, CMS reported sending letters to outlier providers that appeared to be excessively billing skin substitute products and services, as well as outreach letters to Part B and DME providers that had received a significant number of beneficiary complaints but had not yet reached the threshold for formal enforcement referral. CMS reported that the skin substitute letter campaign resulted in substantial decreases in suspect claims.

How the FDOC Fits Into the Broader Program Integrity System

The FDOC operates within a larger network of Medicare and Medicaid program integrity programs. Providers may encounter any of the following:

• Medicare Administrative Contractors, which process claims and perform medical review, including Targeted Probe and Educate.

• Unified Program Integrity Contractors, which investigate potential fraud, waste, and abuse.

• Recovery Audit Contractors, which identify improper payments, typically after payment.

• The Supplemental Medical Review Contractor, which conducts nationwide medical review on CMS-identified topics.

• The Comprehensive Error Rate Testing program, which measures Medicare fee-for-service improper payments.

• HHS-OIG audits, evaluations, and investigations.

• State Medicaid program integrity units and Medicaid Fraud Control Units.

• The Department of Justice and the U.S. Attorneys' Offices, including through the annual National Health Care Fraud Takedown.

The FDOC's role is to accelerate detection and coordinate a quick response, often by drawing on the authorities and resources of these other programs. CMS has also connected FDOC activity to broader enforcement actions. The 2026 National Health Care Fraud Takedown, announced on June 23, 2026, included CMS payment suspensions for 1,079 providers and revocations for 1,403 providers, according to the Department of Justice.

What Real-Time Analytics Means for Legitimate Providers

The increasing use of real-time claims analytics has several practical implications for providers who bill Medicare and Medicaid correctly.

Faster Consequences

Because actions such as payment suspensions can happen before claims are paid, the financial impact of a review can be felt immediately. Providers need cash flow planning and a fast internal response process.

Your Data Tells a Story

Analytics view a provider through its data: volume, codes, diagnoses, ordering patterns, patient geography, and changes over time. Providers who understand their own data are better able to explain legitimate patterns, such as a new service line, a new referral relationship, a specialty population, or a change in coverage policy.

Enrollment Information Matters

Because CMS links claims data with ownership and enrollment information, inaccurate enrollment data can raise questions. Keeping enrollment records accurate and current in the Provider Enrollment, Chain, and Ownership System (PECOS) and with state Medicaid programs is part of reducing unnecessary risk.

Documentation Is the Defense

When a provider is flagged, the outcome usually depends on whether medical records support the claims. Complete, accurate, and timely documentation remains the most effective protection against a negative audit outcome.

How Providers Can Monitor Their Own Billing Data

Providers can take a proactive approach by monitoring the same kinds of patterns that program integrity analytics are designed to identify.

Use Available CMS Comparative Data

CMS makes certain comparative billing data available to providers. The Program for Evaluating Payment Patterns Electronic Report (PEPPER) provides provider-specific Medicare data statistics for certain provider types, including hospices, home health agencies, skilled nursing facilities, inpatient rehabilitation facilities, and short-term acute care hospitals. CMS has also distributed Comparative Billing Reports to selected providers to show how their billing compares with peers. These tools do not show the FDOC's models, but they can help providers identify areas where they appear to be outliers.

Track Key Metrics Internally

Providers can build internal dashboards that track:

• Monthly claims volume and payments by service line, location, and clinician.

• The most frequently billed codes and changes in their frequency.

• Average units or services per patient.

• The share of orders or referrals from each ordering practitioner.

• Patient geography relative to the service area.

• Denial rates and reasons by payer and contractor.

• Length of stay and discharge patterns, where relevant, such as in hospice.

Investigate Changes Before Someone Else Does

When an internal metric changes significantly, investigate the cause and document it. If the change reflects a legitimate business development, such as a new contract, new staff, or a new location, keep records that explain it. If the change reflects an error or a compliance problem, correct it promptly.

Watch for Misuse of Your Identifiers

Monitor remittance advice and claims data for claims that your organization did not submit. Protect your National Provider Identifier (NPI), Medicare billing number, and login credentials. Report suspected identity theft promptly to CMS and HHS-OIG.

A Practical Readiness Checklist for Real-Time Review

The following steps can help providers prepare for the possibility that real-time analytics will flag their claims for review:

• Confirm that your compliance program reflects the elements described in HHS-OIG's General Compliance Program Guidance.

• Verify that enrollment data, including ownership, managing employees, locations, and bank accounts, is accurate in PECOS and state Medicaid systems.

• Screen employees, contractors, and vendors against the HHS-OIG List of Excluded Individuals and Entities, SAM.gov, and state Medicaid exclusion lists.

• Conduct regular internal audits of high-risk and high-volume services, focusing on medical necessity, orders, signatures, and coding accuracy.

• Review PEPPER reports or other comparative data available to your provider type.

• Establish a process for receiving, logging, and responding to ADRs, pre-payment review notices, and payment suspension letters, with deadlines tracked centrally.

• Prepare a contingency plan for cash flow disruption in case of a payment suspension or pre-payment review.

• Know your rights, including the rebuttal process for payment suspensions and the appeal process for claim denials and revocations.

• Involve qualified legal counsel promptly when you receive a payment suspension notice, a UPIC request, or any contact from law enforcement.

• Maintain a written policy for identifying and returning overpayments under 42 CFR 401.305.

• Train staff on documentation requirements and on how to recognize and report suspected fraud or identity misuse.

Responding to a Payment Suspension Notice

If your organization receives a Medicare payment suspension notice, a calm and organized response is important. General steps include:

1. Read the notice carefully to understand the basis for the suspension, the claims or time periods involved, and any deadlines.

2. Contact legal counsel experienced in Medicare program integrity matters.

3. Preserve all relevant records and suspend any routine record destruction.

4. Gather documentation that supports the claims in question.

5. Consider whether to submit a rebuttal statement within the timeframe described in the notice, as permitted under 42 CFR 405.374.

6. Respond promptly and completely to any records requests from the UPIC or other contractor.

7. Review internal processes to identify and correct any problems the review reveals.

8. Plan for the financial impact while the suspension is in effect.

Frequently Asked Questions

Is the Fraud Defense Operations Center the same as the Fraud War Room?

Yes. CMS uses both names. The Fraud Defense Operations Center, or FDOC, is also known as the Fraud War Room or the Medicare Fraud War Room. CMS uses a separate name, the Medicaid Fraud War Room, for the Medicaid initiative launched in April 2026.

Does the FDOC review every Medicare claim?

CMS's automated systems, including the Fraud Prevention System, analyze Medicare fee-for-service claims data broadly. The FDOC focuses its expert review on providers and patterns that analytics identify as higher risk.

Will I be told why my claims were flagged?

Notices of payment suspension and other administrative actions generally state the basis for the action, but CMS does not disclose its analytic models. In fraud-related matters, CMS may limit what it discloses so that it does not compromise an investigation.

Can a provider be flagged even if it has done nothing wrong?

Yes. Analytics identify unusual patterns, and some unusual patterns have legitimate explanations. A flag usually leads to review, not a final finding. Good documentation and a clear explanation of your billing patterns are the best ways to resolve a review.

Does real-time analytics apply to Medicaid?

Increasingly, yes. CMS has stated that it links Medicare and Medicaid data, and the Medicaid Fraud War Room applies the FDOC model to Medicaid in coordination with state Medicaid agencies, HHS-OIG, and law enforcement.

Is the FDOC related to the National Health Care Fraud Takedown?

They are separate initiatives, but they are connected. The FDOC is a CMS program integrity operation, while the Takedown is an annual enforcement action led by the Department of Justice. CMS administrative actions, including payment suspensions and revocations, are reported as part of the Takedown results.

Conclusion

The CMS Fraud Defense Operations Center represents a significant shift in how Medicare, and increasingly Medicaid, protects program funds. By combining real-time claims analytics, artificial intelligence, linked data sources, and a cross-functional team of experts, CMS aims to identify suspicious billing and act before payments leave the trust funds. CMS has reported billions of dollars in suspended payments since the FDOC's launch, with a heavy focus on DME, skin substitutes, laboratories, and hospice.

For legitimate providers, the lesson is not that every provider is a suspect, but that billing data is now reviewed faster and more thoroughly than ever. Understanding your own data, keeping enrollment information accurate, maintaining strong documentation, and having a ready response plan will help your organization handle any review efficiently and continue serving patients without disruption.

How HealthBridge Can Help

HealthBridge is a healthcare management consulting firm that specializes in Medicare and Medicaid compliance, program integrity, and audit readiness. We help providers understand their billing data, identify outlier patterns, strengthen documentation and coding practices, prepare for pre-payment reviews and payment suspension responses, and build compliance programs that hold up to scrutiny. If you would like help preparing your organization for real-time claims review, please get in touch with us. We will be happy to help you with this topic.

References

• Centers for Medicare & Medicaid Services. Fraud Defense Operations Center Fast Facts (2025 results). https://www.cms.gov/files/document/fdoc-fact-sheet-updated.pdf

• Centers for Medicare & Medicaid Services. Crushing Fraud through the Fraud Defense Operations Center, Fast Facts (CY 2026 update). https://www.cms.gov/files/document/cpi-fdoc-fact-sheet-updated-first-year.pdf

• Centers for Medicare & Medicaid Services. CMS Fraud, Waste, and Abuse Sprint Strategy and FDOC Pilot Fast Facts. https://www.cms.gov/files/document/cms-fraud-waste-and-abuse-sprint-strategy.pdf

• Centers for Medicare & Medicaid Services, Center for Program Integrity. Crushing Fraud: Annual Report 2025. https://www.cms.gov/files/document/crushing-fraud-annual-report.pdf

• Centers for Medicare & Medicaid Services. CMS Accomplishments, January 1 to December 31, 2025. https://www.cms.gov/files/document/cpi-data-dashboard-january-update.pdf

• Centers for Medicare & Medicaid Services. FY 2025 CMS Financial Report. https://www.cms.gov/files/document/cms-financial-report-fiscal-year-2025.pdf

• Centers for Medicare & Medicaid Services. Medicaid Fraud War Room Fast Facts. https://www.cms.gov/files/document/medicaid-fraud-war-room-fast-facts.pdf

• Centers for Medicare & Medicaid Services. CMS Medicaid Fraud War Room Stops More Than $203 Million in Improper Payments During First 88 Days. https://www.cms.gov/newsroom/press-releases/cms-medicaid-fraud-war-room-stops-more-203-million-improper-payments-during-first-88-days

• Centers for Medicare & Medicaid Services. MLN Connects Newsletter for July 30, 2026. https://www.cms.gov/training-education/medicare-learning-network/newsletter/mln-connects-newsletter-july-30-2026

• Centers for Medicare & Medicaid Services. Program Integrity Pillars for Medicaid and the Children's Health Insurance Program (CHIP). https://www.cms.gov/medicare/medicare-medicaid-coordination/program-integrity-pillars-medicaid-childrens-health-insurance-program-chip

• Centers for Medicare & Medicaid Services. Medicare Program Integrity Manual, Chapter 4. https://www.cms.gov/regulations-and-guidance/guidance/manuals/downloads/pim83c04.pdf

• U.S. Department of Health and Human Services. CMS Testimony on Combatting Medicare and Medicaid Fraud (March 17, 2026). https://www.hhs.gov/about/agencies/asl/testimony/2026/03/17/cms-testimony-on-combatting-medicare-and-medicaid-fraud.html

• U.S. Department of Health and Human Services. HHS Program Integrity Agency Priority Goal Action Plan, FY 2026 to FY 2027. https://www.hhs.gov/sites/default/files/hhs-program-integrity-apg-action-plan-fy-2026-fy-2027.pdf

• U.S. Department of Health and Human Services, Office of Inspector General. White Paper: The Nation's Challenge to Combat Durable Medical Equipment Fraud in Medicare. https://oig.hhs.gov/documents/evaluation/11855/OEI-02-24-00311.pdf

• U.S. Department of Health and Human Services, Office of Inspector General. General Compliance Program Guidance. https://oig.hhs.gov/compliance/general-compliance-program-guidance/

• U.S. Department of Health and Human Services, Office of Inspector General. Exclusions Program and LEIE Database. https://oig.hhs.gov/exclusions/

• U.S. Department of Justice, Office of Public Affairs. National Health Care Fraud Takedown Results in 455 Defendants Charged in Connection with Over $6.5 Billion in Alleged Fraud (June 23, 2026). https://www.justice.gov/opa/pr/national-health-care-fraud-takedown-results-455-defendants-charged-connection-over-65

• U.S. Department of Justice, Office of Public Affairs. Fraud Division Announces Federal-State Partnership in Ohio to Prosecute Fraud. https://www.justice.gov/opa/pr/fraud-division-announces-federal-state-partnership-ohio-prosecute-fraud

• Centers for Medicare & Medicaid Services. National Health Care Fraud Takedown Results in 324 Defendants Charged in Connection with Over $14.6 Billion in Alleged Fraud. https://www.cms.gov/newsroom/press-releases/national-health-care-fraud-takedown-results-324-defendants-charged-connection-over-14-6-billion

• Electronic Code of Federal Regulations. 42 CFR 401.305, Requirements for Reporting and Returning of Overpayments. https://www.ecfr.gov/current/title-42/section-401.305

• Electronic Code of Federal Regulations. 42 CFR 405.371, Suspension, Offset, and Recoupment of Medicare Payments. https://www.ecfr.gov/current/title-42/section-405.371

• Electronic Code of Federal Regulations. 42 CFR 405.372, Proceeding for Suspension of Payment. https://www.ecfr.gov/current/title-42/section-405.372

• Electronic Code of Federal Regulations. 42 CFR 405.374, Opportunity for Rebuttal. https://www.ecfr.gov/current/title-42/section-405.374

• Electronic Code of Federal Regulations. 42 CFR 424.535, Revocation of Enrollment in the Medicare Program. https://www.ecfr.gov/current/title-42/section-424.535

• Electronic Code of Federal Regulations. 42 CFR 455.23, Suspension of Payments in Cases of Fraud. https://www.ecfr.gov/current/title-42/section-455.23