What Is Medicaid Fraud? Schemes, Penalties, and Reporting

Medicaid fraud is any intentional deception or misrepresentation that results in an unauthorized benefit or payment from the Medicaid program. It covers everything from a clinic billing for visits that never happened to an applicant hiding income to qualify for coverage. The federal government recovered more than $6.8 billion through False Claims Act cases in fiscal year 2025, much of it tied to healthcare fraud.¹ For anyone caught, the consequences run from six-figure fines to a decade in prison and a permanent bar from working with federal health programs.

Fraud Versus Honest Mistakes and Abuse

Federal regulations define Medicaid fraud as an intentional deception or misrepresentation made by a person who knows the deception could result in an unauthorized benefit for themselves or someone else.² The word doing the work there is “intentional.” A billing clerk who keys the wrong code once is not committing fraud. A practice that routinely bills a higher-paying code than what was performed is.

Fraud is not the same as Medicaid “abuse.” Abuse means provider practices that clash with sound medical or business standards and push costs up unnecessarily, or beneficiary practices that do the same.² A doctor who habitually orders extra lab work might be committing abuse. A doctor who bills labs for patients who never came in is committing fraud.

The line between the two matters less than most people think, because the civil False Claims Act does not require prosecutors to prove you set out to cheat the program. Acting with “deliberate ignorance” or “reckless disregard” for whether a claim is accurate is enough.³ A billing manager who notices strange patterns and looks the other way can be civilly liable. Criminal charges under the False Claims Act do require actual criminal intent, which is a higher bar.

Common Provider Schemes

Providers account for the largest dollar losses to Medicaid fraud. Most schemes come down to manipulating the billing system to extract more than the services justify.

Billing for services never provided. The claim describes procedures, tests, or appointments that never happened. Data analytics catches this quickly when billing volume outruns patient records.⁴
Upcoding. Billing a more expensive service than the one performed, such as coding a routine 15-minute check-up as a complex evaluation.⁴
Unbundling. Splitting a single procedure into separate billing codes to inflate the total reimbursement.
Kickbacks. Paying or receiving anything of value in exchange for patient referrals or for prescribing particular drugs or equipment. This is a felony carrying fines up to $100,000 and up to 10 years in prison per violation.⁵
Falsifying diagnoses. Exaggerating or fabricating a patient’s condition to justify services or equipment they do not need, such as documenting severe mobility limits to approve a power wheelchair for someone who walks independently.
Billing for medically unnecessary services. The treatments may actually happen, but the patient never needed them.⁴

Telehealth Fraud

Telehealth has opened a newer channel that federal prosecutors are pursuing hard. The typical pattern: telemarketers cold-call Medicaid or Medicare beneficiaries to collect insurance and health information. A purported telehealth company pays a provider to review records and electronically sign orders for unnecessary equipment, genetic tests, or prescriptions, often without ever speaking to the patient. A separate company buys the completed paperwork and submits false claims to the government.⁶ These assembly-line operations can generate tens of millions in fraudulent claims before anyone notices, and multiple nationwide takedowns have targeted them in recent years.

Common Beneficiary Schemes

Beneficiary fraud involves smaller dollar amounts per case but reaches millions of enrollees. The patterns investigators see most often:

Lying about eligibility. Giving false information about income, assets, household size, or residency to qualify, or failing to report a raise or a move out of state that would change eligibility.⁷
Doctor shopping. Visiting multiple providers to stockpile prescriptions for controlled substances without a legitimate medical need.
Reselling prescription drugs. Filling prescriptions through Medicaid and selling the medications for profit.
Sharing or selling a Medicaid card. Letting someone else use your Medicaid ID for services or medications. Selling or distributing a beneficiary identification number is a separate federal crime punishable by up to 10 years in prison and a $500,000 fine.⁵

What the Penalties Actually Look Like

A single fraudulent scheme can produce criminal prosecution, a civil lawsuit, and administrative sanctions in parallel. Each layer stings on its own; together they are designed to end careers.

Criminal Charges

Kickback violations are felonies with fines up to $100,000 and up to 10 years in prison per offense.⁵ Submitting false claims can carry criminal fines and imprisonment as well, and penalties escalate sharply when fraud causes patient harm or death.

Civil Penalties Under the False Claims Act

The False Claims Act is the government’s most powerful civil tool. The statute sets a penalty of not less than $5,000 and not more than $10,000 per claim, adjusted annually for inflation.⁸ After inflation adjustments, the current per-claim range runs roughly $14,308 to $28,619. On top of that, the government recovers three times its actual damages. For a provider who submitted hundreds of false claims, the arithmetic gets crushing fast.

The Civil Monetary Penalties Law allows HHS to add penalties of up to $25,595 per violation (as adjusted for inflation) for various fraud offenses, including submitting false claims.⁹

Exclusion From Federal Healthcare Programs

Anyone convicted of a healthcare-related felony faces mandatory exclusion from all federal healthcare programs for at least five years.¹⁰ Exclusion means no federal program will pay for any item or service the excluded person provides, orders, or prescribes. For a Medicaid or Medicare provider, that is effectively the end of the career. Mandatory exclusion also applies to convictions for patient abuse or neglect and for felonies involving controlled substances.¹¹ HHS can also pursue permissive exclusion for misdemeanor fraud convictions and other misconduct when the five-year mandatory rule does not apply.

How Fraud Gets Caught

Detection is layered. Federal and state agencies run pattern-recognition software against billing data to flag anomalies: a provider billing more hours than peers in the same specialty, a pharmacy dispensing unusual volumes of a controlled substance, a beneficiary receiving the same service from multiple providers on the same day. Unified Program Integrity Contractors, or UPICs, work with state Medicaid agencies to investigate fraud, waste, and abuse and can pull claims data from every state and territory.¹²

Every state, the District of Columbia, Puerto Rico, and the U.S. Virgin Islands operates a Medicaid Fraud Control Unit, usually inside the state Attorney General’s office.¹³ MFCUs staff investigators, attorneys, and auditors dedicated to provider fraud and to patient abuse or neglect in healthcare facilities.¹⁴

Some of the biggest cases still start with a tip. Current or former employees who see fraudulent billing, kickback arrangements, or falsified records are often the first to raise a flag, and public tips feed the system too, routed through the HHS-OIG hotline and shared with UPICs.¹²

How to Report Suspected Fraud

If you suspect fraud, report it. You do not need to be certain a crime occurred, and you do not need proof.¹⁵ Investigators would rather look at a tip that turns out to be nothing than miss a scheme quietly draining the program.

Before submitting, gather what you can: names of the people or organizations involved, dates and locations of the suspected activity, and any documentation you have access to. HHS-OIG accepts supporting evidence including emails, billing records, documents, and photographs uploaded with the report.¹⁵

The main channels:

The HHS Office of Inspector General hotline and online portal, which handle fraud, waste, and abuse across HHS programs including Medicaid.
Your state’s Medicaid Fraud Control Unit, which handles provider fraud and patient abuse investigations. Contact information is available through the OIG website or your state Attorney General’s office.¹³
Your state Medicaid agency, which typically has its own reporting line for beneficiary-related fraud.

Reports can generally be made anonymously. Providing contact information helps, because investigators can follow up with questions that strengthen the case.

Whistleblower Rewards and Retaliation Protection

Federal law gives people who report Medicaid fraud two things: a shield against retaliation and a share of what the government recovers.

Under the False Claims Act, a private citizen can file a lawsuit on the government’s behalf against someone defrauding a federal program. These “qui tam” actions let the person who filed (the relator) collect between 15 and 30 percent of whatever the government recovers.¹ Because healthcare recoveries often run into the millions, that percentage can be life-changing. The exact share depends on whether the government intervenes and takes over the case or the whistleblower proceeds alone.

Retaliation carries real consequences for employers. The False Claims Act protects any employee, contractor, or agent who is fired, demoted, suspended, threatened, or harassed for pursuing a fraud claim or trying to stop a violation. Remedies include reinstatement to the same position and seniority, double back pay with interest, and compensation for special damages including attorney’s fees.¹⁶ A retaliation lawsuit must be filed within three years of the retaliatory action.

1
United States Department of Justice, Office of Public Affairs. False Claims Act Settlements and Judgments Exceed $6.8B in Fiscal Year 2025
2
eCFR. 42 CFR 455.2 – Definitions
3
U.S. Department of Health and Human Services. Fraud and Abuse Laws
4
CMS. Laws Against Health Care Fraud Fact Sheet
5
Office of the Law Revision Counsel. 42 USC 1320a-7b – Criminal Penalties for Acts Involving Federal Health Care Programs
6
U.S. Department of Health and Human Services Office of Inspector General. Telehealth
7
Centers for Medicare and Medicaid Services. SMD 24-005 – Protecting Medicaid Beneficiaries Against Impermissible Fraud and Abuse Sanctions
8
Office of the Law Revision Counsel. 31 USC 3729 – False Claims
9
Federal Register. Annual Civil Monetary Penalties Inflation Adjustment
10
Office of the Law Revision Counsel. 42 USC 1320a-7 – Exclusion of Certain Individuals and Entities From Participation in Medicare and State Health Care Programs
11
U.S. Department of Health and Human Services Office of Inspector General. Exclusions Authorities
12
Centers for Medicare and Medicaid Services. Chapter 3 – Medicaid Investigations and Audits
13
U.S. Department of Health and Human Services Office of Inspector General. Medicaid Fraud Control Units
14
eCFR. 42 CFR Part 1007 – State Medicaid Fraud Control Units
15
U.S. Department of Health and Human Services Office of Inspector General. Before You Submit a Complaint
16
Office of the Law Revision Counsel. 31 USC 3730 – Civil Actions for False Claims