What You Need to Know about Health Care Fraud and Abuse Laws

The federal anti-fraud statute, 18 U.S.C. Section 1347, prohibits knowingly and willfully executing a scheme to defraud any healthcare benefit program. The anti-kickback statute, 42 U.S.C. Section 1320a-7b, bars payments intended to induce or reward referrals of items or services payable by federal programs. The False Claims Act, 31 U.S.C. Section 3729, imposes liability for presenting false or fraudulent claims for payment. These statutes operate alongside state laws and administrative regulations that define compliance obligations more narrowly or broadly depending on the payer, provider type, and service category.

The distinction between fraud and abuse hinges on intent. Fraud requires knowing and willful misconduct, and abuse describes billing practices that deviate from accepted standards but may not involve deliberate deception. Courts have held that recklessness or negligence alone does not satisfy the knowing and willful standard for criminal liability, though civil penalties may apply to negligent billing errors. This intent requirement shapes how enforcement agencies investigate, how providers defend their practices, and what remedies may follow.

Federal agencies enforce these laws through multiple pathways. The Office of Inspector General (OIG) investigates civil fraud and abuse allegations and may impose civil monetary penalties, exclusion from federal programs, and mandatory refunds of overpayments. Criminal prosecution by the Department of Justice targets knowing and willful conduct and carries prison sentences, fines, and restitution. State Medicaid fraud control units and state attorneys general pursue parallel claims under state law. These tracks operate independently: a provider may face civil exclusion without criminal conviction, or criminal acquittal may not prevent civil liability.

In practice, administrative findings often precede or accompany criminal referrals. Delayed submission of verified loss documentation or incomplete notice of billing corrections can complicate a provider's defense, particularly when a state Medicaid agency or Medicare contractor has already flagged patterns. Agencies may pursue exclusion while criminal investigation is ongoing, creating operational urgency independent of conviction.

The knowing and willful standard requires proof that the provider acted with actual knowledge of the law's requirements or acted in reckless disregard of the truth. Courts have rejected negligence-based theories for criminal liability, holding that a provider's failure to understand billing rules does not constitute criminal fraud absent evidence of deliberate concealment or repeated violations after notice. Civil liability, by contrast, may rest on a lower threshold: the False Claims Act imposes penalties based on submission of false claims, and scienter (intent to defraud) is not always required for civil penalties under the anti-kickback statute.

Burden of proof varies by forum. Criminal prosecution requires proof beyond a reasonable doubt. Civil False Claims Act cases proceed under a preponderance of the evidence standard. Administrative exclusion decisions by the OIG apply a different evidentiary framework focused on whether the provider poses a risk to program integrity. These distinctions mean that a provider might prevail in criminal court but face exclusion or civil penalties based on the same underlying conduct.

Robust compliance programs, clear billing policies, and contemporaneous documentation serve as the primary defense against fraud allegations. Providers who maintain written protocols for coding, billing, and authorization; who conduct regular audits; and who promptly refund identified overpayments demonstrate good faith and support a defense against knowing and willful conduct. Documentation of compliance training, policy updates, and corrective measures also signals to enforcement agencies that any errors were isolated rather than systemic.

From a practitioner's perspective, the timing and completeness of corrective action matter significantly. When a compliance review identifies a billing error, providers who document the discovery, calculate the overpayment, and submit a refund promptly create a record that may limit exposure. Conversely, delayed disclosure or failure to refund after internal discovery can be characterized as knowing retention of overpaid funds, strengthening an enforcement agency's case. New York courts and federal tribunals have emphasized that self-correction, while not a complete shield, can distinguish negligent billing from intentional fraud and may influence remedies in civil proceedings.