Insurance fraud prevention in medical offices:
Identifying common scams and implementing
safeguards
Introduction
Insurance fraud is illegal activity that negatively impacts the healthcare system and increases
overall costs. Medical insurance fraud schemes are increasing in frequency and sophistication,
threatening the financial stability and integrity of health insurance programs. As gatekeepers to
the healthcare system, medical offices play a key role in identifying potential fraudulent activity
and implementing policies to curb fraud. This paper will examine some common types of
insurance scams targeting medical practices, signs to watch out for, and effective safeguards
offices can establish to minimize fraud risk.
Common Scams Targeting Medical Offices
There are a variety of fraudulent billing schemes that unscrupulous individuals may attempt
targeting medical practices. Some of the more prevalent scams include:
Ghost orphantom billing- Submitting claims for services that were never actually rendered. This
includes billing for office visits that did not occur, billing multiple times for the same visit, or
upcoding the level of service provided to increase reimbursement amounts.
Stolen identity fraud - Using someone's personal identifying information like name, date of birth,
insurance information etc. to receive medical services or file fraudulent insurance claims without
their knowledge or consent. This is becoming more common as personal data is increasingly
compromised through data breaches.
Unbundling - Billing each medical procedure, lab test or other service separately to maximize
reimbursement when they should be bundled together under a single charge according to billing
guidelines.
Upcoding - Inaccurately increasing the complexity of a medical code used on an insurance
claim to make it appear the patient received more extensive services qualifying for a higher
reimbursement level. For example, billing a simple office visit using a code for a longer,
complicated evaluation and management service.
Duplicate billing - Filing multiple or duplicate claims for the same service to the same or different
insurance plans. For example, billing a patient's primary and secondary insurance or refiling a
previously denied claim.
Supply scams - Overstating the quantity of medical supplies used or provided to a patient on an
insurance claim. For example, billing for 10 units of a product when only 1 was dispensed.
Supply scams are also perpetrated through dispensing non-FDA approved, expired or
fraudulent products billed to insurance as legitimate medical goods.
Kickback schemes - Various arrangements where medical providers pay or accept kickbacks in
exchange for patient referrals, often involving unnecessary medical goods or services. For
instance, a medical supply company pays physicians to write prescriptions for unneeded
equipment.
Signs of Potential Fraud
Becoming familiar with common red flags and atypical billing patterns can help medical staff
identify potential fraudulent activity. Some signs warranting closer examination include:
- Unusually high billing volumes or charges not commensurate with the practice size or
specialty. For example, a small single practitioner office averaging over 50 complex office visits
per day.
- Repeated denied or rejected insurance claims, especially for the same types of services.
- Claims for supplies or durable medical equipment that seem excessive for the patient's
condition or diagnosis.
- Patient complaints of receiving bills for services they did not receive or authorizing.
- Practices exhibiting aggressive marketing or patient recruitment tactics involving cash or gift
card inducements for new patients.
- Staff displaying unprofessional, confrontational or evasive behaviors when billing/billing
documentation is questioned.
- Provider billing patterns fluctuating greatly month to month without reasonable cause.
- Services bundled in inappropriate combinations or with incorrect frequencies given medical
guidelines.
- Patient names, diagnoses or other key information inconsistently documented within medical
records versus corresponding claims.
- Claims submitted after normal operating hours or on weekends.
Implementing Safeguards
To help combat fraud and establish a culture of compliance, medical practices should implement
organizational controls focused on prevention, detection and response. Some effective
safeguards include:
Compliance programs - Developing a formal compliance program outlining office policies,
assigned responsibilities, staff training, auditing procedures and protocols for
investigating/reporting fraud issues. Designate a compliance officer to oversee the program.
Education and training - Providing regular mandatory education for all staff on documentation
standards, coding and billing guidelines, fraud red flags, and compliance program requirements.
Maintain training records.
Hiring screening - Conduct background checks including OIG exclusion lists and reference
verification on all new employees, contractors and temporary workers with access to protected
health or billing information.
Billing oversight - Implement pre-payment audits of random samples of claims to check for
upcoding, unbundling or other errors. Conduct post-payment reviews of denied/rejected claims
and unusual outlier charges.
Access controls - Establish role-based access privileges within electronic health records and
billing systems to segregate duties and limit changes to billing data. Monitor access logs.
Reporting protocols - Create a structured process, including anonymous reporting options, for
employees to report suspected wrongdoing without fear of retaliation. Investigate all allegations
promptly.
Cooperation with authorities - Cooperate fully with any government investigations and audits,
such as providing complete access to requested documents, records and staff interviews.
Medical documentation policies - Require detailed documentation of all health services and
related billing information to justify charges. Conduct regular chart audits to monitor compliance.
Patient agreements - Obtain signed informed consent/acknowledgement forms outlining
financial responsibilities upfront before treatment begins.
Checking physician licenses - Verify all practitioners have current, valid licensure in the states
they provide services through regular license checks with applicable boards of medicine.
Billing processes - Establish clear standard operating procedures for all clinical and billing
responsibilities including checks between staff at key control points. Cross train staff to cover
absences.
Sanction screening - Screen all providers, suppliers and associated parties monthly against
government exclusion lists. Take prompt corrective action against any matches found.
While determined fraudsters will always attempt to circumvent safeguards, these basic
compliance policies and controls can help medical practices establish ethical standards,
educate staff on 'red flags' and significantly reduce risks of fraudulent activity going undetected.
With diligent oversight and response, it becomes more difficult for perpetrators to exploit
healthcare systems while protecting practices legally and financially. By cultivating an ingrained
culture of compliance, providers deliver better quality care and steward resources responsibly
for the communities they serve.
Additional Tactics for Small Practices
Compliance programs impose administrative burdens that larger medical organizations may
more readily absorb, yet smaller practices are still vulnerable targets. Here are some
supplementary recommendations specifically tailored for resource-constrained operations:
- Leverage free or low-cost online tools and checklists from authoritative sources like CMS to
establish baseline controls and train staff cost-effectively.
- Consult sample policies from professional medical associations and consider outsourcing full
program management through legitimate certified firms specializing in compliance solutions
scaled for small offices.
- Partner with regional specialist compliance auditing companies providing remote reviews on a
subscription basis tailored to needs of single/small group practices versus costly full in-house
auditing teams.
- Exchange ideas and leverage expertise of other small local providers through formal or
informal collaborations, perhaps led by a regulatory specialist temporarily volunteering pro-bono
advisory services.
- Supplement screening costs by running basic background/exclusion list checks during off-peak
periods leveraging existing equipment/Internet connections versus outsourcing fully to vendors.
- Consider posting compliance materials and anonymous reporting forms online for ease of
staff/public access compared to printing/distributing additional physical documents.
- Communicate regularly with payers establishing cooperative relationships to better understand
evolving issues and promptly self-report/resolve any concerns identified internally or externally.
- Prioritize compliance as part of practice culture, lead by example with integrity and emphasize
patient care over profits to deter any temptation towards fraudulent billing.
Conclusion
While many healthcare providers operate ethically, the persistence of medical insurance fraud
perpetuates skyrocketing costs, threatens the long-term viability of systems, and undermines
public trust. As medical practices function on the frontlines interfacing with patients and payers,
their due diligence in establishing stringent compliance safeguards, staff education and ethical
standards represents the first line of defense against exploitation. Small practices in particular
must strategically leverage available free/low-cost fraud prevention resources to institute
essential controls commensurate with their resources. However, large or small, all providers
play an important societal role model as guardians against abuse, upholding honor through
diligence, transparency and zero tolerance where misconduct arises. With multi-faceted
cooperation between practices, regulators and law enforcement, progress can be made to curb
pervasive healthcare fraud enriching only a dishonest few at the expense of many.
Insurance fraud is illegal activity that negatively impacts the healthcare system and increases
overall costs. Medical insurance fraud schemes are increasing in frequency and sophistication,
threatening the financial stability and integrity of health insurance programs. As gatekeepers to
the healthcare system, medical offices play a key role in identifying potential fraudulent activity
and implementing policies to curb fraud. This paper will examine some common types of
insurance scams targeting medical practices, signs to watch out for, and effective safeguards
offices can establish to minimize fraud risk.
Common Scams Targeting Medical Offices
There are a variety of fraudulent billing schemes that unscrupulous individuals may attempt
targeting medical practices. Some of the more prevalent scams include:
Ghost orphantom billing- Submitting claims for services that were never actually rendered. This
includes billing for office visits that did not occur, billing multiple times for the same visit, or
upcoding the level of service provided to increase reimbursement amounts.
Stolen identity fraud - Using someone's personal identifying information like name, date of birth,
insurance information etc. to receive medical services or file fraudulent insurance claims without
their knowledge or consent. This is becoming more common as personal data is increasingly
compromised through data breaches.
Unbundling - Billing each medical procedure, lab test or other service separately to maximize
reimbursement when they should be bundled together under a single charge according to billing
guidelines.
Upcoding - Inaccurately increasing the complexity of a medical code used on an insurance
claim to make it appear the patient received more extensive services qualifying for a higher
reimbursement level. For example, billing a simple office visit using a code for a longer,
complicated evaluation and management service.
Duplicate billing - Filing multiple or duplicate claims for the same service to the same or different
insurance plans. For example, billing a patient's primary and secondary insurance or refiling a
previously denied claim.
Supply scams - Overstating the quantity of medical supplies used or provided to a patient on an
insurance claim. For example, billing for 10 units of a product when only 1 was dispensed.
Supply scams are also perpetrated through dispensing non-FDA approved, expired or
fraudulent products billed to insurance as legitimate medical goods.
Kickback schemes - Various arrangements where medical providers pay or accept kickbacks in
exchange for patient referrals, often involving unnecessary medical goods or services. For
instance, a medical supply company pays physicians to write prescriptions for unneeded
equipment.
Signs of Potential Fraud
Becoming familiar with common red flags and atypical billing patterns can help medical staff
identify potential fraudulent activity. Some signs warranting closer examination include:
- Unusually high billing volumes or charges not commensurate with the practice size or
specialty. For example, a small single practitioner office averaging over 50 complex office visits
per day.
- Repeated denied or rejected insurance claims, especially for the same types of services.
- Claims for supplies or durable medical equipment that seem excessive for the patient's
condition or diagnosis.
- Patient complaints of receiving bills for services they did not receive or authorizing.
- Practices exhibiting aggressive marketing or patient recruitment tactics involving cash or gift
card inducements for new patients.
- Staff displaying unprofessional, confrontational or evasive behaviors when billing/billing
documentation is questioned.
- Provider billing patterns fluctuating greatly month to month without reasonable cause.
- Services bundled in inappropriate combinations or with incorrect frequencies given medical
guidelines.
- Patient names, diagnoses or other key information inconsistently documented within medical
records versus corresponding claims.
- Claims submitted after normal operating hours or on weekends.
Implementing Safeguards
To help combat fraud and establish a culture of compliance, medical practices should implement
organizational controls focused on prevention, detection and response. Some effective
safeguards include:
Compliance programs - Developing a formal compliance program outlining office policies,
assigned responsibilities, staff training, auditing procedures and protocols for
investigating/reporting fraud issues. Designate a compliance officer to oversee the program.
Education and training - Providing regular mandatory education for all staff on documentation
standards, coding and billing guidelines, fraud red flags, and compliance program requirements.
Maintain training records.
Hiring screening - Conduct background checks including OIG exclusion lists and reference
verification on all new employees, contractors and temporary workers with access to protected
health or billing information.
Billing oversight - Implement pre-payment audits of random samples of claims to check for
upcoding, unbundling or other errors. Conduct post-payment reviews of denied/rejected claims
and unusual outlier charges.
Access controls - Establish role-based access privileges within electronic health records and
billing systems to segregate duties and limit changes to billing data. Monitor access logs.
Reporting protocols - Create a structured process, including anonymous reporting options, for
employees to report suspected wrongdoing without fear of retaliation. Investigate all allegations
promptly.
Cooperation with authorities - Cooperate fully with any government investigations and audits,
such as providing complete access to requested documents, records and staff interviews.
Medical documentation policies - Require detailed documentation of all health services and
related billing information to justify charges. Conduct regular chart audits to monitor compliance.
Patient agreements - Obtain signed informed consent/acknowledgement forms outlining
financial responsibilities upfront before treatment begins.
Checking physician licenses - Verify all practitioners have current, valid licensure in the states
they provide services through regular license checks with applicable boards of medicine.
Billing processes - Establish clear standard operating procedures for all clinical and billing
responsibilities including checks between staff at key control points. Cross train staff to cover
absences.
Sanction screening - Screen all providers, suppliers and associated parties monthly against
government exclusion lists. Take prompt corrective action against any matches found.
While determined fraudsters will always attempt to circumvent safeguards, these basic
compliance policies and controls can help medical practices establish ethical standards,
educate staff on 'red flags' and significantly reduce risks of fraudulent activity going undetected.
With diligent oversight and response, it becomes more difficult for perpetrators to exploit
healthcare systems while protecting practices legally and financially. By cultivating an ingrained
culture of compliance, providers deliver better quality care and steward resources responsibly
for the communities they serve.
Additional Tactics for Small Practices
Compliance programs impose administrative burdens that larger medical organizations may
more readily absorb, yet smaller practices are still vulnerable targets. Here are some
supplementary recommendations specifically tailored for resource-constrained operations:
- Leverage free or low-cost online tools and checklists from authoritative sources like CMS to
establish baseline controls and train staff cost-effectively.
- Consult sample policies from professional medical associations and consider outsourcing full
program management through legitimate certified firms specializing in compliance solutions
scaled for small offices.
- Partner with regional specialist compliance auditing companies providing remote reviews on a
subscription basis tailored to needs of single/small group practices versus costly full in-house
auditing teams.
- Exchange ideas and leverage expertise of other small local providers through formal or
informal collaborations, perhaps led by a regulatory specialist temporarily volunteering pro-bono
advisory services.
- Supplement screening costs by running basic background/exclusion list checks during off-peak
periods leveraging existing equipment/Internet connections versus outsourcing fully to vendors.
- Consider posting compliance materials and anonymous reporting forms online for ease of
staff/public access compared to printing/distributing additional physical documents.
- Communicate regularly with payers establishing cooperative relationships to better understand
evolving issues and promptly self-report/resolve any concerns identified internally or externally.
- Prioritize compliance as part of practice culture, lead by example with integrity and emphasize
patient care over profits to deter any temptation towards fraudulent billing.
Conclusion
While many healthcare providers operate ethically, the persistence of medical insurance fraud
perpetuates skyrocketing costs, threatens the long-term viability of systems, and undermines
public trust. As medical practices function on the frontlines interfacing with patients and payers,
their due diligence in establishing stringent compliance safeguards, staff education and ethical
standards represents the first line of defense against exploitation. Small practices in particular
must strategically leverage available free/low-cost fraud prevention resources to institute
essential controls commensurate with their resources. However, large or small, all providers
play an important societal role model as guardians against abuse, upholding honor through
diligence, transparency and zero tolerance where misconduct arises. With multi-faceted
cooperation between practices, regulators and law enforcement, progress can be made to curb
pervasive healthcare fraud enriching only a dishonest few at the expense of many.
Insurance fraud is illegal activity that negatively impacts the healthcare system and increases
overall costs. Medical insurance fraud schemes are increasing in frequency and sophistication,
threatening the financial stability and integrity of health insurance programs. As gatekeepers to
the healthcare system, medical offices play a key role in identifying potential fraudulent activity
and implementing policies to curb fraud. This paper will examine some common types of
insurance scams targeting medical practices, signs to watch out for, and effective safeguards
offices can establish to minimize fraud risk.
Common Scams Targeting Medical Offices
There are a variety of fraudulent billing schemes that unscrupulous individuals may attempt
targeting medical practices. Some of the more prevalent scams include:
Ghost orphantom billing- Submitting claims for services that were never actually rendered. This
includes billing for office visits that did not occur, billing multiple times for the same visit, or
upcoding the level of service provided to increase reimbursement amounts.
Stolen identity fraud - Using someone's personal identifying information like name, date of birth,
insurance information etc. to receive medical services or file fraudulent insurance claims without
their knowledge or consent. This is becoming more common as personal data is increasingly
compromised through data breaches.
Unbundling - Billing each medical procedure, lab test or other service separately to maximize
reimbursement when they should be bundled together under a single charge according to billing
guidelines.
Upcoding - Inaccurately increasing the complexity of a medical code used on an insurance
claim to make it appear the patient received more extensive services qualifying for a higher
reimbursement level. For example, billing a simple office visit using a code for a longer,
complicated evaluation and management service.
Duplicate billing - Filing multiple or duplicate claims for the same service to the same or different
insurance plans. For example, billing a patient's primary and secondary insurance or refiling a
previously denied claim.
Supply scams - Overstating the quantity of medical supplies used or provided to a patient on an
insurance claim. For example, billing for 10 units of a product when only 1 was dispensed.
Supply scams are also perpetrated through dispensing non-FDA approved, expired or
fraudulent products billed to insurance as legitimate medical goods.
Kickback schemes - Various arrangements where medical providers pay or accept kickbacks in
exchange for patient referrals, often involving unnecessary medical goods or services. For
instance, a medical supply company pays physicians to write prescriptions for unneeded
equipment.
Signs of Potential Fraud
Becoming familiar with common red flags and atypical billing patterns can help medical staff
identify potential fraudulent activity. Some signs warranting closer examination include:
- Unusually high billing volumes or charges not commensurate with the practice size or
specialty. For example, a small single practitioner office averaging over 50 complex office visits
per day.
- Repeated denied or rejected insurance claims, especially for the same types of services.
- Claims for supplies or durable medical equipment that seem excessive for the patient's
condition or diagnosis.
- Patient complaints of receiving bills for services they did not receive or authorizing.
- Practices exhibiting aggressive marketing or patient recruitment tactics involving cash or gift
card inducements for new patients.
- Staff displaying unprofessional, confrontational or evasive behaviors when billing/billing
documentation is questioned.
- Provider billing patterns fluctuating greatly month to month without reasonable cause.
- Services bundled in inappropriate combinations or with incorrect frequencies given medical
guidelines.
- Patient names, diagnoses or other key information inconsistently documented within medical
records versus corresponding claims.
- Claims submitted after normal operating hours or on weekends.
Implementing Safeguards
To help combat fraud and establish a culture of compliance, medical practices should implement
organizational controls focused on prevention, detection and response. Some effective
safeguards include:
Compliance programs - Developing a formal compliance program outlining office policies,
assigned responsibilities, staff training, auditing procedures and protocols for
investigating/reporting fraud issues. Designate a compliance officer to oversee the program.
Education and training - Providing regular mandatory education for all staff on documentation
standards, coding and billing guidelines, fraud red flags, and compliance program requirements.
Maintain training records.
Hiring screening - Conduct background checks including OIG exclusion lists and reference
verification on all new employees, contractors and temporary workers with access to protected
health or billing information.
Billing oversight - Implement pre-payment audits of random samples of claims to check for
upcoding, unbundling or other errors. Conduct post-payment reviews of denied/rejected claims
and unusual outlier charges.
Access controls - Establish role-based access privileges within electronic health records and
billing systems to segregate duties and limit changes to billing data. Monitor access logs.
Reporting protocols - Create a structured process, including anonymous reporting options, for
employees to report suspected wrongdoing without fear of retaliation. Investigate all allegations
promptly.
Cooperation with authorities - Cooperate fully with any government investigations and audits,
such as providing complete access to requested documents, records and staff interviews.
Medical documentation policies - Require detailed documentation of all health services and
related billing information to justify charges. Conduct regular chart audits to monitor compliance.
Patient agreements - Obtain signed informed consent/acknowledgement forms outlining
financial responsibilities upfront before treatment begins.
Checking physician licenses - Verify all practitioners have current, valid licensure in the states
they provide services through regular license checks with applicable boards of medicine.
Billing processes - Establish clear standard operating procedures for all clinical and billing
responsibilities including checks between staff at key control points. Cross train staff to cover
absences.
Sanction screening - Screen all providers, suppliers and associated parties monthly against
government exclusion lists. Take prompt corrective action against any matches found.
While determined fraudsters will always attempt to circumvent safeguards, these basic
compliance policies and controls can help medical practices establish ethical standards,
educate staff on 'red flags' and significantly reduce risks of fraudulent activity going undetected.
With diligent oversight and response, it becomes more difficult for perpetrators to exploit
healthcare systems while protecting practices legally and financially. By cultivating an ingrained
culture of compliance, providers deliver better quality care and steward resources responsibly
for the communities they serve.
Additional Tactics for Small Practices
Compliance programs impose administrative burdens that larger medical organizations may
more readily absorb, yet smaller practices are still vulnerable targets. Here are some
supplementary recommendations specifically tailored for resource-constrained operations:
- Leverage free or low-cost online tools and checklists from authoritative sources like CMS to
establish baseline controls and train staff cost-effectively.
- Consult sample policies from professional medical associations and consider outsourcing full
program management through legitimate certified firms specializing in compliance solutions
scaled for small offices.
- Partner with regional specialist compliance auditing companies providing remote reviews on a
subscription basis tailored to needs of single/small group practices versus costly full in-house
auditing teams.
- Exchange ideas and leverage expertise of other small local providers through formal or
informal collaborations, perhaps led by a regulatory specialist temporarily volunteering pro-bono
advisory services.
- Supplement screening costs by running basic background/exclusion list checks during off-peak
periods leveraging existing equipment/Internet connections versus outsourcing fully to vendors.
- Consider posting compliance materials and anonymous reporting forms online for ease of
staff/public access compared to printing/distributing additional physical documents.
- Communicate regularly with payers establishing cooperative relationships to better understand
evolving issues and promptly self-report/resolve any concerns identified internally or externally.
- Prioritize compliance as part of practice culture, lead by example with integrity and emphasize
patient care over profits to deter any temptation towards fraudulent billing.
Conclusion
While many healthcare providers operate ethically, the persistence of medical insurance fraud
perpetuates skyrocketing costs, threatens the long-term viability of systems, and undermines
public trust. As medical practices function on the frontlines interfacing with patients and payers,
their due diligence in establishing stringent compliance safeguards, staff education and ethical
standards represents the first line of defense against exploitation. Small practices in particular
must strategically leverage available free/low-cost fraud prevention resources to institute
essential controls commensurate with their resources. However, large or small, all providers
play an important societal role model as guardians against abuse, upholding honor through
diligence, transparency and zero tolerance where misconduct arises. With multi-faceted
cooperation between practices, regulators and law enforcement, progress can be made to curb
pervasive healthcare fraud enriching only a dishonest few at the expense of many.
Insurance fraud is illegal activity that negatively impacts the healthcare system and increases
overall costs. Medical insurance fraud schemes are increasing in frequency and sophistication,
threatening the financial stability and integrity of health insurance programs. As gatekeepers to
the healthcare system, medical offices play a key role in identifying potential fraudulent activity
and implementing policies to curb fraud. This paper will examine some common types of
insurance scams targeting medical practices, signs to watch out for, and effective safeguards
offices can establish to minimize fraud risk.
Common Scams Targeting Medical Offices
There are a variety of fraudulent billing schemes that unscrupulous individuals may attempt
targeting medical practices. Some of the more prevalent scams include:
Ghost orphantom billing- Submitting claims for services that were never actually rendered. This
includes billing for office visits that did not occur, billing multiple times for the same visit, or
upcoding the level of service provided to increase reimbursement amounts.
Stolen identity fraud - Using someone's personal identifying information like name, date of birth,
insurance information etc. to receive medical services or file fraudulent insurance claims without
their knowledge or consent. This is becoming more common as personal data is increasingly
compromised through data breaches.
Unbundling - Billing each medical procedure, lab test or other service separately to maximize
reimbursement when they should be bundled together under a single charge according to billing
guidelines.
Upcoding - Inaccurately increasing the complexity of a medical code used on an insurance
claim to make it appear the patient received more extensive services qualifying for a higher
reimbursement level. For example, billing a simple office visit using a code for a longer,
complicated evaluation and management service.
Duplicate billing - Filing multiple or duplicate claims for the same service to the same or different
insurance plans. For example, billing a patient's primary and secondary insurance or refiling a
previously denied claim.
Supply scams - Overstating the quantity of medical supplies used or provided to a patient on an
insurance claim. For example, billing for 10 units of a product when only 1 was dispensed.
Supply scams are also perpetrated through dispensing non-FDA approved, expired or
fraudulent products billed to insurance as legitimate medical goods.
Kickback schemes - Various arrangements where medical providers pay or accept kickbacks in
exchange for patient referrals, often involving unnecessary medical goods or services. For
instance, a medical supply company pays physicians to write prescriptions for unneeded
equipment.
Signs of Potential Fraud
Becoming familiar with common red flags and atypical billing patterns can help medical staff
identify potential fraudulent activity. Some signs warranting closer examination include:
- Unusually high billing volumes or charges not commensurate with the practice size or
specialty. For example, a small single practitioner office averaging over 50 complex office visits
per day.
- Repeated denied or rejected insurance claims, especially for the same types of services.
- Claims for supplies or durable medical equipment that seem excessive for the patient's
condition or diagnosis.
- Patient complaints of receiving bills for services they did not receive or authorizing.
- Practices exhibiting aggressive marketing or patient recruitment tactics involving cash or gift
card inducements for new patients.
- Staff displaying unprofessional, confrontational or evasive behaviors when billing/billing
documentation is questioned.
- Provider billing patterns fluctuating greatly month to month without reasonable cause.
- Services bundled in inappropriate combinations or with incorrect frequencies given medical
guidelines.
- Patient names, diagnoses or other key information inconsistently documented within medical
records versus corresponding claims.
- Claims submitted after normal operating hours or on weekends.
Implementing Safeguards
To help combat fraud and establish a culture of compliance, medical practices should implement
organizational controls focused on prevention, detection and response. Some effective
safeguards include:
Compliance programs - Developing a formal compliance program outlining office policies,
assigned responsibilities, staff training, auditing procedures and protocols for
investigating/reporting fraud issues. Designate a compliance officer to oversee the program.
Education and training - Providing regular mandatory education for all staff on documentation
standards, coding and billing guidelines, fraud red flags, and compliance program requirements.
Maintain training records.
Hiring screening - Conduct background checks including OIG exclusion lists and reference
verification on all new employees, contractors and temporary workers with access to protected
health or billing information.
Billing oversight - Implement pre-payment audits of random samples of claims to check for
upcoding, unbundling or other errors. Conduct post-payment reviews of denied/rejected claims
and unusual outlier charges.
Access controls - Establish role-based access privileges within electronic health records and
billing systems to segregate duties and limit changes to billing data. Monitor access logs.
Reporting protocols - Create a structured process, including anonymous reporting options, for
employees to report suspected wrongdoing without fear of retaliation. Investigate all allegations
promptly.
Cooperation with authorities - Cooperate fully with any government investigations and audits,
such as providing complete access to requested documents, records and staff interviews.
Medical documentation policies - Require detailed documentation of all health services and
related billing information to justify charges. Conduct regular chart audits to monitor compliance.
Patient agreements - Obtain signed informed consent/acknowledgement forms outlining
financial responsibilities upfront before treatment begins.
Checking physician licenses - Verify all practitioners have current, valid licensure in the states
they provide services through regular license checks with applicable boards of medicine.
Billing processes - Establish clear standard operating procedures for all clinical and billing
responsibilities including checks between staff at key control points. Cross train staff to cover
absences.
Sanction screening - Screen all providers, suppliers and associated parties monthly against
government exclusion lists. Take prompt corrective action against any matches found.
While determined fraudsters will always attempt to circumvent safeguards, these basic
compliance policies and controls can help medical practices establish ethical standards,
educate staff on 'red flags' and significantly reduce risks of fraudulent activity going undetected.
With diligent oversight and response, it becomes more difficult for perpetrators to exploit
healthcare systems while protecting practices legally and financially. By cultivating an ingrained
culture of compliance, providers deliver better quality care and steward resources responsibly
for the communities they serve.
Additional Tactics for Small Practices
Compliance programs impose administrative burdens that larger medical organizations may
more readily absorb, yet smaller practices are still vulnerable targets. Here are some
supplementary recommendations specifically tailored for resource-constrained operations:
- Leverage free or low-cost online tools and checklists from authoritative sources like CMS to
establish baseline controls and train staff cost-effectively.
- Consult sample policies from professional medical associations and consider outsourcing full
program management through legitimate certified firms specializing in compliance solutions
scaled for small offices.
- Partner with regional specialist compliance auditing companies providing remote reviews on a
subscription basis tailored to needs of single/small group practices versus costly full in-house
auditing teams.
- Exchange ideas and leverage expertise of other small local providers through formal or
informal collaborations, perhaps led by a regulatory specialist temporarily volunteering pro-bono
advisory services.
- Supplement screening costs by running basic background/exclusion list checks during off-peak
periods leveraging existing equipment/Internet connections versus outsourcing fully to vendors.
- Consider posting compliance materials and anonymous reporting forms online for ease of
staff/public access compared to printing/distributing additional physical documents.
- Communicate regularly with payers establishing cooperative relationships to better understand
evolving issues and promptly self-report/resolve any concerns identified internally or externally.
- Prioritize compliance as part of practice culture, lead by example with integrity and emphasize
patient care over profits to deter any temptation towards fraudulent billing.
Conclusion
While many healthcare providers operate ethically, the persistence of medical insurance fraud
perpetuates skyrocketing costs, threatens the long-term viability of systems, and undermines
public trust. As medical practices function on the frontlines interfacing with patients and payers,
their due diligence in establishing stringent compliance safeguards, staff education and ethical
standards represents the first line of defense against exploitation. Small practices in particular
must strategically leverage available free/low-cost fraud prevention resources to institute
essential controls commensurate with their resources. However, large or small, all providers
play an important societal role model as guardians against abuse, upholding honor through
diligence, transparency and zero tolerance where misconduct arises. With multi-faceted
cooperation between practices, regulators and law enforcement, progress can be made to curb
pervasive healthcare fraud enriching only a dishonest few at the expense of many.
Insurance fraud is illegal activity that negatively impacts the healthcare system and increases
overall costs. Medical insurance fraud schemes are increasing in frequency and sophistication,
threatening the financial stability and integrity of health insurance programs. As gatekeepers to
the healthcare system, medical offices play a key role in identifying potential fraudulent activity
and implementing policies to curb fraud. This paper will examine some common types of
insurance scams targeting medical practices, signs to watch out for, and effective safeguards
offices can establish to minimize fraud risk.
Common Scams Targeting Medical Offices
There are a variety of fraudulent billing schemes that unscrupulous individuals may attempt
targeting medical practices. Some of the more prevalent scams include:
Ghost orphantom billing- Submitting claims for services that were never actually rendered. This
includes billing for office visits that did not occur, billing multiple times for the same visit, or
upcoding the level of service provided to increase reimbursement amounts.
Stolen identity fraud - Using someone's personal identifying information like name, date of birth,
insurance information etc. to receive medical services or file fraudulent insurance claims without
their knowledge or consent. This is becoming more common as personal data is increasingly
compromised through data breaches.
Unbundling - Billing each medical procedure, lab test or other service separately to maximize
reimbursement when they should be bundled together under a single charge according to billing
guidelines.
Upcoding - Inaccurately increasing the complexity of a medical code used on an insurance
claim to make it appear the patient received more extensive services qualifying for a higher
reimbursement level. For example, billing a simple office visit using a code for a longer,
complicated evaluation and management service.
Duplicate billing - Filing multiple or duplicate claims for the same service to the same or different
insurance plans. For example, billing a patient's primary and secondary insurance or refiling a
previously denied claim.
Supply scams - Overstating the quantity of medical supplies used or provided to a patient on an
insurance claim. For example, billing for 10 units of a product when only 1 was dispensed.
Supply scams are also perpetrated through dispensing non-FDA approved, expired or
fraudulent products billed to insurance as legitimate medical goods.
Kickback schemes - Various arrangements where medical providers pay or accept kickbacks in
exchange for patient referrals, often involving unnecessary medical goods or services. For
instance, a medical supply company pays physicians to write prescriptions for unneeded
equipment.
Signs of Potential Fraud
Becoming familiar with common red flags and atypical billing patterns can help medical staff
identify potential fraudulent activity. Some signs warranting closer examination include:
- Unusually high billing volumes or charges not commensurate with the practice size or
specialty. For example, a small single practitioner office averaging over 50 complex office visits
per day.
- Repeated denied or rejected insurance claims, especially for the same types of services.
- Claims for supplies or durable medical equipment that seem excessive for the patient's
condition or diagnosis.
- Patient complaints of receiving bills for services they did not receive or authorizing.
- Practices exhibiting aggressive marketing or patient recruitment tactics involving cash or gift
card inducements for new patients.
- Staff displaying unprofessional, confrontational or evasive behaviors when billing/billing
documentation is questioned.
- Provider billing patterns fluctuating greatly month to month without reasonable cause.
- Services bundled in inappropriate combinations or with incorrect frequencies given medical
guidelines.
- Patient names, diagnoses or other key information inconsistently documented within medical
records versus corresponding claims.
- Claims submitted after normal operating hours or on weekends.
Implementing Safeguards
To help combat fraud and establish a culture of compliance, medical practices should implement
organizational controls focused on prevention, detection and response. Some effective
safeguards include:
Compliance programs - Developing a formal compliance program outlining office policies,
assigned responsibilities, staff training, auditing procedures and protocols for
investigating/reporting fraud issues. Designate a compliance officer to oversee the program.
Education and training - Providing regular mandatory education for all staff on documentation
standards, coding and billing guidelines, fraud red flags, and compliance program requirements.
Maintain training records.
Hiring screening - Conduct background checks including OIG exclusion lists and reference
verification on all new employees, contractors and temporary workers with access to protected
health or billing information.
Billing oversight - Implement pre-payment audits of random samples of claims to check for
upcoding, unbundling or other errors. Conduct post-payment reviews of denied/rejected claims
and unusual outlier charges.
Access controls - Establish role-based access privileges within electronic health records and
billing systems to segregate duties and limit changes to billing data. Monitor access logs.
Reporting protocols - Create a structured process, including anonymous reporting options, for
employees to report suspected wrongdoing without fear of retaliation. Investigate all allegations
promptly.
Cooperation with authorities - Cooperate fully with any government investigations and audits,
such as providing complete access to requested documents, records and staff interviews.
Medical documentation policies - Require detailed documentation of all health services and
related billing information to justify charges. Conduct regular chart audits to monitor compliance.
Patient agreements - Obtain signed informed consent/acknowledgement forms outlining
financial responsibilities upfront before treatment begins.
Checking physician licenses - Verify all practitioners have current, valid licensure in the states
they provide services through regular license checks with applicable boards of medicine.
Billing processes - Establish clear standard operating procedures for all clinical and billing
responsibilities including checks between staff at key control points. Cross train staff to cover
absences.
Sanction screening - Screen all providers, suppliers and associated parties monthly against
government exclusion lists. Take prompt corrective action against any matches found.
While determined fraudsters will always attempt to circumvent safeguards, these basic
compliance policies and controls can help medical practices establish ethical standards,
educate staff on 'red flags' and significantly reduce risks of fraudulent activity going undetected.
With diligent oversight and response, it becomes more difficult for perpetrators to exploit
healthcare systems while protecting practices legally and financially. By cultivating an ingrained
culture of compliance, providers deliver better quality care and steward resources responsibly
for the communities they serve.
Additional Tactics for Small Practices
Compliance programs impose administrative burdens that larger medical organizations may
more readily absorb, yet smaller practices are still vulnerable targets. Here are some
supplementary recommendations specifically tailored for resource-constrained operations:
- Leverage free or low-cost online tools and checklists from authoritative sources like CMS to
establish baseline controls and train staff cost-effectively.
- Consult sample policies from professional medical associations and consider outsourcing full
program management through legitimate certified firms specializing in compliance solutions
scaled for small offices.
- Partner with regional specialist compliance auditing companies providing remote reviews on a
subscription basis tailored to needs of single/small group practices versus costly full in-house
auditing teams.
- Exchange ideas and leverage expertise of other small local providers through formal or
informal collaborations, perhaps led by a regulatory specialist temporarily volunteering pro-bono
advisory services.
- Supplement screening costs by running basic background/exclusion list checks during off-peak
periods leveraging existing equipment/Internet connections versus outsourcing fully to vendors.
- Consider posting compliance materials and anonymous reporting forms online for ease of
staff/public access compared to printing/distributing additional physical documents.
- Communicate regularly with payers establishing cooperative relationships to better understand
evolving issues and promptly self-report/resolve any concerns identified internally or externally.
- Prioritize compliance as part of practice culture, lead by example with integrity and emphasize
patient care over profits to deter any temptation towards fraudulent billing.
Conclusion
While many healthcare providers operate ethically, the persistence of medical insurance fraud
perpetuates skyrocketing costs, threatens the long-term viability of systems, and undermines
public trust. As medical practices function on the frontlines interfacing with patients and payers,
their due diligence in establishing stringent compliance safeguards, staff education and ethical
standards represents the first line of defense against exploitation. Small practices in particular
must strategically leverage available free/low-cost fraud prevention resources to institute
essential controls commensurate with their resources. However, large or small, all providers
play an important societal role model as guardians against abuse, upholding honor through
diligence, transparency and zero tolerance where misconduct arises. With multi-faceted
cooperation between practices, regulators and law enforcement, progress can be made to curb
pervasive healthcare fraud enriching only a dishonest few at the expense of many.
