Medicaid Fraud Control Units: Who Investigates Providers, Plans, and Patient Abuse?

A Medicaid Fraud Control Unit investigates Medicaid provider fraud and patient abuse or neglect, with statewide authority to prosecute cases or refer them for prosecution. It operates separately from the state Medicaid agency that administers the program and pays for care. Your payroll records, service reports or instructions from management may show what the payment system accepted and what actually happened.

A whistleblower case under the False Claims Act can pay 15% to 30% of what the government recovers. If you know how the claims or plan reports differ from the care delivered, start with our whistleblower experts.

What Does a Medicaid Fraud Control Unit Do?

A Medicaid Fraud Control Unit brings together investigators, auditors and state prosecutors to investigate provider fraud and patient-protection cases. It can work with federal investigators and prosecutors, and its work can support civil cases as well as criminal prosecutions.

The state Medicaid agency runs the program and pays for care. The HHS Office of Inspector General oversees the fraud units, reviews their performance and administers their federal grants. The Justice Department and U.S. Attorneys’ Offices bring federal civil False Claims Act cases and federal criminal health care fraud cases.

What Kind of Medicaid Fraud Does an MFCU Investigate?

A Medicaid Fraud Control Unit investigates provider claims that misrepresent the care, the charge or the people doing the work. The provider may be a home-care business, pharmacy, nursing facility, transportation company or other healthcare business. The records change with the service, but the question remains concrete: what did Medicaid pay for, and what did the provider deliver?

Billing schemes include services never provided, duplicate billing, upcoding and unbundling services to charge separately for work covered by a combined payment. Other cases concern unnecessary treatment, kickbacks for referrals, false records or claims using qualifications the worker did not possess. Drug diversion can involve unnecessary prescriptions billed to Medicaid or medication diverted from its intended use.

Sola, an operator of residential group homes, paid $2 million to resolve civil allegations that its Medicaid nursing units exceeded the hours nurses actually worked. The government’s comparison used payroll and time records. A billing employee and a payroll employee could be looking at different accounts of the same nursing shift.

That is why a paid claim can tell an investigator less than the person who worked beside the nurse. Health Care Fraud Control: Understanding the Challenge, published in the Journal of Insurance Medicine in 1996, described quality-control systems that checked whether claims followed payment procedures without checking whether their contents were true:

What Are the Examples of Medicaid Abuse?

Patient abuse can involve physical mistreatment, neglect or the theft of a resident’s money. Medicaid Fraud Control Units investigate these patient-protection matters as a distinct part of their mission, alongside provider billing fraud.

A resident-funds ledger showing missing money raises a different question from a claim for a visit that never happened. In nursing homes, records about staffing, medication and care can matter to both inquiries. The patient’s treatment remains central even when there is no false bill to examine.

The HHS Office of Inspector General’s fiscal year 2023 annual report found that patient abuse or neglect accounted for 29 percent of the convictions units reported.

The authority also extends beyond institutional care. A change to the Social Security Act in December 2020 allowed units, at their option, to investigate abuse or neglect of Medicaid patients in noninstitutional settings. That reaches the home and community-based care where many patients receive services.

Can an MFCU Investigate a Medicaid Managed-Care Plan?

Yes. New York’s Medicaid Fraud Control Unit investigated CenterLight, a managed long-term-care plan. A plan can be the subject of the investigation.

The payment distinction is essential. Medicaid managed-care plans receive capitation, a fixed periodic payment for an enrolled member. The provider’s invoice describes a service. The plan’s payment follows enrollment, with obligations to arrange care and supply required information to the state. Plan investigations can therefore turn on member eligibility, required services, encounter reports or the decision to keep collecting payments after a member should have been disenrolled.

CenterLight admitted in its 2016 settlement that it received capitation for ineligible members. In a separate resolution announced in 2018, it admitted conduct involving adult-home residents who did not receive qualifying community-based services and were not timely disenrolled. Those admissions concern the plan’s own receipt of Medicaid money.

CareSource illustrates a different plan-side problem. In its 2011 civil settlement announcement, the Justice Department said the company agreed to pay $26 million to resolve allegations that it failed to provide required screening, assessment and case management, then submitted false data to retain incentives and avoid penalties. The whistleblowers’ complaint alleged that the explanation for missing services was itself false:

A refusal without an offer. That allegation puts the staff member who knows what families were told beside the employee who sees what the plan reported. Both can matter to the same False Claims Act case.

What Triggers a Medicaid Fraud Investigation?

A referral, a complaint or a lead generated by data analysis can trigger a Medicaid Fraud Control Unit investigation. Sources include the state Medicaid agency, managed-care organizations, protective-services agencies, other law enforcement and the public.

The referral carries what the investigator first gets to see. In its fiscal year 2014 annual report, the HHS Office of Inspector General reported that units sometimes received referrals missing key information. State program integrity offices, in turn, reported difficulty getting timely decisions about whether units would accept their referrals.

The same report recorded a sharper problem with managed care. Units said plans could lack incentives to refer suspected fraud, particularly when their contracts offered no share of recoveries and no consequence for failing to refer. A plan might prefer to remove a provider from its network. The provider disappears from that network. We see the problem: the suspected fraud may never reach an investigator.

The Journal of Insurance Medicine study described investigative units as predominantly reactive, dependent on the referrals that reached them. If you know where a referral stopped inside your organization, that is part of the story to discuss with our whistleblower experts.

Data mining gives units another source of leads. The HHS Office of Inspector General’s fiscal year 2013 annual report explained that the earlier prohibition on federal funding for this work had made units heavily dependent on state-agency referrals. Claims and encounter data become more useful when investigators understand the service and the payment rules behind the pattern.

Why Do MFCUs Do Different Work in Different States?

Medicaid Fraud Control Units share a federal framework, but their powers, staffing and case mix depend on state law and state resources. The national roster covers 53 jurisdictions: the states, the District of Columbia, Puerto Rico and the U.S. Virgin Islands. Most units sit in an Attorney General’s office, although their names and organizational homes vary.

Federal and state governments share the cost of running the units. State funding and hiring determine the people available to do the work.

The HHS Office of Inspector General reviews units annually for recertification and conducts separate inspections. Its performance standards updated in 2024 expressly address referrals from managed-care organizations and cases arising in managed-care settings.

Are There Any Checks on Medicaid Fraud?

Yes. State program integrity reviews, contractor audits, Medicaid Fraud Control Unit investigations and federal enforcement provide different checks. Their coverage depends on the program and the assignment.

The records closest to the work can supply the missing comparison: nursing hours against payroll, services promised against services documented, or a plan’s report against the underlying assessment.

Where Your Knowledge Fits

A billing employee may know which claims changed. A care worker may know which services never happened. A plan employee may know why internal records differ from the information sent to the state. We assess what those differences mean for a Medicaid whistleblower case, drawing on the payment terms and the decisions behind the records.

The Records Behind the Referral

If you know why a provider’s claims or a plan’s reports tell a different story from the care delivered, speak with our whistleblower experts about what you saw. We shape your strongest Medicaid whistleblower case with you, find the Medicaid fraud whistleblower lawyers with the expertise it needs, and stay with you through the whole journey.