Remote Patient Monitoring Fraud: What Each Billed Component Must Represent

Remote patient monitoring fraud bills Medicare for monitoring that was never delivered as claimed, or uses unlawful referral payments to bring patients into the billing stream. The device, the readings and the clinical work each leave their own trail. If you work inside an RPM company or physician practice, you may know exactly where that trail stops while the monthly claims keep going.

A patient can have a device in the house while the company has no automatic readings from it. A portal can contain readings while the management claim describes work nobody performed. Medicare pays for health care, and patients are shortchanged when the monthly claim buys no monitoring.

Who Pays for Remote Patient Monitoring?

Medicare pays for qualifying remote patient monitoring components under their separate billing requirements. Setup and education, device supply and transmission, and treatment management each represent different work. A recurring payment depends on the service behind that particular claim.

The Centers for Medicare & Medicaid Services billing rules for 2026 include shorter-duration options for both device data and management. The code in effect when the service occurred tells us what the company claimed to supply. These code requirements describe Original Medicare billing. Medicare Advantage plans may have different requirements for patient relationships and device-supply billing.

Setup and Education

Initial setup and patient education get the patient started with the equipment and teach its use. Code 99453 is not a fresh charge for every device or every month.

The setup record belongs beside the device record: which equipment the patient was taught to use, who performed the work and when. A shipping entry answers the delivery question. The education record answers what the patient was shown.

Device Supply and Transmission

The setup and supply codes have different requirements for services in 2026:

Billing 99445 and 99454 for the same 30 days charges both supply alternatives for one period.

The Centers for Medicare & Medicaid Services gives the short and long supply codes the same valuation because the device is supplied for the full period. A 99445 claim with two days of data in 2026 still calls for a supplied device and its transmissions. We trace those readings to the patient and equipment behind the claim.

RPM Billing Rules by Year

Before 2026, setup and device-supply billing generally required 16 days of monitoring within 30 days. During the public health emergency, the Centers for Medicare & Medicaid Services pandemic billing FAQ allowed a minimum of two days for patients with confirmed or suspected COVID-19, provided the other billing requirements were met. That limited exception and the later short-duration code belong to different service dates.

For 2026, the agency adopted a two-day monitoring minimum for 99453 setup, replacing the older threshold. Its March 12, 2026 correction, effective January 1, also updated the practice-expense values used to calculate payments for 99445 and 99454. We compare older claims with their dated requirements and 2026 payments with the corrected calculation.

What Are the Risks Associated With Remote Patient Monitoring?

The fraud risks include enrolling patients without an established clinical relationship, billing disconnected devices, claiming management work that did not occur, overlapping claims and payments for referrals. Each points to a different part of the business: recruitment, equipment, clinical staffing or the money used to acquire patients.

The Office of Inspector General’s consumer alert describes recruitment through unsolicited calls and advertisements, followed by billing for monitoring that never happens. The patient acquisition process can be the beginning of the false claim.

A remote monitoring device mailed to a patient who was never enrolled raises questions about consent and the clinical relationship before it raises a question about readings. We connect the recruitment record to the patient’s clinical history, the monitoring decision, the consent and the subsequent claims. A mailing list and a patient list can look alike in a sales report. The clinical records show why each person was there.

RPM can address acute or chronic conditions. Under the Centers for Medicare & Medicaid Services post-emergency rules, it requires an established patient relationship, with patients who began monitoring during the public health emergency counted as established. Medical necessity and consent remain part of the service.

An order, where one exists, can identify who chose monitoring and why. The Centers for Medicare & Medicaid Services May 2026 guidance says an order or ordering-provider information is not required on the claim. The clinical decision therefore has to be examined through the underlying records, including the treatment plan and practitioner relationship.

LiveCare and the Price of a Referral

LiveCare agreed to pay up to $4.9 million in a January 2025 settlement over allegations that it unlawfully paid a marketing service for Medicare patient referrals. It provided remote patient monitoring for patients with Type 2 diabetes. Private individuals brought the qui tam claims behind the settlement.

Remote patient monitoring referral kickbacks concern the money used to bring patients into the program. We compare the referral contract, invoices and actual payments with the enrollments and resulting claims. What had to happen for the marketer to get paid: an introduction, an enrollment, an order or completed care? The payment trigger and the work actually performed show what the arrangement bought.

When a marketer paid per referral collects RPM consent, we examine the consent record alongside the compensation arrangement. What did the caller offer, which practice did the caller represent and what did the patient agree to receive? The clinician’s assessment and decision to start monitoring connect that sales conversation to the care later billed. Consent evidence answers what the patient accepted; the payment records answer what the business rewarded.

Automatic Transmission Is the Device Question

The RPM device requirement calls for digitally collected and automatically transmitted physiologic readings. Manual readings typed into an application or relayed to staff do not satisfy the RPM requirement for automatically transmitted data. The device must meet the Food and Drug Administration definition of a medical device, and its data must support the service billed.

The patient can take a measurement using a connected cuff and the cuff can send it automatically. Automatic transmission describes how the reading travels, not whether the patient touches the equipment. The device record identifies the equipment. The transmission log shows whether readings from that equipment reached the monitoring system. A screen filled with numbers leaves the source of those numbers to be established.

When Medicare RPM is billed for a device that was never connected, the connection history and claim belong together. A 99454 audit compares the required 16 days of data with the actual transmission log to identify missing transmissions. For an emergency-period claim, the limited COVID-19 exception also matters. A patient’s enrollment date, delivery date and first transmitted reading answer separate questions.

A patient may already own a blood pressure cuff while the company bills RPM device supply. We examine the equipment actually used, the supply arrangement and the automatic data service represented by the claim. The Inspector General’s 2024 report describes a specific setup restriction: according to the Centers for Medicare & Medicaid Services, a provider cannot bill education and setup when the patient uses a device they own and receives none from the provider.

Health Wealth Safe’s Disconnected Devices

Health Wealth Safe settled allegations involving devices that did not automatically report readings to the monitoring company without further human intervention. That device-connectivity allegation makes the distinction between a transmitted reading and a manually entered number concrete.

Management Minutes Must Describe Clinical Work

Treatment management connects the transmitted data to the patient’s care. Code 99457 represents the first 20 minutes in a calendar month, including interactive communication. The 2026 alternative, 99470, represents the first ten minutes with real-time interactive communication. These starting codes cannot be stacked.

The Centers for Medicare & Medicaid Services January 2021 correction on management time includes both interactive communication and non-face-to-face care management. The full billed time need not be a live conversation, but the required interaction must occur. The 2024 rule clarified that the 16-day data requirement does not govern 99457 and 99458. The detailed comparison of remote monitoring time and duplicate billing follows the staff work, contact records and overlapping claims.

Clinical staff can furnish the management services under general supervision. The practice that bills is still answerable for the work.

What the Inspector General Found in Remote Monitoring Billing

The Office of Inspector General’s studies identify claims patterns that warrant examining the patient records. Its earlier review found a substantial gap in billed components:

About 43%

of RPM enrollees lacked claims for all three components.

Centers for Medicare & Medicaid Services July 2026 proposed rule, quoting OIG’s 2024 evaluation

Among routine billers studied, the later Inspector General report found 45 practices where more than 80% of RPM enrollees had no prior relationship with the practice in the study’s claims history. It also found 52 practices where more than 75% of monitored enrollees had no management claim from any practice.

The relationship screen looked back to January 2021 and counted relationships begun during the public health emergency. Patient records show whether management occurred and reached a billable time threshold. Its other screens examined sudden practice growth, patients shared across practices and repeated device claims. Those patterns tell us which underlying transactions need attention.

The scale has changed sharply. The Inspector General’s published payments across Original Medicare and Medicare Advantage grew from $15 million in 2019 to $536 million in 2024, when nearly one million enrollees received RPM. The money pays for a service that reaches beyond delivering a device. The missing management claims put the care behind that spending in question.

Duplicate Billing and the Same Patient’s Time

Device-supply billing is limited to one practitioner for the patient and period, with no separate supply claim for each additional device. The comparison therefore reaches across practices as well as across a vendor’s own accounts.

RPM and remote therapeutic monitoring cannot be billed together for the same patient and period. Qualifying chronic care management and other care-management services can accompany monitoring when the work and time are counted separately. The same minutes cannot support both claims.

The Vendor, the Practice and the Proposed Staffing Change

The company whose name appears on a monitoring screen may supply the portal, connectivity or support staff while a separate practice employs the clinician and submits the claim. Contracts and staffing records identify those roles. The patient sees a service. The evidence can sit in several businesses.

The Centers for Medicare & Medicaid Services addressed that separation in its July 2026 proposed rule for 2027. The proposal would restrict payment to RPM and remote therapeutic monitoring services furnished by clinical staff directly employed by the billing practitioner or practice, beginning January 1, 2027 if finalized. It would prohibit contracting that clinical work out to third-party companies for the covered billing.

The proposal retains general supervision and permits staff to work away from the practice. It also proposes an initiating visit with the billing practitioner, in person or by telehealth, at which monitoring is discussed. Those proposed changes put employment, clinical integration and the practitioner’s involvement squarely in view.

From a Recurring Claim to a Whistleblower Case

The useful comparison runs from the patient relationship and monitoring decision through consent, equipment, transmitted readings, clinical work and the claim. We connect those records with the insider who knows how the business operated. The same comparison can reveal whether a problem came from the device workflow, the way time was recorded or the arrangement used to bring patients in. A whistleblower case under the False Claims Act can pay 15% to 30% of what the government recovers.

When the Claims Outrun the Care

If you know how your company’s readings, management time or patient referrals became Medicare claims, speak with our whistleblower experts about the gap you can explain. We work beside you to build your strongest remote patient monitoring fraud case and bring in healthcare fraud whistleblower lawyers who understand recurring billing and referral arrangements. Your knowledge of what happened inside the business drives the case we build together.