Contents
Contents
A Medicaid fraud control unit can investigate managed care plans, and New York’s unit has investigated plans over the monthly payments they collected. If you work inside a plan and know that the service records, enrollment files or spending reports tell a different story from what the state received, the plan’s place in the payment chain matters.
Medicaid Fraud Control Units investigate and prosecute Medicaid provider fraud and patient abuse or neglect. They usually sit within the state attorney general’s office, with investigators, auditors and prosecutors working together. The Health and Human Services Inspector General’s description makes an important distinction: the unit must be separate from the state Medicaid agency. The Inspector General oversees the units through annual recertification and performance reviews.
The familiar provider fraud case follows a bill for care. Managed care adds another business between the government and the people delivering that care. A provider can submit a false bill to a plan. The plan can also make false statements about its own entitlement to Medicaid money.
In Medicaid managed care, capitation is a fixed periodic payment for each enrolled member. The state pays for the plan to arrange the healthcare its contract requires. That payment follows enrollment, rather than a separate state payment for each appointment.
Inside the business, those are different records. A nurse’s assessment shows what care a member needs. Service records show what happened. Enrollment and disenrollment files help explain why the monthly payment continued. The plan’s reports tell the state what it says it delivered or spent.
A case about the plan itself follows those connections. The relevant falsehood may concern members left enrolled, required services missing, or expenses represented as medical care. That is why a referral about a dishonest network provider and an investigation into the plan’s own conduct ask different questions.
The 2019 federal MFCU rule declined to expressly list managed care organizations as a type of provider. At the same time, its adopted definition covered an individual or entity furnishing or arranging services for which Medicaid payment is claimed.
Arranging care is precisely what a managed care plan does.
The explanation accompanying the rule supplies a more specific route. The Inspector General said a plan could be investigated or prosecuted when its actions were implicated in potentially fraudulent claims submitted by or on behalf of a Medicaid provider, whether or not the plan counts as a provider. That condition matters when the allegation concerns the plan’s capitation, cost reporting or certification rather than a network provider’s bill.
The same rule required written procedures through which the unit would receive potential-fraud referrals from managed care organizations. It also expressly recognized civil false claims work alongside criminal enforcement. The 2024 performance standards call for units in states with substantial managed care enrollment to investigate an appropriate number of cases arising in that setting.
Yes. Medicaid managed care plans must identify and refer potential fraud, waste or abuse, including provider fraud, to the state and/or the Medicaid Fraud Control Unit. The state’s contract specifies how that obligation works in practice.
In its 2026 review of state contract requirements, the Inspector General found markedly different referral deadlines: one day at one end, 270 days at the other, with some states specifying no deadline. Some states also failed to provide referral training or feedback. The written referral requirement and the working relationship both matter.
Often, yes. In the Inspector General’s survey of plans about their 2022 referrals, 78% reported that their fraud referral staff shared program integrity responsibilities across programs. Plans whose staff worked solely on that Medicaid plan reported more provider referrals, as did plans that received state or MFCU training.
Ten percent of plans reported no provider referrals that year. Those plans covered 1.6 million enrollees. They received $8 billion in payments. No provider referrals out.
Those findings concern the flow of provider-fraud leads.
New York’s Medicaid Fraud Control Unit participated in investigations of CenterLight, VNS Choice and RiverSpring. The federal settlement announcements credit its investigative work in cases about the plans’ own capitation payments. Each connects the monthly payment to a particular contract obligation.
CenterLight’s 2018 settlement required $10 million. The plan admitted that 186 adult home residents went without required community-based long-term care services during certain months. It also admitted failing to disenroll those members promptly and receiving capitation it was not entitled to collect.
The home care agencies were supposed to deliver the services. CenterLight admitted that it failed to oversee and monitor their care adequately. The government joined a whistleblower case, and the announcement credited New York’s Medicaid Fraud Control Unit for its investigation and work on the case.
Residents went without required care while Medicaid kept paying. The plan’s obligation reached the care it hired someone else to deliver.
VNS Choice admitted failing to identify and disenroll 365 members promptly. For some members, the plan knew when it finally disenrolled them that they should have left earlier, but failed to repay the monthly capitation it had improperly received.
The government joined a whistleblower case and credited New York’s fraud unit for its investigative efforts. For someone working in enrollment or finance, the important connection is the date the plan knew a member should leave, the payments that followed, and what happened to that money afterward.
RiverSpring’s 2024 settlement announcement describes another investigation involving New York’s fraud unit. RiverSpring admitted receiving capitation it was not entitled to receive when it failed to provide qualifying services or failed to maintain adequate documentation of them.
For some members, that gap covered their entire enrollment. The contract tied payment to qualifying services or otherwise appropriate continued enrollment under the contract and state disenrollment practices. The government joined a whistleblower’s case.
CareSource and Gold Coast show other ways a managed care case can focus on the plan. One involved allegedly false service data. The other concerned what counted as medical spending under a particular state contract.
CareSource agreed to a $26 million settlement in 2011. The government alleged that it failed to provide required screening, assessment and case management, then submitted false data to retain incentives and avoid penalties. Two former employees brought the whistleblower case. The Department of Justice named the Ohio Attorney General’s Health Care Fraud Section among the agencies that investigated and resolved it.
The whistleblowers’ complaint described how a completed assessment could appear in the system:
Defendants also directed the Queue Nurses to mark beneficiaries as “Assessed” based on beneficiaries’ answers to questions on initial enrollment postcards which new enrollees mailed in. These cards, which were rewarded with McDonald’s gift certificates, were in no way intended to be or approved as substitutes for proper Screening and Baseline Assessment.
An enrollment postcard became an assessment in the reporting system, according to the complaint. We see an enrollment promotion passed off as clinical work.
Gold Coast Health Plan agreed in 2022 to pay $17.2 million to the United States. Its California contract required repayment when spending on allowed medical expenses fell below 85% of the funds received for the Medicaid expansion population. The United States and California alleged that payments labeled as additional services failed that contract’s requirements, including payments for services already required or amounts unrelated to their fair market value.
The case began with whistleblowers who had worked as the plan’s controller and director of member services. The Justice Department identified the California Department of Justice as part of the coordinated enforcement effort. The spending classification was central: calling a payment medical spending affected what the plan owed back.
Texas, Louisiana and Georgia address managed care expressly in their Medicaid fraud laws. Their provisions show why the state and contract belong beside the federal rule when we assess a plan case.
Texas makes specified knowing conduct by a contracting managed care organization unlawful: failing to provide a required benefit or service, failing to provide required information to the state, or engaging in fraudulent enrollment or marketing. The law names the plan’s own obligations directly.
Louisiana addresses a managed care provider’s failure to provide medically necessary goods, services or supplies covered by its managed care contract. Georgia includes contractors, subcontractors and agents within its definition of the Medicaid program, expressly including a managed care program operated, funded or reimbursed by Georgia Medicaid.
We connect the applicable state law to the conduct and contract involved in your case.
A plan’s operational records can connect required care, reported performance, payment and knowledge. The cases above show why each connection matters: the unperformed assessment, the member left enrolled, the expense labeled medical, and the decision to keep the money.
Federal managed care rules require officer certification of reported information, including encounter data, capitation-rate base data, medical loss ratio data and network information. A chief executive, chief financial officer or authorized direct report signs that certification. The False Claims Act inquiry reaches what the company represented and what it knew.
States must also arrange independent audits of each plan’s encounter and financial data at least every three years. They must receive and investigate whistleblower information about the integrity of plans as well as network providers.
We compare the contract with what the plan reported, what its operational records show and what reached the certifying officer. That connects the payment to the decisions behind it.
A whistleblower case under the False Claims Act can pay 15% to 30% of what the government recovers.
A plan’s incentive to catch someone billing it falsely does not answer who investigates misconduct by the plan. The 1999 report Controlling Fraud and Abuse in Medicaid: Innovations and Obstacles, prepared from Health Care Financing Administration seminars, identified that confusion directly. It described inadequate encounter data, limited cooperation and difficulty building investigative capacity in managed care.
Its observation about expecting a plan to expose its own misconduct still lands:
Of course, no one in their right mind would expect a Managed Care Organization to report itself for any of these practices.
The report called for the ability to examine plans and their agents alongside the work to improve provider-fraud referrals. We think that distinction belongs at the center of this question. A plan’s referral system can expose a dishonest provider while leaving the plan’s own decisions unexamined.
CMS’s Payment Error Rate Measurement Manual describes a review of how the state processed capitation payments, not whether members received required care. Paying the right rate is only part of the story.
An insider who knows how the plan’s reports diverged from its work can supply the connection that a payment-processing review misses.
If you know why your plan’s service, enrollment or spending reports differ from what happened, speak with our whistleblower experts about the payments behind those reports. We work with you to build your strongest whistleblower case around the plan’s obligations and decisions, bring in Medicaid managed care whistleblower lawyers with the expertise your case needs, and stay beside you through the process.