Self-Directed Medicaid Care Fraud: When Someone Else Approves the Recipient’s Timesheet

Self-directed Medicaid timesheet fraud turns false hours or a fabricated recipient approval into a request for payment. The screen may show that the person receiving care approved the time, while someone benefiting from the bill controlled that person’s account. If you work in service facilitation, financial management services or caregiving, you may know who actually entered the approval. That knowledge can connect a complete-looking timesheet to the decision that made it false.

Who Is Supposed to Approve the Recipient’s Timesheet?

The recipient’s approval is meant to confirm the caregiver’s account of the work. In its August 2019 guidance, the Centers for Medicare & Medicaid Services described a proposed web-based timesheet arrangement in which the caregiver entered the time and location and the beneficiary authenticated it. That division puts the person receiving care inside the payment check.

The surrounding jobs are different. In self-directed programs, a financial management services agency, also called a fiscal employer agent, holds funds, runs payroll for workers the beneficiary hires and files claims. A service facilitator supervises the recipient’s personal care plan and provider.

For an employer-of-record or authorized-representative arrangement, we start with the program documents: who had authority to approve, whose identity the system recorded and what the recipient understood.

In this form of Medicaid provider fraud, the person selling the care can also supply the patient’s approval. Calling the last screen approved leaves the most useful question unanswered: approved by whom?

When the Service Facilitator Controls the Patient Account

A Medicaid service facilitator approving her own agency’s hours can control both the supervision and the apparent confirmation of care. A Virginia criminal case shows how that conflict reached the billing system.

In its July 2023 account of the owner’s criminal case, the Justice Department said Sharon Y. Johnson & Associates billed Virginia Medicaid for service facilitation and personal care. The owner, who had pleaded guilty, supervised recipients’ care plans and providers while also operating the business supplying care.

The Justice Department said she signed up service-facilitation clients for her company’s personal care services, often without their awareness or informed consent. She and her co-conspirators created online patient portal accounts in patients’ names, then assumed those patients’ identities to approve and route billing requests.

Patients lost control over the choice of who provided their care. We see a business owner supplying the very approval meant to check her company’s bill. The patient’s name appeared on the account. The seller was behind the approval.

A service facilitator or billing employee may recognize who controlled both sides of that transaction. A final timesheet can conceal a great deal about who put it through.

What Evidence Is Needed to Prove Fraud?

Evidence of self-directed Medicaid timesheet fraud connects the claimed care and approval to records showing what actually happened. The most useful comparison identifies the worker, recipient, service date, person approving and resulting payment.

For consumer portal impersonation, we examine account-creation and access records, the identity attached to the approval, and the billing requests routed from that account. The facilitator assignment and provider relationship explain who stood on each side of the transaction. We put those beside the care plan, authorized hours, timesheet and payment records.

Independent records can expose a contradiction the timesheet hides. In the Justice Department’s account of a District of Columbia aide’s criminal case, the aide pleaded guilty after submitting false personal-care timesheets. The announcement described 118 occasions when claimed care overlapped scheduled law-school classes in Baltimore or travel connected with them. Campus key-card and cell-phone records placed her in Baltimore during hours she claimed to be providing care in Washington.

The claimed care and the aide’s whereabouts told different stories. The location evidence came from records created outside the care-approval process. For your case, we work through what you observed and which independent records can explain it: work schedules, attendance, hospitalization or travel, tied to the particular hours billed.

Electronic Visit Verification and the Approval Behind It

Electronic visit verification records the service, recipient, worker, date, location, and start and end times. For a healthcare worker who sees false approvals, who entered those fields matters as much as what they say.

CMS’s August 2019 guidance addressed precisely the combination of caregiver entry and beneficiary authentication. It said web-based timesheets alone did not provide auditable confirmation of the information entered and approved. Putting the timesheet online did not supply the independent verification the agency required.

The HHS Office of Inspector General’s July 2026 Colorado audit found manually entered visits, location notes that accepted any text and service addresses populated in the state’s visit data even when the underlying EVV records supplied no location. GPS exceptions could remain unresolved while a visit counted as verified.

The visit entry and the recipient approval can each conceal who supplied the information. A screen full of completed fields can still leave the person behind the approval out of sight.

What the Fiscal Intermediary Actually Checked

Financial management services sit in the payment path, where timesheets become payroll and claims. For an insider, the useful question is which facts the intermediary checked before releasing payment and what happened to exceptions afterward.

The HHS Office of Inspector General’s September 2025 audit of New Jersey’s Personal Preference Program examined participant-months from 2019 through 2021. It found 63 of 150 sampled participant-months noncompliant, with most of those findings involving the fiscal intermediary. The audit also found missing documentation of exclusion-list screening.

An FMS employee who knows how approvals reach payroll can explain what happened to a flagged request before it became a payment. That is a part of the transaction a paid-claims total conceals.

Missouri’s consumer-directed personal care audit, published in February 2023, found missing or insufficient timesheets, charges above authorized units and missing attendant registration and screening records.

Those findings concern the work described, the hours authorized and the worker’s qualifications. Impersonation adds another question: who supplied the confirmation on which the payment relied?

When the Billing Agency Does Not Employ the Attendant

Attendant identity and exclusion screening reach beyond the name of the organization submitting the bill. The worker delivering care and the agency billing for it can occupy different places in the records.

The 1999 report Controlling Fraud and Abuse in Medicaid: Innovations and Obstacles, sponsored by the Health Care Financing Administration, described an accountability problem raised by state officials:

The report’s concern was that personnel could come and go while accountability remained unclear. That historical finding gives an insider a useful question about today’s particular payment: does the file connect the billing organization to the actual worker and the actual approval?

The New Jersey exclusion-screening finding makes the distinction practical. The home health care bill identifies an agency. The attendant’s screening record concerns the person who actually enters the home.

When the Existing Record Tells a False Story

A fabricated approval puts a false account of the recipient’s decision into the payment records. The HHS Office of Inspector General’s 2012 personal-care services portfolio explained that many audited overpayments involved missing documentation, while fraud was often proven by showing that existing documentation was false.

That is why we connect a disputed approval to the person who made it and what that person knew. The company may have a timesheet, an electronic visit entry and an approval. The question becomes whether those records describe the care and consent that actually occurred.

The Justice Department’s August 2026 Pennsylvania charging announcement supplies a related allegation. A home care agency and its two owners were charged with billing Medicaid using hundreds of false clock-ins and clock-outs that represented employees as providing care. Prosecutors alleged that Medicaid paid approximately $224,000 for the affected employees’ purported work.

For a Medicaid False Claims Act case, we examine the payment representation and the decisions behind it with you. An insider may know who controlled an account, who entered the approval and whether the recipient knew anything about it. That knowledge gives the electronic record a human explanation.

What Proof Do You Need as a Whistleblower?

Your firsthand account gives us the starting point: your role, what you saw, which approvals concerned you and the records you already hold. We work with you to connect that account to the care, the approval and the payment.

A whistleblower case under the False Claims Act can pay 15% to 30% of what the government recovers.

When You Know Who Approved the Hours

If you have seen a facilitator, caregiver or payroll colleague approve care under a recipient’s identity, speak to one of our Whistleblower Experts about who approved those hours. We work beside you to build your strongest case around the accounts, the hours and the people controlling them. We find Medicaid fraud whistleblower lawyers who know self-directed care and stay with you from the first call through the case.