5 Critical Steps to Take Today If You Are Under Investigation for Healthcare Fraud

1. Your First Conversation with a Federal Agent—Why Silence Is Your Only Safe Answer

In my 25 years as a federal prosecutor, I witnessed countless healthcare professionals destroy their defense in the first thirty minutes of a conversation. When a special agent from the FBI, HHS-OIG, or the Department of Justice shows up at your office or home, the natural instinct is to be cooperative, to explain away a billing discrepancy, or to prove your innocence on the spot. That instinct, however well-intentioned, is precisely what the government relies upon to build its case against you. Federal agents are trained in advanced interview techniques designed to elicit admissions, inconsistencies, and statements that can later be used as evidence of intent to defraud. Every word you utter in that initial encounter becomes a permanent record, and the government will parse your statements for any deviation from medical records, billing codes, or prior communications.

The Fifth Amendment to the United States Constitution guarantees your right to remain silent, and in the context of a healthcare fraud investigation, invoking that right is not an admission of guilt—it is the exercise of a fundamental constitutional protection. I have represented doctors, clinic owners, and hospital administrators who believed they could talk their way out of trouble, only to find that their voluntary statements contradicted documentary evidence or provided the government with a theory of fraudulent intent. The Supreme Court has consistently held that silence alone cannot be used against you in a criminal trial, but statements you make voluntarily can be used to impeach your credibility or to establish the mens rea element required under 18 U.S.C. § 1347.

When an agent contacts you, your only safe response is a polite but firm statement: "I am not willing to speak without my attorney present, and I respectfully decline to answer any questions at this time." Then, you should immediately end the conversation and contact a federal criminal defense lawyer with healthcare fraud experience. Do not hand over documents, do not consent to a search, and do not sign any waivers of your Miranda rights. In my experience, agents often ask for "voluntary consent" to search your office or computer systems, and once you grant that consent, any evidence found—even evidence unrelated to the original inquiry—can be used against you. The moment you say "yes," you lose the ability to challenge the search later under the Fourth Amendment.

I recall a case where a physician voluntarily provided his patient files to an HHS-OIG agent who claimed to be conducting a "routine audit." The agent then used those files to identify patterns of upcoding that led to a seventeen-count indictment. Had the doctor simply declined to speak and demanded a subpoena, his attorney could have negotiated the scope of the document production and potentially avoided the indictment altogether. The lesson is clear: silence is not obstruction; silence is survival. Until you have counsel by your side, your lips must remain sealed, and your hands must remain still.

Additionally, if you are contacted by a federal agent, you should immediately document the encounter in writing—note the agent's name, agency, badge number, the date and time, and every question asked. This record will be invaluable to your attorney in assessing the government's theory of investigation and in identifying potential violations of your rights. Do not rely on memory alone; write it down while the details are fresh. Your attorney can use this log to determine whether the agent misrepresented the nature of the investigation or exceeded their authority, which could form the basis of a motion to suppress evidence or dismiss charges.

Finally, understand that the government often uses the initial contact to gauge your level of cooperation and to determine whether you are likely to implicate others. If you refuse to speak, the government may escalate the investigation by issuing subpoenas or obtaining search warrants, but that escalation is far preferable to handing them the rope they will use to hang you. In my years of practice, I have never seen a case where a client's voluntary statements to agents improved their legal position. I have seen hundreds where those statements made the difference between a declination and an indictment. Choose silence today, and you preserve every option for tomorrow.

2. Immediate Halt of Questionable Billing Practices and Implementation of a Legal Hold

Once you have reason to believe you are under investigation for healthcare fraud, you must immediately cease any billing practice that could be construed as fraudulent, even if you believe those practices are legally defensible. This includes the deliberate upcoding of Evaluation and Management (E&M) codes, the unbundling of procedure codes that should be billed together, the billing for services not actually rendered, and the submission of claims for medically unnecessary procedures. Under the False Claims Act, 31 U.S.C. § 3729, the government can impose treble damages and civil penalties for each false claim submitted, and under 18 U.S.C. § 1347, criminal penalties can include up to ten years in federal prison per count. Continuing to bill in the same manner after you are aware of an investigation can be used as evidence of willful intent, which is a required element for criminal liability.

In conjunction with halting questionable billing, you must immediately issue a written litigation hold notice to all employees, contractors, and third-party vendors who may possess documents or data relevant to the investigation. This hold should cover all paper records, electronic health records (EHRs), billing software logs, email communications, text messages, voicemails, calendars, and any other form of communication or documentation related to patient care, coding, billing, and reimbursement. The failure to preserve evidence can result in spoliation sanctions, including an adverse inference instruction to the jury that the destroyed evidence would have been harmful to your case. Under Federal Rule of Civil Procedure 37(e), a court can impose severe sanctions for the loss of electronically stored information that should have been preserved.

Your legal hold must be specific, enforceable, and communicated in writing to every relevant party. It should explicitly prohibit the deletion of any files, the destruction of paper records, the wiping of hard drives, or the alteration of billing logs. In my experience, many healthcare providers inadvertently destroy evidence by continuing routine data purges or by allowing IT staff to recycle backup tapes without first reviewing the hold requirements. I represented a home health agency owner whose IT director automatically deleted patient files after thirty days, unaware of a pending subpoena. The government argued that the deletion was intentional and sought an adverse inference instruction, which the judge granted, effectively destroying the defense's credibility at trial.

Beyond the legal hold, you should conduct an internal audit of your billing practices for the period under investigation, but only under the direction of your attorney and with the protection of the attorney-client privilege and work product doctrine. Do not attempt to conduct this audit yourself or through in-house counsel without first consulting a federal criminal defense attorney. Any findings from an internal audit that are not protected by privilege can be discovered by the government and used against you. Your attorney can engage a forensic accountant or healthcare compliance expert to review the billing data and identify potential vulnerabilities, all while maintaining the confidentiality of the analysis under the umbrella of legal representation.

It is also critical to review your existing compliance program, if you have one, to determine whether it was followed and whether it adequately addressed the specific billing issues under scrutiny. The government often considers the existence and effectiveness of a compliance program as a mitigating factor in charging decisions and sentencing. Under the U.S. Sentencing Guidelines, an effective compliance and ethics program can reduce a company's culpability score and potentially lead to a deferred prosecution agreement or a reduction in fines. If your compliance program was merely a paper program—one that existed on paper but was not enforced—the government will use that against you as evidence of willful ignorance or deliberate indifference.

Finally, notify your malpractice insurance carrier and any bonding companies that may have a duty to defend or indemnify you in the event of a civil or criminal action. Many policies have specific notification requirements that, if not followed promptly, can result in a denial of coverage. Do not assume that your policy covers government investigations or criminal defense costs; read the policy carefully with your attorney and notify the carrier in writing. In one case I handled, a physician's policy excluded coverage for "intentional acts," and the government's theory of fraud hinged on the argument that the billing errors were intentional. The carrier denied coverage, and the physician had to liquidate his retirement accounts to pay for his defense. Early notification and careful policy review can prevent this financial catastrophe.

3. Engage a Federal Criminal Defense Attorney with Healthcare Fraud Expertise—Before the Subpoena Arrives

Many healthcare professionals make the critical error of waiting until a grand jury subpoena or search warrant is served before hiring a lawyer. By that point, the government has already gathered substantial evidence, identified targets, and formulated a theory of prosecution. In my 25 years of practice, I have seen that the most successful outcomes—declinations, non-prosecution agreements, and favorable plea negotiations—occur when the client retains counsel at the earliest stage of the investigation, often before the government has even issued a target letter. Early engagement allows your attorney to intervene proactively, to communicate with the prosecutor before charges are filed, and to present exculpatory evidence that may convince the government to decline prosecution.

When selecting an attorney, you must look for specific experience in healthcare fraud defense, not just general white-collar criminal defense. Healthcare fraud involves a complex interplay of federal statutes, including the Anti-Kickback Statute (42 U.S.C. § 1320a-7b(b)), the Stark Law (42 U.S.C. § 1395nn), the False Claims Act, and the Health Insurance Portability and Accountability Act (HIPAA). Your attorney must understand the nuances of Medicare and Medicaid billing rules, the Physician Self-Referral Law, and the regulatory framework of the Centers for Medicare & Medicaid Services (CMS). A general criminal defense lawyer may not know the difference between a 99213 and a 99214 E&M code, and that lack of knowledge can be fatal to your defense when the government's expert witness testifies about coding standards.

Once retained, your attorney will immediately begin a parallel investigation to gather evidence that contradicts the government's theory. This may include interviewing current and former employees, reviewing patient records to establish medical necessity, analyzing billing software for coding errors that were not intentional, and retaining expert witnesses in healthcare compliance and coding. Your attorney will also work to identify potential weaknesses in the government's case, such as a lack of evidence of willful intent, reliance on unreliable whistleblowers, or violations of the Fourth Amendment in the execution of search warrants. In healthcare fraud cases, intent is often the central battleground, and your attorney must be prepared to show that any billing errors were the result of mistake, confusion, or differing interpretations of complex regulations, not a deliberate scheme to defraud.

Your attorney will also manage all communications with the government, including responding to subpoenas, negotiating the scope of document production, and arranging for proffer sessions if they are strategically advantageous. A proffer session, governed by the principles set forth in United States v. Mezzanatto, 513 U.S. 196 (1995), allows you to provide information to the government in exchange for limited immunity or a favorable plea agreement. However, proffer sessions are double-edged swords: if you make inconsistent statements or fail to provide full cooperation, the government can use your proffer statements against you in a subsequent prosecution. Only an experienced healthcare fraud attorney can assess whether a proffer is in your best interest and can prepare you thoroughly for the session.

Additionally, your attorney will evaluate whether to engage in pre-indictment negotiations with the prosecutor's office. In some cases, it is possible to convince the government to decline prosecution by demonstrating that the alleged overbilling was the result of a legitimate coding error, that the provider has implemented corrective measures, and that there was no intent to defraud. This is particularly effective when the dollar amount at issue is relatively low and the provider has a clean background. I have personally negotiated declinations in several healthcare fraud cases by presenting a comprehensive white paper to the prosecutor, complete with expert affidavits and a corrective action plan, before the grand jury had even begun hearing testimony.

Finally, do not make the mistake of believing that you can handle the investigation on your own or with the help of a civil healthcare attorney. Civil healthcare lawyers are experts in regulatory compliance and administrative proceedings, but they are not equipped to handle a federal criminal investigation. The stakes in a criminal healthcare fraud case include not only fines and restitution but also imprisonment, exclusion from Medicare and Medicaid, and the loss of your professional license. You need a federal criminal defense attorney who has stood in the courtroom, cross-examined government experts, and argued motions to suppress evidence. Your freedom and your career depend on making that choice today, not tomorrow.

4. Secure Your Digital and Physical Records—And Know What the Government Already Has

In virtually every healthcare fraud investigation I have handled, the government's case is built on documentary evidence: billing records, patient charts, email communications, and electronic health record audit trails. Before you take any other action, you must ensure that all of your records are preserved, organized, and accessible to your defense team. This includes not only the records that the government has requested but also records that may be exculpatory or that may provide context for the billing decisions under scrutiny. Under the Jencks Act, 18 U.S.C. § 3500, the government is required to produce certain statements of witnesses, but it is not required to produce evidence that is favorable to you unless it falls under Brady v. Maryland, 373 U.S. 83 (1963). Your attorney must independently gather this evidence to ensure that your defense is complete.

You should also assume that the government has already obtained a significant amount of your data through administrative subpoenas, grand jury subpoenas, or search warrants. Federal agents often obtain billing data directly from Medicare Administrative Contractors (MACs), from your clearinghouse, or from your EHR vendor before they even contact you. This means that the government likely has a detailed picture of your billing patterns, including the number of claims submitted, the codes used, the reimbursement amounts, and the dates of service. They may also have obtained your practice's internal communications if they have served a subpoena on your email provider or your IT vendor. Do not assume that the government's investigation is in its infancy; it may be far more advanced than you realize.

To level the playing field, your attorney should immediately issue a Freedom of Information Act (FOIA) request to the Department of Health and Human Services and the Department of Justice to obtain any records that the government has already collected about you. While FOIA requests are often slow and may be subject to exemptions, they can yield valuable information about the scope of the investigation, the identity of cooperating witnesses, and the theories being pursued. Additionally, your attorney can file a motion for discovery under Federal Rule of Criminal Procedure 16 once charges are filed, but pre-indictment discovery is limited. The sooner you understand what the government knows, the better you can prepare a defense.

You must also take immediate steps to secure your digital environment. Change all passwords to your billing systems, EHRs, and email accounts, and implement multi-factor authentication to prevent unauthorized access. Do not delete any files or emails, even if they appear embarrassing or incriminating; deleting evidence can lead to obstruction of justice charges under 18 U.S.C. § 1519, which carries a penalty of up to twenty years in federal prison. Instead, work with your attorney to identify and segregate privileged communications, including communications with your lawyer, which are protected by the attorney-client privilege and must not be disclosed to the government. Your attorney can create a privilege log to document these communications and to assert the privilege if the government seeks to compel their production.

In addition to digital records, consider the physical security of your paper records, billing ledgers, and patient files. If you operate a clinic or hospital, designate a secure location for all records related to the investigation and limit access to only those individuals who are necessary for the defense. Implement a sign-out system for files and maintain a chain of custody to ensure that the government cannot later argue that records were altered or destroyed. In one case I handled, the government alleged that the defendant had backdated patient records after learning of the investigation. Because the defense team had maintained a meticulous chain of custody and had timestamped copies of the records, we were able to prove that the records had not been altered, and the charges were dismissed.

Finally, do not discuss the investigation with anyone other than your attorney. This includes colleagues, partners, employees, family members, and even your own malpractice attorney unless they are working directly with your criminal defense counsel. Loose lips can sink your defense, and statements made to friends or colleagues can be subpoenaed and used against you. The government often interviews employees and former employees to obtain statements that contradict the target's version of events. If you have spoken about the investigation to anyone, your attorney needs to know immediately so that we can assess the risk and prepare for potential witness testimony. Secrecy and discipline are your allies; gossip and panic are your enemies.

Frequently Asked Questions