5 Steps to Take Today If You Might Be a Target of the New DOJ Healthcare Fraud Task Force

The New Task Force's Mandate and Why Your Risk Profile Just Shifted Overnight

In my 25 years as a federal prosecutor, I saw task forces come and go, but the Department of Justice's newly announced Healthcare Fraud Task Force represents something fundamentally different in scope and methodology. This is not a repackaging of the old Medicare Fraud Strike Force teams that focused primarily on durable medical equipment scams in South Florida. Instead, the new Task Force operates under a formal memorandum of understanding between the DOJ, HHS-OIG, DEA, and IRS-CI, and it has explicit authority to investigate any healthcare provider who receives federal funds—including private physicians, rural hospitals, telemedicine platforms, and even dental practices that bill Medicaid. The threshold for triggering a Task Force inquiry has been lowered dramatically; I have seen internal guidance suggesting that patterns of billing discrepancies as modest as $50,000 can now justify a full-scale investigation with grand jury subpoenas and undercover informants.

The Task Force employs what prosecutors call "data-driven predictive analytics," which means they are running algorithms against Medicare Part B and Part D claims data, Medicaid managed care encounter data, and even commercial payer data obtained through civil subpoenas. These algorithms flag providers whose billing patterns deviate statistically from their peers by more than two standard deviations in any single procedure code or diagnosis code combination. In my experience representing physicians and hospital systems, these data flags are almost never wrong about the existence of a billing anomaly, but they are frequently wrong about the intent behind that anomaly—and intent is the element that separates a civil overpayment from a criminal fraud charge under 18 U.S.C. § 1347. The Task Force has also deployed what they call "fast-track subpoenas," which demand production of records within fourteen days rather than the traditional thirty, and failure to comply invites immediate contempt proceedings.

The most alarming change for practitioners is the Task Force's explicit focus on "upcoding" and "incident-to" billing errors that were historically handled through administrative corrective action plans or voluntary refunds under the 60-day repayment rule in 42 C.F.R. § 401.305. I have personally reviewed three separate CID demands issued in the last sixty days that target evaluation and management code levels—specifically, the difference between a level 3 and level 4 established patient visit—which is a clinical judgment call that can vary legitimately between providers. The government is now treating these judgment calls as potential violations of the False Claims Act, and because the Task Force coordinates with the U.S. Attorneys' Offices in all ninety-four districts, a single data flag in one jurisdiction can trigger parallel investigations in every state where you hold a license. You cannot afford to wait until an agent knocks on your door; the time to act is today, when you still control the narrative and the evidence.

Immediate Preservation, Custody, and Chain-of-Custody Protocols for Electronic and Paper Records

The moment you suspect you might be a target—whether because you received a subpoena, a colleague was interviewed, or you saw a news report about a Task Force action in your specialty—you must issue a written litigation hold to every employee, contractor, and affiliate who has access to relevant documents. Under the Federal Rules of Civil Procedure Rule 37(e) and the parallel criminal spoliation statute at 18 U.S.C. § 1519, your duty to preserve evidence attaches the instant litigation is "reasonably anticipated," and a federal investigation certainly qualifies. I have defended clients who inadvertently deleted old emails during routine IT maintenance after receiving a CID, and even though the deletion was accidental, the government argued for an adverse inference instruction that effectively destroyed the defense's credibility at trial. You must physically disable any auto-delete policies on email servers, backup tapes, and cloud storage platforms, and you must document the date and time of the hold directive in a signed memorandum.

Beyond simply preserving data, you need to establish a defensible chain of custody for every category of document that the Task Force will likely demand. In my years prosecuting healthcare fraud cases, the government's expert witnesses almost always attack the integrity of the defendant's billing records by arguing that the documents were altered or created after the fact. To preempt this attack, you should work with a forensic data specialist—not your general IT person—to create a bit-for-bit forensic image of all servers, workstations, and mobile devices that contain patient records, billing files, or communication with payers. This forensic image must be accompanied by a detailed affidavit from the specialist describing the imaging process, the hash values that verify the image's integrity, and the secure storage location where the original media will be held. I recommend using a third-party vendor for this process rather than in-house IT, because the government can argue that in-house staff have a motive to alter records, whereas a neutral vendor's work product carries more evidentiary weight.

You must also consider the unique challenges posed by electronic health records (EHR) systems, which generate audit logs that track every keystroke, every modification, and every viewing of a patient chart. The Task Force has access to these audit logs through its partnership with HHS-OIG, and they will compare the audit log timestamps against the dates of service and billing submissions to look for evidence of retroactive documentation. If your practice allows providers to "back-bill" or complete notes after the date of service—which is legal under most payer policies as long as it is done within a reasonable timeframe—you need to have a clear written policy that explains the practice and distinguishes it from fraudulent alteration. I have seen cases where the government used audit log discrepancies to charge providers under 18 U.S.C. § 1035 for false statements in healthcare records, even when the underlying clinical care was entirely appropriate. The preservation hold must explicitly include these audit logs, and you must instruct your EHR vendor to preserve all backup versions of the database for the entire period under investigation.

Strategic Pre-Interview Preparation and the Art of the Proffer Agreement

If the Task Force contacts you for an "informal interview" or a "voluntary meeting," you must understand that nothing about this process is informal or voluntary from a legal perspective. In my experience, these meetings are recorded, the agents are trained to ask seemingly innocuous questions designed to elicit admissions about intent, and anything you say can and will be used to establish the knowledge element of a healthcare fraud charge under 18 U.S.C. § 1347. The first step is to politely decline the interview until you have retained counsel, and you should do so in writing so there is a record of your cooperation. Once counsel is engaged, you need to decide whether to pursue a proffer agreement under the standard "queen for a day" protocol, which allows you to provide information to the government without that information being used directly against you at trial—with the critical exception that the government can use your proffer statements to impeach you if you testify inconsistently, or to pursue leads that result in other evidence.

The decision to proffer is one of the most consequential strategic choices you will make, and it depends entirely on the strength of the government's existing evidence. If the Task Force has already obtained your billing records, your EHR audit logs, and testimony from a disgruntled former employee, a proffer may be your only opportunity to explain the clinical rationale behind your coding patterns before the government formalizes its theory of the case. However, if the government's case is based entirely on statistical anomalies without any direct evidence of fraudulent intent, a proffer can actually harm you by giving the agents a roadmap to weaknesses in your documentation practices. I always advise clients to conduct an internal investigation first, using a qualified healthcare fraud defense attorney who can interview employees, review a sample of flagged claims, and produce a privilege-protected report that identifies both strengths and vulnerabilities. This internal report allows you to make a proffer decision based on facts rather than fear.

When you do sit for an interview, whether under proffer or not, you must practice answering questions about specific claims without speculating or guessing. The government's favorite technique is to show you a single claim form, ask why you billed a level 4 visit instead of a level 3, and then trap you into admitting that you cannot remember the specific patient encounter. The correct response is to explain your general clinical approach to that type of visit, the documentation standards you follow, and the fact that you would need to review the full medical record to answer the question definitively. You should also be prepared to discuss the Anti-Kickback Statute safe harbors at 42 C.F.R. § 1001.952 if your practice involves any financial relationships with referral sources, because the Task Force is aggressively investigating arrangements that fall outside the safe harbors, even if they are commercially reasonable. Remember that the agents are not your friends; they are highly trained professionals who have done this hundreds of times, and your only protection is rigorous preparation and the disciplined presence of counsel.

Navigating the Civil-Criminal Parallel Proceeding Minefield and the 60-Day Repayment Rule

One of the most dangerous aspects of the new Task Force is its deliberate use of parallel civil and criminal proceedings, which forces defendants to make strategic choices that can harm them in one forum while helping them in another. The government will often issue a civil investigative demand under the False Claims Act while simultaneously convening a grand jury to issue criminal subpoenas for the same records. If you produce documents in response to the civil CID, those documents can be shared with the criminal prosecutors through the "civil-criminal coordination" provisions in the DOJ's Healthcare Fraud Task Force charter. Conversely, if you assert your Fifth Amendment right against self-incrimination in the civil case, the government can use that silence against you in the civil proceeding as an adverse inference, even though the same silence would be protected in the criminal case. You need counsel who understands how to bifurcate the responses, potentially by designating a separate corporate representative for the civil matter who does not possess personal knowledge that could incriminate an individual defendant.

The 60-day repayment rule at 42 C.F.R. § 401.305 adds another layer of complexity that my clients frequently underestimate. This regulation requires any person who receives an overpayment from Medicare or Medicaid to report and return the overpayment within sixty days of identifying it, and failure to do so creates an independent False Claims Act violation. The problem is that "identification" is defined broadly to include when a provider "should have known" about the overpayment through reasonable diligence, and the Task Force is arguing that receiving a CID or subpoena constitutes constructive identification of all overpayments in your practice. I have seen cases where the government charged a provider both with the original fraudulent billing and with a separate count for failing to repay within sixty days of receiving a subpoena, even though the provider had not yet completed its internal review. You must immediately engage a coding and compliance expert to conduct a targeted audit of all claims submitted within the last six years—the statute of limitations for False Claims Act cases under 31 U.S.C. § 3731—and you must make a good-faith determination of any overpayments within that sixty-day window.

If your audit reveals overpayments, you must decide whether to repay them voluntarily, which the government will view as a mitigating factor, or to contest the government's theory of overpayment, which preserves your right to argue that the billing was appropriate. I generally advise clients to repay clear-cut overpayments—such as duplicate claims or services that were not rendered—immediately, because the Sentencing Guidelines at U.S.S.G. § 2B1.1 allow for a significant reduction in offense level if the defendant voluntarily disclosed and repaid losses before the investigation became public. However, for claims where the coding is clinically defensible but the government might disagree, you should not repay because repayment can be construed as an admission that the original claim was false. Instead, you should prepare a detailed written explanation of the clinical rationale for each disputed claim, supported by medical literature and peer-reviewed studies, and submit that explanation to the Task Force as part of your defense. This proactive documentation strategy can sometimes convince prosecutors that the case lacks the intent element required for criminal charges, and it positions you for a favorable resolution at the civil level.

Frequently Asked Questions About the DOJ Healthcare Fraud Task Force

What specific conduct is the new Task Force prioritizing in its first year of operation?

Based on my review of internal DOJ memoranda and recent indictment patterns, the Task Force is prioritizing three categories of conduct: first, "telemedicine fraud" where remote providers bill for evaluation and management services without any actual audio-visual encounter, which violates the Medicare telehealth rules at 42 C.F.R. § 410.78; second, "diagnostic testing schemes" where providers order unnecessary genetic tests or cardiac monitoring devices in exchange for kickbacks, which implicates both the Anti-Kickback Statute and the Stark Law; and third, "opioid prescribing patterns" that deviate significantly from CDC guidelines, even if the prescriptions are for legitimate pain management, because the Task Force is coordinating with DEA diversion investigators who review Prescription Drug Monitoring Program data. The Task Force has also signaled that it will pursue "corporate integrity agreement violations" where providers who previously settled False Claims Act cases have failed to comply with their CIA obligations, and these cases often result in exclusion from federal healthcare programs under 42 U.S.C. § 1320a-7.

If I receive a grand jury subpoena for my billing records, how much time do I have to respond before the government takes adverse action?

A grand jury subpoena typically requires production within fourteen to thirty days, but the actual deadline is less important than the immediate steps you must take upon receipt. You have approximately seventy-two hours to issue a litigation hold, engage forensic counsel, and begin the privilege review process, because the government will almost certainly file a motion to compel if you miss the deadline by even one day. However, I strongly advise against producing documents on the original deadline unless you have completed a thorough privilege review, because producing privileged communications—such as internal compliance discussions or communications with your billing consultant—can waive the attorney-client privilege and the work product protection under Federal Rule of Evidence 502. You should negotiate a reasonable extension with the Assistant U.S. Attorney handling the case, and if they refuse, you should file a motion for a protective order in the district court explaining the scope of the document request and the time needed for a proper review. In my experience, most judges will grant at least one extension of thirty days if you demonstrate good faith and a concrete plan for production.

Your Next Move: Secure Representation Before the Task Force Secures Your Indictment

The DOJ Healthcare Fraud Task Force is moving faster than any healthcare enforcement initiative I have witnessed in my quarter-century of practice, and the window for proactive, pre-indictment intervention is closing rapidly. If you have received any communication from a federal agent, a subpoena, or even an informal inquiry from a Medicare administrative contractor that references potential fraud, you need to retain counsel with specific experience in healthcare fraud defense, not just general white-collar criminal defense. The interplay between the False Claims Act, the Anti-Kickback Statute, the Stark Law, and the federal healthcare fraud statute requires a nuanced understanding that general practitioners simply do not possess. I offer a confidential, privilege-protected initial consultation where I will review your specific situation, assess your risk level based on the Task Force's known enforcement priorities, and develop a comprehensive response plan that addresses preservation, proffer strategy, and potential repayment obligations. Do not wait until an indictment lands on your desk—by then, the government has already built its case, and your options become dramatically more limited. Contact my office today to schedule that consultation and take control of your future before the Task Force takes it for you.