---
name: conducting-false-claims-analysis
language: en
description: Evaluates billing practices for False Claims Act risk with qui tam and voluntary disclosure considerations. Use when assessing FCA risk, evaluating billing compliance, or considering self-disclosure.
tags:
  - process
  - healthcare-compliance
  - compliance
  - risk
metadata:
  author: casemark
  practice_areas:
    - Healthcare Compliance
    - HIPAA
    - Healthcare Regulation
  document_types:
    - Process Documentation
  skill_modes:
    - Process Management
---

# Conducting False Claims Analysis

A structured methodology for evaluating healthcare billing practices and organizational conduct against False Claims Act (31 U.S.C. §§ 3729–3733) liability standards, including qui tam exposure assessment, reverse false claims analysis, and voluntary self-disclosure evaluation.

## Why This Skill Exists

The False Claims Act is the federal government's primary healthcare fraud enforcement tool, recovering over $72 billion since 1986 and over $2.68 billion in FY2023 alone, with healthcare consistently accounting for the largest share. The FCA's qui tam provisions allow private relators (whistleblowers) to file suits on the government's behalf and collect 15–30% of recoveries, creating powerful incentive-driven enforcement. The 2009 FERA amendments expanded "obligation" to include the identified overpayment return requirement (the "60-day rule" codified in the ACA at 42 U.S.C. § 1320a-7k(d)), meaning that knowingly retaining an overpayment beyond 60 days of identification constitutes a "reverse false claim." FCA penalties include treble damages plus per-claim penalties of $13,946–$27,894 (2024 amounts, adjusted annually for inflation). Proactive FCA risk assessment prevents catastrophic financial exposure and identifies situations where voluntary self-disclosure can dramatically reduce liability.

---

## Checkpoint A — Intake and Risk Identification

### Intake Questions

1. What triggered this FCA risk assessment—internal audit finding, billing anomaly, compliance hotline report, whistleblower allegation, government inquiry, or proactive review?
2. What billing practices or claims types are at issue—professional services (CPT), facility services (DRG/APC), laboratory, DME, home health, Part D, Medicaid?
3. What is the relevant time period for the claims at issue?
4. What federal healthcare programs are implicated—Medicare, Medicaid, TRICARE, FEHBP, VA?
5. Is there evidence of knowing submission of false claims, or is this a potential "reckless disregard" or "deliberate ignorance" situation?
6. Has any current or former workforce member indicated an intention to file a qui tam action?
7. Are there concurrent Stark Law or AKS violations that could serve as the predicate for FCA liability (false certification theory)?
8. Has the organization received a subpoena, Civil Investigative Demand (CID), or other government inquiry?
9. Has the organization identified potential overpayments that may trigger the 60-day return obligation?
10. Is the organization operating under an existing Corporate Integrity Agreement (CIA) or Certification of Compliance Agreement (CCA)?

### Required Documents

- Claims data for the relevant time period and claim types
- Internal audit reports identifying billing irregularities
- Compliance hotline reports related to billing concerns
- Coding and documentation guidelines in effect during the relevant period
- Medical records supporting the claims at issue (sample)
- Physician documentation and orders underlying questioned claims
- Payer contracts and fee schedules
- Prior overpayment refunds and voluntary disclosure filings
- Government correspondence (subpoenas, CIDs, inquiry letters)
- Compliance training records for coding and billing staff

---

## Step 1 — FCA Liability Framework Analysis

Evaluate the factual scenario against each FCA liability theory:

**Affirmative False Claims (§ 3729(a)(1)(A))**:
- Knowingly presenting, or causing to be presented, a false or fraudulent claim for payment. This covers: billing for services not rendered, upcoding (billing a higher-level code than documented/performed), unbundling (separately billing components that should be billed as a package), billing for medically unnecessary services, and misrepresenting the provider or site of service.

**False Statements (§ 3729(a)(1)(B))**:
- Knowingly making, using, or causing a false record or statement material to a false or fraudulent claim. This extends to falsifying medical records, documentation, certifications, or other materials that support claim submission.

**Reverse False Claims (§ 3729(a)(1)(G))**:
- Knowingly concealing or knowingly and improperly avoiding or decreasing an obligation to pay or transmit money to the government. Post-ACA, this specifically includes failing to return identified overpayments within 60 days of identification per 42 U.S.C. § 1320a-7k(d).

**Implied Certification Theory (Universal Health Services v. United States ex rel. Escobar, 2016)**:
- Claims that are literally accurate but submitted by an entity in violation of statutory, regulatory, or contractual requirements can be false if: (1) the claim makes specific representations about services provided, and (2) the defendant's failure to disclose noncompliance makes those representations misleading in context. Violations of Stark Law, AKS, or conditions of participation can serve as predicates.

**Scienter Standard**:
- FCA requires "knowing" conduct, defined as: (1) actual knowledge, (2) deliberate ignorance of truth or falsity, or (3) reckless disregard of truth or falsity. Specific intent to defraud is not required.

---

## Step 2 — Claims Data Analysis

- Identify the universe of potentially affected claims by date range, provider, service type, CPT/HCPCS codes, diagnosis codes, and payer.
- Calculate the total amount of federal healthcare program payments for affected claims—this is the single damages baseline for FCA exposure (trebled under § 3729(a)(1)).
- Perform statistical sampling where the claims universe is large, using OIG-accepted methodology (RAT-STATS or equivalent) with appropriate confidence level and precision.
- Identify patterns: are false claims concentrated in specific providers, departments, service lines, or time periods?
- Calculate per-claim penalties exposure: number of affected claims × per-claim penalty amount ($13,946–$27,894 per claim as of 2024).
- Document the methodology for identifying affected claims and the data sources used.

---

## Step 3 — Qui Tam Exposure Assessment

Evaluate the risk of whistleblower (qui tam) litigation:

- **Relator Identification**: Assess whether current or former workforce members have knowledge of the billing practices at issue and motivation to file a qui tam action (termination, demotion, compliance reports that were ignored).
- **Public Disclosure Bar**: Determine whether the allegations are already publicly disclosed through government reports, audits, media, or prior litigation—the public disclosure bar (§ 3730(e)(4)) may limit qui tam standing unless the relator is an "original source."
- **Seal Period**: If a qui tam is suspected to be under seal, coordinate response carefully—the government has 60 days (frequently extended) to decide whether to intervene, and premature actions can compromise the investigation.
- **Anti-Retaliation**: Ensure compliance with § 3730(h) anti-retaliation protections—employees who report FCA concerns may not be discharged, demoted, threatened, or discriminated against. Document that any adverse employment actions against potential reporters are supported by legitimate business reasons.
- **Relator Share**: If the government intervenes, the relator receives 15–25% of recovery; if the government declines and the relator proceeds alone, 25–30%. This creates powerful financial incentives for reporting.

---

## Step 4 — Voluntary Disclosure and Remediation Options

Evaluate disclosure and remediation pathways:

**OIG Self-Disclosure Protocol (SDP)**:
- Available for entities that identify potential fraud involving federal healthcare programs.
- Typically results in settlements of 1.5× single damages (vs. 3× under FCA) for matters accepted into the protocol.
- Requires comprehensive internal investigation, damage calculation, and cooperation with OIG.
- May protect against exclusion and criminal prosecution in appropriate cases.

**CMS Voluntary Self-Referral Disclosure Protocol (SRDP)**:
- Specifically for Stark Law violations.
- Settlements typically range from 1.0×–1.5× the value of noncompliant financial relationships.

**60-Day Overpayment Return**:
- Under 42 U.S.C. § 1320a-7k(d), identified overpayments must be returned within 60 days of identification.
- Use the applicable claims reopening period (typically 3 years for Medicare per 42 CFR § 405.980) as the lookback period.
- Failure to return within 60 days creates a reverse false claim and independent FCA liability.
- Report and return to the appropriate entity: Medicare Administrative Contractor (MAC) for Medicare FFS, managed care organization for MA, state Medicaid agency for Medicaid.

**Refund Without Disclosure**:
- For simple billing errors without fraud indicators, a refund to the applicable payer may be sufficient without engaging formal self-disclosure protocols.
- Document the basis for determining the refund route (vs. formal self-disclosure).

---

## Step 5 — Prospective Compliance Enhancement

Based on the FCA risk assessment, develop targeted compliance improvements:

- Strengthen pre-submission claims review for identified risk areas—automated edits, pre-billing audits, and coder-physician query processes.
- Implement retrospective audit programs focused on the claim types and patterns identified in the assessment.
- Enhance physician documentation education targeting the specific deficiencies identified (medical necessity documentation, procedure coding accuracy, diagnosis specificity).
- Establish monitoring dashboards for billing anomalies: unusual code frequency, modifier utilization patterns, charge-per-encounter outliers, and denial rate trends.
- Update compliance training to include the specific FCA risk areas identified, with case studies from relevant DOJ settlements.

---

## Checkpoint B — Analysis Validation

1. Confirm all FCA liability theories are analyzed against the specific facts (affirmative false claims, false statements, reverse false claims, implied certification).
2. Verify the scienter analysis properly distinguishes between actual knowledge, deliberate ignorance, and reckless disregard.
3. Confirm claims data analysis uses statistically valid sampling methodology where extrapolation is employed.
4. Verify FCA damages calculation includes both treble damages and per-claim penalties at current inflation-adjusted rates.
5. Confirm qui tam exposure assessment addresses anti-retaliation compliance.
6. Validate that the 60-day overpayment return timeline is correctly calculated from the "identification" date.
7. Confirm voluntary disclosure options are evaluated with comparison of expected outcomes (SDP settlement multiplier vs. FCA treble damages).
8. Review for parallel criminal liability risk—FCA violations that involve actual knowledge of fraud may implicate the healthcare fraud criminal statute (18 U.S.C. § 1347).

---

## Quality Audit

- [ ] All FCA liability theories analyzed with specific fact pattern application
- [ ] Scienter standard applied correctly (knowing, deliberate ignorance, reckless disregard)
- [ ] Claims data universe identified with total affected amount calculated
- [ ] Statistical sampling methodology documented and defensible
- [ ] Per-claim penalty exposure calculated at current inflation-adjusted rates
- [ ] Qui tam exposure assessed including anti-retaliation compliance
- [ ] 60-Day overpayment return obligation analyzed with identification date determined
- [ ] Voluntary self-disclosure options evaluated (OIG SDP, CMS SRDP, simple refund)
- [ ] Implied certification theory applied where Stark/AKS predicate violations exist
- [ ] Prospective compliance improvements are specific to identified risk areas
- [ ] Criminal liability risk flagged where actual knowledge of fraud is indicated

---

## Guidelines

- The FCA's scienter standard is lower than criminal fraud—"reckless disregard" suffices, and the Supreme Court's decision in Universal Health Services v. Escobar confirmed that the implied certification theory is viable. Organizations cannot escape liability by deliberately avoiding knowledge of billing problems.
- The 60-day overpayment return rule has transformed identified overpayments into potential FCA violations. Once an overpayment is "identified," the clock starts—and courts have interpreted "identified" broadly to include when the entity "should have known" through reasonable diligence.
- Statistical sampling and extrapolation are accepted by courts and the government for FCA damage calculations. Use OIG-endorsed methodology (RAT-STATS) and document the sampling plan, universe, sample selection, and confidence level.
- Qui tam relators have brought some of the largest healthcare FCA recoveries. Compliance programs that respond inadequately to internal reports create the conditions for successful qui tam actions.
- Voluntary self-disclosure to OIG typically results in significantly lower penalties than contested FCA litigation, but requires genuine cooperation and a comprehensive internal investigation.
- FCA liability can arise from Stark Law or AKS violations through the implied certification theory—every claim submitted during a period of non-compliance with these statutes is potentially a false claim.
- Coordination with qualified healthcare fraud defense counsel is essential for any FCA analysis, particularly when government inquiries are pending or qui tam actions are suspected. This skill produces compliance analysis, not legal advice.
