Escalating Enforcement: DOJ's New Fraud Division, CMS Policy Shifts, and DEA Rescheduling Reshape Healthcare Compliance

2026-08-16

The regulatory landscape for healthcare providers is undergoing significant transformation, marked by a new federal fraud enforcement division, critical policy changes impacting pediatric care, and proposed controlled substance reclassifications. This roundup unpacks the latest developments from the DOJ, CMS, and DEA, highlighting immediate compliance imperatives for telehealth operators, medspas, and traditional practices.

The healthcare regulatory environment is in a state of continuous flux, and recent actions by key federal agencies underscore a significant escalation in enforcement priorities and a tightening of compliance requirements. From the Department of Justice's (DOJ) strategic restructuring to target healthcare fraud, to critical policy shifts from the Centers for Medicare & Medicaid Services (CMS) impacting specific patient populations, and proposed changes in controlled substance classifications by the Drug Enforcement Administration (DEA), providers must maintain acute vigilance. For telehealth operators, brick-and-mortar practices, medspas, and every entity participating in the intricate web of healthcare delivery, understanding and proactively adapting to these developments is not merely advisable—it is an absolute imperative for operational continuity and risk mitigation.

> For more on this topic, see our analysis: [Federal Scrutiny Intensifies: Critical Regulatory Shifts Impacting Telehealth, Controlled Substances, and Medicaid Compliance](/blog/federal-scrutiny-telehealth-controlled-substances-medicaid).

The DOJ's Unprecedented Escalation in Healthcare Fraud Enforcement

Perhaps the most impactful development of late comes from the Department of Justice (DOJ), which has signaled an unprecedented escalation in healthcare fraud enforcement with the establishment of its new National Fraud Enforcement Division (NFED). This initiative, articulated in recent announcements, represents a fundamental shift in federal strategy to combat fraud, waste, and abuse across the nation.

The NFED: A Centralized and Expanded Offensive

The NFED is designed to centralize and significantly expand the DOJ's capabilities in prosecuting fraud. This isn't just a rebranding; it's a strategic move to create a more 'lean, flat, and agile' enforcement arm with significantly increased resources. The directive includes bolstering every U.S. Attorney's Office across the country with more prosecutors, agents, and forensic accountants. This means that the footprint of federal scrutiny will expand dramatically, impacting a wider array of healthcare providers and practices in every state.

Sharpened Focus Areas: Telemedicine, Medicare/Medicaid, and Controlled Substances

The NFED has explicitly outlined its enforcement priorities, placing a sharpened, critical focus on several key areas within the healthcare industry:

Telemedicine: The rapid expansion of telehealth services during and post-pandemic has brought increased scrutiny. The DOJ perceives telemedicine as an area ripe for fraudulent billing, medically unnecessary services, and inappropriate prescribing. This directly impacts telehealth founders and operators who must ensure their clinical protocols, billing practices, and patient intake processes are meticulously compliant.
Medicare/Medicaid Billing: Traditional fraud schemes targeting federal healthcare programs remain a top priority. With enhanced resources and advanced data analytics, the NFED will be able to detect anomalies and suspicious billing patterns at an unprecedented scale. Practices billing Medicare or Medicaid, including dental, chiropractic, and wellness clinics, must ensure absolute accuracy and medical necessity documentation for every claim.
Controlled Substance Diversion: The illicit diversion of controlled substances, including through improper prescribing via telemedicine, is a significant concern. The NFED's focus here demands a rigorous review of prescribing protocols, documentation, and patient monitoring, particularly for telehealth platforms and pain management clinics.

The Power of Data Analytics and Coordinated Enforcement

A critical component of the NFED's strategy is the utilization of advanced data analytics. The new National Fraud Detection Center will proactively analyze vast datasets of billing and claims information, identifying potential fraud before it escalates. This proactive approach means that providers can no longer rely on traditional audit triggers; their data is under constant, sophisticated surveillance.

Furthermore, the DOJ emphasizes the explicit coordination between its criminal and civil enforcement arms. This significantly heightens exposure under the False Claims Act (FCA), which carries severe financial penalties (treble damages plus per-claim penalties, currently ranging from $13,508 to $27,018 per claim as of 2023) and can also lead to exclusion from federal healthcare programs. A civil investigation can quickly escalate to criminal charges, underscoring the critical need for a robust and proactive compliance program that can withstand intense scrutiny.

CMS Imposes New Federal Restrictions on Gender-Affirming Care for Minors

In another significant development, the Centers for Medicare & Medicaid Services (CMS) has issued a final rule prohibiting the use of federal Medicaid and CHIP (Children's Health Insurance Program) funding for 'sex-rejecting procedures' for minors. This rule, now codified, directly impacts providers offering specific gender-affirming care services.

Key Provisions of the CMS Final Rule

The new CMS rule establishes strict age-based prohibitions:

Medicaid: Federal Medicaid funds cannot be used for 'sex-rejecting procedures' for individuals under 18 years old.
CHIP: Federal CHIP funds cannot be used for 'sex-rejecting procedures' for individuals under 19 years old.

Crucially, this rule also mandates that state Medicaid and CHIP plans must incorporate these prohibitions, ensuring that payment for such procedures for the respective age groups is restricted at the state level as well. While the specific definition of 'sex-rejecting procedures' will be subject to ongoing interpretation, it generally refers to procedures aimed at altering an individual's primary or secondary sex characteristics to align with a gender identity different from their sex assigned at birth.

Limited Transition Period and Operational Adjustments

Recognizing the need for adjustment, CMS has provided a limited transition period of up to six months for beneficiaries who are actively receiving cross-sex hormone therapy at the time the rule becomes effective. This grace period allows providers and patients a window to adapt to the new federal funding restrictions. However, it does not alleviate the fundamental prohibition moving forward.

Implications for Providers

This rule has profound implications for a range of healthcare providers:

Pediatric Practices and Mental Health Providers: Those offering gender-affirming care to minors will need to immediately review their billing practices for Medicaid and CHIP-eligible patients. Services defined as 'sex-rejecting procedures' for the specified age groups will no longer be federally reimbursable.
Telehealth Brands: Telehealth platforms that facilitate or provide gender-affirming care, including hormone therapy or related consultations, must ensure their operational and financial models align with these new restrictions. This may require modifications to service offerings, consent processes, and billing procedures.
Compliance and Financial Risk: Non-compliance could result in denied claims, recoupment actions, and significant financial exposure. Providers must monitor state Medicaid and CHIP plan updates closely to ensure full alignment with federal directives.

DEA Proposes Rescheduling of Select Sleep Medications

On the front of controlled substances, the Drug Enforcement Administration (DEA) has issued a proposed rule to modify the scheduling of three specific sleep medications, which, if finalized, will alter how these substances are handled by prescribers and dispensers.

Proposed Schedule V Classification

The DEA proposes to transfer suvorexant, lemborexant, and daridorexant from their current classification as Schedule IV substances to Schedule V of the Controlled Substances Act (CSA). These medications are dual orexin receptor antagonists used for the treatment of insomnia.

Understanding the Impact of Rescheduling

While a move from Schedule IV to Schedule V generally indicates a *lower* potential for abuse relative to Schedule IV substances, it is crucial to understand that these medications will remain controlled substances. This means that all federal regulatory controls and sanctions applicable to Schedule V substances will apply to all individuals and entities involved in their handling, including:

Recordkeeping: Meticulous records of receipt, dispensing, and disposal must be maintained.
Inventory: Regular and accurate inventory counts are required.
Security: Appropriate physical and procedural safeguards for storage must be in place.
Prescribing: Electronic prescribing of controlled substances (EPCS) requirements will continue to apply, along with specific state-level regulations for Schedule V drugs.

Actionable Deadlines and Monitoring

The DEA's proposed rule invites public comment and requests for a hearing. Interested parties have until September 10, 2026, to submit their feedback. While this provides a significant lead time, healthcare providers should not defer preparation. It is imperative to:

Monitor the finalization of this rule: The effective date of any final rule will trigger the need for immediate operational changes.
Update Internal Systems: Electronic Health Record (EHR) systems, pharmacy management software, and inventory systems must be updated to reflect the correct scheduling for these medications.
Train Staff: All relevant clinical, administrative, and pharmacy staff must be informed of the new classification and the updated procedures for handling these substances.

Failure to comply with controlled substance regulations, regardless of schedule, can result in severe administrative sanctions, civil penalties, and potential criminal prosecution.

What This Means For Your Practice: Navigating a Heightened Compliance Environment

The confluence of these regulatory actions paints a clear picture: the federal government is intensifying its oversight of the healthcare industry. For telehealth operators, medspa owners expanding nationally, brick-and-mortar practices, and healthcare investors, proactive and sophisticated compliance is no longer a differentiator but a baseline requirement for sustained operation and growth.

Actionable Steps for Telehealth Operators:

Strengthen Fraud Prevention Programs: Given the DOJ's explicit focus, conduct a rigorous internal audit of all billing practices, particularly for Medicare/Medicaid claims. Ensure all services are medically necessary, fully documented, and compliant with Anti-Kickback Statute (AKS) and Stark Law requirements.
Review Prescribing Protocols: For controlled substances, implement stringent policies for patient evaluation, prescription limits, monitoring, and documentation. Ensure adherence to state-specific telemedicine prescribing rules for controlled substances.
Audit Pediatric Services: If providing services that could fall under the CMS 'sex-rejecting procedures' definition, immediately review billing for Medicaid/CHIP patients under 18/19 and adjust service offerings or funding models as needed.

Actionable Steps for Medspas and Clinical Practices:

Enhance Billing Integrity: Conduct regular, independent audits of your billing department. Verify medical necessity, coding accuracy, and documentation support for all claims, especially those submitted to federal programs. Provide ongoing training to staff on fraud prevention and detection.
Controlled Substance Compliance Refresher: If prescribing or dispensing suvorexant, lemborexant, or daridorexant, begin planning for system and procedural updates required by a Schedule V reclassification. Review overall controlled substance handling, storage, and inventory protocols to ensure they meet federal and state standards.
Stay Informed on State-Specific Regulations: While federal actions set a baseline, state medical boards and health departments often have additional, sometimes more stringent, rules. Maintain a dynamic compliance program that tracks both federal and state-level changes.

Looking Ahead

The message from Washington is unequivocal: compliance enforcement is accelerating, becoming more data-driven, and more coordinated. The new NFED signifies a long-term commitment by the DOJ to aggressively pursue healthcare fraud. Simultaneously, agencies like CMS and DEA continue to refine policy and regulatory frameworks, creating a complex web of requirements that demand constant attention. Healthcare businesses cannot afford to view compliance as a reactive measure or a mere formality. It must be an integrated, proactive, and continuously evolving component of their core operational strategy. The ability to navigate this heightened regulatory environment will define success and resilience in the years to come, making expert partnership and robust compliance infrastructure more critical than ever.