DOJ's New National Fraud Enforcement Division: Navigating Heightened Scrutiny in Healthcare and Telemedicine

2026-08-19

The Department of Justice has launched its National Fraud Enforcement Division, signaling a significant escalation in federal healthcare fraud investigations. This deep dive unpacks the NFED's priorities, particularly its sharpened focus on telemedicine, Medicare/Medicaid billing, and controlled substance diversion, and offers actionable strategies for healthcare businesses to fortify their compliance programs against unprecedented scrutiny.

A seismic shift is underway in federal healthcare fraud enforcement. The Department of Justice (DOJ) has formally established its National Fraud Enforcement Division (NFED), centralizing and significantly expanding its capabilities to combat fraud across the nation. This move is not merely a bureaucratic restructuring; it represents a fundamental recalibration of federal enforcement strategy, designed to be more agile, data-driven, and impactful. For telehealth founders, multi-state practice owners, medspa operators, and healthcare compliance officers, understanding the implications of this new division is no longer optional—it is paramount for survival and sustainable growth in 2025 and beyond.

> For more on this topic, see our analysis: [Navigating the Telehealth Controlled Substance Minefield: DEA Scrutiny and State-Specific Traps in 2025-2026](/blog/telehealth-controlled-substances-dea-state-compliance).

The NFED: A New Era of Enforcement

The creation of the National Fraud Enforcement Division marks a pivotal moment. The DOJ has publicly committed to deploying expanded resources, including more prosecutors, agents, and forensic accountants, across every U.S. Attorney's Office. This means that enforcement actions, previously localized or sporadic, are now poised to become more coordinated, frequent, and sophisticated. The NFED is designed to be 'lean, flat, and agile,' indicating a strategic shift towards rapid response and efficient prosecution of complex fraud schemes.

Crucially, the NFED will leverage advanced data analytics on an unprecedented scale. The new National Fraud Detection Center will proactively analyze billing data from federal healthcare programs like Medicare and Medicaid, identifying anomalous patterns, outliers, and potential fraud schemes before they fully mature. This proactive approach fundamentally alters the risk landscape. Healthcare providers can no longer rely on a reactive stance; compliance programs must be anticipatory, robust, and capable of identifying and remediating risks that sophisticated data algorithms might flag.

> For more on this topic, see our analysis: [Navigating the Telehealth Chasm: Controlled Substance Prescribing Amidst Heightened Federal Scrutiny and Unfinalized DEA Rules](/blog/telehealth-controlled-substance-compliance-2025).

Key Enforcement Priorities for 2025-2026

The DOJ has explicitly outlined its sharpened focus areas, sending an unmistakable signal to the industry. For healthcare businesses, these priorities demand immediate and comprehensive review of operational practices:

1. Telemedicine Fraud: The rapid expansion of telehealth during and after the public health emergency has inevitably attracted the attention of federal enforcers. The NFED is particularly concerned with schemes involving: * Billing for Services Not Rendered: Claims submitted for virtual visits that did not occur or were merely brief, unsubstantiated phone calls. * Medically Unnecessary Services: Prescribing or ordering durable medical equipment, genetic testing, or other services based on minimal or no legitimate patient interaction, often driven by illegal kickbacks or patient recruiting schemes. * Misrepresentation of Services: Upcoding telehealth services to higher, more expensive codes than warranted by the clinical encounter, or billing for in-person services when only a virtual interaction occurred. * Exploitation of COVID-19 Waivers: While many waivers have expired, investigations into past abuses continue, and the NFED will scrutinize any perceived attempts to leverage remaining flexibilities inappropriately. Actionable Insight: Telehealth platforms must ensure rigorous documentation standards for every virtual encounter, transparent billing practices, and robust clinical protocols that align with established medical necessity guidelines. Any arrangements with marketers or lead generation services must be carefully vetted for Anti-Kickback Statute (AKS) compliance.

2. Medicare/Medicaid Billing Fraud: The core mission of the NFED includes safeguarding federal healthcare programs. With enhanced data analytics, the division will intensify its focus on identifying and prosecuting schemes that drain taxpayer dollars. This includes: * False Claims Act (FCA) Violations: Submitting claims for services that were never provided, were medically unnecessary, or were provided in violation of regulations (e.g., Stark Law, AKS). The FCA carries severe civil penalties, including treble damages and per-claim fines, making robust billing compliance non-negotiable. * Upcoding and Unbundling: Practices incorrectly assigning higher-paying CPT codes than justified by the service rendered (upcoding) or billing separately for services that should be grouped together (unbundling). * Provider Enrollment Fraud: Misrepresenting qualifications or ownership structures to improperly enroll in federal programs. Actionable Insight: Practices participating in federal programs must implement stringent internal audit mechanisms, conduct regular external billing compliance reviews, and ensure their coding and billing staff receive continuous training on the latest CMS guidelines. Any identified overpayments must be promptly reported and returned to avoid FCA liability under the 60-day rule.

3. Controlled Substance Diversion: The opioid crisis and the rise of telehealth prescribing for controlled substances have placed this area squarely in the DOJ's crosshairs. The NFED, in conjunction with the Drug Enforcement Administration (DEA), will aggressively pursue cases involving: * Inappropriate Prescribing via Telehealth: While the DEA has extended some telehealth flexibilities for controlled substances, the fundamental requirement for a legitimate patient-practitioner relationship remains. Prescribing controlled substances without a proper good faith examination, solely based on online questionnaires, or for illegitimate purposes, is a critical enforcement target. * Pill Mill Operations: Practices that over-prescribe opioids or other controlled substances, often without medical necessity, contributing to addiction and diversion. * Lack of State Licensure Compliance: For multi-state telehealth providers, failure to adhere to varying state-specific requirements for controlled substance prescribing, including state PDMP (Prescription Drug Monitoring Program) checks. Actionable Insight: Practices prescribing controlled substances, especially via telehealth, must establish and strictly adhere to rigorous prescribing protocols, including documented good faith exams, PDMP checks in all relevant states, and clear policies for refills and monitoring. Comprehensive training for prescribers on state and federal controlled substance regulations is essential.

The "Whole-of-Government" Approach: Unifying Enforcement

The NFED's impact is magnified by its mandate for enhanced coordination across federal and state agencies. This isn't just about the DOJ; it's about a 'whole-of-government' approach that integrates the efforts of the Office of Inspector General (OIG), the FBI, state Medicaid Fraud Control Units (MFCUs), and other regulatory bodies. This means that an investigation initiated by one agency can quickly escalate and involve others, potentially leading to both civil and criminal liability.

Civil Enforcement: Primarily through the False Claims Act, leading to significant financial penalties, corporate integrity agreements (CIAs), and exclusion from federal healthcare programs.
Criminal Enforcement: Involving charges for healthcare fraud, wire fraud, mail fraud, and unlawful distribution of controlled substances, resulting in fines, imprisonment, and permanent exclusion from federal programs.

The explicit coordination between criminal and civil enforcement arms means that practices identified for potential fraud may face simultaneous or sequential actions, increasing the stakes and demanding a highly sophisticated legal and compliance response.

Proactive Compliance: Your Indispensable Shield

In this heightened enforcement environment, a robust, dynamic compliance program is not a luxury; it is a fundamental pillar of risk mitigation. Healthcare businesses must move beyond perfunctory compliance efforts and embrace a culture of proactive, continuous vigilance.

Practical Checklists for Strengthening Your Compliance Program:

1. Comprehensive Risk Assessment: * Identify Vulnerabilities: Conduct a thorough assessment to pinpoint areas most susceptible to fraud, waste, and abuse. Pay particular attention to telehealth services, controlled substance prescribing, and all federal billing practices. * Regulatory Horizon Scanning: Monitor changes in federal and state regulations, payer policies, and enforcement priorities. The NFED's focus areas should guide your assessment. * Data Security: Ensure HIPAA compliance for all patient data, especially with AI-powered platforms, as data breaches can trigger secondary investigations.

2. Robust Policies and Procedures: * Telehealth Protocols: Develop explicit policies for patient identification, informed consent, medical necessity documentation, prescribing practices (especially for controlled substances, including PDMP checks), and emergency protocols for virtual encounters. * Billing & Coding Guidelines: Implement detailed policies for accurate coding, claims submission, and documentation to support all billed services. Emphasize rules for preventing upcoding, unbundling, and billing for unrendered services. * Anti-Kickback & Stark Law Compliance: Review all referral sources, vendor relationships, and compensation arrangements to ensure strict adherence to federal fraud and abuse laws. This is particularly critical for multi-state operations with complex contractual structures. * Controlled Substance Prescribing Policies: Go beyond basic requirements. Include detailed steps for good faith exams, patient monitoring, quantity limits, and abuse deterrence measures.

3. Meticulous Documentation Standards: * If It's Not Documented, It Didn't Happen: This adage is more critical than ever. Every clinical encounter, prescribing decision, and billing entry must be clearly and comprehensively documented. * Telehealth Specifics: Documentation for virtual visits must include the modality used, date, time, duration, patient location, and a clear medical rationale for the service, demonstrating that the encounter met all applicable clinical and billing requirements. * Audit Trails: Ensure electronic health record (EHR) systems provide robust audit trails to track all access and modifications to patient records.

4. Continuous Training and Education: * Mandatory Compliance Training: Implement regular, mandatory training for all staff—from administrative personnel to clinicians—on fraud, waste, and abuse laws, specific billing policies, and internal compliance protocols. * Role-Specific Education: Tailor training to specific roles, e.g., prescribers on controlled substance regulations, billing staff on coding updates, and marketing teams on AKS risks. * Ethics and Reporting: Foster a culture where employees feel comfortable reporting potential compliance concerns without fear of retaliation.

5. Internal Audits and Monitoring: * Proactive Reviews: Regularly conduct internal audits of billing practices, medical records, and prescribing patterns to identify and correct errors *before* they become federal investigations. * Peer Review: Implement peer review processes for clinical documentation and prescribing, especially for high-risk services. * Data Monitoring: Utilize internal data analytics to spot unusual trends in billing, prescribing, or service utilization that might signal underlying compliance issues.

6. Prompt Remediation: * Investigate and Respond: Establish clear procedures for investigating reported compliance concerns and taking swift corrective action. * Self-Disclosure: Understand the process for voluntarily self-disclosing potential violations to appropriate agencies (e.g., OIG, CMS) to mitigate penalties, particularly under the OIG's Provider Self-Disclosure Protocol.

What This Means For Your Practice

The launch of the DOJ's National Fraud Enforcement Division fundamentally alters the compliance landscape. The era of 'flying under the radar' is over. For healthcare businesses, particularly those leveraging telehealth, engaging in multi-state operations, or prescribing controlled substances, the message is clear: proactive, sophisticated compliance is your strongest defense.

TrueEval understands that navigating this complex regulatory environment requires more than just good intentions; it demands robust infrastructure, expert guidance, and continuous vigilance. Healthcare leaders must view compliance not as a burden, but as a strategic imperative—an investment that protects not only their bottom line but also their reputation and ability to deliver quality patient care. By embracing a proactive and data-driven approach to compliance, your practice can confidently navigate this new enforcement era, ensuring both regulatory adherence and sustained success.