Federal Fraud Amplification & State-Specific Scope: A Critical Regulatory Roundup for Healthcare Leaders

2026-08-18

The regulatory landscape is undergoing a significant shift, marked by escalated federal enforcement and nuanced state-level directives. This roundup dissects the Department of Justice's new fraud division, CMS's critical billing reforms, and California's clarified Medical Assistant scope, offering essential insights for healthcare leaders navigating today's complex compliance environment.

The drumbeat of healthcare compliance is growing louder, amplified by both a newly invigorated federal enforcement apparatus and precise state-level mandates. For telehealth innovators, multi-state practice owners, and compliance officers, understanding these shifts is not merely advisable — it is existential. This quarter’s regulatory roundup unveils a landscape where proactive compliance is paramount, where federal scrutiny is intensifying, and where granular state-specific rules can significantly alter operational strategies.

> For more on this topic, see our analysis: [Escalating Enforcement: DOJ's New Fraud Division, CMS Policy Shifts, and DEA Rescheduling Reshape Healthcare Compliance](/blog/doj-fraud-cms-gender-care-dea-rescheduling-compliance-2024).

The DOJ's Sharpened Focus: A New Era of Healthcare Fraud Enforcement

The Department of Justice (DOJ) has signaled a profound escalation in its commitment to combating healthcare fraud with the establishment of the National Fraud Enforcement Division (NFED). This pivotal development, underscored in recent summaries, centralizes and expands the DOJ's capabilities, deploying significantly increased resources to target fraud, waste, and abuse across the nation. The NFED is described as 'lean, flat, and agile,' indicating a strategic shift towards more rapid, data-driven investigations with a national footprint.

Prioritization and Enhanced Scrutiny

The NFED has explicitly outlined its enforcement priorities, placing telemedicine, Medicare/Medicaid billing, and controlled substance diversion at the forefront. This directly impacts a wide array of healthcare businesses, from emerging telehealth brands to established medspas, dental practices, and chiropractic offices, particularly those participating in government-funded programs. The explicit mention of telemedicine signifies that the innovations accelerated by the pandemic are now under magnified regulatory scrutiny, moving beyond initial pandemic-era flexibilities.

Crucially, this new division will leverage a National Fraud Detection Center to proactively analyze billing data at an unprecedented scale. This means that anomalies, patterns indicative of fraud, or even simple errors in claims submission will be identified more quickly and comprehensively than ever before. For practices, this translates into a heightened risk of investigation if their billing practices do not align meticulously with regulations.

Implications for Civil and Criminal Liability

The establishment of the NFED also emphasizes coordinated enforcement between criminal and civil arms. This structure heightens exposure to the False Claims Act (FCA), which imposes substantial penalties for submitting false or fraudulent claims to federal healthcare programs. Under the FCA, liability can arise not only from intentionally fraudulent acts but also from 'reckless disregard' or 'deliberate ignorance' of billing rules. The civil penalties alone can be severe, including treble damages plus per-claim penalties ranging from $13,508 to $27,018.

Beyond civil liability, the increased resources and focus on areas like controlled substance diversion could lead to a rise in criminal prosecutions for providers found to be operating outside established prescribing guidelines or engaging in illegal drug diversion schemes. This underscores the critical need for robust internal controls, meticulous documentation, and comprehensive training on prescribing protocols, especially for telehealth providers engaging in controlled substance prescribing.

Actionable Guidance: * Revisit Your Compliance Program: Conduct an immediate, top-to-bottom review of your existing compliance program. Ensure it addresses the specific priorities identified by the DOJ: telemedicine billing, Medicare/Medicaid billing integrity, and controlled substance protocols. * Billing Audits: Implement regular internal and external billing audits. Proactively identify and rectify any coding errors, unsupported claims, or practices that could be misconstrued as fraudulent. * Anti-Kickback and Stark Law Review: With heightened scrutiny on financial arrangements, re-evaluate all referral relationships, vendor contracts, and employment agreements for potential Anti-Kickback Statute (AKS) and Stark Law violations. * Telehealth Documentation and Prescribing: Ensure all telehealth encounters are thoroughly documented, meeting the same standards as in-person care. Review and strengthen protocols for prescribing controlled substances via telemedicine, aligning with federal and state regulations.

CMS's Evolving Reimbursement Landscape: Telehealth and Value-Based Care

The Centers for Medicare & Medicaid Services (CMS) continues to shape the future of healthcare reimbursement, particularly for technology-enabled services and chronic care management. Two recent announcements signal significant shifts: mandatory billing changes for specific provider types and the introduction of an ambitious new payment model.

Mandatory Telehealth Billing Changes for FQHCs and RHCs

Effective October 1, 2026, CMS is implementing a critical billing change for Federally Qualified Health Centers (FQHCs) and Rural Health Clinics (RHCs). These entities will be mandated to cease using HCPCS code G2025 for distant-site non-behavioral telehealth services. Instead, they must transition to billing for these services using specific, appropriate service codes.

This change, while seemingly technical, has substantial operational and financial implications for FQHCs and RHCs. The G2025 code has simplified billing for these providers for non-behavioral health distant site telehealth. Its removal necessitates comprehensive updates to billing systems, extensive staff training on new coding methodologies, and a thorough review of existing telehealth service lines to ensure compliant reimbursement. Failure to adapt by the deadline could result in significant claim denials and revenue disruption.

Introducing the ACCESS Model for Chronic Care

Concurrently, CMS has launched the ACCESS (Advancing Chronic Care with Effective, Scalable Solutions) Model. This is a 10-year voluntary program designed to test outcome-aligned payments for technology-supported chronic care services. The model targets common chronic conditions such as hypertension, diabetes, and depression, aiming to demonstrate improved health outcomes through innovative care delivery.

The ACCESS Model represents a strategic pivot by CMS towards value-based care, emphasizing quantifiable patient outcomes over fee-for-service volume. It specifically champions care delivered virtually, asynchronously, or through remote monitoring devices, signaling CMS's long-term vision for technology integration in chronic disease management. While voluntary, participation in ACCESS offers providers an opportunity to align with future Medicare payment structures, potentially unlocking new revenue streams for practices that can demonstrate measurable improvements in patient health.

Actionable Guidance: * For FQHCs and RHCs: Begin immediate planning for the October 1, 2026, transition. This includes identifying all services currently billed under G2025, researching appropriate replacement codes, updating practice management systems, and initiating comprehensive staff training. Consider seeking expert guidance to ensure a seamless transition. * For Telehealth and Chronic Care Providers (Broader Impact): Analyze the ACCESS Model carefully. Even if direct participation is not immediately feasible, the model indicates CMS's direction. Invest in technology infrastructure that supports virtual care, remote monitoring, and robust data collection for outcome measurement. Start developing internal capabilities to track and report on chronic disease management outcomes, positioning your practice for future value-based initiatives. * Regulatory Scrutiny on Efficacy: Understand that CMS's focus on outcome-aligned payments also means increased scrutiny on the efficacy and quality of technology-enabled care. Ensure your telehealth services are designed and delivered to achieve demonstrable patient benefits and are supported by robust clinical protocols.

Navigating Sensitive Care: CMS's New Rule on Gender-Affirming Procedures for Minors

In a significant federal policy shift, CMS has issued a final rule prohibiting the use of federal Medicaid and CHIP funds for 'sex-rejecting procedures' for minors. Specifically, this rule restricts federal Medicaid funds for individuals under 18 years old and federal CHIP funds for individuals under 19 years old. Furthermore, the rule mandates that state Medicaid and CHIP plans must also prohibit payment for these procedures for the respective age groups.

Defined Restrictions and Transition

While the intelligence summary does not provide a granular definition of 'sex-rejecting procedures,' the context indicates a focus on specific gender-affirming interventions for minors. This rule is a direct response to evolving national dialogues around pediatric and adolescent gender-affirming care and will have profound implications for providers currently offering such services and billing through Medicaid or CHIP.

CMS has provided a limited transition period of up to six months for beneficiaries who are actively receiving cross-sex hormone therapy. This grace period offers a brief window for practices and patients to adjust to the new federal restrictions, allowing for continued care during the transition phase. However, it does not alter the fundamental prohibition moving forward, emphasizing the need for immediate operational and financial adjustments.

Actionable Guidance: * Review Service Offerings and Patient Demographics: Practices offering gender-affirming care, particularly to pediatric and adolescent populations, must immediately review their service offerings in light of this new rule. Identify any procedures that may fall under CMS's definition of 'sex-rejecting procedures' for minors. * Medicaid/CHIP Billing Audit: Conduct an urgent audit of all current and historical claims for such services billed to Medicaid or CHIP. Understand that federal financial participation will cease, potentially leading to denied claims and recoupment actions. * Adjust Financial and Operational Models: Develop alternative funding mechanisms or adjust service models for affected patients. This may involve exploring private pay options, patient assistance programs, or referring patients to alternative care pathways that do not rely on federal Medicaid or CHIP funding for these specific procedures. * State-Specific Impact: Monitor your state's Medicaid and CHIP program updates closely, as they are mandated to implement this federal prohibition. Understand how this will affect specific state plan benefits and reimbursement policies.

California's Specific Mandate: Medical Assistant Scope of Practice

State-level regulatory clarity remains a critical component of national compliance, and California has recently provided definitive guidance on the permissible scope of practice and required supervision for Medical Assistants (MAs). The Medical Board of California's guidance is particularly relevant for practices within the state, including medspas, dental offices, chiropractic clinics, and telehealth providers utilizing in-person administrative or technical support.

Unlicensed Personnel, Direct Supervision

The guidance explicitly emphasizes that Medical Assistants are unlicensed individuals whose activities are strictly limited to non-invasive technical support services. Crucially, all such duties must be performed under direct, on-premises supervision by a licensed physician and surgeon, podiatrist, physician assistant, nurse practitioner, or nurse midwife.

This means the supervising licensee must be physically present in the facility and immediately available to provide direct oversight. MAs are expressly prohibited from performing any invasive procedures, diagnosing, treating, or making assessments. These activities fall squarely outside their legal scope of practice.

Responsibility and Risk for Supervising Licensees

The Medical Board of California makes it unequivocally clear that the ultimate responsibility for the appropriate use of unlicensed persons, including Medical Assistants, rests with the supervising physician. This places a significant burden on licensed practitioners and practice owners to ensure their MAs are not overstepping their bounds.

Non-compliance with these strict supervision and scope-of-practice requirements can lead to severe regulatory infractions, including disciplinary actions against the supervising licensee's professional license. For medspas, where MAs might be tasked with a broader range of 'technical' support, or for any practice delegating tasks to MAs, this guidance demands an immediate review of job descriptions, training protocols, and direct supervision practices.

Actionable Guidance: * Review MA Job Descriptions and Training: Immediately review the job descriptions, assigned duties, and training protocols for all Medical Assistants in your California practice. Ensure that no MA is performing tasks outside the defined scope of non-invasive technical support. * Ensure Direct, On-Premises Supervision: Verify that a licensed supervisor is always physically present in the facility and immediately available to oversee MA activities. Document supervision protocols thoroughly. * Prohibit Invasive Procedures and Clinical Judgement: Reiterate to MAs that they cannot perform invasive procedures, diagnose, treat, or make independent clinical assessments. These are licensed activities. * Educate Supervising Licensees: Ensure all supervising physicians, PAs, NPs, and nurse midwives are fully aware of their direct supervision responsibilities and the potential disciplinary actions for non-compliance. Implement regular audits of MA activities.

What This Means For Your Practice: A Call for Proactive Compliance

The recent regulatory intelligence paints a clear picture: the healthcare compliance landscape is becoming more intricate and demanding. The amplified federal enforcement, coupled with targeted state-level directives, necessitates a proactive, multi-faceted compliance strategy for all healthcare businesses.

Invest in Robust Compliance Infrastructure: The increased federal scrutiny from the DOJ's NFED means that a 'check-the-box' approach to compliance is no longer sufficient. Invest in sophisticated compliance infrastructure, including advanced data analytics for billing, ongoing staff training, and regular internal and external audits. Telehealth operators, in particular, must ensure their digital platforms and protocols meet increasingly stringent regulatory standards.
Stay Abreast of State-Specific Nuances: While federal regulations often grab headlines, state-specific guidance, such as California's MA scope, can have profound operational impacts. Multi-state operators must maintain a dynamic compliance matrix that tracks and adapts to the unique regulatory environments of each state in which they operate. Medspas, dental practices, and chiropractic offices, often operating across state lines or utilizing unlicensed personnel, must be particularly diligent.
Adapt to Value-Based Care Models: CMS's ACCESS Model is a clear indicator of the shift towards outcome-aligned payments. Practices that begin now to integrate technology, track patient outcomes, and develop robust care coordination programs will be better positioned for future reimbursement opportunities and demonstrate greater resilience against fee-for-service payment cuts.
Foster a Culture of Compliance: Ultimately, compliance is a shared responsibility. Educate your entire team, from front-desk staff to senior leadership, on the importance of regulatory adherence. Foster an environment where concerns can be raised without fear of reprisal, ensuring that potential issues are identified and addressed before they escalate into enforcement actions.

The regulatory environment is not static; it is a living, evolving entity. Success in this dynamic landscape hinges on an unyielding commitment to excellence in compliance and a strategic foresight that anticipates change rather than merely reacting to it. TrueEval stands as your definitive partner in navigating this complexity, transforming regulatory challenges into opportunities for sustainable growth and operational integrity.