Lessons from the Frontlines: A Case Study in Medical Necessity Enforcement 

About the Medical Necessity Series 

This is the third in our series of articles on medical necessity. In the first, we described the compliance risks associated with submission of claims for medically unnecessary services.   

In the second, we highlighted a case where an organization of long-term care hospitals were alleged to have violated the Federal False Claims Act (FCA) for holding patients in the hospital longer than medically necessary to increase reimbursement from Medicare. 

In this next article, we spotlight another recent example of a healthcare provider entity agreeing to pay a six-figure sum to resolve allegations of submission of claims for medically unnecessary services1.  This time, the providers consisted of three affiliated skilled nursing facilities (SNF) that were alleged to have submitted claims for medically unnecessary rehabilitation services.   

False Claims Act Metrics Make Significance Clear 

The Department of Justice has reported that False Claims Act settlements and judgments reached $6.8 billion in Fiscal Year 2025. Over $5.7 billion of that total was derived entirely from the healthcare sector. Most of these healthcare recoveries stem from whistleblower lawsuits targeting corporate billing schemes, upcoding, and medically unnecessary services. 

Case Involves SNF Reimbursement Dispute Over Therapy Services 

For the period in question, skilled nursing facilities (SNFs) were reimbursed for therapy services based on a patient’s resource utilization group (RUG). The RUG was determined by the amount of services the patient received, such as: 

  •  Physical therapy 
  • Occupational therapy  
  • Speech pathology services 

In short, the more services provided, the higher the reimbursement.  However, as discussed in our two prior articles, if the services don’t meet medical necessity requirements, they should not have been performed or billed in the first place. 

Whistleblower Lawsuit Triggers Investigation 

As is frequently the case, these allegations were first brought forth through a qui tam, or whistleblower, lawsuit. The whistleblower, or relator, claimed the defendants implemented a five-pronged scheme to fraudulently bill for unnecessary “Ultra High Rehab,” (the most intensive therapy provided by SNFs) and to keep patients in Ultra High Rehab for longer than necessary. 

The five prongs of the alleged scheme were: 

  1. Pressure to perform excessive, unnecessary services: The organization’s leadership exerted pressure on therapy staff to administer excessive Ultra High Rehab and to do so for longer than necessary.   

This pressure was exerted not only by administrators who oversaw SNF operations, but also by regional directors of operations who managed the facility administrators. Such pressure was also exerted by directors of rehab (DORwho managed therapists at each facility, and regional managers who directly managed the DORs.  

whistleblowers in medical necessity

In other words, management, from top to bottom, spoke to therapists and staff in one voice: increase Ultra High Rehab, regardless of patient need. 

  1. Financial vs. medical reasons to provide care:  Instead of letting therapists determine the appropriate level of therapy needed based on their professional evaluation, leadership insisted that each patient’s level of therapy be at least in part determined by whether the patient qualified for lucrative Medicare Part A benefits. 
  1. Care for functional patients: The organizations pressured therapists to continue providing therapy to patients who were fully functional and in no way required intensive therapy. A scheme called “Bridge to Success” was employed which mandated an additional week of Ultra High Rehab be tacked on even after patients were ready for discharge. 
  1. Too sick for care: The organizations pressured therapists to provide therapy to patients who were too sick to benefit from therapy and even to patients who were actually harmed by it.  

Since therapy minutes were dictated by management and not assigned based on the professional opinion of evaluating therapists, patients ended up receiving more therapy than they could tolerate, including instances where therapy was forced on patients about to pass away. 

  1. Maximizing minutes: The focus on maximizing therapy minutes to hit therapy goals also resulted in leadership encouraging an array of fraudulent billing practices. 

This included: 

  • Billing non-therapeutic minutes as therapy  
  • Allowing therapists to bill for therapy without actually providing it 
  • Encouraging therapists to bill evaluation sessions as therapy. 

Widespread Occurrences Involve $14.6+ Billion in Alleged Intended Losses 

Federal enforcement actions emphasize the commonality of these practices. The 2025 National Health Care Fraud Takedown alone resulted in criminal charges against 324 defendants nationwide, involving over $14.6 billion in alleged intended losses tied to fraudulent billing and medical necessity abuses. 

The most compelling argument for compliance leaders is that medical necessity fraud carries dual liability: 

  • Financial Risk: Organizations face mandatory treble damages (three times the government’s actual loss) plus steep statutory penalties for every individual false claim submitted. 
  • Human Risk: Unlike administrative billing errors, medical necessity fraud directly compromises patient care. Overutilization exposes vulnerable patients to unnecessary, exhausting or potentially harmful procedures simply to satisfy corporate revenue targets. 
medical necessity fraud and liability image

Three Takeaways from Medical Necessity Cases 

Much can be learned from the themes of these allegations, even if your organization isn’t an SNF or doesn’t provide therapy services. Medical necessity requirements are common across most healthcare organizations. 

Key lessons from this case include: 

  1. Decisions about billing for medical care provided need to be based on clinical and regulatory requirements, especially coverage requirements from Medicare and Medicaid, for example.   Such requirements often include statutes about: 
  1. Regular, focused compliance coding and billing audits may identify aberrant practices. This is especially true for services whose corresponding medical documentation doesn’t support compliance with coding or billing rules.   
     
    For example, Medicare reimbursement rules state that routine, non-skilled services aren’t separately reimbursable. In this case, it was alleged that one therapy assistant was coached to include in therapy minutes the time it took him to arrive at a patient’s room starting with the moment he left the therapy department. 
     
  1. Use data analytics to identify outliers. Most whistleblower cases alleging medically unnecessary services are brought by an individual with knowledge from inside the organization. Many times, the individual is a physician, nurse or other clinician with medical expertise.   
     
    This case was different. It was filed by a private analytics firm using publicly available data. Though rare, these cases do exist. If a private firm using public data could find the alleged aberrations, one would hope the organization’s own compliance professionals would be able to find similar aberrations if given the resources to look.  Additionally, the government is using data analytics to identify cases they want to pursue as well. 

Apply These Takeaways to Your Own Regulatory Compliance Program 

False Claims Act allegations alleging a lack of medical necessity can take many forms. The kind of service or type of provider may also vary, but these key themes appear in many cases. The astute compliance professional will learn from them and apply the principles to the operations and services provided at their own healthcare organization. 

The claims resolved by the settlement are allegations only, and there has been no determination of liability. 


Missed the first two installments? Start with CJ Wolf’s overview of medical necessity compliance risk, then read the second article on a False Claims Act case involving medically unnecessary hospital stays. This third installment continues the series with a recent SNF enforcement example and practical red flags compliance teams can monitor.

First installment downloadable guide is available below:

Second installment downloadable guide is available below:

OIG Compliance North Star: Roadmap to the 2026 Modernized CIA Framework 

With the release of the CIA changes within the General Compliance Program Guidance (GCPG), the OIG has officially moved the goal posts. This isn’t just a new set of rules for organizations under investigation. 

The May 2026 update to the Corporate Integrity Agreement (CIA) framework signals a definitive shift from passive reporting to active governance. Compliance is no longer an administrative sub-function. It’s now a board-level strategic imperative.

Continue reading

Medical Necessity: A Guide for Healthcare Compliance Leaders 

CJ Wolf, MD, M.Ed. medical necessity series

This is the first article in a series on medical necessity — an area that many compliance programs struggle with. In this piece, we explain the medical necessity compliance risk in general, while subsequent articles highlight specific examples of enforcement actions experienced by medical providers such as hospitals and health systems. 

Continue reading

How to Prepare for New CMS Final Rules and Transmittals 

how to prepare for new CMS transmittals

It’s the nature of our mission to stay on top of what’s happening in the world of healthcare compliance. And right now, that focus couldn’t be more important.  

These are unusual times, and Compliance is feeling the impact. The Medicare Fiscal Year 2026 Final Rules were expected to be late but came through on time. However, hospitals must still rush to analyze and respond with action plans in short order. CMS transmittals are also likely impacted by the government shutdown (more on that later). 

That leaves many hospital compliance teams unprepared and under-resourced to cope with fast-coming changes. The price of noncompliance, even under extenuating circumstances, is reimbursement risk. 

Two Areas Needing Compliance Attention: Final Rules and Transmittals 

  • Final Rules – Legally binding federal regulations that establish new policies in particular areas of healthcare. 
  • CMS Transmittals – Internal instructions for updating CMS operational manuals to reflect new or changed policies. 

Two Important CMS Timelines: Fiscal Year and Calendar Year 

The CMS guidance for healthcare comes with its own deadlines attached, and every year there are two important and separate timelines for fiscal year and calendar year Final Rules.  

In healthcare, fiscal year guidance typically has an October 1 effective date, and that Final Rule usually drops in August. This year, YouCompli analysts got through the fiscal year Final Rules incredibly quickly, because CMS cut a lot of the material in the preamble, and that allowed more efficient review and analysis. 

Effective Date of Calendar Year Final Rule Coming Up Fast 

As every seasoned compliance professional knows all too well, CMS puts out a handful of big, omnibus rules for different areas of health care on an annual basis. This time of the year brings us the final rules affecting outpatient costs and billing. These areas usually get addressed during the calendar year, and these calendar year communications started dropping this year on November 5. That gives an effective date of January 1 of the next year.  

It’s important to get these annual changes synthesized and implemented in a health care organization because they cover the entire year. Even when Rules drop at the usual time (and not during a government shutdown), the short time frame to the established effective date still puts pressure on providers to analyze and develop a compliance action plan. That’s where having a partner like YouCompli already breaking down these rules and translating them into actionable business requirements is essential.  

Transmittals Could Be Delayed and Affect Claims Processing 

On top of concerns about Final Rules delays, CMS transmittals ceased to come out on September 30. Transmittals are typically issued on a running basis as they come up. In a given month, you can have anywhere from 15 to 150 transmittals come out.  

A CMS transmittal is not the same as a Final Rule. They are two distinct types of guidance documents from the CMS. Transmittals are official documents to communicate new or changed policies, procedures, claims and other operational guidance to Medicare administrative contractors (MAC), regional offices, and healthcare providers. The communications update specific CMS program manuals, instructions, and other documentation to ensure consistent implementation of Medicare rules.  

MACs Also Risk Claims Backlog with Transmittal Delays 

Another job of a transmittal is to direct the MACs on what to do in processing claims. These third-party contractors are hired by CMS to administer claims, and they can get backlogged on their instructions and claims processing when transmittals run late.  

Any claims processing delays impact providers, so it’s important to keep an eye on when these transmittal communications come out, especially if it drags out for weeks. If MACs struggle with claims processing because they can’t keep up with the updates, providers lose money. 

Whether it be through time-related loss, because then they have to reissue claims with fixes and things of that nature, delays directly impact revenues. That’s not good at a time when health systems are already under the gun. 

Solution: Proactive Compliance to Know, Act and Verify 

If you’re a YouCompli customer, you wouldn’t have to scramble to prepare for last-minute changes, because we would handle it.  

If communications are ever delayed, creating a time crunch, let us act as your analysist team, grabbing communications as soon as they come out, and breaking it down for you. We capture the necessary data and deliver it, along with easily understandable business requirements.  

You’ll know what you need to do to comply, so when the next Final Rule or transmittal hits your inbox, you’re ready to run with updating procedures, training and other requirements.  

We suggest getting on board with us now, so when that time comes, you’re not struggling with these risks and delays.  


About the Author 

Nate Ward, J.D. is the Manager of Compliance and Content Development at YouCompli Software. He comes from a deep background in healthcare compliance and the legal field. Nate leads a team of experts who read regulations, analyze how they apply, and recommend action plans for healthcare compliance.   

nathan ward - author of CMS Final rules blog from  youcompli

Download our Latest Whitepaper
Sign-up for our Weekly Newsletter
Schedule a quick overview

Resources for healthcare compliance professionals

Compliance professionals sometimes feel undervalued in comparison to other functions in their organization. They think leaders and colleagues don’t really understand what they do.  

These resources will help. Packed with ideas, tips and recommendations, these pieces were written by professionals with many years of compliance experience. 

You can quickly skim for articles that relate to your needs and interests. Bookmark this page as a reference for future questions or projects.


OIG Cites Fraud, Waste and Abuse Concerns with Skin Substitutes 

compliance risk for OIG skin sub

Many compliance professionals rely on HHS OIG focus areas as they perform risk assessments and plan subsequent auditing and monitoring activities. In November 2024, the OIG added an item to their Work Plan describing their intention to review Medicare Part B payments for skin substitutes.  

This blog explores the implications for compliance and what health systems need to be aware of.  

Continue reading