3 Critical Steps to Take Today If You’re Under Healthcare Fraud Scrutiny

The Immediate Cease-and-Preserve Order: Why Your Compliance Team Becomes a Liability

In my 25 years as a federal prosecutor, I saw more healthcare organizations sink themselves not through the original alleged fraud, but through what they did after the first whisper of an investigation arrived. The moment you learn that a whistleblower complaint has been filed under the False Claims Act, or that an agent from the Office of Inspector General has contacted your billing department, your compliance team transforms from an asset into a potential liability. I cannot stress this enough: every internal email, every whiteboard note from a "strategy session," and every hastily compiled spreadsheet becomes discoverable evidence the moment the government decides to investigate. Under Federal Rule of Evidence 801(d)(2), any statement made by your employee within the scope of employment is an admission of a party-opponent, meaning the government can introduce your own internal audit findings as proof of intent to defraud. I have watched defense attorneys try to explain away a compliance officer's email that said "let's fix this billing glitch quietly" as a good-faith effort, only to have the prosecutor read it to the jury as an admission of knowing misconduct. The first critical step is to issue a formal litigation hold letter to every employee who touches billing, coding, or reimbursement, and to instruct your compliance department to cease all internal investigations until your attorney can supervise the process. Do not allow anyone to delete emails, destroy draft documents, or alter billing records, even if they believe they are cleaning up a "clerical error." The government's forensic accountants will compare your billing data against Medicare's claims database, and any deviation between what you submitted and what you retained will be treated as consciousness of guilt. I have seen well-meaning CFOs order a "cleanup" of billing records to correct overpayments, only to have that cleanup characterized as destruction of evidence under 18 U.S.C. § 1519, which carries a 20-year maximum sentence. Your first action must be to freeze every document, every email, and every database in place, and to do so only after your attorney has drafted the litigation hold notice to ensure it does not inadvertently waive attorney-client privilege over the underlying billing practices. Remember, the government does not need to prove you intended to commit fraud if they can prove you intended to hide something, and the preservation order is your first line of defense against that inference.

The Silence Protocol: Why 18 U.S.C. § 1001 Turns Every Conversation Into a Felony Trap

The second critical step is to establish what I call the "Silence Protocol" across your entire organization, from the CEO down to the medical records clerk. Under 18 U.S.C. § 1001, it is a federal felony to knowingly and willfully make any materially false statement to a federal agent, and the statute covers any statement—oral or written—made within the jurisdiction of any federal department or agency. What most healthcare executives do not understand is that the statute does not require the government to prove you intended to defraud them; it only requires that you made a false statement, and that you knew it was false when you made it. I have personally prosecuted cases where a hospital administrator told an OIG investigator that "we always follow Medicare billing guidelines" when the administrator had never actually read the Medicare Claims Processing Manual, and that single statement became the basis for a false statement charge that carried a five-year maximum sentence. The trap is particularly insidious because OIG agents are trained to ask open-ended questions like "Are you aware of any billing irregularities in your department?" or "Has anyone ever raised concerns about upcoding in your practice?" If you answer "no" and the government later finds a single email where a coder asked about a billing code, you have just committed a felony. The only safe response to any federal agent, including FBI, OIG, or Department of Justice prosecutors, is a written statement prepared by your attorney, or the simple phrase "I am not authorized to speak without my attorney present, and I respectfully decline to answer questions." I advise all my clients to post this instruction in every break room, every billing office, and every administrative suite, and to require every employee to sign an acknowledgment that they will not speak to any government agent without first contacting legal counsel. This protocol is not an admission of guilt; it is the exercise of your Fifth Amendment right against self-incrimination, which the Supreme Court has repeatedly held cannot be used as evidence of guilt in a criminal trial. The government will try to pressure you by saying that cooperation is the only way to avoid an indictment, but I have seen too many clients talk themselves into a superseding indictment by trying to be "helpful" during an informal interview. If an agent shows up at your office unannounced, you have the right to tell them to leave, and you have the right to call your attorney before answering a single question. The Silence Protocol must be absolute, and it must be implemented before the first knock on your door.

The Privilege Fortress: Building an Attorney-Client Shield Around Your Billing Operations

The third critical step is to immediately engage a federal criminal defense attorney with specific healthcare fraud experience and to restructure all internal communications to fall within the attorney-client privilege and the work-product doctrine. In my experience as a prosecutor, the most damaging evidence in healthcare fraud cases came from internal emails where billing managers discussed coding changes, reimbursement strategies, or responses to Medicare audits without any attorney involvement. Under the crime-fraud exception to the attorney-client privilege, communications made in furtherance of an ongoing or future crime are not privileged, which means that if your internal emails contain discussions about "maximizing reimbursement" or "aggressive billing," the government can argue those communications were part of a fraudulent scheme and therefore discoverable. The solution is to ensure that every conversation about billing compliance, every audit response, and every coding decision is conducted under the direct supervision of legal counsel, with a clear record that the communication is being made for the purpose of obtaining legal advice. I recommend that my clients create a "privileged billing review" process where all questions about coding, reimbursement, or compliance are directed to a designated attorney, and all responses are marked "Attorney-Client Privileged and Confidential." This does not mean you can hide evidence of fraud behind the privilege; the Supreme Court made clear in United States v. Zolin that the crime-fraud exception allows the government to review privileged communications if they make a prima facie showing that the communications were in furtherance of a crime. However, if you have a legitimate legal question about a billing rule, and you ask your attorney for advice, and you follow that advice in good faith, that communication is protected, and it provides a powerful defense against the government's claim that you acted with intent to defraud. I also recommend that you conduct a privileged internal investigation under the direction of your attorney, using the work-product doctrine to shield your investigator's notes, interview summaries, and factual findings from discovery. The work-product doctrine, codified in Federal Rule of Civil Procedure 26(b)(3), protects documents prepared in anticipation of litigation, and the moment you retain a criminal defense attorney, you are in anticipation of litigation. This privileged investigation should be the only internal assessment of your billing practices that you conduct, and all prior non-privileged audits should be treated as potential evidence that the government may already have subpoenaed. The privilege fortress is not a shield for fraud; it is a shield for your right to obtain competent legal advice without fear that every question you ask will be used against you in a federal indictment.

The Subpoena Response Strategy: Why Compliance Without Counsel Is a Confession

When the grand jury subpoena arrives, or when the FBI executes a search warrant at your office, the natural instinct of most healthcare executives is to "cooperate fully" by handing over every document the government requests. This instinct is dangerous because it ignores the fundamental principle that the government's subpoena is a fishing expedition, and every document you hand over without attorney review becomes a potential exhibit at trial. Under Federal Rule of Criminal Procedure 17(c), a grand jury subpoena duces tecum must be specific enough to allow you to identify the documents requested, but the government often uses broad language like "all documents related to billing for Evaluation and Management codes during 2020 through 2023." If you produce documents without privilege review, you may inadvertently waive the attorney-client privilege over communications that were properly protected, and you may hand over documents that contain damaging statements your employees made without legal guidance. I have seen cases where a client produced a binder of "billing compliance manuals" that included handwritten notes from a compliance officer saying "we can probably get away with this for another year," and that single document destroyed any chance of a favorable plea agreement. The correct response to any subpoena is to immediately contact your attorney, who will negotiate the scope of the subpoena, identify documents that are privileged or protected, and prepare a privilege log under Federal Rule of Criminal Procedure 16(b)(1)(A)(ii). Do not assume that the government already has the documents; they may be relying on your voluntary production to fill gaps in their evidence, and every document you produce voluntarily saves them the trouble of obtaining it through a more specific subpoena. I also advise my clients to never produce documents directly to the government without first copying them for your attorney, and to never allow government agents to search your electronic systems without a warrant and without your attorney present. If the government executes a search warrant, you have the right to observe the search, but you should not interfere, and you should immediately call your attorney so that they can be present to ensure the agents do not exceed the scope of the warrant. The subpoena response strategy must be aggressive, meticulous, and entirely attorney-directed, because the moment you respond without counsel, you have essentially confessed that your documents contain no exculpatory evidence and no privileged communications. In my 25 years of practice, I have never seen a client benefit from rushing to produce documents without legal review, but I have seen countless clients destroy their defense by trying to be "helpful" to the government before they understood the full scope of the investigation.

If you are under healthcare fraud scrutiny, the decisions you make in the next 72 hours will determine whether this matter ends with a declination letter or a federal indictment. I have seen too many healthcare professionals lose their licenses, their practices, and their freedom because they tried to handle an OIG inquiry on their own, believing that cooperation without counsel would demonstrate their innocence. That approach is a trap, and it is a trap that the government has designed over decades of prosecuting healthcare fraud. You need an attorney who has stood on both sides of the courtroom, who understands how the government builds its case from the first whistleblower complaint to the final jury verdict, and who will not let you make the irreversible mistake of speaking without protection. I invite you to contact my office for a confidential consultation, where we will review the specific facts of your situation, identify the immediate steps you must take to preserve your rights, and develop a proactive defense strategy that prevents the government from controlling the narrative. Do not wait for the subpoena to arrive, do not wait for the search warrant to be executed, and do not assume that your compliance department has the situation under control. The time to act is today, and the first step is a single phone call to an attorney who knows how to fight and win in federal court.