The False Claims Act (FCA) is the federal government’s most powerful tool for going after healthcare billing fraud. It carries penalties of more than $27,000 per false claim submitted, plus treble damages, meaning three times the amount the government overpaid. For a medical practice that submitted hundreds or thousands of incorrect claims, the math gets devastating fast.
But here is the part that makes the FCA especially dangerous for medical practices: you do not have to intend to commit fraud. The statute covers claims submitted with “reckless disregard” for their accuracy or with “deliberate ignorance” of their truth. That means billing errors caused by sloppy processes, untrained staff, or a failure to self-audit can create FCA liability even if nobody meant to cheat the system.
What Counts as a False Claim
A false claim is any request for payment submitted to a federal healthcare program that is inaccurate, unsupported, or based on a false certification. In medical billing, this shows up in several ways.
Upcoding is the most common. Billing a level 4 office visit when the documentation only supports a level 3 is a false claim. Billing for a service that was not performed is a false claim. Submitting a claim for a service that was not medically necessary, with a diagnosis code selected specifically to get the claim paid, is a false claim.
Unbundling also creates FCA exposure. When services that should be billed under a single bundled code are instead billed as separate line items to increase reimbursement, each of those separate claims is possibly false.
Less obvious but equally problematic: billing for services rendered by unqualified or unsupervised staff, billing under the wrong provider’s NPI, or submitting claims for services provided during a period when the rendering provider’s credentials had lapsed. All of these can be treated as false claims.
The Qui Tam Whistleblower Problem
The FCA has a qui tam provision that allows private individuals to file lawsuits on behalf of the government. These individuals, often called whistleblowers or relators, can be current employees, former employees, competitors, or anyone with inside knowledge of the billing practices.
The whistleblower has a financial incentive. If the government intervenes and recovers money, the whistleblower receives between 15% and 25% of the recovery. If the government does not intervene and the whistleblower pursues the case independently and wins, the share can be as high as 30%.
This creates a situation where a billing staff member who notices that the practice is consistently upcoding, a coder who is told to use diagnosis codes that do not match the documentation, or a nurse who knows that services are being billed under a physician’s name when the physician was not present can file a qui tam complaint and trigger a federal investigation.
The complaint is filed under seal, meaning the practice does not know about it. The government investigates quietly, sometimes for two or three years, gathering evidence before deciding to intervene. By the time the practice learns about the lawsuit, the government has already reviewed claims data, interviewed witnesses, and built a case.
How the Government Identifies Targets
Beyond whistleblower complaints, the government uses data analytics to identify practices with billing patterns that deviate from peers. The Office of Inspector General and CMS both maintain databases that track billing volumes, code distributions, and reimbursement amounts by provider and specialty.
A practice that bills a disproportionately high percentage of level 5 E/M codes compared to its specialty peers will stand out. A provider who consistently bills modifier 25 on every visit that includes a procedure will stand out. A practice whose average reimbursement per patient is significantly higher than comparable practices in the same market will stand out.
These statistical outliers trigger reviews, and reviews can escalate into full investigations if the data suggests a pattern of overbilling.
The Cost of Getting Caught
FCA penalties are severe. Beyond the per-claim fines and treble damages, a practice found liable under the FCA may be excluded from Medicare, Medicaid, and other federal programs. For most practices, exclusion is a death sentence because it cuts off a significant portion of revenue.
Even without exclusion, the financial burden of an FCA settlement can be crippling. Settlements in the hundreds of thousands to millions of dollars are common, even for smaller practices. And the cost of defending against an FCA investigation, including legal fees, expert consultants, and internal audit expenses, adds up regardless of the outcome.
The reputational damage is also real. FCA settlements are public, and a practice’s name attached to a fraud settlement affects patient trust, referral relationships, and payer contract negotiations.
Protecting Your Practice
The single most effective defense against FCA liability is a functioning compliance program. That means regular internal audits of coding and billing accuracy, documented training for coding and billing staff, a system for reporting suspected errors without retaliation, and prompt refund of identified overpayments.
When a practice identifies a billing error, the worst thing it can do is ignore it. The FCA’s “reverse false claims” provision makes it a violation to retain an overpayment after discovering it. CMS requires that identified overpayments be reported and returned within 60 days.
Practices that work with billing partners experienced in compliance reduce their FCA exposure significantly. AAA Medical Billing Services builds compliance checkpoints into its billing workflows, including regular coding audits, denial pattern analysis, and documentation reviews that catch the types of errors that create FCA liability. Having a billing partner that treats compliance as a built-in function rather than an afterthought is one of the most practical steps a practice can take.
The False Claims Act is not going anywhere, and enforcement is increasing. Practices that invest in accurate billing, clean documentation, and proactive self-auditing stay out of the crosshairs. Those that do not are betting that no one will notice. And eventually, someone does.
