CMS’s September 8, 2026 enforcement announcement involving 11 DMEPOS suppliers associated with more than $3.4 billion in suspected fraudulent Medicare billing should get the attention of healthcare providers and suppliers beyond the DMEPOS industry.

The significance is not only the size of the suspected billing. CMS also highlighted how it identified and acted on the conduct, including through data analytics, payment safeguards, enrollment authorities, and the Medicare Preclusion List.

For healthcare organizations participating in Medicare, the message is increasingly clear: program-integrity enforcement may begin with billing data rather than a traditional audit or whistleblower complaint.

CMS Is Looking at Billing Patterns

According to CMS, the suppliers involved showed billing patterns that included claims for deceased beneficiaries, equipment beneficiaries reported they did not request or receive, questionable relationships with ordering providers, and unusually concentrated billing activity.

These examples demonstrate why compliance cannot always be evaluated claim by claim.

An individual claim may appear supportable on its own, but broader patterns across an organization’s billing data may raise questions. Providers should consider whether they are seeing:

• Unusually rapid increases in claims volume or reimbursement

• High concentrations of claims involving particular products or billing codes

• Concentrated relationships with particular ordering providers

• Beneficiary complaints about products or services they did not request

• Gaps in proof of delivery or beneficiary consent

• Billing patterns that change significantly after operational changes

CMS and its program-integrity contractors can analyze this information across large volumes of claims, making overall billing patterns increasingly important to compliance reviews.

Marketing Arrangements Can Create Compliance Risk

CMS also highlighted a Florida supplier suspected of participating in a telemarketing arrangement involving the oversupply of equipment.

For DMEPOS suppliers, pharmacies, physician practices, and other healthcare organizations that use marketing companies or lead-generation vendors, outsourcing marketing does not eliminate the provider’s compliance responsibilities.

Organizations should understand how beneficiaries are identified, how consent is obtained, how orders are generated, and how marketers interact with ordering practitioners, suppliers, and beneficiaries.

Questions about these arrangements can become particularly important when billing activity appears inconsistent with patient demand or documented orders.

The Risk Extends Beyond DMEPOS Suppliers

Although the enforcement action focused on DMEPOS suppliers, the broader compliance lessons apply to other Medicare and Medicaid participants.

Healthcare organizations should consider reviewing their:

• Billing volume and reimbursement patterns

• Ordering-provider relationships

• Marketing and telemarketing arrangements

• Beneficiary complaints

• Documentation and proof of delivery

• Medicare enrollment information

• Ownership, address, and operational changes

• Prior regulatory or program-integrity actions

Providers should not wait for CMS or a Medicare administrative contractor to identify a potential problem.

A proactive review can help organizations identify unusual patterns and address compliance concerns before they develop into a formal enforcement matter. Organizations facing concerns about Medicare billing or reimbursement should also consider their payor audits exposure.

What Happens When CMS Takes Action?

Healthcare organizations may face a range of consequences when CMS identifies potential program-integrity concerns.

Depending on the circumstances, providers may receive a payment suspension, audit, revocation or termination notice, Medicare Advantage investigation, Preclusion List notice, or another program-integrity inquiry.

These actions can affect reimbursement and participation in government healthcare programs and may also create additional regulatory or licensing concerns.

Response and appeal deadlines can be short, making prompt evaluation important.

If CMS or another government agency has already initiated an inquiry, the matter should be approached as a potential government investigation rather than simply an administrative issue.

Why Early Review Matters

The CMS announcement illustrates the growing importance of understanding how an organization’s billing and operational practices may appear when viewed through large-scale data analysis.

Providers should evaluate potential areas of concern before receiving an enforcement notice whenever possible. A privileged review can help identify issues, assess potential exposure, and determine whether corrective action is appropriate.

Healthcare organizations may also benefit from strengthening their investigations and compliance processes so potential problems can be identified before they develop into enforcement matters.

If CMS or another government agency has already initiated an inquiry, the response should account for the possibility that the matter could extend beyond the initial issue.

How MDRXLAW Can Help

MDRXLAW represents healthcare providers and suppliers in Medicare and Medicaid enrollment matters, payment suspensions, audits, payer investigations, revocations, terminations, and other regulatory and program-integrity proceedings.

Organizations with questions about their billing practices, enrollment status, marketing arrangements, or potential exposure should consider obtaining legal guidance before a compliance concern develops into an enforcement action.

Contact MDRXLAW at info@mdrxlaw.com or 212.668.0200 to discuss your situation.