California DME indictment and arrest identify claims and identity risks
Oct 4, 2026 edition · GC-2026-0173 · Published 2026-10-04 · Version 2 · Pending litigation
A September 17 DME indictment and September 29 arrest concern alleged shell suppliers, stolen beneficiary and physician identities and shifting Medicare claims; charges remain unproven.
What happened
DOJ's September 30, 2026 announcement reports a September 17 indictment of Nouman Mustafa and Mohsin Khan on health care-fraud and aggravated-identity-theft counts. Khan was arrested September 29; Mustafa had been arrested on a criminal complaint in February. The differing dates should not be merged into one arrest event. The charges allege millions of dollars in fraudulent DME claims and remain accusations, with both defendants presumed innocent unless proved guilty.
The court-record account alleges that, from January 2025 through January 2026, the defendants created companies that appeared to be DME suppliers but lacked physical locations for legitimate business. They allegedly submitted more than $3.5 million in claims, moved to another company when denials arose and used real beneficiary and physician information obtained through contacts in Pakistan and elsewhere. The announcement describes retaining approximately 30 percent of proceeds and sending the rest to contacts. Those are allegations about supplier identities and claim generation, not findings that any particular beneficiary or physician knowingly participated. Supplier ownership and identity checks should therefore be coupled with order and delivery verification.
Scope and timing
- Authority status
- Pending litigation
- Applicability
- Operationally relevant
- Audience
- Health systems, Provider networks
- Jurisdiction
- Federal
Why it matters
A supplier identity that appears valid can conceal related shell entities and misuse of genuine patient or physician information.
Recommended action
Validate DME supplier ownership, locations, beneficiary identity, orders and delivery. Review rapid shifts after claim denials, while retaining the distinction between charges and proven conduct.
Case details
- agencies
- U.S. Department of Justice
- entities
- Nouman Mustafa, Mohsin Khan
- action Type
- Criminal charge
- event Date
- 2026-09-29
- alleged Conduct
- The September 30 announcement describes a September 17 indictment and September 29 arrest in a DME Medicare scheme. Charges are allegations and no conviction is asserted.
- resolution
- Charges or complaint pending; no determination of guilt or liability.
Operational lessons
- Validate DME beneficiary identity, orders, delivery evidence and supplier ownership; monitor case developments without treating charges as findings of guilt.
Sources
- California DME indictment and arrest identify claims and identity risksOfficial · HHS OIG, official enforcement announcement · 2026-09-29 · Source review 2026-10-04
- Official retained source documentOfficial · Official issuing agency · 2026-09-30 · Source review 2026-10-16
Complete edition and supplemental material
This finding in the complete approved report →Regulatory horizons, CIA trends and implementation trackers remain in the full report.
Read the entire Enforcement Briefing report →