California DME indictment and arrest identify claims and identity risks
Oct 11, 2026 edition · GC-2026-0173 · Published 2026-10-11 · Version 4 · Pending litigation
A federal indictment alleges that Nouman Mustafa and Mohsin Khan used successive shell DME companies to submit more than $3.5 million in Medicare claims. DOJ describes real beneficiary and physician information and shifts between companies after denials. The charges remain allegations, rather than convictions.
What happened
DOJ’s September 30 release reports a September 17 indictment of Nouman Mustafa and Mohsin Khan on healthcare-fraud and aggravated-identity-theft counts. Mustafa had been arrested at Los Angeles International Airport on February 11 while attempting to board a one-way flight to Pakistan; Khan was arrested September 29 in Bakersfield. According to the government’s account of court records, the defendants created DME companies between January 2025 and January 2026 that appeared legitimate but lacked locations where legitimate business could be conducted.
The government alleges that the companies quickly submitted more than $3.5 million in Medicare claims, using real beneficiary and physician information obtained through contacts abroad. A company was typically used for weeks or months until fraud-related denials began, followed by a shift to another entity. DOJ says the defendants retained approximately 30 percent of proceeds and sent the rest to their contacts. These are allegations describing a supplier-identity and claims pattern, not findings that every virtual supplier is improper. The defendants are presumed innocent; the release’s potential statutory penalties are not imposed sentences.
Scope and timing
- Authority status
- Pending litigation
- Applicability
- Operationally relevant
- Audience
- Health systems, Provider networks
- Jurisdiction
- Federal, California
Why it matters
Successive supplier identities can obscure a common claims pattern when reviewers examine companies separately. The allegations connect beneficiary and physician data, business operations and shifts following fraud-related denials.
Recommended action
Validate DME beneficiary identity, orders, delivery evidence and supplier ownership; monitor case developments without treating charges as findings of guilt.
Case details
- agencies
- U.S. Department of Justice
- entities
- Nouman Mustafa, Mohsin Khan
- action Type
- Criminal charge
- event Date
- 2026-09-29
- alleged Conduct
- The September 30 announcement describes a September 17 indictment and September 29 arrest in a DME Medicare scheme. Charges are allegations and no conviction is asserted.
- resolution
- Charges or complaint pending; no determination of guilt or liability.
Operational lessons
- Validate DME beneficiary identity, orders, delivery evidence and supplier ownership; monitor case developments without treating charges as findings of guilt.
Sources
- California DME indictment and arrest identify claims and identity risksOfficial · HHS OIG, official enforcement announcement · Source review 2026-10-11
- DOJ, DME indictment and arrests involving Nouman Mustafa and Mohsin KhanOfficial · U.S. Attorney’s Office, Eastern District of California · 2026-09-30 · Source review 2026-10-14
Complete edition and supplemental material
This finding in the complete approved report →Regulatory horizons, CIA trends and implementation trackers remain in the full report.
Read the entire Enforcement Briefing report →