Medicare & MedicaidBack to stories →
← Back to stories
Audits & program integrityNew in this edition

OIG finds $72 million in MA and Part D payments tied to excluded or felony-convicted providers

OIG identified $72 million in Medicare Advantage and Part D payments associated with 249 revoked NPIs absent from the Preclusion List. The brief describes timing, ownership and pharmacy-related gaps. It issues no specific recommendations and does not classify every payment as proven fraud.

Illustrative artwork. Fictional scene, not a photograph of the people or events in this story.

What happened

An HHS OIG data brief issued September 28 and posted October 1 examines vulnerabilities in CMS’s provider-preclusion process. OIG reviewed 1,017 National Provider Identifiers associated with providers revoked from Medicare Parts A and B but absent from the Preclusion List during 2022 and 2023. It identified $72 million in Part C and Part D payments for services associated with 249 of those NPIs during 2022 through 2024. The Preclusion List concerns payments under Medicare Advantage and Part D; it is not simply another name for every Medicare enrollment or exclusion record.

OIG identifies delays and errors in adding or removing providers, organizations not listed when their owners were excluded or had specified felony convictions, and the regulatory treatment of pharmacies that fill prescriptions without prescribing. Those dispensing-only pharmacies were not subject to preclusion under the regulations described in the brief. The agency presents these as process vulnerabilities that may inform future regulations and guidance, and makes no specific recommendations to CMS. The figures do not establish that each associated claim was fraudulent or that CMS has ordered recovery of the entire amount. Operational follow-up must distinguish enrollment revocation, exclusion, preclusion and the facts of particular payments.

Scope and timing

Authority status
Announced
Applicability
Operationally relevant
Audience
Health systems, Provider networks
Jurisdiction
Federal
Affected functions
Provider Enrollment, Managed Care, Compliance, Revenue Cycle
Responsible owner
Provider Enrollment

Why it matters

A single screening list may miss material provider-status changes. MA, Part D, delegated networks and payment vendors need coordinated enrollment and exclusion controls.

Implementation playbook

  1. Reconcile relevant provider status across enrollment, exclusion and preclusion sources. Investigate discrepancies, document the payment analysis and escalate repayment questions without treating the report as a blanket recoupment order. Provider Enrollment · Due 2026-10-09
  2. Record the applicability assessment and validate the affected workflow with its operational owner. This is an internal review target, not an additional statutory deadline. Compliance · Due 2026-10-12

Sources

Complete edition and supplemental material

This finding in the complete approved report →

Regulatory horizons, CIA trends and implementation trackers remain in the full report.

Read the entire Medicare & Medicaid report →

← Return to stories

Privacy preferences

Where enabled for this site, Cloudflare Web Analytics can send page-use and performance measurements to Cloudflare. This panel provides information and does not turn analytics on or off.

This panel stores no tracking choice and does not change your tool saves, screening, resets, reports or exports. Other sites have separate settings.

Read Privacy & Cookies