State-operated Medicaid Fraud Control Units (MFCUs) investigate and prosecute provider fraud and patient abuse in healthcare facilities receiving Medicaid funds. Operating independently, these law enforcement entities face increased federal scrutiny following recent compliance reviews and funding suspensions by federal regulators.
In Plain English: The Clinical Takeaway
- MFCUs are law enforcement entities that investigate and prosecute provider fraud and patient abuse or neglect.
- They investigate billing discrepancies like upcoding or double billing, but they do not investigate fraud or program abuse committed by beneficiaries.
- Federal regulators are currently increasing scrutiny, recently suspending funding for Hawaii’s and New York’s Medicaid Fraud Control Units.
The Structural Mandate and Independence of MFCUs
Federal law requires every state to operate a Medicaid Fraud Control Unit. These law enforcement entities are typically housed within the state Attorney General’s office, maintaining structural independence from the state Medicaid agency that runs the Medicaid program. These units employ teams of investigators, attorneys, and auditors to examine provider practices.
Provider fraud across all environments forms the main focus of an MFCU’s duties, along with investigating allegations of patient mistreatment within specific healthcare facilities funded by Medicaid, including nursing homes and hospitals.
Federal Oversight, Compliance Reviews, and Recent Funding Suspensions
As the Trump Administration continues to focus on addressing fraud, waste, and abuse in federal programs, including Medicaid, MFCUs are facing increased federal scrutiny. The HHS Office of the Inspector General (HHS-OIG) oversees MFCUs, assessing performance and compliance with federal requirements, and administering federal grant awards that cover 75% of MFCU operating costs.
In May 2026, CMS announced the HHS-OIG would be initiating a review of every state’s MFCU before its next annual recertification. Federal funding and recertification for the Medicaid Fraud Control Units of Hawaii and New York were revoked by the HHS-OIG in June 2026.
Investigative Pathways and Data Analytics in Fraud Detection
A MFCU case typically begins with a referral from the state Medicaid agency, managed care organization (MCO), or from a complaint filed by a patient or former employee. State Medicaid agencies or MCOs may initially detect fraud through monitoring Medicaid data to identify billing pattern anomalies, such as billing spikes, upcoding, double billing, or unusual hours.
In August 2026, the HHS-OIG waived the requirement that MFCUs obtain prior approval for data mining or analytics activities to identify suspected Medicaid fraud. Once an investigation is opened, the investigative team researches the alleged fraud or abuse by analyzing the evidence:
| Investigation Phase | Primary Activities | Potential Legal Outcomes |
|---|---|---|
| Investigation | Analyzing the evidence. | Case closure or formal advancement to criminal/civil proceedings. |
| Criminal Indictments & Civil Cases | Bringing criminal charges and/or civil lawsuits. | Establishment of legal liability and/or imposition of financial penalties and other court-ordered remedies. |
| Criminal Convictions & Civil Judgments | Securing convictions or judgments. | Incarceration, criminal record, financial penalties, and other court-ordered remedies. |
Future Trajectory of Program Integrity Enforcement
Evaluating overall Medicaid expenditures in relation to fraud recovery amounts, or contrasting MFCU performance metrics across jurisdictions, presents challenges because recovery statistics only reflect a fraction of program integrity measures—omitting metrics like thwarted payments or fraud prevention value—while failing to account for undetected fraudulent activity. As federal scrutiny deepens, state units must continue to operate under federal requirements to maintain operational funding.
References
- Centers for Medicare & Medicaid Services (CMS). Federal oversight and recertification guidelines for Medicaid Fraud Control Units.
- U.S. Department of Health and Human Services Office of the Inspector General (HHS-OIG). Annual reporting on state MFCU performance and grant administration.
Disclaimer: This article is for informational purposes only and does not constitute legal or medical advice. Readers suspecting Medicaid fraud or patient abuse should contact appropriate state or federal law enforcement authorities.
Keep reading
