The DOJ is Ramping up Enforcement to Reduce Healthcare Fraud: Why Your Sanctions Screening Must Be Continuous


June 25, 2026

This is Part 1 of a 2-part series. Read Part 2: Hidden Financial Ties, Federal Scrutiny: How IntegrityShield COI Keeps Healthcare Organizations Compliant

On April 30, 2026, the Department of Justice launched the West Coast Healthcare Fraud Strike Force and delivered a warning every healthcare compliance officer should heed. Assistant Attorney General Colin McDonald stated it plainly: “If you steal from the American taxpayer, the Department of Justice and our law enforcement partners will do everything possible to award you free housing in a federal prison. And we will not stop there. We will find the spoils of your fraud, take it from you, and give it back where it belongs, with the American people” [1].

The numbers behind that warning are staggering. Through the Strike Force program, the DOJ has charged more than 6,200 defendants who collectively billed federal healthcare programs and private insurers over $45 billion in fraudulent claims [1]. The 2025 National Health Care Fraud Takedown alone charged 324 defendants in connection with over $146 billion in alleged fraud [2]. Enforcement continues to accelerate.

For healthcare organizations, the question is no longer whether federal scrutiny will reach them. It is whether their compliance frameworks can withstand it when it does.

The Government’s New Enforcement Engine: Data Analytics and the Strike Force Model

What makes modern healthcare fraud enforcement so formidable? The Strike Force model is a cross-agency, data-driven approach that combines algorithmic detection with coordinated prosecution across multiple districts. The DOJ’s Health Care Fraud Unit deploys more than 75 experienced prosecutors, supported by dedicated data analysts who use advanced algorithms to identify emerging fraud patterns and target the most egregious offenders [3].

This model enables federal investigators to:

  • Identify anomalous billing patterns across millions of Medicare, Medicaid, and TRICARE claims
  • Cross-reference provider relationships against databases like CMS Open Payments
  • Track financial flows through complex corporate structures and shell companies
  • Detect coordinated schemes that span multiple providers, entities, and jurisdictions
  • Coordinate multi-district takedowns that dismantle entire fraud networks simultaneously

The West Coast Strike Force unites the FBI, HHS-OIG, DEA, CMS, IRS Criminal Investigations, Department of Labor OIG, USPS OIG, and multiple U.S. Attorney’s Offices under one coordinated enforcement umbrella [3]. With nine Strike Forces now operating nationwide and a historic $300 million grant program funding state and local prosecutors to join the effort, the DOJ has built an enforcement infrastructure that reaches every corner of the country [1].

AAG McDonald delivered a direct message to those exploiting weak compliance frameworks: “Our data analytics helps us know exactly who those people are, and we will be knocking on your door soon” [1].

This represents a critical shift. The government no longer waits for whistleblowers or reactive complaints. It proactively mines billing data, cross-references provider networks, and builds cases before organizations even realize they are under scrutiny. The compliance frameworks in place today will face judgment against what the government already knows, not what periodic audits discover later.

The Strike Force model has also proven its financial effectiveness. Since its inception, the program has charged defendants who billed over $45 billion in fraudulent claims, and it continues to expand [1]. The West Coast initiative alone adds at least 10 prosecutors from the Fraud Division’s Health Care Fraud Section, described as “a force multiplier” for regional U.S. Attorney’s Offices [1].

Real Cases, Real Consequences

The West Coast Strike Force announcement included concrete examples of this enforcement in action.

In Arizona, two wound graft company owners received sentences of 15.5 and 14 years for a $1.2 billion fraud scheme targeting Medicare and Medicaid wound care billing. The government seized $126 million in assets, including cash, luxury vehicles, and gold bars, and returned the funds to taxpayers. Patients endured unnecessary procedures, suffering what U.S. Attorney Timothy Korshine described as “the pain and humiliation of those procedures” [1].

In a separate $650 million Arizona Medicaid fraud case, perpetrators exploited vulnerable substance abuse patients by billing for services never rendered. Korshine noted that these patients “had no independent knowledge to verify that what their doctor was telling them was true” [1], a sobering reminder that healthcare fraud harms real people, not just government budgets.

Nevada prosecutors secured $94 million in indictments for amniotic wound allograft fraud. First Assistant U.S. Attorney Segal Chhabra highlighted the state’s vulnerabilities: rapid growth, with 40% of new residents being senior citizens and one in five residents reporting mental health issues [1]. Hospice fraud and behavioral health fraud, often involving patient neglect, false claims, and kickbacks, rank among the most prevalent schemes there.

In Northern California, authorities charged the founder of a Silicon Valley medical technology company in a $77 million COVID-19 and allergy testing fraud scheme (resulting in an 8-year sentence), and convicted the CEO and clinical president of a digital health company in a first-of-its-kind prosecution that applied drug trafficking statutes to a $100 million Adderall telehealth operation [1]. As U.S. Attorney Craig Missakian stated, “Innovation must be built on integrity, not on fraud” [1].

The Compliance Gap: Why Periodic Screening Is No Longer Enough

The DOJ explicitly identified “soft systems and soft protocols” as the vulnerabilities fraudsters exploit [1]. For many healthcare organizations, those soft protocols appear as annual or quarterly sanctions and exclusions screening, a practice that creates dangerous compliance gaps with serious financial and legal consequences.

Timing matters. If an individual appears on the OIG’s List of Excluded Individuals/Entities (LEIE) on January 2 and your organization screens annually on January 1, you face a full year of potential non-compliance. Every service billed during that period by or through an excluded individual can trigger civil monetary penalties (CMP), regardless of whether the organization knew about the exclusion [4]. Penalties apply per item or service, so a single excluded employee generating hundreds of claims can quickly produce six- or seven-figure exposure.

The OIG recommends checking the LEIE on a monthly basis at a minimum, and in connection with every new enrollment [4]. Yet even monthly screening leaves a 30-day compliance gap. In a high-stakes enforcement environment where federal investigators use real-time data analytics to flag anomalies, that gap becomes a significant liability.

The risk extends across your entire workforce and vendor network. Healthcare organizations must screen not only employees but also:

  • Contractors and temporary staff
  • Vendors and supply chain partners
  • Medical staff and credentialed practitioners
  • Prospective hires before onboarding

Each category creates a separate compliance exposure when screening remains periodic rather than continuous. A single excluded vendor submitting claims through your organization can trigger the same penalties as an excluded employee.

Outsourcing sanctions screening solves some problems but introduces others:

  • High recurring costs that scale poorly with organizational size
  • Dependency on third-party turnaround times that may not meet real-time needs
  • Limited integration with internal HR, credentialing, and billing systems
  • Loss of direct control over a core compliance function
  • Potential for coverage gaps when outsourced providers miss state-level exclusion lists

As James Maguire, Compliance and Privacy Officer at Atlas Healthcare Partners, described the situation before adopting smart compliance software: “I came from a large health plan, and we had a team of folks that managed Sanctions and Exclusions. It was very labor-intensive.”

The solution lies in automation.

IntegrityShield SES: Closing the Compliance Gap with Continuous Automated Screening

IntegrityShield SES delivers smart compliance readiness software purpose-built to eliminate the gaps that periodic and outsourced screening leave behind. Powered by robotic process automation (RPA) and machine learning, it provides 24/7/365 sanctions and exclusions screening at 90% less cost than outsourcing [5].

IntegrityShield SES screens against 63 sanctions and exclusions sources updated nightly, more than 440,000 total records [5]. This is not just the federal LEIE. It includes state Medicaid exclusion lists, OFAC sanctions lists, SAM.gov debarment records, and dozens of additional sources that manual checks often miss. The software screens all record types in one unified system:

  • Employees and prospective hires
  • Vendors and contracted service providers
  • Medical staff and credentialed practitioners
  • Contractors across your supply chain

Bidirectional automation sets it apart. When a sanctions source updates, the entire watchlist automatically re-screens against the new data each night. When the watchlist updates, new records immediately screen against all 63 sources. Once deployed, the software operates continuously with no manual intervention, no scheduled re-runs, and no compliance gaps. As the product’s core promise states: “Once deployed, always protected.” [5]

When a match occurs, IntegrityShield SES uses exception-based match management to ensure that only genuine compliance issues require your team’s attention:

  1. A real-time alert is sent immediately to designated compliance personnel
  2. Supporting evidence is provided with full match details and source documentation
  3. An automated workflow guides the remediation process step by step
  4. Every action is documented with 100% audit-ready evidence [5]

For false positives, a common pain point in traditional screening, IntegrityShield SES applies RPA and machine learning to resolve them efficiently. The system also learns from your decisions over time, reducing false positive volume and the labor burden.

Seamless integration strengthens existing systems rather than adding disconnected tools. It works directly with contract management, credentialing, and privileging platforms, and medical billing systems, enabling real-time checks before claims submission and during credentialing.

The software also supports ad hoc screening for prospective employees. It delivers real-time results during the hiring process so HR teams can identify exclusions before offers are extended, not after [5]. This capability eliminates the cost and disruption of rescinding offers and demonstrates due diligence at every stage of the hiring lifecycle.

In James Maguire’s words: “We’ve been elated… The SureShield software allows us to be nimble.”

Compliance Automation Is a Necessity, Not a Luxury

The DOJ’s West Coast Strike Force signals a permanent shift in federal healthcare fraud enforcement, one driven by data analytics, cross-agency coordination, and a clear focus on organizations that rely on “soft systems and soft protocols” [1].

Periodic screening is a soft protocol. Manual processes are a soft system. In today’s enforcement environment, they represent a documented liability that federal investigators actively target.

From the government’s perspective, the infrastructure already runs at scale: 75+ dedicated prosecutors, real-time data sharing across agencies, algorithmic scanning of millions of claims, and a $300 million grant program extending enforcement nationwide [1], [3]. The government’s compliance readiness tools operate continuously. The question is whether yours do too.

IntegrityShield SES transforms sanctions and exclusions screening from a periodic checkbox into a continuous, automated function that operates every hour of every day. With 63 data sources, 440,000+ records, 90% cost savings, and full audit readiness, it equips organizations for the enforcement era ahead [5].

Organizations that invest in robust compliance frameworks demonstrate good faith, a factor that matters when investigators arrive. Those that rely on periodic, manual processes signal the exact vulnerability the DOJ has pledged to pursue.

The DOJ has built the tools to detect healthcare fraud at scale. The real question is whether your compliance frameworks prevent it or position you as the next case example.

Start your free IntegrityShield SES trial today.

Related Resources:

  • IntegrityShield Suite Overview — Explore all IntegrityShield compliance modules
  • IntegrityShield 889B — Section 889 compliance for government contractors
  • OFAC Sanctions Requirement Guidance — Understanding OFAC Compliance Obligations
  • Continuous Vigilance as a Standard — Why continuous monitoring is the new baseline
  • SureShield Home — Security, Compliance, and Integrity solutions

References [1] U.S. Department of Justice. (2026). Fraud Division Launches West Coast Strike Force to Target Health Care Fraud Across AZ, NV, & CA [Video]. YouTube. Retrieved from https://www.youtube.com/watch?v=65chGHOE8nM [2] U.S. Department of Justice. (2025). 2025 National Health Care Fraud Takedown. Retrieved from https://www.justice.gov/criminal/criminal-fraud/2025-national-health-care-fraud-takedown [3] U.S. Department of Justice, Criminal Division. (n.d.). Health Care Fraud Unit. Retrieved from https://www.justice.gov/criminal/criminal-fraud/health-care-fraud-unit [4] U.S. Department of Health and Human Services, Office of Inspector General. (n.d.). Exclusions Program. Retrieved from https://oig.hhs.gov/exclusions/ [5] SureShield. (n.d.). IntegrityShield-SES: Continuous Sanctions and Exclusions Screening. Retrieved from https://sure-shield.com/integrityshield-ses/

 

Leave a comment

Your email address will not be published. Required fields are marked *