Fraud, Waste, and Abuse in Home Health Care: Detection and Reporting
Medicare and Medicaid together paid out roughly $1.3 trillion in 2022 (CMS National Health Expenditure Data), and home health has consistently ranked among the program areas with the highest rates of improper payments. Fraud, waste, and abuse in home care don't just drain public funds — they can directly harm patients by substituting fraudulent documentation for real clinical care. This page explains how federal and state authorities define these three distinct categories, what schemes look like in practice, how agencies and families can detect warning signs, and where to report concerns.
Definition and scope
The Department of Health and Human Services Office of Inspector General (OIG) distinguishes three related but legally separate concepts (OIG Fraud, Waste & Abuse Definitions):
- Fraud is an intentional act — knowingly submitting false claims, billing for services never rendered, or falsifying patient records to qualify for reimbursement. Criminal intent is the defining element.
- Waste involves the inefficient use of resources without deliberate deception — think redundant home visits that a care plan technically authorizes but a clinician schedules carelessly, or ordering equipment a patient will never use.
- Abuse falls in between: practices that are inconsistent with sound fiscal, business, or medical practices that result in unnecessary cost to Medicare or Medicaid, but lack the clear fraudulent intent required for a criminal finding.
The distinction matters enormously in practice. Fraud can result in federal criminal prosecution, civil monetary penalties up to $27,018 per false claim under the False Claims Act (DOJ Civil Division FCA Guidance), and program exclusion. Waste and abuse typically trigger administrative action — repayment demands, corrective action plans, and heightened auditing. The same billing anomaly can be evaluated as any of the three depending on what the evidence shows about intent and documentation.
Home health is a particularly high-exposure environment. The home health aide services that agencies provide occur inside private residences, largely without direct supervisory observation. That combination of intimacy, isolation, and Medicare's fee-for-service payment structure creates conditions where misconduct is easier to conceal than in a hospital or skilled nursing facility.
How it works
Most home health fraud exploits the gap between what documentation says and what actually happened in a patient's home. The federal payment model for Medicare home health — the Patient-Driven Groupings Model (PDGM), implemented in 2020 — bundles payment into 30-day periods based on clinical characteristics, functional status, and service use. Upcoding within that system means inflating a patient's OASIS assessment scores to push the episode into a higher-paying payment group, even when the patient's actual condition doesn't support it.
The mechanisms break down into three broad categories:
- Documentation fraud — falsifying OASIS assessments, forging visit notes, or creating records for visits that never occurred. CMS surveys have found that home health agencies with unusually high scores on specific OASIS items relative to regional peers are flagged for audit.
- Referral-based schemes — paying physicians or case managers kickbacks in exchange for referring patients to a specific agency, in violation of the federal Anti-Kickback Statute (42 U.S.C. § 1320a-7b(b)). CMS's home care regulations and federal policy framework makes referral-for-compensation one of the most heavily enforced areas.
- Patient recruitment fraud — soliciting Medicare beneficiaries who don't genuinely need home health services to accept visits they don't want or understand, in exchange for free transportation, gift cards, or cash.
Common scenarios
The OIG's annual Work Plan and enforcement actions document recurring fraud patterns in home health. The scenarios below represent enforcement-confirmed typologies, not hypotheticals:
- Ghost visits: An agency bills for skilled nursing or therapy visits — perhaps linked to physical therapy at home — that were never performed. Employees may sign off on visit logs without leaving the office.
- Unnecessary certification: A physician certifies homebound status for a patient who routinely leaves home without considerable effort, allowing the agency to bill Medicare for services that don't qualify under the homebound requirement.
- Therapy threshold manipulation: Under legacy PPS rules, agencies inflated therapy visit counts to hit thresholds that triggered higher payment — a pattern so widespread it influenced CMS's decision to move to PDGM.
- Upcoded diagnoses in PDGM: Agencies assign higher-acuity clinical groupings on OASIS by misrepresenting wound characteristics, behavioral symptoms in dementia and Alzheimer's home care cases, or medication management complexity.
- Durable medical equipment bundling: Some agencies steer patients toward affiliated DME suppliers and bill for equipment — hospital beds, wound care supplies — that duplicates what another provider already furnished or that the patient never receives.
Decision boundaries
Knowing when something crosses from an administrative error into a reportable concern is where most families, workers, and compliance staff get stuck. A few practical distinctions:
Error vs. fraud: A single miscoded diagnosis corrected on appeal is almost certainly administrative error. A pattern of the same miscoding across dozens of episodes, particularly after internal correction notices, suggests intent. The OIG's own guidance frames "pattern" and "knowledge" as the two variables that move a case from billing error to potential fraud.
Waste vs. neglect: Scheduling 5 skilled nursing visits per week for a stable, low-acuity patient is waste when the care plan doesn't clinically support it — but it may also be a patient safety signal that should prompt a review of the home care assessments and care plans process.
Who reports where: Suspected Medicare or Medicaid fraud is reported to the OIG Hotline at 1-800-HHS-TIPS or through the OIG's online form (OIG Reporting Portal). State-level Medicaid fraud falls under each state's Medicaid Fraud Control Unit (MFCU), with all 50 states and the District of Columbia operating certified units as of 2023 (OIG MFCU Annual Report). Physical or financial abuse of a patient — distinct from billing fraud — is reported through state Adult Protective Services, a process covered in detail at reporting home care abuse or neglect.
Families who suspect their loved one's Medicare coverage for home care is being billed incorrectly can also request an itemized Medicare Summary Notice directly from CMS and compare line items against what care was actually received. That document — which CMS mails quarterly — is one of the most underused detection tools available to beneficiaries.