One million Americans' Medicare numbers, and a $10.6bn catheter claim

Why this case matters

Most health care fraud is a billing crime between a provider and an insurer, and no individual notices.

Two of the cases in this takedown are different, and they are why this scheme has a page on a site about scams rather than about corporate crime.

More than one million Americans’ identities, allegedly used to bill Medicare $10.6 billion for urinary catheters and other equipment. And a $703 million scheme in which the alleged mechanism for proving that beneficiaries had agreed to receive products was AI-generated recordings of them saying so.

What the numbers are, and are not

$14.6 billion is intended loss — what was allegedly billed, not what was taken. In Operation Gold Rush the distinction is stark: approximately $10.6 billion in claims, approximately $900 million actually paid, and approximately $4.41 billion prevented by HHS-OIG and CMS. In the Illinois case, $703 million claimed and approximately $418 million paid.

Those three numbers — claimed, paid, prevented — are routinely collapsed into one in reporting, and they mean different things. We record all three because the gap between them is the measure of how well the system worked.

The takedown itself: 324 defendants, 96 of them licensed medical professionals, across 50 federal districts and 12 state attorneys general’s offices. Over $245 million seized. Billing privileges suspended or revoked for 205 providers. The largest such action in the Justice Department’s history, more than doubling the previous $6 billion record.

Why your Medicare number is worth stealing

The consumer-facing lesson sits inside the identity theft figure.

A Medicare number is not a credential you use to spend money. It is a credential someone else uses to bill money — repeatedly, for years, without the number’s owner being involved in any transaction. There is no purchase for the beneficiary to notice, no statement they were watching, and often no consequence they experience at all until a claim they need is denied because the limit was already used.

That is what makes it different from a stolen card. A card gets cancelled when the fraud shows up. A Medicare number is not cancelled, cannot easily be changed, and the fraud shows up in a system the beneficiary does not read.

Which is why “never give your Medicare number to anyone who contacts you” is not the fussy advice it sounds like. The number is the product.

The AI consent recordings

The allegation in the Illinois case is worth stating precisely: that defendants used artificial intelligence to create fake recordings of Medicare beneficiaries purportedly consenting to receive certain products.

The recorded consent call exists as an anti-fraud control. It is the artefact an auditor asks for to establish that a beneficiary agreed. The allegation is that the control was manufactured — which makes this one of the clearest documented examples on this site of a verification mechanism being defeated by generating the evidence it asks for.

The caveat

Everything above is an allegation. An indictment, information or complaint is merely an allegation, and all 324 defendants are presumed innocent until proven guilty beyond a reasonable doubt.