Call Today! Free Immediate Response 818-781-1570

Blog

When Can Business Owners Be Liable In a Federal Healthcare Fraud Investigation?

Posted by Dmitry Gorin | Oct 02, 2026

Business owners in the healthcare sector—including clinic operators, lab directors, pharmacy owners, and executives of management services organizations (MSOs)—can face personal civil and criminal liability during a federal healthcare fraud investigation.

Federal enforcement agencies, including the Department of Justice (DOJ), the Department of Health and Human Services Office of Inspector General (HHS-OIG), the Federal Bureau of Investigation (FBI), and the Centers for Medicare & Medicaid Services (CMS), directly scrutinize corporate officers.

Corporate status does not automatically shield business owners from personal enforcement actions. If you are facing a criminal investigation, the federal criminal defense lawyers at Eisner Gorin LLP are here to help you. Schedule your consultation today. 

What Primary Federal Laws Expose Healthcare Business Owners to Personal Liability?

Personal liability for a healthcare business owner typically stems from three primary federal statutes.

1. The False Claims Act (31 U.S.C. §§ 3729–3733)

The False Claims Act (FCA) imposes civil liability on individuals and entities that knowingly present, or cause to be presented, false or fraudulent claims for payment to federal healthcare programs like Medicare, Medicaid, and TRICARE.

  • The "Knowledge" Standard: Owners do not need specific intent to commit fraud under the civil FCA. Liability applies if the owner has actual knowledge, acts in deliberate ignorance, or shows reckless disregard as to the falsity of claims submitted under their oversight.

  • Financial Exposure: Penalties include treble (triple) damages plus statutory civil monetary penalties exceeding $13,000 to $27,000 per individual false claim.

2. The Anti-Kickback Statute (42 U.S.C. § 1320a-7b(b))

The Anti-Kickback Statute (AKS) makes it a federal crime to knowingly and willfully offer, pay, solicit, or receive any remuneration (anything of value) to induce or reward patient referrals or the generation of business payable by federal healthcare programs.

  • The "One Purpose" Test: If one purpose of a financial arrangement or payment is to induce referrals, the entire arrangement violates the AKS.

  • Owner Risk: Business owners who structure compensation models, physician joint ventures, marketing contracts, or consulting agreements that cross into kickback territory face criminal felony charges carrying up to 10 years in prison per violation.

3. The Federal Healthcare Fraud Statute (18 U.S.C. § 1347)

The federal healthcare fraud statute criminalizes knowingly and willfully executing, or attempting to execute, a scheme to defraud any healthcare benefit program (both public federal programs and private commercial insurers).

  • Intent Threshold: Conviction requires proof of willful intent to defraud.

  • Criminal Penalties: Violations carry up to 10 years in prison per count, extending to 20 years if the violation results in serious bodily injury, or life imprisonment if it results in death.

Under What Operational Conditions Do Business Owners Face Personal Scrutiny?

Federal investigators frequently target healthcare business owners when systemic operational errors or improper financial arrangements occur. Personal liability usually develops through a three-stage progression:

  1. Business Owner Actions: Operational decisions such as outsourcing billing without oversight, setting percentage-based commission rules for marketers, or ignoring internal compliance audit warnings.

  2. Legal Knowledge Trigger: The owner's failure to investigate or address red flags can create the legal threshold of reckless disregard, deliberate ignorance, or failure to return identified funds under the 60-Day Rule.

  3. Personal Liability Consequences: Enforcement agencies bypass corporate shields to pursue treble penalties under the Civil False Claims Act, criminal prosecution under 18 U.S.C. § 1347, or federal program exclusion through HHS-OIG.

  • Outsourcing Billing to Third-Party Vendors: Delegating coding and billing to an outside firm does not eliminate an owner's liability. Under Medicare billing rules, claims are submitted under the provider's or facility's identifiers. Owners who fail to monitor vendor activities can be held liable under a "reckless disregard" standard.

  • Retaining Unearned Credit (Reverse False Claims): Under the 60-Day Rule (42 U.S.C. § 1320a-7k(d)), if a business owner identifies a billing overpayment and fails to report and return it within 60 days, the retention becomes an independent violation under the False Claims Act.

  • Improper Relationships with Marketers and Sales Representatives: Paying 1099 independent sales reps percentage-based commissions for generating patient leads or lab orders often violates the Anti-Kickback Statute.

  • Failure to Enforce Corporate Compliance Programs: Owning a business with a written compliance manual on a shelf offers no legal defense if executives actively ignore internal red flags, compliance officer warnings, or hotline reports.

What Are the Differences Between Civil, Criminal, and Administrative Exposure?

Enforcement Mechanism

Legal Standard / Burden of Proof

Primary Sanctions & Consequences

Criminal Prosecution (18 U.S.C. § 1347, AKS) Beyond a Reasonable Doubt; Requires proof of willful or knowing intent. Federal prison sentences, criminal fines, asset forfeiture, and restitution orders.
Civil Litigation (False Claims Act) Preponderance of the Evidence; Requires deliberate ignorance or reckless disregard. Treble (3x) government damages, statutory per-claim civil penalties, and investigative costs.
Administrative Actions (HHS-OIG & CMS) Preponderance of Evidence / Administrative Finding. Exclusion from Medicare/Medicaid programs, license revocations, and Corporate Integrity Agreements (CIAs).

Hypothetical Example: How a Non-Practitioner Owner Incurs FCA Liability

Consider Apex Diagnostic Laboratory LLC, owned 100% by a non-physician business owner, Jane Doe.

  1. The Scenario: Apex contracts with a third-party billing company to manage its Medicare reimbursement requests. To increase revenue, the billing vendor begins "unbundling" comprehensive lab panels into individual test codes and "upcoding" routine blood screens to higher-reimbursement diagnostic categories.

  2. The Red Flag: Apex's internal compliance auditor sends Jane an email stating: "Our reimbursement per panel has doubled over 90 days. The billing vendor is unbundling routine screens, which appears improper."

  3. The Owner's Action: Jane does not read the audit attachments, does not consult legal counsel, and tells the auditor, "Let the billing company handle the billing; that is what we pay them for."

  4. The Investigation & Personal Liability: The DOJ receives a qui tam (whistleblower) lawsuit filed by a former billing clerk.

Outcome: Federal prosecutors name Jane Doe personally alongside Apex Diagnostic Laboratory. Under the False Claims Act, Jane cannot claim lack of direct involvement. Her failure to act after receiving the compliance auditor's email constitutes reckless disregard. Jane and Apex face joint and several liability for triple the total overpayment amounts plus statutory per-claim penalties.

Frequently Asked Questions (FAQs)

Can a business owner be charged if they did not personally code or submit Medicare claims?

Yes. Under the False Claims Act, anyone who "causes to be presented" a false claim can be held liable. If an owner establishes improper incentives, instructs staff to meet inflated billing quotas, or acts with reckless disregard toward billing practices, they are personally exposed.

What is the difference between civil reckless disregard and criminal intent in healthcare fraud?

Criminal healthcare fraud requires the government to prove beyond a reasonable doubt that the owner acted "knowingly and willfully" to deceive. Civil False Claims Act liability does not require criminal intent; it only requires showing that the owner had actual knowledge, acted in deliberate ignorance, or demonstrated reckless disregard for the truth.

Does having an LLC or corporate structure protect owners from healthcare fraud charges?

No. Corporate entities (LLCs, corporations) do not shield officers, managers, or owners from personal liability for their own torts, statutory violations, or criminal acts. The DOJ routinely names healthcare executives individually in civil and criminal complaints.

How does the 60-Day Rule create personal liability for healthcare business owners?

Under 42 U.S.C. § 1320a-7k(d), any person or entity that receives an overpayment from a federal healthcare program must report and return it within 60 days of identification. If an owner learns of a systematic billing error and fails to refund the money within 60 days, retaining those funds becomes a "reverse false claim," subjecting the owner to civil penalties.

What is OIG Exclusion, and how does it impact a business owner's career?

The HHS Office of Inspector General (OIG) can exclude individuals convicted of healthcare fraud offenses from participating in all federal healthcare programs. An excluded owner cannot bill Medicare or Medicaid directly, nor can they manage, own, or advise any healthcare entity that receives federal healthcare funds.

Can paying 1099 independent contractors for sales referrals lead to federal liability?

Yes. Paying independent 1099 marketers percentage-based or volume-based compensation for generating Medicare or Medicaid referrals directly violates the federal Anti-Kickback Statute. The statutory safe harbors that protect regular W-2 employees generally do not apply to independent 1099 contractors.

How We Can Help You

Navigating a federal healthcare fraud investigation requires swift, strategic intervention to mitigate criminal and civil exposure.

  • Targeted Internal Audits & Investigations: Conducting privileged compliance assessments to identify billing irregularities, unreturned overpayments, or potential Anti-Kickback vulnerabilities before enforcement agencies intervene.

  • DOJ & OIG Defense Representation: Representing business owners, executives, and practice entities during Civil Investigative Demands (CIDs), grand jury subpoenas, and federal whistleblower (qui tam) lawsuits.

  • Overpayment Self-Disclosures: Guiding clients through the HHS-OIG Provider Self-Disclosure Protocol or CMS Voluntary Self-Referral Disclosure Protocol to resolve identified issues while minimizing statutory penalties.

The federal criminal defense attorneys at Eisner Gorin LLP are available to assist you. To schedule a consultation, please call (818) 781-1570 or complete the contact form. Our law firm is based in Los Angeles.

Related Legal Topics

About the Author

Dmitry Gorin

Dmitry Gorin is a State-Bar Certified Criminal Law Specialist, who has been involved in criminal trial work and pretrial litigation since 1994. Before becoming partner in Eisner Gorin LLP, Mr. Gorin was a Senior Deputy District Attorney in Los Angeles Courts for more than ten years. As a criminal tri...

We speak English, Russian, Armenian, and Spanish.

Attorney Dmitry Gorin If you have one phone call from jail, call us! If you are facing criminal charges, DON'T talk to the police first. TALK TO US!

CALL TOLL-FREE
(818) 781-1570
Anytime 24/7

Menu