Medicare Prevented $11.9B in Fraudulent Payments, FYs 2022–2024
Summary
GAO reviewed CMS's use of data analytics to prevent fraud in traditional Medicare from fiscal years 2022 through 2024. CMS used prepayment claims reviews, automated denials, overpayment recoveries, payment suspensions, provider revocations, and law enforcement referrals to counter fraud. The agency prevented an estimated $11.9 billion in potentially fraudulent payments over the three-year period, including $4 billion from a single urinary catheter scheme involving 15 providers whose enrollment was revoked.
“CMS estimates that from fiscal years 2022 through 2024, it prevented a total of $11.9 billion in potentially fraudulent Medicare payments by taking administrative actions on providers engaged in potential fraud.”
What changed
GAO published a high-risk program audit reviewing CMS's Medicare fraud prevention activities from FYs 2022–2024. CMS deployed data analytics to detect anomalous billing patterns and took administrative actions including prepayment denials, payment suspensions, and provider revocations. In the most significant case, 15 providers were suspended and later had their Medicare enrollment revoked for allegedly billing over $4 billion for urinary catheters that were never supplied. CMS shared information on payment suspensions with supplemental payers beginning December 2025, after private plans and state Medicaid agencies had paid cost-sharing on potentially fraudulent claims.\n\nHealthcare providers participating in Medicare should note that CMS's data analytics infrastructure is actively identifying billing anomalies at scale. The report's findings on the catheter scheme and the estimated $11.9 billion in prevented payments signal that CMS's program integrity work has substantial reach and financial impact. Supplemental payers—including private Medicare Advantage plans and state Medicaid agencies—should review their cost-sharing verification procedures in light of the information-sharing changes noted.
Archived snapshot
Apr 21, 2026GovPing captured this document from the original source. If the source has since changed or been removed, this is the text as it existed at that time.
GAO-26-107799 Published: Mar 30, 2026. Publicly Released: Apr 21, 2026.
Fast Facts
We consider Medicare a high-risk program partly due to its fraud potential. Medicare uses data analytics to identify and prevent fraud. Data analytics can identify anomalous patterns—such as billing spikes—that might indicate fraudulent activity.
For instance, Medicare officials told us that data analytics helped them identify and suspend payments to 15 health care providers who allegedly billed for more than $4 billion worth of urinary catheters that were never supplied. Medicare estimates that it prevented a total of $11.9 billion in potentially fraudulent payments from FYs 2022-2024.
A view of the Centers for Medicare & Medicaid Services website through a magnifying glass, with the cursor on the Medicare button
Highlights
What GAO Found
GAO has designated Medicare a high-risk program due, in part, to its complexity and potential for fraud. Fraud schemes in traditional Medicare often focus on certain services, such as durable medical equipment. Fraudsters may use stolen or inappropriately obtained Medicare beneficiary identifiers to submit fraudulent claims for unneeded or never provided services.
The Centers for Medicare & Medicaid Services (CMS), which oversees Medicare, uses data analytics on claims in traditional Medicare to identify anomalous patterns indicative of emerging fraud schemes and potentially fraudulent behaviors, such as billing spikes. CMS uses these analytics to develop leads for investigations and to inform administrative actions that can prevent potentially fraudulent payments, such as suspending provider payments. For example, in 2023 and 2024, CMS suspended payments to, and later revoked the enrollment of, 15 providers involved in a scheme that allegedly billed Medicare for more than $4 billion in urinary catheters that were never supplied. Selected private payers GAO spoke with reported using data analytics in ways similar to CMS—namely, to identify anomalous provider billing patterns to generate leads for investigations and to inform actions like payment suspensions.
CMS estimates that from fiscal years 2022 through 2024, it prevented a total of $11.9 billion in potentially fraudulent Medicare payments by taking administrative actions on providers engaged in potential fraud.
Administrative Actions and Estimates of Potentially Fraudulent Payments Prevented by CMS, Fiscal Years 2022 through 2024
| Administrative action | Prevented payments (in millions) |
|---|---|
| Prepayment claims reviews | $27 |
| Automated prepayment denials | $132 |
| Overpayment recoveries | $652 |
| Payment suspensions | $2,579 a |
| Revocations and deactivations | $7,962 a |
| Law enforcement referrals | $554 b |
| Total | $11,906 |
| Source: GAO analysis of Centers for Medicare & Medicaid Services (CMS) data. | GAO-26-107799 |
Note: For more details, see Table 3 in GAO-26-107799.
a Projected amount of potentially fraudulent payments prevented based on estimated cost avoidance.
b Estimated amount in financial judgments that courts may order on behalf of Medicare.
In December 2025, CMS began sharing information about Medicare provider payment suspensions with supplemental payers—private plans and state Medicaid agencies that cover certain Medicare beneficiaries’ out-of-pocket expenses. CMS did not share such information previously. This lack of information sharing led some supplemental payers to pay beneficiary cost sharing on potentially fraudulent claims. Representatives of private payers estimated that private plans may have paid tens of millions of dollars in beneficiary cost-sharing for the urinary catheter scheme. GAO’s analysis found that state Medicaid agencies paid at least $196,000 in state and federal funds for cost-sharing payments for the urinary catheter scheme in 2023 and 2024.
Why GAO Did This Study
CMS is responsible for ensuring the integrity of the Medicare program and preventing and mitigating potential fraud.
GAO was asked to review CMS’s use of data analytics to prevent and reduce fraud in traditional Medicare. This report describes characteristics of common Medicare fraud schemes, CMS’s use of data analytics to identify Medicare fraud, and CMS’s estimates of potentially fraudulent payments it prevented; and examines the extent to which CMS shares information on payment suspensions with relevant entities.
GAO reviewed CMS documentation on its activities to prevent fraud and interviewed CMS officials and program integrity contractors that investigate Medicare fraud about common Medicare fraud schemes and their use of data analytics. GAO also analyzed CMS data on administrative actions and the extent of potentially fraudulent payments prevented for fiscal years 2022 through 2024. Data from 2024 were the most recent data available at the time of GAO’s review.
For additional context on CMS’s use of data analytics, GAO interviewed representatives of selected private health insurers and two organizations representing private payers about their use of data analytics. GAO also interviewed CMS officials and private payers about the sharing of information on payment suspensions with supplemental payers.
The Department of Health and Human Services provided technical comments, which GAO incorporated as appropriate.
For more information, contact Leslie V. Gordon, GordonLV@gao.gov, or Seto J. Bagdoyan, BagdoyanS@gao.gov.
Full Report
GAO Contacts
Leslie V. Gordon Director Health Care gordonlv@gao.gov
Seto J. Bagdoyan Director Forensic Audits and Investigative Service bagdoyans@gao.gov
Media Inquiries
Sarah Kaczmarek Managing Director Office of Public Affairs media@gao.gov
Public Inquiries
Topics
Health Care Fraudulent payments Information sharing Law enforcement Medicaid services Medical records Medicare fraud Program integrity Medicare Beneficiaries Medicaid
Multimedia
Podcasts
Preventing Fraud in Medicare
Tuesday, April 21, 2026
Mentioned entities
Related changes
Get daily alerts for GAO Reports
Daily digest delivered to your inbox.
Free. Unsubscribe anytime.
About this page
Every important government, regulator, and court update from around the world. One place. Real-time. Free. Our mission
Source document text, dates, docket IDs, and authority are extracted directly from GAO.
The summary, classification, recommended actions, deadlines, and penalty information are AI-generated from the original text and may contain errors. Always verify against the source document.
Classification
Who this affects
Taxonomy
Browse Categories
Get alerts for this source
We'll email you when GAO Reports publishes new changes.
Subscribed!
Optional. Filters your digest to exactly the updates that matter to you.