How to Report Healthcare Fraud or Abuse: A Step-by-Step Guide

Reporting fraud or abuse related to your healthcare benefits provider isn't just about protecting your own wallet. It helps keep your employer's plan healthy and the whole system honest. Fraud and abuse show up in a lot of ways: billing for services you never got, upcoding, kickbacks, or even identity theft. Because employee benefits fall under laws like ERISA, HIPAA, and the Affordable Care Act, there are clear channels to report suspicious activity. The steps below cover what to document, who to tell, and what happens next.

What Counts as Healthcare Fraud or Abuse?

Before you report, you need to know what you're dealing with. Common examples include:

• Billing for services not provided: Charges for appointments, tests, or procedures you never got.
• Upcoding: Billing for a pricier service than what was actually done.
• Unbundling: Breaking apart services that should be billed together to jack up charges.
• Kickbacks: Providers getting paid for sending you to certain labs or pharmacies.
• Phantom prescribing: Prescriptions written without your knowledge, often through PBMs or pharmacies.
• Identity theft: Using your health info or insurance ID without permission.
• Abuse: Patterns of unnecessary care, like too many tests or overusing preventive benefits, that waste plan resources.

If you see unexplained charges on an Explanation of Benefits (EOB) or get bills for care you didn't authorize, those are red flags. Even in a system like WellthCare™, built on prevention and transparency, any billing oddity deserves a closer look.

Step 1: Gather Evidence

Before you file a report, collect documentation. It makes your case stronger and helps investigators move fast. What you need:

1. Copies of your EOBs showing suspicious charges.
2. Bills or receipts from the provider or pharmacy.
3. Dates, times, and descriptions of the suspected fraud or abuse.
4. Any emails or letters with the provider or benefits admin.
5. Your insurance ID card and policy number.

Don't alter or make up evidence. That's a serious offense too. If you think it's identity theft, lock your account down with your benefits administrator right away.

Step 2: Report Internally to Your Benefits Administrator

Most employer health plans, including self-funded ones working with TPAs or platforms like WellthCare Complete™, have an internal fraud hotline or compliance team. That route is usually the fastest. Start here:

• Contact your HR department: They can point you to the right reporting channel. Under ERISA, plan fiduciaries owe a duty of prudence, and that includes following up on credible fraud reports.
• Use your benefits portal: Many platforms, including WellthCare's app or web portal, have a secure messaging or reporting link.
• Check your plan document: The Summary Plan Description (SPD) usually spells out the fraud reporting process.

If your benefits admin doesn't respond, escalate to the third-party administrator (TPA) or the insurance carrier's fraud department. For self-funded plans, remember your employer is ultimately responsible for the plan's integrity.

Step 3: Report to External Authorities

For big stuff, like systemic fraud, identity theft, or federal law violations, you need to go outside. Here are the main agencies:

Federal Agencies

• Health and Human Services Office of Inspector General (HHS-OIG): For fraud involving Medicare, Medicaid, or other federal programs. File at oig.hhs.gov or call 1-800-HHS-TIPS.
• Federal Trade Commission (FTC): For identity theft or deceptive practices (like fake wellness program promises). File at identitytheft.gov or call 1-877-438-4338.
• Department of Labor (DOL): For ERISA violations, like mismanagement of plan assets, self-dealing by fiduciaries, or benefits denied because of fraud. File a complaint with the Employee Benefits Security Administration (EBSA).

State Agencies

• State Insurance Commissioner: If your provider is licensed in a state, file a complaint with that state's insurance department. They regulate providers and can revoke licenses.
• State Attorney General: For patterns of abuse that affect a lot of people, especially healthcare scams or fraudulent billing rings.

What Happens After You Report?

Once you file, the process usually follows this path:

1. Verification: The agency or admin reviews your evidence and may ask for more details.
2. Investigation: They look at billing patterns, interview people, cross-reference with plan data. In a system like WellthCare, where every health action is verified and recorded, investigators can cross-check billing against a documented chain of completed care.
3. Resolution: If fraud is confirmed, the provider could face penalties, repayment, suspension, or legal action. You may be told the outcome, but your personal info stays confidential.

Under HIPAA, your medical information is protected throughout, though investigators may review records to pursue a case. Employers and plan administrators can use aggregated, de-identified data to improve compliance and cut waste, which is a big advantage of health-to-wealth systems like WellthCare.

Protecting Yourself and Your Benefits

Fraud doesn't just cost plans money. It drives up costs for everyone in the plan, and inflated claims can push premiums higher for your employer. The benefits you value, from WellthCare Store™ reward dollars to retirement contributions, depend on a plan with clean, honest records. Report promptly, and you're not just protecting your own finances. You're helping keep costs down and outcomes better for everyone in the plan.

If you're in a transparent system with aligned incentives like WellthCare, your plan already has compliance-grade recordkeeping and automated tracking. WellthCare is the first Health-to-Wealth™ Benefit System that creates a transparent, verifiable chain for every health action, making fraud detection a natural byproduct of its compliance-grade design. Still, stay vigilant: review EOBs monthly, make sure your preventive care scans are credited correctly, and never share your insurance ID with unverified providers.

Retaliation Protections and Whistleblower Rewards

Reporting fraud shouldn't cost you your job. The False Claims Act (31 U.S.C. section 3730(h)) bars retaliation against workers who raise fraud concerns about Medicare, Medicaid, or other federal programs. ERISA section 510 (29 U.S.C. section 1140) bars retaliation against employees who exercise rights under an employer plan or take part in a plan investigation. Section 1558 of the Affordable Care Act adds protection for employees who report violations of the law's health insurance reforms. If you face retaliation after reporting, these laws give you a path to seek reinstatement and back pay, and retaliation complaints under the ACA can be filed with the Occupational Safety and Health Administration.

There is also a financial incentive for reporting fraud against federal healthcare programs. Under the False Claims Act's qui tam provision, a private citizen can sue on the government's behalf. If the government intervenes, the whistleblower can receive 15 to 25 percent of the amount recovered. If it declines to intervene, the share rises to 25 to 30 percent. In fiscal year 2024, False Claims Act settlements and judgments exceeded $2.9 billion, with more than $1.6 billion of that from healthcare cases.

When in Doubt, Say Something

Healthcare is complicated, and fraud can be subtle. If something feels off, even if you're not sure, report it. You can often report anonymously through hotlines. Employers, brokers, and benefit platforms like WellthCare all want to keep the system honest. Remember: Transparency, compliance, and trust are non-negotiable, and your report helps keep that standard.