Liability attaches to patterns and to reckless disregard, not only to intent. That is why undocumented write-off and coding practices matter more than they feel like they should — a practice that never checked can be treated as having chosen not to know.
Most people picture deliberate fraud. The statute is broader than that, and the gap between the picture and the reality is where practices get caught out.
The part that surprises people
Liability does not require intent to defraud. It can attach to acting in deliberate ignorance of the truth, or in reckless disregard of it. Not knowing is not automatically a defense — particularly where a reasonable process would have surfaced the problem.
Practically: "we did not realize" is weaker when nobody was checking, and weaker again when the same error repeated for years.
What tends to attract attention
- Patterns. A coding distribution well outside peers with no clinical explanation.
- Retained overpayments. Identified overpayments carry an obligation to return them within a defined window.
- Systematic documentation gaps behind services billed at a level the record does not support.
- Routine waivers of patient cost-sharing without a documented hardship basis.
Why undocumented practice is the risk
A written policy consistently applied is evidence of a reasonable process. The same practice applied inconsistently and unwritten looks like discretion exercised in your own favor — even when every individual decision was defensible.
That is the practical lesson: writing the policy down changes the character of the conduct, not just the paperwork.
The habits worth having
Written write-off and hardship policies. Credit balances reviewed monthly. Coding distribution compared against peers periodically. Overpayments returned rather than parked.
A specific concern belongs with healthcare counsel rather than with your billing company. But the operational disciplines are ordinary good practice regardless.
Outliers invite the question
Billing that sits well outside peer norms — a level of service billed far more often than comparable practices, a modifier used disproportionately — is not itself wrong. It is what prompts someone to look.
Knowing where you sit relative to peers is worth doing internally, because the alternative is learning it from someone else’s analysis.
Self-audit and then act
An audit that identifies a problem and produces no change is worse than none, because it establishes knowledge without remediation.
Where a review finds overpayments, the 60-day clock is running from that point. Build the remediation step into the audit plan rather than treating it as a separate decision.
Write down what you do
Consistent, documented practice is the difference between an explainable pattern and an unexplainable one. Write-off reasons, coding conventions, and who authorizes exceptions.
None of it is difficult. It is simply the sort of work that never feels urgent until it is the only thing that matters.
Whistleblower actions are how most cases start
A substantial share of these matters begin with a current or former employee rather than a government audit. That reframes the compliance question: the people best placed to notice a pattern are the ones working inside it.
An internal route to raise concerns, that visibly results in something happening, is a practical control rather than a formality. Practices where the answer to a raised concern is nothing are the ones where the concern goes elsewhere.
Damages are why it matters
Liability under the statute is not limited to repaying what was overbilled. Multiplied damages and per-claim penalties mean a pattern of modest errors across many claims can produce an outcome far larger than the amounts involved.
That asymmetry is the reason undocumented practice deserves more attention than its face value suggests.
What a reasonable program looks like for a small practice
Written coding and write-off policies. A periodic sample audit with the results acted on. A credit balance review each month. A route for staff to raise concerns. Documentation of decisions where a judgment call was made.
None of it requires a compliance officer or an external consultant. What it requires is that the documents describe what actually happens.
Self-disclosure is a real option
Where a self-audit finds a genuine problem, there are established routes for disclosing and repaying rather than waiting to be found. Those routes generally produce materially better outcomes than discovery through an audit or a whistleblower.
It is a decision to take with counsel, and the point worth knowing in advance is that the option exists — practices that do not know it frequently choose silence by default, which is the worst of the available paths.
Documentation is the whole defense
The recurring theme across every part of this is that the practice which wrote down what it does, applied it consistently, checked periodically and acted on what it found is in a fundamentally different position from one that did the same clinical work with none of that record.
The underlying billing may be identical. The exposure is not.
Common questions
- Do I have to intend fraud to violate the False Claims Act?
- No. Knowing includes actual knowledge, deliberate ignorance and reckless disregard of the truth, which is why not checking is not a defense.
- What attracts False Claims Act attention in a practice?
- Billing patterns that are statistical outliers, unreturned overpayments past the 60-day clock, and undocumented or inconsistent write-off and coding practice.
- Is an honest billing mistake a False Claims Act problem?
- A genuine isolated error generally is not. A pattern that continued because nobody looked is a different matter.
- What does the 60-day rule have to do with it?
- Failing to return an identified overpayment within 60 days can itself create liability, which is what turns unworked credit balances into exposure.
- What is the practical protection?
- Documented policies, consistent application, periodic self-audits, and acting on what those audits find. The audit that finds nothing and is filed is worth less than one acted on.
Denials Piling Up?
We handle the revenue cycle end to end — coding by certified coders, claim submission, denial management and appeals, and A/R follow-up, with six reported numbers every month.