The Centers for Medicare & Medicaid Services (CMS)the agency that administers Medicarehas estimated that improper payments for Medicare fee-for-service (FFS) were $34.3 billion in fiscal year 2010. Because the program's complexity and size make it vulnerable to billions of dollars in improper paymentsover- and underpayments that should not have been madeGAO has designated it as a high-risk program. CMS and its contractors conduct activities to identify improper payments, including reviewing claims before and after payment. CMS contractors are also responsible for processing and paying approximately 4.5 million claims per work day, which makes the volume and cost to review the claims challenging.
Aspects of the Medicare program's design make it susceptible to improper payments and effective use of payment controls can help ensure that these improper payments are minimized. GAO found that improving automated review and better targeting of claims to review manually could help prevent improper payments.
Medicare is designed to pay claims promptly and the number of claims it receives limits the amount of possible review. CMS is generally required to pay electronic claims between 14 and 30 days from the date of receipt and the program now pays 4.5 million claims each work day. The amount of program payments that are made with minimal review has made Medicare a target for fraud, waste, and abuse that can result in improper payments. Medicare requires that covered services be reasonable and medically necessaryand of course, be provided as claimed. Since it was first estimated in 1996, Medicare's improper payment rate has been in the billions of dollars each year, although efforts to improve the methodology used for the estimate have made current year estimates noncomparable to any made before 2009. Prior to 1996, CMS had controls in place to try to minimize improper payments and beginning in fiscal year 1997, Congress provided funds specifically for CMS activities designed to ensure that claims are paid correctly. CMS allocates these funds to contractors that conduct a number of activities, including a limited amount of claims review, to help prevent or identify and address improper payments.
Despite agency efforts, CMS still faces challenges in designing and implementing internal controls to effectively prevent or recoup improper payments and to prevent fraud, waste, and abuse. Previous GAO products identified some specific weaknesses in the area of claims review and made recommendations to implement key strategies related to automating and targeting claims review that are particularly important to helping prevent fraud, waste, and abuse, and ultimately, to reducing improper payments. The claims review weaknesses identified include:
Prepayment review of claims did not identify atypical billing associated with fraud. Overall, less than 1 percent of Medicare's claims are subject to a medical record review by trained personnelso having robust automated payment controls in place that can deny inappropriate claims or flag them for further review is critical. However, GAO has found weaknesses in this area. Specifically, in 2007, GAO found that contractors responsible for reviewing claims from suppliers of durable medical equipment, prosthetics, orthotics, and supplies did not have automated prepayment controls in place to identify questionable claims that might suggest fraud, such as those associated with atypically rapid increases in billing or for items unlikely to be prescribed in the course of routine quality medical care.
Postpayment claims review was not focused on most vulnerable areas. Postpayment reviews are critical to identifying payment errors, recouping overpayments, or repaying underpayments. CMS's contractors have conducted limited postpayment reviewsfor example, GAO reported in 2009 that the contractors paying claims for home health care conducted postpayment reviews on fewer than 700 of the more than 8.7 million claims that they paid in fiscal year 2007. Further, GAO found they were not using evidence, such as findings from prepayment review, to target their postpayment review resources on providers with a demonstrated high risk of improper payments.
Regular cross-checking of claims for home health services with the physicians listed as prescribing them was not always done. CMS does not routinely provide physicians responsible for authorizing home health care with information that would enable them to determine whether a home health agency (HHA) was billing for unauthorized care. In one instance, a CMS contractor identified overpayments in excess of $9 million after interviewing physicians whose names and signatures appeared on referrals for beneficiaries with high home health costs. Some physicians indicated their signatures had been forged or they had not realized the amount of care they had authorized.
CMS's new national recovery audit contracting program, begun in March 2009, added to postpayment efforts; but not for fraud-prone claims. Recovery audit contractors (RAC) review claims after payment, with reimbursement to them contingent on the improper over- and underpayments identified. According to CMS, because RACs are paid fees contingent on the dollar value of the improper payments identified, RACs have focused on high-dollar claims from inpatient hospital stays, not other services prone to improper payment, such as home health services.
More targeted claims review could help reduce improper payments. While the potential for savings exists, the extent of savings realized would depend on the efforts taken to address weaknesses in the review process.
GAO continues to believe that CMS should address these previously made recommendations:
In addition, as GAO pointed out in 2010 testimony on Medicare fraud, waste, and abuse, because the RACs are focusing on review of hospitals, other contractors' postpayment review activities could be more valuable if CMS directed these contractors to focus on services where RACs are not expected to focus their reviews, and where improper payments are known to be high, specifically home health services.
The amount that could be saved from taking these actions has not been estimated and would depend on how they were implemented.
The information contained in this analysis is based on findings from the GAO reports listed under the "Related GAO Products" tab.
For additional information about this area, contact Kathleen King at (202) 512-7114 or email@example.com.
GAO has designated Medicare as a high-risk program since 1990, in part because the program's size and complexity make it vulnerable to fraud, waste, and abuse. Fraud represents intentional acts of deception with knowledge that the action or representation could result in an inappropriate gain, while abuse represents actions inconsistent with acceptable business or medical practices. Waste, which i...
The Centers for Medicare & Medicaid Services (CMS) conducted a mandated 3-year project from March 2005 through March 2008 to demonstrate the use of recovery audit contractors (RAC) in identifying Medicare improper payments and recouping overpayments. CMS implemented a mandated national RAC program, which began in March 2009. GAO was asked to examine specific issues that arose during the demonstrat...
GAO's work over the past several years has demonstrated that improper payments are a long-standing, widespread, and significant problem in the federal government. The Improper Payments Information Act of 2002 (IPIA) has increased visibility over improper payments by requiring executive branch agency heads, using guidance from the Office of Management and Budget, to identify programs and activities...
Medicare spending on home health totaled $12.9 billion in 2006, up 44 percent from 2002. Concerns have been raised that improper payments from practices indicating fraud and abuse may have contributed to Medicare home health spending and utilization. The Centers for Medicare & Medicaid Services (CMS), the agency that administers Medicare, is responsible for minimizing improper payments made on beh...
The Centers for Medicare & Medicaid Services (CMS)--the agency that administers Medicare--estimated that the program made about $700 million in improper payments for durable medical equipment, prosthetics, orthotics, and supplies (DMEPOS) from April 1, 2005, through March 31, 2006. To protect Medicare from improper DMEPOS payments, CMS relies on three Program Safeguard Contractors (PSC), and four...