Under the Microscope: What CMS’s Fraud Crackdown and Rising Claim Denials Mean for Providers in 2026

Two forces are squeezing healthcare providers from opposite directions in 2026. From the regulatory side, CMS leadership is pursuing its most aggressive fraud and billing compliance campaign in years — revoking provider privileges, launching 50-state audits, and signaling that high-volume billing outliers will face consequences. From the operational side, claim denial rates continue to climb, driven by prior authorization complexity, documentation gaps, and new CMS payment models that extend pre-approval requirements into Traditional Medicare for the first time. For provider organizations managing financial stability this year, understanding both forces together is not optional.

The Enforcement Environment: What CMS Is Signaling

CMS Administrator Dr. Mehmet Oz has made fraud, waste, and abuse the most visible stated priority of his tenure. In February 2026, at a White House event alongside senior HHS leadership, CMS announced a formal anti-fraud campaign targeting Medicare and Medicaid programs. In April, CMS announced that Medicare billing authorization had been stripped from a Los Angeles physician, Dr. Rajiv Bhuva, in connection with approximately $71 million in alleged hospice charges. In a public statement accompanying the announcement, Oz wrote: “To all the fraudsters out there stealing from our seniors: run, don’t walk. Because we’re coming after you.”

The Bhuva case — which involves allegations under federal review and has not resulted in a criminal conviction — illustrates a specific enforcement pattern that CMS has identified as a priority area. According to federal authorities, hospice billing has drawn particular scrutiny, with regulators focused on providers allegedly enrolling patients who may not meet eligibility requirements. As one financial expert noted in commentary to Newsweek, while the average hospice physician in California is associated with approximately 140 patients annually, the provider under investigation was linked to a patient count in the thousands — a billing pattern that CMS is actively flagging as an anomaly warranting further review.

Earlier enforcement actions included the suspension of 221 providers in the Los Angeles area following a task force review of billing irregularities. As of April 21, 2026, CMS announced a 50-state audit requiring all states to submit plans for revalidating Medicaid providers within 30 days — the broadest geographic expansion of the compliance campaign to date.

According to CMS estimates cited in public statements, annual fraud in Medicare and Medicaid programs may approach $100 billion. CMS leadership has stated that addressing this figure could significantly extend the projected solvency of the Medicare trust fund — a claim that underscores why enforcement is framed not merely as a compliance exercise but as a structural financial priority for the program’s long-term viability.

A note on data integrity in the enforcement process: Recent reporting highlighted that CMS corrected figures used in connection with a fraud inquiry into one state’s Medicaid program, where initial data overstated program utilization by a significant factor. The episode illustrates an important operational reality for providers: in an environment of heightened enforcement, data accuracy runs in both directions. Just as CMS is intensifying scrutiny of provider billing data, providers should ensure that their own documentation and billing records are accurate, complete, and audit-ready — because data integrity concerns, once raised by either party, are difficult and costly to resolve after the fact.

What This Means for Compliant Providers

The practical impact of the enforcement environment on legitimate providers comes in three forms.

Increased scrutiny of billing outliers. CMS is actively monitoring providers whose claim volumes, patient-to-provider ratios, or service utilization rates deviate significantly from specialty norms. This applies not only to hospice but to any high-volume specialty with complex billing structures — radiology, home health, DMEPOS, and behavioral health are all areas with active CMS oversight programs. Providers whose billing patterns are statistically unusual, even for legitimate reasons, face elevated audit risk.

DMEPOS enrollment restrictions. CMS has blocked new Medicare enrollments for suppliers of durable medical equipment, prosthetics, orthotics, and certain other supplies for a six-month period to address fraud concerns — an operational constraint for health systems that supply or coordinate these services for patients.

Compliance program expectations have risen. The enforcement pattern suggests CMS will look not only at whether fraud occurred but at whether a provider’s internal monitoring systems should have detected irregular patterns earlier. Organizations with functioning compliance programs — including regular billing audits, clear escalation pathways, and documented corrective actions — are meaningfully better positioned in any audit scenario than those without.

The Denial Landscape: A Parallel Revenue Threat

While enforcement headlines dominate, the more pervasive day-to-day financial pressure for most provider organizations comes from claim denials, which have reached levels that now require structural — not reactive — management.

Current data from national surveys and federal reports illustrates the scope. Initial denial rates in Medicare Advantage settings average 15–17%, and commercial payer initial denial rates run at approximately 14%. Across ACA marketplace plans, nearly one in five in-network claims was denied in 2023. Hospitals collectively spent an estimated $19.7 billion attempting to overturn denied claims, and roughly 38–41% of providers now report denial rates at or above 10% of total claims.

The leading drivers are well-established: prior authorization errors, coding mistakes, missing medical necessity documentation, and administrative eligibility errors — incorrect member IDs, demographic mismatches, lapsed coverage. Together, these account for the large majority of preventable denials, most of which are correctable before claims are submitted.

On the Medicare side, 2026 introduced a significant structural change. CMS launched the Wasteful and Inappropriate Service Reduction (WISeR) model beginning January 1, 2026, extending prior authorization requirements into Traditional Medicare — not just Medicare Advantage — for selected services in six pilot states: Arizona, New Jersey, Ohio, Oklahoma, Texas, and Washington. The model runs through 2031. For providers in these states, this is the first time Original Medicare has required pre-approval for certain services, adding new front-end compliance requirements to what had previously been a post-payment review framework. Missing documentation, incorrect Unique Tracking Numbers, or misalignment with NCD/LCD criteria will now drive denials in Traditional Medicare just as they have long done in commercial settings.

Additionally, beginning in 2026, MA plans are required to publish prior authorization approval and denial rates for the first time, creating a transparency layer that will allow providers to identify plans with systematically elevated denial patterns and adjust negotiation and documentation strategies accordingly.

Practical Steps — and Where External Expertise Pays Off

The 2026 environment demands revenue cycle discipline at a level most provider organizations have not previously needed to sustain. Five areas merit immediate attention.

Strengthen front-end eligibility verification. Real-time insurance verification at the point of scheduling — not just at registration — catches coverage gaps before claims are created. This single process change eliminates a disproportionate share of preventable administrative denials. For many practices, the fastest path to this capability is working with a dedicated billing and verification partner rather than building it internally.

Build WISeR compliance workflows if operating in affected states. Providers in the six WISeR states need service-line mapping, documentation checklists aligned to NCD/LCD criteria, and clear triage protocols before claim submission. CMS has indicated a potential exemption process for high-performing providers who demonstrate consistent compliance — making early investment in clean submission rates strategically valuable over the model’s five-year run.

Automate prior authorization processes. Only 35% of health plans used fully electronic prior authorization systems as of a 2025 study, and provider-side adoption lags further. The CMS Interoperability and Prior Authorization Final Rule (CMS-0057-F) now mandates FHIR API connectivity for MA and commercial payers; practices still using fax-based PA workflows face both growing administrative burden and increasing denial exposure.

Treat denial pattern analysis as a standing management function. Monthly review of denial reason codes by payer, service line, and provider identifies systemic issues before they compound. Providers that review denial data reactively, after revenue is already lost, recover far less than those who use it prospectively to adjust workflow. An experienced revenue cycle partner can accelerate this process significantly by benchmarking a practice’s denial profile against comparable organizations.

Ensure compliance monitoring covers billing outliers. Internal compliance programs should include regular benchmarking of key billing metrics — volume, patient-to-provider ratios, and specialty-specific indicators — against national and regional norms. This is not about assuming wrongdoing; it is about ensuring that legitimate high-volume practices have the documentation infrastructure to withstand regulatory scrutiny when it arrives.

Working With WCH Service Bureau

The convergence of heightened CMS enforcement and rising denial complexity in 2026 creates a clear case for working with a specialized revenue cycle and compliance partner — one that understands both the regulatory environment and the operational realities of medical billing.

WCH Service Bureau provides end-to-end revenue cycle management services specifically designed for U.S. healthcare providers navigating this environment. These include insurance verification and eligibility services that eliminate administrative denials before claims are created; denial management and appeals services that recover denied revenue efficiently; prior authorization support aligned to current payer and CMS requirements; and compliance-oriented billing review that helps practices identify and correct documentation gaps before they attract regulatory attention.

In a year when CMS is actively expanding its fraud and audit infrastructure while denial rates continue rising, the providers best positioned to protect their revenue are those with expert support at every stage of the billing cycle — from initial eligibility check through final reimbursement. WCH Service Bureau offers that support.

To learn more or schedule a consultation, visit wchsb.com.

Sources

1. Newsweek, April 2026 — Medicare Administrator Issues New Warning. newsweek.com
2. HHS Press Room, February 25, 2026 — Trump Administration Prioritizes Affordability by Announcing Major Crackdown on Health Care Fraud. hhs.gov
3. AP / Philadelphia Inquirer, April 10, 2026 — Trump administration admits a glaring error in its New York health fraud accusations. inquirer.com
4. WSLS / AP, April 21, 2026 — Dr. Oz announces a 50-state audit of Medicaid program oversight. wsls.com
5. Aptarro, April 2026 — 50+ US Healthcare Denial Rates & Reimbursement Statistics for 2026. aptarro.com
6. Katten QuickReads, November 2025 — Medicare Launches Prior Authorization Pilot for Select Services in Six States: WISeR Model. quickreads.ext.katten.com
7. American Hospital Association, October 2025 — AHA Comments on CMS WISeR Model. aha.org
8. Georgetown University / Medicare Policy Initiative, 2025 — CMS Suspends New Medicare Advantage Prior Authorization Transparency Rules. medicare.chir.georgetown.edu
9. Practolytics, November 2025 — CMS Prior Authorization Changes for 2026: What Providers Must Know. practolytics.com