Healthcare Billing Fraud
Patients are charged for services never rendered, billed for more expensive treatments than received, or enrolled in programmes without consent — leaving them with inflated medical bills.
Last reviewed: 1 June 2026
What this scam is
Healthcare billing fraud occurs when patients receive invoices or insurance claims for medical services they did not receive, for services billed at a higher level than was actually provided, or for services added to their account without their knowledge or consent. While some billing fraud is perpetrated by criminal organisations using stolen patient identities, a significant portion involves practices within the healthcare system itself — including upcoding, unbundling, phantom billing, and unnecessary procedure referrals — that directly inflate the amount a patient or their insurer is required to pay.
Patients are often the last to discover billing fraud because many do not receive itemised bills, do not read the explanation of benefits sent by their insurer, or assume that a bill from a healthcare provider reflects accurate clinical records. The discovery typically comes when a claim exceeds policy limits, when a collections notice arrives for a service not received, or when a patient requests their full medical records and finds entries they do not recognise.
The financial consequences range from overpayments on copays and deductibles to exhausted insurance benefits that leave the patient without coverage for legitimate future needs. Where the fraud involves services that were supposedly performed but were not, there is also a clinical risk: a patient's records may show a diagnosis or treatment that did not occur, which can affect future clinical decision-making.
How it works
Common patterns include phantom billing — charging for procedures or tests that were never carried out; upcoding — billing a higher-complexity or higher-cost service code than the service actually provided; unbundling — splitting a single procedure into multiple billable components to increase the total charge; and unnecessary procedures — performing or billing for tests or referrals that serve no clinical purpose but generate revenue.
Patients may also be enrolled without clear consent into recurring programmes such as remote monitoring, wellness subscriptions, or supplementary care plans that generate monthly charges.
These practices may occur in isolation or as part of a coordinated scheme. In some cases, patients are actively solicited by operators — via cold calls, door-to-door visits, or community events — to submit their insurance details in exchange for 'free' health screenings or equipment. The submitted details are then used to bill for a range of services or products the patient did not need and sometimes did not receive.
In remote billing schemes, stolen patient identities are used to submit large volumes of claims to insurers without any patient interaction at all.
Why this scam works
Healthcare billing is complex, opaque, and uses codes and terminology inaccessible to most patients. The assumption that a bill from a medical institution must be correct, combined with the emotional difficulty of challenging a healthcare provider, means that overbilling often goes undetected and unchallenged.
Insurers also bear a significant share of the loss, which means the patient may not feel the direct impact of every inflated charge — particularly for those with comprehensive coverage. This reduces the incentive to scrutinise bills carefully.
A typical pattern
A patient receives an explanation of benefits from their insurer showing a claim for a consultation at a date when they were admitted for a different condition. The claimed consultation is with a specialist they did not see during that admission. Their insurer has paid the claim, reducing their available annual benefit. On requesting their full medical record, they find a signed consultation note for a date and time inconsistent with their documented whereabouts. The patient and their insurer file a complaint with the provider's compliance department.
Common red flags
- Bill contains services, dates, or providers you do not recognise
- Explanation of benefits shows claims you did not authorise
- Unsolicited offer of free equipment or screenings in exchange for insurance details
- Annual insurance benefit exhausted more quickly than expected
- Denied legitimate claim citing a benefit maximum you thought you had not reached
- Collection notice for a medical bill you have no record of
- Enrolled in a recurring programme or subscription you did not request
Sanitized example messages
Illustrative, sanitized examples. Personal details are replaced with placeholders such as [phone number] and [fake link].
You qualify for a free [device] through your insurance. Please provide your member ID and date of birth to process your application: [fake link]
A free wellness screening is available in your area. Bring your insurance card to receive [amount] worth of health tests at no cost: [fake link]
Your doctor has referred you for a remote monitoring programme. Your insurer covers the full cost — confirm your details at [fake link]
Common variations
- Phantom billing — charges for services never provided
- Upcoding — lower-complexity services billed as higher-cost procedures
- Unbundling — single procedures split into multiple billable line items
- Unnecessary procedure referral — clinically unjustified tests or treatments ordered for billing purposes
- Community screening identity harvest — free screening used to collect insurance details for fraudulent billing
- Remote monitoring enrolment fraud — patients enrolled without consent in billable programmes
How to verify before you act
Request an itemised bill from any healthcare provider after receiving treatment. An itemised bill lists every service, procedure, medication, and supply by code and description. Compare this against your clinical notes and your own recollection of what services you received.
Request your explanation of benefits from your insurer for any period where you received treatment. This document shows every claim submitted in your name. Any service you do not recognise warrants investigation with the provider.
If you are offered free health screenings, equipment, or wellness services by organisations you did not approach, be cautious about providing your insurance details — particularly for unsolicited community-based programmes.
In the US, the OIG (Office of Inspector General) and state Medicaid fraud control units can be contacted to report suspected billing fraud. In the UK, NHS Counter Fraud Authority (NHSCFA) investigates fraud against the health service.
Payment methods used
- Insurance billing (primary mechanism — patient may not pay directly)
- Copay collection on inflated bills
- Direct debit enrolment in unrequested programmes
Who is usually targeted
- People with comprehensive health insurance
- Elderly patients with Medicare or equivalent state programmes
- Patients recovering from complex procedures with multiple provider bills
- People who do not read their explanation of benefits statements
What to do immediately
- Request an itemised bill from the provider for all charges you are questioning
- Contact your insurer's fraud department and provide details of any claims you do not recognise
- File a complaint with the healthcare provider's compliance or patient services department in writing
- Report suspected billing fraud to your national healthcare fraud authority
- Monitor your annual insurance benefit usage for unexplained reductions
- If you shared insurance details with an unsolicited programme, alert your insurer immediately
How to prevent it
- Always request an itemised bill and check it against your recollection of the services received
- Read every explanation of benefits statement your insurer sends
- Never provide your insurance member ID in response to unsolicited contacts
- Query any charge or claim you do not recognise promptly — do not ignore unexplained bills
- Maintain your own record of clinical appointments and the services discussed
- Report unexplained claims to your insurer's fraud team rather than assuming they are clerical errors
Evidence to preserve
- Itemised bills and explanation of benefits statements
- Your own clinical notes and appointment records
- Any written or email communications with the provider
- Records of unsolicited contacts requesting your insurance details
- Insurance card and policy details as they were at the time of the alleged service
Where to report it
- Action Fraud (UK) — UK national fraud & cybercrime reporting centre
- FTC ReportFraud (US) — US Federal Trade Commission fraud reports
- FBI IC3 (US) — US Internet Crime Complaint Center
- Scamwatch (Australia) — Australian competition & consumer reporting
- Your bank's fraud line — Use the number on the back of your card or in your banking app — never a number the caller gives you
Always verify reporting routes and emergency contacts on the official government or agency website for your country.
Frequently asked questions
How do I get an itemised medical bill?
Contact the healthcare provider's billing department and specifically request an itemised statement showing every charge by procedure code, date, and description. You are entitled to this in most jurisdictions and it is the primary tool for identifying overbilling.
My insurer paid the claim — does that mean it was legitimate?
Not necessarily. Insurers process large volumes of claims and do not verify every one before payment. A paid claim is not confirmation that the service was actually provided. If you see a claim on your explanation of benefits that you do not recognise, report it to your insurer's fraud team regardless of its payment status.
Who do I report healthcare billing fraud to?
In the US, report to the OIG Hotline (1-800-HHS-TIPS) for Medicare and Medicaid fraud, and to your insurer's fraud unit for private insurance. In the UK, report to the NHS Counter Fraud Authority (NHSCFA) or to your CCG/ICB. In all cases, also report to your national consumer fraud authority.
Can I be held responsible for bills resulting from fraud on my account?
As a victim of fraud you are generally not financially responsible for services fraudulently billed in your name. Document the fraud, report it to your insurer and the relevant fraud authority, and follow their dispute process. Protect your insurance details to prevent recurrence.