A public-interest watchdog & educational resource for California Medi-Cal members Not affiliated with the State of California or any health plan
For the people inside the plan · every claim sourced · not legal advice

The fraud is systemic. The liability is personal.

Written for the employees of Medi‑Cal managed care plans, and of the ASOs and vendors that run them, who have watched harm turn into a process and want to know what to do about it. Carefully.

See the record → How to come forward safely

If you only read one thing

Three things to hold on to

Start here

  1. Fraud that runs through a process is still fraud. The law does not require a villain. It requires a false claim, or a false record behind one, that somebody knew about or should have.
  2. The people inside the plan are the ones who can see it. The biggest managed care cases on record began with a finance analyst, a chief medical officer, a vendor who got cut off. Not with a regulator.
  3. Talk to a whistleblower attorney before you file anything. Not because you are in danger. Because you are valuable, and evidence handled the wrong way loses its value.

Why this page exists

Plausible deniability is a design, not a defense

The federal government opened a fraud fund in October 2026 and led with hospices, home health agencies and day cares. If you work inside a managed care plan, that is not the fraud you see.

What you see is a grievance that gets relabeled. An authorization that ages until the member gives up. A denial that goes out without the sentence about a State Fair Hearing, or does not go out at all. A provider directory that is mostly ghosts, certified to the State as adequate. None of it looks like a crime from inside a cubicle, because it is not designed to. It is designed to look like policy.

That is how corporate fraud is organized. There is rarely an order to break the law. There is a metric, a script, a software setting, a staffing level, and a culture that punishes the person who asks why. The money moves the same way every time: out of care and into margin, and in a public company, into the quarter. The people who set the metric, approved the script, and signed the certification to the State are the people the law can reach. It has reached them before.

The Justice Department's own 2025 enforcement memo names health care fraud as its first focus and holding individual executives, officers and employees accountable as its first fairness priority. It created a National Fraud Enforcement Division in April 2026 and the tip-reward program in October. The frameworks are moving toward the people who run the scheme, not only the company that pays the fine.

If there is a pattern, and the pattern deceives members or the State, then there are people who designed it. The record shows they can be named.

What the public record already shows

It has been done before. By insiders.

Each card says exactly what the record is. A conviction is a conviction. A settlement is a settlement, and where a company denied wrongdoing we say so. A regulator's finding is the regulator's. We do not blur them.

  • Convicted a jury or a plea
  • Settled, no admission paid to resolve allegations
  • Regulator finding a state or court action
  • Government report an inspector general or auditor
  • Policy what enforcers say they will do
Convicted · pardoned 2021

WellCare Health Plans Florida Medicaid · 2013

A scheme to fake Florida's rule that 80% of Medicaid behavioral-health premiums be spent on care or refunded, running 2003 to 2007. A subsidiary was used to inflate what counted as medical spending. Four former executives were convicted in 2013, three of them of health care fraud, and the court of appeals upheld every conviction. The former CEO was sentenced to three years. In January 2021 all five former executives charged in the case, including a general counsel who had pleaded guilty, were pardoned; the White House statement said the case was "widely cited as a case study in overcriminalization." The company paid $137.5 million to settle False Claims Act allegations and $80 million under a deferred-prosecution agreement.

Why it matters to you: the whistleblower was a senior finance analyst who secretly recorded company meetings for months before the raid. He reported a metric, not a villain. The metric led to the people. The analyst who built the numbers pleaded guilty and testified; he was not among those pardoned. Your own exposure →

AP, via Healthcare Finance News, May 2014; U.S. v. Clay, 11th Cir. 2016; DOJ Office of the Pardon Attorney and White House statement, January 2021.

Settled, no admission

Freedom Health & Optimum HealthCare Medicare Advantage, Florida · 2017

Allegations that the plans gave CMS false provider-network information to pass network adequacy review and expand into new counties, and submitted unsupported diagnosis codes. Resolved for $31.7 million. The companies denied liability. The former chief operating officer personally paid $750,000 to resolve the network allegations against him.

Why it matters to you: a network adequacy filing is a certification. A ghost directory behind it is a false statement, and the executive responsible can be named personally. The relator was the former chief medical officer.

U.S. Department of Justice, May 30, 2017; U.S. ex rel. Sewell v. Freedom Health, M.D. Fla.

Regulator finding

L.A. Care Health Plan Medi‑Cal, Los Angeles · 2022

The DMHC and DHCS announced $55 million in penalties against the State's largest Medi‑Cal plan. The investigations found failures in grievance handling (the plan reported more than 67,000 grievances answered late), backlogs of thousands of authorization requests over three months of 2021, and inadequate oversight of the entities it delegated care to. The regulators called the problems deep-rooted and systemic. The matter was later resolved by settlement.

Why it matters to you: grievances and prior authorization, in Medi‑Cal, found by the State. Systemic was the regulator's word, not ours.

DMHC and DHCS joint announcement, March 4, 2022; subsequent settlement reported October 2022.

Government report

HHS Office of Inspector General Medicaid managed care, 37 states · July 2023

Medicaid plans denied one in eight prior authorization requests in 2019, more than double the Medicare Advantage rate. Twelve of the 115 plans reviewed denied more than a quarter. Most state Medicaid agencies did not routinely review samples of denials for appropriateness, and most offered no independent external medical review.

Why it matters to you: the watchdog's own conclusion is that high denial rates plus thin state oversight let inappropriate denials go undetected. You are the detection.

HHS-OIG, OEI-09-19-00350, July 2023.

Settled, no admission

Centene (Health Net, California Health & Wellness) Medi‑Cal pharmacy · 2023

The California Attorney General alleged that two Centene plans reported inflated prescription drug costs to Medi‑Cal in 2017 and 2018 while the company's pharmacy arrangement saved $2.70 per claim that was never passed to the program. Centene paid more than $215 million under the California False Claims Act and denied wrongdoing. California was at least the seventeenth state to settle the same practice.

Why it matters to you: the California False Claims Act works on Medi‑Cal plans. It is the statute with the 15 to 50 percent whistleblower share, the higher end when the State declines and the whistleblower carries the case.

California Attorney General, February 8, 2023; KFF Health News.

Regulator finding

Anthem Blue Cross California · January 2026

The DMHC fined the plan $15 million over long-running, widespread failures to identify, process and resolve member grievances, and required an independent auditor for up to four years. It is the latest in a series of grievance-system actions against the plan going back to 2009. A 2025 DMHC audit reportedly found that in nearly half of the cases reviewed, the plan did not classify a member's spoken dissatisfaction as a grievance.

Why it matters to you: a complaint coded as an inquiry is a grievance that never reaches the State's data. Regulators now audit for exactly that.

DMHC, January 30, 2026; prior actions December 2024, November 2024, June 2019, November 2009.

Court order

People v. Health Net Provider directories, California · 2025

A court-ordered injunction over inaccurate provider directories, with defined terms for what a clean directory has to be and an automated process to keep it that way. This site rebuilt the order for reading.

Why it matters to you: ghost directories in California already have a court order attached. Read what it requires →

People v. Health Net, Final Judgment & Permanent Injunction, 2025.

Policy

U.S. Department of Justice Criminal Division · May 2025 and after

The Division's enforcement memo lists health care fraud first among its focus areas and names holding individual executives, officers and employees accountable as its first fairness priority. In April 2026 the Department created a National Fraud Enforcement Division; in October 2026 it launched the Fraud Whistleblower Incentive Program, paying for tips that lead to criminal charges, with awards that, by its terms, do not bar payment under the Department's other whistleblower programs.

Why it matters to you: this is the "frameworks are being reshaped" point, stated no larger than the documents state it. The direction is toward the people who run the scheme.

DOJ Criminal Division memorandum, May 12, 2025; DOJ press release 26-1231, October 20, 2026.

How it looks from inside

The playbook, card by card

One tactic per card: what it looks like from inside the building, the rule it breaks, and what the record shows. Open the ones you recognize. If you recognize several, that is a pattern, and patterns are what cases are made of.

  • Convicted
  • Settled no admission
  • Finding regulator or court
  • Report inspector general
  • Alleged in court, not decided
  • Watch for no public case yet

Tactic 1 Medical loss ratio games: spending dressed up as care

From inside
A sister company bills the plan for "care management" at a markup, and the markup counts as medical. Administrative costs get relabeled as quality improvement. The refund owed to the State when spending falls short is never calculated, or is calculated by the people who benefit from the answer.
The rule
Medicaid plans must calculate and report a medical loss ratio each year, and 85% is the federal floor states use when they require money back (42 CFR § 438.8). California writes the same floor and the refund into statute (Welfare & Institutions Code § 14197.2) and makes plans pass it down to their subcontractors (DHCS APL 24-018). A number that was engineered is a false statement to the State.
On the record
Convicted WellCare, 2013: an in-house subsidiary used to inflate reported behavioral-health spending. Four executives convicted (all pardoned in 2021). The record ↑

Tactic 2 Prior authorization as a delay machine

From inside
Queues that age past the deadline. "Pend for more information" as the default button. A peer-to-peer review that never finds a slot. Approvals that arrive after the member stopped asking. Nobody says deny. The clock does it.
The rule
Since January 1, 2026 the federal clock is 7 calendar days for a standard decision and 72 hours for an urgent one, down from 14 (42 CFR § 438.210(d), as amended by CMS's prior authorization rule, CMS-0057-F). California is tighter: five business days from receiving the information needed to decide, 72 hours when urgent (Health & Safety Code § 1367.01). A decision that runs out the clock is a denial without a letter, and the letter is where the member's rights live.
On the record
Report HHS-OIG, 2023: one in eight Medicaid prior authorization requests denied, twelve plans above 25%, most states not checking. Finding L.A. Care, 2022: authorization backlogs in the thousands over three months.

Tactic 3 The Notice of Action that never goes out

From inside
Denials, modifications and deferrals closed in the system with no letter generated. Letters sent to the provider and not the member. Letters that leave out the appeal and hearing rights, or arrive in a language the member cannot read. A member who never gets the letter never learns they can fight.
The rule
Every adverse benefit determination requires written notice to the member explaining the decision, the reasons, the right to appeal, and the right to a State Fair Hearing (42 CFR § 438.404; Welfare & Institutions Code § 10950 and following). DHCS prescribes the notice templates, the timing and the translation. Skipping the letter is not a clerical slip; it removes a legal right.
On the record
Finding DHCS medical audits: CalOptima, 2025, Notice of Action letters not fully translated for members with limited English and continuity-of-care approval letters not generated or sent; CenCal, 2022, members not notified of approved continuity-of-care requests. Report HHS-OIG, 2018: CMS cited 45% of audited Medicare Advantage contracts for denial letters with incomplete or incorrect information.

A question for insiders. Can a system show a Notice of Action as generated while the letter never left the building, or was pulled before it was mailed? If you know how that works, we would like to understand it: tips@nosuchprovider.org.

Tactic 4 Grievances logged as "inquiries"

From inside
A call script that asks "would you like to file a formal grievance?" and codes every "no" as an inquiry. Dissatisfaction resolved by the next business day and never counted. Quarterly reports to the State that look calm because the log was built to look calm.
The rule
A grievance is any expression of dissatisfaction, spoken or written (42 CFR § 438.400; Health & Safety Code § 1368; 28 CCR § 1300.68). Plans must log every one, resolve them on a clock, and report them to the State. A grievance resolved quickly is still a grievance. A grievance the member did not call a grievance is still a grievance.
On the record
Finding Anthem Blue Cross, 2026: $15 million and an outside auditor over long-running failures to identify, process and resolve grievances, including spoken complaints never counted; a 2025 audit reportedly found spoken dissatisfaction left unclassified in nearly half the cases reviewed. Finding L.A. Care, 2022: more than 67,000 grievances answered late.

Tactic 5 Data that gets "corrected" before the State sees it

From inside
Call records re-timed. Grievance categories re-coded after the fact. Timeliness measured from the wrong date. Dashboards that only count what was logged, feeding reports that are only as honest as the log. It is the quiet version of the tactic above, and it is the one most likely to leave a trail in the system's audit history.
The rule
Plans must keep accurate records of every grievance and appeal and make them available to the State (42 CFR § 438.416). Reports to DHCS and the DMHC are certifications. A knowingly false record or statement that supports a claim is itself a False Claims Act violation (31 U.S.C. § 3729(a)(1)(B)), and in federal health care matters a false statement is a crime of its own (18 U.S.C. § 1035).
On the record
Watch for No California plan has been charged in public for altering its own grievance or call data. That is not the same as it not happening. The Freedom Health case shows what happens when a filing meets a witness who saw how the numbers were made.

Tactic 6 Ghost directories

From inside
Rosters loaded from contracts, never from a phone call. Terminations that do not post for months. A "verified" flag set by a mailing nobody answered. A specialty filter that returns names who do not practice the specialty. The member calls, the phone rings out, and the does its work.
The rule
The must be accurate and kept current (42 CFR § 438.10(h)); California requires regular verification and updates (Health & Safety Code § 1367.27). In California the duty also comes with a court order.
On the record
Settled People v. Health Net, 2025: a stipulated injunction; Health Net denied wrongdoing. Report U.S. Senate Finance Committee, 2023: more than 80% of listed mental-health providers unreachable or not in network. Settled Freedom Health, 2017. How the loop works →

Tactic 7 Network adequacy filings that do not match the ground

From inside
Adequacy "met" by counting providers who take no new patients, by a subcontractor's roster nobody audited, by an alternative access request that blames geography for a network the plan never paid enough to build.
The rule
Time-and-distance and appointment standards under Welfare & Institutions Code § 14197, certified to the State every year (42 CFR § 438.207). SB 530 adds secret-shopper testing from 2029, makes plans prove each subcontractor's network, and makes the State weigh what the plan actually paid providers.
On the record
Settled Freedom Health, 2017: false network information to CMS, the former COO paying personally. Finding DHCS's own 2021 dental network certification: what it found about specialists →

Tactic 8 Delegation as a blind spot

From inside
"That's the ASO." "That's the dental administrator." "That's the behavioral health vendor." Nobody audits the delegate's grievance log, the delegate's directory, or whether the delegate is still providing the service the plan is being paid for.
The rule
The plan stays responsible for everything it delegates and must monitor it (42 CFR § 438.230). If your paycheck comes from the delegate, you are inside the plan's duty, and the False Claims Act reaches anyone who causes a false claim to be paid.
On the record
Finding L.A. Care, 2022: inadequate oversight of contracted entities. Settled Molina Healthcare of Illinois: accused of collecting full capitation after its nursing-facility subcontractor quit, without replacing it or telling the State. A federal appeals court let the case proceed in 2021; it settled in October 2024 for $1.2 million to the United States and Illinois. Molina denied the allegations and admitted no liability, and the case was dismissed that December.

Tactic 9 Pharmacy spread and the Medicare cousins

From inside
A pharmacy benefit arrangement that saves the company money per claim while the plan reports the higher number to the State. In the Medicare Advantage business of the same parent companies, diagnosis codes added to raise the payment for each member.
The rule
What a plan reports as its cost to Medi‑Cal has to be its cost. A diagnosis submitted for payment has to be supported by the record.
On the record
Settled Centene, 2023: $215 million to California, no admission, after sixteen other states. Settled Cigna, 2023: $172 million to the United States over Medicare Advantage diagnosis codes (Cigna admitted specified conduct in a $37 million part). Different program, same parent-company playbook.

None of these are technical errors. Each one moves money from a low-income member's care to someone's margin, and each one leaves a record somewhere inside the plan.

Before you file anything

Careful is not the same as scared

Some of these organizations are large, well-lawyered and well-connected, with reach into statehouses and beyond. Take that as a fact about resources, not a reason to stay quiet. It is the reason you do not walk in alone.

The people who have done this before were not braver than you. They were prepared. They had counsel before their first conversation with the government, they documented instructions rather than impressions, and they let the law's own protections do their job.

You are not the underdog. You are the witness. Witnesses prepare.

  1. Talk to a whistleblower attorney first

    Most work on contingency. They decide which door fits your facts: a False Claims Act case, which is filed under seal so the company does not learn of it while the government investigates; the new tip program; a state complaint; or several, in the right order. A public tip filed too early can cost you the larger claim, and only the first to file collects. California's act works the same way: the complaint is filed in camera, stays sealed for up to 60 days while the Attorney General reviews your evidence, and no one else may bring a related action once yours is pending.

    31 U.S.C. § 3730(b)(2), (b)(5); Gov. Code § 12652(c)(2)–(3), (c)(10)

  2. Learn the actual law, not the handbook

    Your employer's duties are written down in public: 42 CFR Part 438, the Knox-Keene Act, Welfare & Institutions Code § 14197, DHCS's All Plan Letters, and the plan's own State contract. An internal handbook, a call script, or a manager's "this is how we do it here" cannot override any of it. Read the rule yourself, then read it again with your advisor.

    42 CFR §§ 438.10, 438.100, 438.206, 438.210, 438.230, 438.404, 438.608

  3. Document the instruction, not just the outcome

    Who told you, when, what was said, which member, claim, report or data set it touched, and what you were told to do. Dated. Factual. Kept somewhere the company cannot reach. A pattern of instructions is what turns "the system did it" into a name.

    Your advisor decides what to keep and how

  4. Handle member data like it is radioactive

    Federal privacy law has a whistleblower exception: a workforce member who believes in good faith the organization has broken the law may disclose protected information to an attorney or to a health oversight agency. It has edges. Do not download the warehouse. Take what proves the point, and let counsel tell you what that is.

    45 CFR § 164.502(j)

  5. Know your protections by name

    Retaliation for reporting is its own claim. The federal act provides reinstatement and double back pay. California protects employees who report a violation to the government or refuse to take part in one, and its own False Claims Act has a parallel remedy. If a case you bring succeeds or settles, your reasonable expenses, costs and attorney's fees are awarded against the defendant. Write the section numbers down. They change how a conversation with HR goes.

    31 U.S.C. § 3730(h); Cal. Labor Code § 1102.5; Gov. Code §§ 12652(g)(8), 12653

  6. Take care of the person doing this

    Carrying what you know is heavy, and the process is slow. Pace yourself. Tell one person you trust. Keep working the way you always have. The goal is a case that holds, and a person who is still standing when it does.

    Not a legal step. The most important one.

Worried about your own exposure?

The order disappears. Your login doesn't. A plain-English guide to following orders, company lawyers, deleted messages, and what your code of conduct already says about you.

Read: can you be blamed for it? →

The people on the other end

Who is on the other end of the metric

Every number on this page used to be a person. A member who stopped calling. A parent who never got the letter that said they could appeal. A patient who drove to an address that was not a clinic.

Medi‑Cal money is care money for people who have no other kind. When a tactic moves it to a margin, the margin is real and so is the empty chair in the waiting room. The people who can see both are the people inside the plan. That is not a burden placed on you. It is a position of strength, and the law was built to make use of it.

The member who gave up

The delay worked. Nobody wrote "deny." The appointment just never happened.

The dollar that left care

Reported as medical. Spent on something else. Counted in a quarter.

The employee who knows

Told it was policy. Told it was how things are done. Told not to ask. Asking anyway.

You are not fighting a company. You are standing next to the people it was paid to care for.

Sources

Every claim on this page, and where it came from

  1. U.S. Department of Justice, "Justice Department Announces Innovative Whistleblower Rewards Program to Combat Fraud," press release 26-1231, October 20, 2026; National Fraud Enforcement Division program terms and FAQ, justice.gov/fraud/whistleblower; the portal at America.gov/fraud.
  2. CBS News, "Trump says U.S. will compensate fraud whistleblowers, and he'll decide who gets paid," October 20, 2026 (the 1% statement).
  3. U.S. Department of Justice, Criminal Division, "Focus, Fairness, and Efficiency in the Fight Against White-Collar Crime," memorandum of May 12, 2025, as summarized by Foley Hoag and others.
  4. Associated Press via Healthcare Finance News, "Former managed care company leaders get time in prison," 2014; United States v. Clay, 832 F.3d 1259 (11th Cir. 2016) (WellCare); U.S. Department of Justice, Office of the Pardon Attorney, pardons granted January 2021, and White House statement of January 20, 2021 (pardons of the five former WellCare executives).
  5. U.S. Department of Justice, "Freedom Health, Inc. and Optimum Healthcare, Inc. Agree to Pay $31.7 Million to Resolve False Claims Act Allegations," May 30, 2017; analysis by Faegre Drinker.
  6. California Department of Managed Health Care and Department of Health Care Services, joint announcement of $55 million in penalties against L.A. Care Health Plan, March 4, 2022; Fierce Healthcare; settlement reported by Becker's Payer Issues, October 2022.
  7. HHS Office of Inspector General, "High Rates of Prior Authorization Denials by Some Plans and Limited State Oversight Raise Concerns About Access to Care in Medicaid Managed Care," OEI-09-19-00350, July 2023.
  8. HHS Office of Inspector General, "Medicare Advantage Appeal Outcomes and Audit Findings Raise Concerns About Service and Payment Denials," OEI-09-16-00410, September 2018.
  9. California Attorney General, "Attorney General Bonta Announces $215 Million Settlement Against Healthcare Company Centene," February 8, 2023; KFF Health News.
  10. California Department of Managed Health Care, press release of January 30, 2026 ($15 million penalty against Anthem Blue Cross), with the prior enforcement actions it lists; reporting by Becker's Payer Issues.
  11. DHCS medical audit reports: CalOptima Health, 2025; CenCal Health, 2022.
  12. United States ex rel. Prose v. Molina Healthcare of Illinois, 10 F.4th 765 (7th Cir. 2021); analysis by Arnold & Porter; unopposed motion to dismiss on settlement, N.D. Ill. No. 1:17-cv-06638, Dkt. 209 (Dec. 9, 2024), with the settlement agreement of Oct. 22, 2024 (Dkt. 209-1), via CourtListener. Settled without admission of liability.
  13. U.S. Department of Justice, "Cigna Group to Pay $172 Million to Resolve False Claims Act Allegations," September 30, 2023.
  14. CMS, Interoperability and Prior Authorization Final Rule (CMS-0057-F), published February 8, 2024; decision timeframes in effect January 1, 2026. DHCS, All Plan Letter 24-018 (medical loss ratio remittance requirements for subcontractors), December 13, 2024.
  15. U.S. Senate Committee on Finance, Medicare Advantage Plan Directories Haunted by Ghost Networks, May 3, 2023.
  16. People v. Health Net, Final Judgment & Permanent Injunction, 2025, rebuilt on this site.
  17. Statutes and rules cited: 31 U.S.C. §§ 3729–3730; 18 U.S.C. § 1035; 42 CFR Part 438 (§§ 438.8, 438.10, 438.100, 438.206, 438.207, 438.210, 438.230, 438.400–438.416, 438.608); 45 CFR § 164.502(j); Cal. Gov. Code §§ 12650–12656 (qui tam shares at § 12652(g)(2)–(3), text current as of January 1, 2026); Cal. Labor Code § 1102.5; Cal. Health & Safety Code §§ 1367.01, 1367.27, 1368; 28 CCR § 1300.68; Cal. Welf. & Inst. Code §§ 10950, 14197, 14197.2.

Where a company denied wrongdoing or settled without admitting liability, this page says so. Allegations are not findings. If you represent an organization named here and believe something is inaccurate, request a correction.