On August 28, 2026, the Centers for Medicare & Medicaid Services (CMS) announced that recent enforcement actions have stopped more than $1.6 billion in potentially improper Medicare payments to diagnostic laboratories since the beginning of the current administration. The announcement highlights a significant increase in CMS’s reliance on data analytics and artificial intelligence to detect potential fraud. And, critically, it signals a stark departure from CMS’s “pay and chase” model to the “protect and deploy” strategy announced by Vice President J.D. Vance, HHS Secretary Robert F. Kennedy, Jr., and CMS Administrator Mehmet Oz in February 2026. Under that strategy, CMS makes more proactive use of payment suspensions to freeze funds while enforcement agencies investigate potentially improper billing.
The announcement also signals heightened compliance and enforcement risks for laboratories and affiliated providers participating in Medicare. It underscores the importance of accurate billing, documented medical necessity, operational readiness, and effective oversight of relationships among laboratories, ordering providers, consultants, marketers, and beneficiaries.
Breakdown of the Announced Enforcement Activity
According to CMS, the $1.6 billion in potentially improper payments resulted from: $732 million in savings associated with the revocation of 157 laboratory providers’ Medicare enrollment; more than $500 million in potentially fraudulent payments halted through 185 payment suspensions arising from CMS’s investigation of 600 laboratories; more than $276 million recouped from 442 allegedly suspect overpayments previously paid to laboratories; and $127 million in potentially fraudulent payments prevented through 85 law enforcement referrals made by CMS contractors.
How CMS is Changing Its Enforcement Approach
The announcement does not specify the methodology used to calculate each category of savings, whether any categories overlap, or whether every identified provider received a final administrative or judicial determination of fraud. Nevertheless, CMS’s use of payment suspensions and enrollment revocations before investigations are complete is a departure from prior approach. CMS now uses data analytics to flag high-risk billing patterns and may hold or deny claims before Medicare pays them. It may then suspend payments and/or revoke enrollment before making a law enforcement referral.
Conduct Drawing CMS Scrutiny
CMS has targeted several forms of suspected laboratory fraud, including billing for services not rendered, billing for services that laboratories cannot demonstrate are medically necessary, upcoding, and billing for tests for beneficiaries who had no established relationship with the ordering provider. The latter is often unknown to the laboratory. CMS indicated that these concerns may arise in connection with pathogen-detection testing (i.e., molecular PCR testing), high-complexity drug testing, genetic testing, and other laboratory services. This announcement is consistent with increased audit activity involving molecular and genetic testing, particularly in light of OIG data published in January 2026 (see our prior blog here).
CMS attributed its enforcement results in part to advanced analytics, including artificial intelligence and machine-learning models used to review Medicare fee-for-service claims. CMS primarily uses these tools to identify suspect billing patterns or outliers. According to the agency, these tools establish baselines for ordinary billing and laboratory activity and flag unusual combinations involving testing, results, billing, documentation, or provider relationships. For example, CMS’s data analytics may flag a claim for genetic testing ordered by a provider whom the beneficiary has not previously seen. Such high-risk billing patterns may prompt CMS to hold, reject, or deny claims before Medicare funds are released. This approach can expose a provider to substantial operational and financial pressure before CMS has fully analyzed the underlying issues, or the issues have been finally resolved. And CMS often provides only limited information about claim denials, leaving labs uncertain about why their claims have not been paid.
To avoid such outcomes, laboratories should:
- communicate documentation requirements to ordering providers and consistently enforce those requirements;
- confirm that all billed tests were ordered, performed, documented, and medically necessary;
- review coding practices for potential upcoding or unsupported billing;
- verify and document relationships between beneficiaries and ordering providers to ensure ordering providers are actually treating the beneficiaries for whom they are ordering tests;
- monitor for abrupt changes in claim volume, test mix, ordering patterns, and reimbursement;
- know their referral sources by conducting diligence on consultants, marketers, ordering providers, and other business partners;
- confirm that each enrolled location is operational and that information supplied to Medicare is accurate;
- retain records relevant to claim reviews, payment suspensions, overpayment demands, and enrollment actions; and
- conduct routine internal reviews of analytical outliers.
CMS’s laboratory initiative is one component of its broader fraud-prevention program. The agency reported $42 billion in Medicare fraud prevention savings during fiscal year 2025. CMS stated that in FY2016, it identified $1.8 billion in Medicare overpayments through medical reviews collected $378 million through post-payment reviews and suspended more than $539 million in suspected fraudulent payments. CMS further reported that, since January 1, 2026, its Fraud Defense Operations Center (which CMS announced in March 2025) had accounted for the suspension of more than $371 million in Medicare payments involving 267 providers and suppliers. That amount included more than $226 million in suspect durable medical equipment billing, more than $53 million in skin substitute claims, and more than $23 million involving hospice providers.
Key Considerations for Laboratories
The announcement reflects CMS’s continued focus on technology-assisted detection and rapid administrative intervention to prevent inappropriate Medicare payments. Unusual billing patterns, questionable provider relationships, unsupported medical necessity, enrollment discrepancies, and indications that services were not rendered are likely to draw scrutiny from CMS. At the same time, analytics and artificial intelligence may not fully account for the operational realities of laboratories or their distinct role in the healthcare delivery system. Laboratories rely on ordering providers for information about the provider-patient relationship, medical necessity, and supporting clinical documentation—as the First Circuit Court of Appeals recently determined they can do—even though deficiencies in that information may expose the laboratory’s claims to review or administrative action. CMS’s approach therefore places an increased practical burden on laboratories to coordinate with ordering providers, establish clear documentation expectations, and monitor whether information received from those providers supports Medicare billing requirements. The announcement does not explain how CMS’s analytical models account for information outside a laboratory’s possession or control, distinguish provider-level documentation failures from laboratory misconduct, or incorporate those considerations before claims are held, denied, or referred for further action. CMS’s continued reliance on data analytics, payment suspensions, enrollment actions, overpayment recoveries, and law enforcement referrals appears likely.