Medicare Advantage Fraud: 5 Red Flags to Watch for in 2026

If you work in healthcare billing, medical coding, compliance, or insurance administration, you already know that Medicare Advantage (Part C) has taken over the healthcare landscape. Today, over 54% of the Medicare-eligible population is enrolled in a Medicare Advantage plan rather than traditional Medicare. That shift represents hundreds of billions of taxpayer dollars flowing directly to private Medicare Advantage Organizations (MAOs) every single year.

But with massive funding comes massive financial temptation.

Unlike traditional Fee-for-Service Medicare/Medicaid, where providers are paid for each test or procedure, CMS pays Medicare Advantage plans using a capitated, per-member-per-month (PMPM) model. How much does an insurer get paid per member? That depends heavily on risk adjustment. Each beneficiary is assigned a risk score based on their documented health conditions. A “sicker” patient requires more care, which translates to a higher risk score—and a much larger monthly check from the federal government to the insurance company.

If things went well according to this plan, this program would motivate insurers to take preventive measures against chronic diseases. However, this program has become an industry that thrives on fraudulent practices like risk adjustment and upcoding, which means insurers and third-party contractors over-document the health problems of healthy patients.

As federal enforcement intensifies in 2026 under the False Claims Act (FCA), healthcare insiders are the first line of defense. If you are wondering whether your company’s billing practices cross the line from aggressive coding into illegal fraud, here are the 5 major red flags to watch for this year.

1. One-Way Chart Reviews and “The Delete Deficit”

The most common form of cheating by the health insurance plans in the Medicare Advantage program is retrospective chart audits, where they use internal teams or data mining firms to scrutinize past patient charts and search for any diagnosis that may have been overlooked by the physicians.

While auditing charts for accuracy is legal, the fraud occurs when these reviews are strictly one-way.

• The Red Flag: It is noteworthy that your employer or vendor aggressively cleans up patient records to include HCCs that generate money, while deliberately failing to remove incorrect or old codes found at the same time.
• The Legal Reality: According to the False Claims Act as well as CMS guidelines, once it is identified that an earlier entered code is incorrect or there is a lack of appropriate medical documentation to support it, then it is legally required to remove that code and repay the extra payment. Ignoring “overcoded” mistakes while receiving money for “undercoded” findings is a clear FCA violation.
• Key Takeaway: A diagnosis code cannot be submitted for risk adjustment just because it appeared on a patient’s problem list five years ago. It must affect patient care, treatment, or management during the specific billing year.

2. Unsupported “Phantom” Diagnoses Under the V28 Model

In 2026, the healthcare industry is feeling the full impact of CMS’s V28 risk adjustment model transition, which restructured HCC categories and phased out certain high-volume codes to curb overspending. In response, some MA plans and coding organizations have aggressively pushed to replace lost revenue by forcing unsupported chronic conditions onto patient profiles.

• The Red Flag: Coders or clinicians are pressured to attach severe chronic diagnosis codes—such as diabetic vascular manifestations, major depressive disorder, severe malnutrition, or active stroke history—when the patient’s medical chart contains zero clinical evidence, active treatment, ongoing medication, or diagnostic testing supporting that severity.
• The Legal Reality: Linking complications to increase a risk multiplier without medical justification is illegal upcoding. For example, claiming a patient has “diabetes with renal complication” simply because they have mild kidney disease and diabetes—without a physician documenting a direct causal link—is a frequent target of whistleblower lawsuits.

3. Predatory In-Home Assessments and Telehealth “Code Mining”

In order to identify as many risk-adjusted diagnoses as possible, Medicare Advantage plans use stand-alone HRAs (Health Risk Assessments) that are usually conducted at home annually or during quick telemedicine consultations by third-party nurse practitioners.

• The Red Flag: Home visits are done in a systematic way, but the doctors do not offer any treatment, make any prescriptions, or arrange for any future treatment for their patients. The only reason why they visit their patients is to record high-priority diagnoses that are never treated or even brought up again in the whole year.
• The Legal Reality: The Department of Justice (DOJ) and the Office of Inspector General (OIG) have cracked down heavily on insurers that use HRAs as revenue-generating “code mining” expeditions rather than genuine patient care tools.

4. Disguised Broker Kickbacks and Patient Steering

Medicare Advantage fraud isn’t limited to coding; it also involves illegal enrollment schemes. Recent enforcement actions in 2025 and 2026 have exposed elaborate kickback operations designed to buy patient enrollments.

• The Red Flag: An insurance company pays third-party brokers or marketing agencies fees that far exceed CMS statutory compensation caps, disguising the excess funds on paper as uncapped “administrative fees,” “training reimbursements,” or “marketing support”.
• The Legal Reality: In landmark whistleblower cases such as U.S. ex rel. Shea v. eHealth, the message is quite clear from the DOJ and the federal courts: substance beats form. If internal documents show that “administrative” payments are really based on volume of enrollments, then such payments are deemed kickbacks and are therefore in violation of AKS (Anti-Kickback Statute). Furthermore, steering high-cost disabled Medicare beneficiaries (such as U65 populations) away from plans to protect profit margins violates federal law.

5. AI-Driven Claims Manipulation and Automated “Up-Risking”

With the integration of artificial intelligence within the healthcare processes, the insurers have started using automated NLP techniques for processing electronic health records (EHR) to suggest “coding hints” to the providers.

• The Red Flag: Your organization utilizes software which is set to encourage providers to use high-revenue diagnosis codes without appropriate human clinical review, or your management team ignores warnings regarding compliance when your internal audit shows that the AI algorithm used generates a large number of false positives.
• The Legal Reality: The use of computer software to automatically generate unsupported diagnostic codes is a technological advancement of upcoding, but insurance companies are not exempt from liability since they are still liable for all the diagnoses sent to CMS.

At a Glance: Legitimate Operations vs. Fraudulent Manipulation

Operational Area	Legitimate Risk Adjustment	Fraudulent Manipulation (Red Flag)
Chart Audits	Conducts two-way reviews; adds missed codes and deletes unsupported or erroneous codes.	Conducts one-way reviews; harvests new revenue codes while ignoring or hiding errors.
In-Home Visits	Assesses health, creates care plans, coordinates with primary care physicians, and manages medications.	Acts as a 15-minute diagnostic fishing trip to record high-risk codes with zero follow-up or medical care.
Broker Pay	Adheres strictly to CMS compensation caps for enrollment and pays fair market value for genuine services.	Labels excess enrollment bonuses as “marketing” or “training” expenses to bypass CMS caps.
Coding AI	Uses algorithms to highlight potential gaps that are strictly verified by a licensed clinician before billing.	Uses algorithms to auto-populate high-risk diagnosis codes without human verification or medical necessity.

What to Do If You Witness Medicare Advantage Fraud

If you are seeing these red flags inside your workplace, you are in a unique position to stop systemic abuse of the healthcare system. Under the qui tam provisions of the False Claims Act, private citizens with original knowledge of fraud against the government can file a confidential lawsuit on behalf of the United States.

Why Whistleblowers Matter (and How You Are Protected)

The federal government relies heavily on healthcare insiders—coders, billing managers, nurses, compliance officers, and physicians—to uncover complex financial schemes that regulators can’t see from the outside.

• Substantial Financial Rewards: If the government successfully recovers funds as a result of your qui tam lawsuit, you are entitled to a whistleblower reward ranging between 15% and 30% of the total recovery. In Medicare Advantage cases, where recoveries often reach tens or hundreds of millions of dollars, these awards can be life-changing.
• Strong Retaliation Protections: The False Claims Act is very effective at providing federal protection against retaliation at work. In the event that you have been fired, demoted, suspended, or harassed because of your whistleblowing on fraud, there is an opportunity to file a lawsuit.

Critical First Steps

• Do Not Confront Management Prematurely: Raising internal alarms before consulting an attorney can make you a target for retaliation and give wrongdoers a chance to destroy evidence.
• Document Carefully and Legally: Preserve evidence such as emails, internal memos, billing directives, chart audit guidelines, and compliance presentations. However, never violate HIPAA or take documents outside your lawful access. An attorney can guide you on what you can legally preserve.
• Speak to an Experienced Whistleblower Attorney: False Claims Act cases are highly specialized and must be filed under legal seal in federal court. Consulting with legal counsel early ensures your identity is protected, your evidence is structured correctly, and your right to a financial reward is secured.