DOJ Kickback Settlements Are Climbing. Here Is What Compliance Teams Should Do This Week.

July 24, 2026

Ready to be survey-ready?

See how AccrediCulture turns compliance into an operating system across every facility.

What the $4.7M settlement actually means for your compliance program

A multi-million dollar DOJ Anti-Kickback Statute (AKS) settlement signals that the DOJ Civil Division and HHS-OIG are aggressively targeting the financial relationships between clinics, referring providers, and marketers. Compliance leaders should tighten credentialing verification, financial-interest disclosures, and referral-arrangement documentation now, not on survey day. Map every provider financial relationship to an AKS safe harbor under 42 CFR § 1001.952, log it in a single system of record, and route any gap into your corrective action plan (CAP) workflow.

The pattern is not subtle. DOJ’s September 2025 announcement that a former lab CEO, two physicians, and seven marketers agreed to pay over $6 million involved a former laboratory CEO agreeing to pay $4.25 million to resolve False Claims Act litigation alleging illegal payments to doctors for laboratory referrals in violation of the Anti-Kickback Statute, with two physicians and seven marketers paying an additional $1,818,462. That is one arrangement, one lab, and a two-digit number of individuals now on the hook personally. Read your own referral map with that in mind.

The enforcement numbers operators should know

These are the figures we bring into every board conversation right now.

DOJ recoveries for FY 2024 exceeded $2.9 billion, approximately $1.7 billion of which involved the health care industry.
The 979 qui tam lawsuits filed in FY 2024 marked the highest number in a single year, and qui tam cases comprised over 83% ($2.4 billion) of recoveries, stemming from whistleblower actions.
The Fall 2024 Semiannual Report to Congress highlights over $7 billion in expected recoveries and receivables resulting from HHS-OIG investigations and audits during FY 2024, with 1,548 criminal and civil enforcement actions and 3,234 individuals and entities excluded from participation in federal health care programs.
Total recoveries under the FCA since the 1986 amendments now exceed $78 billion and have exceeded $2 billion annually for 16 consecutive years.

As HHS Inspector General Christi A. Grimm put it in the semiannual report, “These enforcement cases often involved egregious fraud, including false billing, costly kickback schemes, and failures to provide care.” Kickback schemes are named, in that order, alongside billing fraud. That is not a definitional footnote; that is a priority list.

AKS vs. Stark, and where operators actually get tripped up

Two statutes, two different animals. The Anti-Kickback Statute (42 U.S.C. § 1320a-7b) is an intent-based criminal and civil statute covering any federal health care program referral. The Stark Law (42 U.S.C. § 1395nn) is a strict-liability civil statute covering physician self-referral for designated health services under Medicare. You can violate Stark without meaning to. You can violate AKS with one poorly documented consulting agreement.

The operational gaps we see most often at growing organizations are boring, not exotic. Medical directorships paid above fair market value with no time logs. Marketing agreements structured on a per-referral basis. Space and equipment leases without written terms. Provider-owned entities receiving investment distributions that look a lot like kickbacks to healthcare providers disguised as managed service organization (MSO) investment distributions, which the DOJ has now recovered over $61 million in civil False Claims Act settlements since 2019 for. If your credentialing file does not capture the financial relationship alongside license, DEA, and PSV, you have a control gap the surveyor cannot see but a whistleblower can.

The controls to tighten before survey week (or an OIG letter)

Here is the operational chain we walk clients through inside AccrediCulture. Enforcement signal, control gap, system-of-record remediation.

Credentialing and re-credentialing. Every provider file gets primary source verification (PSV) for license, DEA, board certification, and NPI. Add exclusion checks against the OIG List of Excluded Individuals/Entities (LEIE) and SAM.gov at hire, monthly thereafter, and at re-credentialing. Log every check with a timestamp.
Financial-interest attestations. Annual, signed, and specific. Ask about ownership, compensation arrangements, immediate family relationships, and referral sources. Route any disclosed relationship into a written review against a safe harbor.
Referral arrangement inventory. One list. Medical directorships, consulting agreements, leases, MSO participation, speaker programs, marketing contracts. Each entry links to the written agreement, the fair market value analysis, and the safe harbor cited.
Chart audits with a kickback lens. When you run chart audits, flag referral sources that appear disproportionately. A cluster is a lead, not a conclusion, but it belongs in the compliance committee packet.
CAP execution. Any gap you find gets a corrective action plan with an owner, a date, and evidence of closure. Auditors do not expect perfection. They expect proof you found it and fixed it.

The Joint Commission’s Leadership standards on ethics, the CMS Conditions of Participation, and NCQA credentialing standards all point to the same underlying question a surveyor is trying to answer: does the organization know its own financial relationships, and can it show that a person is accountable for each one? If the answer lives in six spreadsheets and one attorney’s inbox, it is not really an answer.

Frequently asked questions

What triggers a DOJ or OIG kickback investigation at a healthcare organization?
Most cases start with a whistleblower. Qui tam cases comprised over 83% ($2.4 billion) of FY 2024 recoveries from whistleblower actions, and the government paid over $400 million to whistleblowers in relation to those recoveries. Internal complaints, disgruntled former employees, competitors, and data anomalies flagged by CMS Program Integrity all feed the pipeline. Unusual referral concentration, marketing arrangements paid per-patient, and physician compensation above fair market value are common triggers.

How does the Anti-Kickback Statute differ from the Stark Law in enforcement?
AKS is intent-based, applies broadly to any federal health care program, and carries criminal and civil penalties. Stark is strict liability, applies to physician self-referral for designated health services under Medicare, and is civil only. AKS covers referral relationships between any parties; Stark covers a narrower set of physician-entity relationships. Both routinely appear in the same DOJ settlement.

What credentialing and financial-disclosure controls prevent AKS violations?
PSV at hire and re-credentialing, monthly LEIE and SAM.gov exclusion checks, signed annual financial-interest attestations, a centralized referral arrangement inventory, and written safe harbor analyses for every compensation arrangement. Documented, timestamped, and owned by a named person.

How should we document provider financial relationships to satisfy an OIG audit?
One written agreement per relationship, a fair market value analysis, the safe harbor cited, board or committee approval, and evidence the arrangement was followed (time logs, deliverables, payment records). Store all of it in one system. If it takes more than one search to produce, it is not survey-ready.

What does a Corporate Integrity Agreement (CIA) require operationally?
Typically five years of independent review, a designated compliance officer and committee, written policies, training, hotline reporting, exclusion screening, and annual reports to OIG. Assume a CIA doubles the operational load of your compliance program. Building the controls before you need them is the cheaper path.

References