A letter or subpoena from a Medicaid Fraud Control Unit (MFCU) carries different stakes than a routine post-payment audit. Every MFCU is a state law enforcement agency, typically housed inside the state Attorney General's office, with authority to pursue Medicaid provider fraud on both the civil track and the criminal track. The track a matter is on determines the exposure: a civil inquiry can end in a repayment demand and civil penalties, while a criminal referral can end in indictment and prosecution. A provider who responds to an MFCU inquiry as if it were paperwork loses the chance to shape which track the matter takes while that choice is still open.
What the Medicaid Fraud Control Unit Is
MFCUs operate in all 50 states, the District of Columbia, Puerto Rico, and the U.S. Virgin Islands, staffed by investigators, attorneys, and auditors organized as a unit required to be separate from the state Medicaid agency. Each Unit is certified and recertified annually by HHS-OIG under authority delegated in the Social Security Act, and each receives a federal grant covering 75 percent of its operating costs. That structure means an MFCU answers to a state Attorney General and a federal oversight body at once, and its investigative authority is defined by 42 CFR Part 1007.
Civil Authority and Criminal Authority Are Not the Same
Federal regulation gives each MFCU jurisdiction to investigate and prosecute, or refer for prosecution, violations of state criminal statutes and state civil false claims statutes connected to the Medicaid program. The two tracks lead to different places. A criminal referral proceeds through the state grand jury or charging process and can result in indictment, a plea, or trial; a matter with a strong federal nexus is referred to the Department of Justice. A civil matter proceeds under the state's civil false claims act, where the state has one, or is referred to HHS-OIG or DOJ where it does not. Civil exposure is financial: repayment, civil penalties, and program exclusion. Criminal exposure adds the possibility of a criminal record and incarceration. The same billing records can support either track, and investigators do not announce which one they are building until the inquiry is well underway.
An MFCU inquiry that opens as a records request can become a criminal referral once investigators conclude the billing pattern reflects intent rather than error.
Common Triggers for an MFCU Investigation
Most MFCU matters do not start with the Unit itself. They start with a referral: from the state Medicaid program integrity office, from a managed care organization's own fraud unit, from a data-analytics flag on billing patterns, or from a complaint filed by a patient, a competitor, or a former employee. The billing patterns that most often produce a referral are consistent across states: services billed but not rendered, upcoding, unbundling, double billing, kickback arrangements, and false cost reports. Facilities also face referrals tied to abuse or neglect complaints involving Medicaid enrollees, a jurisdiction that now reaches community-based settings, not just nursing facilities. A state OMIG audit that surfaces a pattern rather than an isolated error is itself a common source of MFCU referrals.
Recognizing the Investigative Posture
How the MFCU makes contact tells a provider where the matter stands. A civil records request or an administrative subpoena signals the Unit is still developing the case. A grand jury subpoena signals the matter has moved onto the criminal track and that testimony or documents are being gathered for possible charges. A target letter signals the recipient is already viewed as a likely defendant, not merely a witness. None of these documents should be answered without counsel reviewing the request first. What a provider says or produces in the earliest exchange often becomes the evidence the rest of the investigation is built around.
Why Early Legal Counsel Is Critical
It is critical that healthcare providers promptly retain experienced healthcare defense counsel upon receiving a subpoena, audit notice, investigative request, or other inquiry from a Medicaid Fraud Control Unit. Early legal intervention can protect the provider's rights, ensure appropriate responses to government requests, avoid inadvertent admissions, preserve relevant defenses, and allow counsel to communicate with investigators on the provider's behalf. Delaying representation can significantly affect the outcome of a matter, particularly where a civil inquiry has the potential to become a criminal one.
How Health Law Alliance Can Help
Health Law Alliance defends physicians, pharmacies, and healthcare companies against Medicaid audits and Medicaid Fraud Control Unit investigations nationwide, including matters that move between the civil and criminal track. Our team includes attorneys with federal prosecution and healthcare compliance backgrounds who understand how a state Unit builds a case and where that case is vulnerable to challenge. If your practice has received an MFCU letter, subpoena, or interview request, contact us for a free, confidential consultation.
