Partial hospitalization program (PHP) and intensive outpatient program (IOP) billing sits inside federal healthcare fraud enforcement. On October 22, 2026, the Department of Justice announced criminal charges against defendants accused of billing private insurers more than $1.6 billion for substance abuse treatment that did not meet the content standards those billing codes require. For a physician who signs a PHP or IOP certification, the exposure runs beyond a repayment demand. Prosecutors build these cases from the same eligibility, content, and attendance records a program already keeps.

How Medicare Defines Partial Hospitalization Eligibility

Medicare coverage of partial hospitalization services runs through a specific certification, not a general finding of medical necessity. Under 42 C.F.R. 410.43, partial hospitalization is limited to patients who do not require 24-hour care. Under 42 C.F.R. 424.24(e), a physician must certify that the patient would require inpatient psychiatric hospitalization if the program were not furnished. Eligible patients are either discharged from an inpatient hospital admission, with the program in lieu of continued inpatient treatment, or are otherwise at reasonable risk of requiring that level of care. Together, these regulations also require an individualized plan of care and a minimum of twenty hours of therapeutic services weekly. Intensive outpatient programs follow a related, separate certification framework.

What Counts as Covered Group Therapy

Group therapy is not a label a biller can attach to any scheduled block of time. A Medicare contractor's coverage policy for psychiatric partial hospitalization limits group therapy to ten or fewer participants and requires attendance at least four days a week, for a combined twenty hours of program services, tracked against the written plan of care. According to the Department of Justice, federal prosecutors charged defendants in an October 2026 Los Angeles case with billing Zoom calls that had more than one hundred attendees as group therapy, where patients were told only to turn on their cameras, point the camera at the ceiling, or lie on the beach. None has been convicted of the allegations.

The Records Investigators Compare First

A PHP or IOP claim depends on three records agreeing with each other: the physician's certification, the daily attendance log, and the clinical note describing what happened in the billed session. A Medicare contractor's coverage policy also requires a program to document every absence and its cause. Investigators look for the gaps: a certification that does not match the clinical picture, or a group note identical for every patient every day. A documented compliance program that catches those gaps first changes how a reviewer treats the practice (see Building an Effective Compliance Program That Counts). A defense in these matters can turn on whether the certifying physician's clinical judgment was genuine at the time it was made, not on how clean the paperwork reads in hindsight.

How Referral Payments and Records Requests Become Charges

How a patient was referred into a PHP or IOP program is itself a basis for prosecution. The Los Angeles charges accuse the lead defendants of conspiracy to violate the Eliminating Kickbacks in Recovery Act, alongside healthcare fraud and wire fraud conspiracy counts, over alleged payments to recruiters for steering patients into treatment. The same referral conduct can implicate the anti-kickback statute and, for hospital-based programs with referral relationships among related entities, the Stark Law. A program under review for any of these issues may receive a civil investigative demand or a grand jury subpoena before any charge is filed. How the program answers it shapes the record for everything that follows (see Responding to a Civil Investigative Demand (CID) and Civil Investigative Demands: Negotiating Scope).

The certification, the attendance log, and the clinical note are the three records a PHP or IOP case is built on, and the gap between any two of them is where a fraud referral starts.

Why Early Legal Counsel Is Critical

It is critical that physicians, program directors, and compliance officers promptly retain experienced healthcare defense counsel upon receiving a civil investigative demand, a grand jury subpoena, an audit notice, or any other government inquiry touching PHP or IOP billing. Early legal intervention can protect the practice's rights, ensure appropriate responses to government requests, avoid inadvertent admissions, preserve relevant defenses, and allow counsel to communicate with investigators on the practice's behalf. Delaying legal representation can significantly affect the outcome of a matter and expose the practice, and the individuals who signed the certifications, to unnecessary risk.

How Health Law Alliance Can Help

Health Law Alliance has represented 2,500+ clients nationwide. The firm defends physicians, program directors, and healthcare companies facing PHP and IOP billing scrutiny, from an initial records request through indictment. If your practice has received a subpoena, a civil investigative demand, or an audit notice tied to partial hospitalization or intensive outpatient billing, contact us for a free, confidential consultation and put healthcare fraud defense counsel in place before the government's next request arrives.