Medicare and Medicaid are dropping billions of taxpayer {dollars} to criminals as a result of they’ll’t hold tempo with their high-tech scams, a Put up investigation has discovered.
Worldwide prison networks make use of hackers who steal delicate affected person information then promote it on the darkish internet or use it to then invoice for pretend medical tools or companies in individuals’s names.
Scammers even use AI voice bots to coax data out of seniors on the telephone, posing as US healthcare employees, usually from hundreds of miles away in Europe or Asia.
They use the identical methods on the insurance coverage firms, with one Philippines-based outfit going so far as coaching AIs to talk like American outdated of us when insurance coverage firms referred to as about suspicious claims, in accordance with feds.
“The fraud schemes I’m seeing — it blows me away. It’s scary how subtle these items have change into,” Gordon Schnell, a accomplice within the healthcare fraud whistleblower legislation agency Constantine Cannon, instructed The Put up.
“The size of the cash that CMS [Centers for Medicaid and Medicare] doles out yearly is big. Even when they lose sight of a comparatively small share of it, it’s nonetheless billions of {dollars}.”
In a March 2026 report back to CMS, cybersecurity firm Pindrop detailed how fraudsters use cloned voices to authorize transactions, working “at machine pace.”
AI-enabled campaigns deploy automated voice bots to probe Interactive Voice Response (IVR) techniques — these automated phone menus everytime you name a big firm or a authorities company — to check safety after which escalate to a human agent, the place they try and trick the human agent into releasing account information.
“Artificial identities constructed from breached information are used to determine protection beneath fraudulent pretenses, or to manufacture shopper consent,” the report discovered.
Final month, The Put up reported on a jaw-dropping ‘phantom catheter’ rip-off carried out by the Russian mob through which they made off with $1 billion.
Extremely they’d allegedly been capable of buy 30 medical provide firms throughout the US which had been already enrolled as Medicare suppliers, then used them to fraudulently invoice Medicare. They tried to invoice $10 billion, principally for urinary catheters, utilizing the stolen affected person information of over a million Individuals, which triggered 400,000 complaints, in accordance with prosecutors.
The scheme was brazen and many of the pretend reimbursements had been blocked, however not earlier than gangsters had laundered big quantities by way of banks in Israel, Turkey and China, prosecutors cost.
The change in possession of a Medicare supplier normally triggers a website go to, however CMS was unaware of the Russian enterprise purchases as a result of the gangsters — who despatched patsies from Russia and Estonia to choose up bodily checks within the US — didn’t alert the company and saved the outdated house owners’ names and financial institution accounts round for so long as attainable, in accordance with the indictment.
In a number of circumstances when CMS caught on and stopped paying shady firms, non-public supplemental insurance coverage firms, identified broadly as Medigap, as an alternative continued paying and saved the rip-off alive longer, in accordance with a number of indictments.
In June, the DOJ introduced prices towards Ibrahim Khaldoon Hilmi, who was allegedly working an offshore Medicare fraud scheme, additionally involving US medical provides. He was apprehended in Cyprus and now faces federal well being care fraud and cash laundering conspiracy prices in Florida.
Prosecutors say by way of his Sunshine Senior urinary catheter firm Hilmi was capable of pocket $5.7 million in taxpayer cash. It’s unclear if any of that has been recovered. Hilmi has but to enter a plea.
Additionally final month Herbert Leon Kimble was nabbed at a on line casino in Pasig Metropolis, Philippines for orchestrating an tried $1.2 billion Medicare fraud scheme utilizing a Philippine name heart to generate pretend orthopedic brace prescriptions. He had beforehand pled responsible however then fled the nation in 2022 after prosecutors really useful probation and a $40 million restitution cost.
In the meantime, prices had been filed within the Northern District of Illinois towards 5 defendants in 2025, together with two house owners of Pakistani advertising and marketing firms, in reference to a scheme through which Medicare ID numbers had been allegedly obtained through misleading advertising and marketing.
Via hacking, scraping web sites, and misleading “free product” web sites, they allegedly illegally obtained massive numbers of actual Medicare sufferers’ ID numbers, which they bought for $31 million to their very own pretend medical provide firms, in accordance with prosecutors.
The rip-off included utilizing synthetic intelligence to create pretend recordings of sufferers consenting to obtain medical provides, and the outfit made off with $419 million out of $700 million they billed for.
One other Pakistani scammer who owned a billing firm was busted that 12 months in a kickback scheme collaborating with at the least 41 drug therapy facilities in Arizona to fraudulently invoice for substance abuse therapy companies that had been by no means supplied, or substandard to necessities. Prosecutors say the defendant used a few of his $25 million proceeds to buy a $3 million residence on a golf course in Dubai.
Not one of the defendants have but entered a plea.
1.3 million Individuals had been issued new Medicare beneficiary numbers this spring in a fraud prevention effort, in accordance with CMS.
Most of those criminals by no means really set foot within the US themselves. To acquire companies, foreign-based gangsters use digital non-public servers (VPSs) to cover their true bodily places whereas speaking with sellers and digitally signing buy paperwork, which means the benefit and interconnectivity of the fashionable world labored to their benefit.
They could additionally use a US-based company proxy, referred to in indictments as a “Registered Agent Firm” to file paperwork on their behalf.
“It might be that it’s simply certainly one of many prison enterprises through which these overseas cartels interact in and could also be really simpler as a result of it doesn’t contain smuggling or shifting round merchandise. It’s clear. It’s all paperwork-oriented and you are able to do it remotely,” mentioned Schnell.
“[Gangs] have already got techniques arrange for laundering illicit proceeds. In order that’s why you’re seeing a development. However certainly not are [foreign networks] the dominant unhealthy actors on this house,” he added, noting home fraudsters account for the overwhelming majority of the $186 billion in improper Medicare and Medicaid funds nationwide, a determine estimated by the nonprofit Authorities Accountability Workplace.
US citizenship isn’t required to begin or purchase many companies, even medical suppliers. In reality, even people who find themselves within the US illegally are nonetheless lawfully allowed to buy and personal American firms in all 50 states, an intentional a part of enterprise codes designed to encourage overseas funding.
Nonetheless, the system doesn’t differentiate between a Saudi billionaire investor, for instance, and the military of 20-something Estonians who feds say had been despatched to the US on vacationer visas and have become nominee “house owners” of the 30 medical provide firms within the Russian mob operation.
In line with indictments, the scams usually relied on US-based financial institution tellers who had been pleasant with the fraudsters to help in opening accounts and looking out the opposite method round shady transactions.
“Crypto appears to be an enormous a part of it as a result of it’s so simply transferable,” mentioned Schnell. “Considered one of our circumstances concerned authorities funds despatched by way of numerous cash switch platforms [such as Venmo or PayPal] that had been instantly withdrawn and transformed into crypto. As soon as it’s in crypto, it may be moved way more simply.”
Requiring elevated paperwork was as soon as a bulwark towards fraud, however Schnell says that now not appears to be the case.
“Every thing is so tied into automation and AI that I’m unsure the paperwork burden is what it was,” he mentioned.
