DOJ Healthcare Fraud Takedowns: A Buyer Diligence Guide for Clinics, Labs, Telehealth, and Addiction Treatment

Healthcare revenue can look recurring, reimbursable, and scalable. The DOJ enforcement record shows why buyers need to test how that revenue is produced before they underwrite it.

By Noah Green CPA CFE

This article is general due diligence education for buyers, investors, lenders, and operators. It is not legal advice. Enforcement posture, docket status, restitution, and sentencing can change. Verify current posture before publication or reliance.

The Short Version

If you are buying or backing a healthcare provider, vendor, lab, telehealth platform, or addiction-treatment business, do not stop at payer mix, margin, and census. Test the claims engine.

The DOJ healthcare fraud matters summarized in this guide show recurring diligence failure points: controlled-substance prescribing tied to growth metrics, behavioral-health billings unsupported by treatment records, lab orders driven by brokers rather than treating physicians, and addiction-treatment revenue connected to patient inducements or excessive testing. These are not isolated bad actors. They are patterns that repeat across verticals and deal types.

The practical question for every buyer is this: if a regulator, payer, or prosecutor rebuilt the revenue stream claim by claim, would the economics still hold up? This guide gives you the framework to answer that question before you sign or wire.

Related SPP reading: The FTC Franchise Rule: What It Gives You, What It Does Not and Burgerim: When the Business in a Box Pitch Became a Franchise Buyer Trap. Within this cluster, also read the Done ADHD telehealth case study and the Operation Double Helix LabSolutions case study.

Public Posture

The public enforcement record as of the posture verification date of June 2, 2026 includes the following matters. All posture statements are drawn from the primary DOJ and FTC sources listed at the end of this article. Docket status can change; verify before reliance.

Done ADHD telehealth. A federal jury convicted Done’s founder and CEO and its clinical president in a telehealth stimulant distribution and health care fraud case. The DOJ conviction release describes a \$100 million scheme. The DOJ described Done as having submitted false prior authorizations and used telehealth infrastructure to expand stimulant prescribing. Sentencing was continued; verify current docket before publication.

Cerebral. Cerebral entered a non-prosecution agreement announced November 4, 2024, resolving a federal investigation into business practices that the DOJ said encouraged unauthorized controlled-substance distribution. Cerebral agreed to forfeit \$3.652 million. A \$2.922 million fine was deferred subject to compliance with the NPA’s 30-month cooperation term. A separate FTC civil matter involving Cerebral and related individuals concerns privacy, cancellation, and data-use allegations and was listed as pending with consumer refund activity in 2025. Verify current FTC posture before publication.

Arizona AHCCCS / Tusa Integrated Clinic. Rita Ntusa Anagho and Tusa Integrated Clinic LLC were charged in June 2024 as part of the DOJ’s 2024 National Health Care Fraud Enforcement Action. The DOJ Arizona case page reports that Anagho pleaded guilty to conspiracy to commit health care fraud and wire fraud. Alleged billings were approximately \$69.7 million. Sentencing posture on the DOJ case page should be verified against current USAO releases before publication.

Operation Double Helix / LabSolutions. Minal Patel, owner of LabSolutions LLC, was sentenced after a trial conviction to 27 years. The DOJ sentencing release states that over \$463 million was billed to Medicare and Medicare paid over \$187 million. The DOJ described a scheme involving patient brokers, telemedicine companies, and call centers, with doctors alleged to have robo-signed prescriptions without treating beneficiaries.

Compass Detox / WAR Network. Jonathan and Daniel Markovich were convicted after trial in November 2021 and sentenced in March 2022. Jonathan Markovich received 188 months and Daniel Markovich received 97 months. The DOJ sentencing release describes approximately \$112 million billed. The DOJ described patient recruiters, kickbacks including travel and drugs, patient shuffling between programs, and excessive urinalysis billing.

GLP-1 / Counterfeit Ozempic. A Chicago nurse was charged by information in January 2026 with distributing counterfeit Ozempic. The DOJ release states the products were labeled as Ozempic but were not made by Novo Nordisk and did not contain semaglutide. The case was pending as of the last available status information; verify current docket. The FDA separately clarified compounding policies as the semaglutide shortage resolved. This matter is included as a supply-chain and product-integrity sidebar for med-spa, pharmacy, and telehealth weight-loss diligence.

Why Healthcare Revenue Needs a Claims-Origin Test

A healthcare target can have real bank deposits, clean audited financials, and a growing payer mix and still carry serious revenue quality problems. The key diligence question is not only whether payers paid. It is whether the underlying claims were medically necessary, properly documented, ordered by appropriate clinicians, free from kickbacks, and consistent with payer rules and applicable law.

In the DOJ matters summarized here, enforcement risk did not sit only in accounting entries. It sat in patient acquisition channels, provider incentive structures, telehealth prescribing protocols, prior authorization templates, lab order sources, addiction-treatment utilization patterns, and the relationship between commercial growth targets and clinical decisions.

That distinction matters for buyers because standard financial due diligence does not reach it. Revenue recognition, EBITDA normalization, and payer-mix analysis will not surface a prior authorization template that was systematically inaccurate, a lab order source that was a broker rather than a treating physician, or a prescribing rate that was tied to a clinician’s compensation formula. Those risks live in clinical operations, compliance infrastructure, and the documents that sit between the patient encounter and the billing system.

The ACFE 2024 Report to the Nations reinforces a related practical point: fraud risk is often visible through control weaknesses, pressure, opportunity, and rationalization before it surfaces in audited financial statements. In healthcare acquisitions, that means revenue diligence needs to include controls around ordering, billing, documentation, referral compensation, and exception handling — not just the income statement.

Mechanism or Diligence Problem

Each matter in this cluster illustrates a specific mechanism that standard financial diligence tends to miss.

Prescribing tied to growth metrics. In the Done matter, the DOJ described a telehealth company that submitted false prior authorizations and used its platform to expand stimulant prescribing. In the Cerebral NPA, the DOJ described business practices that encouraged unauthorized controlled-substance distribution, including prescription-rate targets and deficient diversion controls. The mechanism is the same in both: a clinical decision — whether to prescribe a controlled substance — was influenced by a commercial objective. When a buyer underwrites telehealth revenue, the question is not only how many patients were seen. It is whether the prescribing rate is defensible on medical-necessity grounds independent of any growth target.

Billing unsupported by treatment records. In the Arizona AHCCCS matter, the DOJ charged billing for services not provided, not provided as billed, medically unnecessary, not integrated into treatment plans, or substandard. In the Markovich addiction-treatment matter, the DOJ described billing for medically unnecessary or unprovided services. The mechanism is a gap between what the billing system recorded and what the clinical record supports. Buyers who rely on revenue per patient day or revenue per encounter without testing the underlying chart are underwriting that gap.

Order sources disconnected from treating physicians. In the LabSolutions matter, the DOJ described patient brokers, telemedicine companies, and call centers generating lab orders, with physicians alleged to have signed orders without treating the beneficiaries. The mechanism is a lab revenue model that depends on an order-generation infrastructure rather than on clinical relationships. Lab EBITDA built on that model carries enforcement risk that does not appear in the revenue line.

Patient inducements and excessive utilization. In the Markovich matter, the DOJ described patient recruiters, kickbacks including travel and drugs, patient shuffling between programs, and excessive urinalysis billing. The mechanism is a patient acquisition and retention model that uses inducements rather than clinical need to drive census and a utilization model that generates revenue from testing rather than from treatment outcomes. Addiction-treatment diligence that focuses only on payer mix and census will miss both.

Supply-chain and product-integrity risk. In the Sackman counterfeit Ozempic matter, the DOJ alleged distribution of products labeled as Ozempic that did not contain semaglutide. For buyers of med-spa, pharmacy, or telehealth weight-loss businesses, the mechanism is a supply chain that substitutes counterfeit or compounded products for branded drugs without adequate provenance controls. The FDA’s clarification of compounding policies as the GLP-1 shortage resolved adds a regulatory layer: businesses that relied on shortage-list status to justify compounding need to have updated their sourcing and labeling practices.

Warning Signs

The following patterns, if present in a healthcare target, should trigger expanded diligence before any valuation or letter of intent is finalized.

Revenue concentration in high-growth, high-scrutiny service lines. Controlled substances, genetic testing, behavioral health, addiction treatment, and GLP-1 prescribing are all active DOJ and payer enforcement areas. Rapid revenue growth in these lines without a corresponding growth in clinical staff, documentation infrastructure, and compliance controls is a warning sign.

Prescribing or ordering rates that are outliers relative to peers. A telehealth platform prescribing stimulants at rates significantly above comparable practices, or a lab generating orders at volumes that exceed what the associated clinical relationships would support, warrants explanation before underwriting.

Marketing, consulting, or management contracts with patient-facing functions. Contracts labeled as marketing, management, consulting, call center, or patient engagement that in practice generate patient referrals, lab orders, or admissions need Anti-Kickback and medical-necessity review regardless of how they are labeled.

Prior authorization templates that are not patient-specific. Templated prior authorizations that do not reflect individual patient records are a documented risk factor in the Done matter. Request and review a sample of prior authorization submissions and compare them to the underlying patient charts.

Clinician compensation tied to prescribing, ordering, or census metrics. If a provider’s bonus, base pay, or continued engagement depends on volume of prescriptions, lab orders, admissions, or readmissions, that structure needs legal review before closing.

Payer correspondence that has not been disclosed. Sellers who cannot produce payer audit letters, pharmacy rejection notices, Medicaid notices, or repayment demands are either not maintaining compliance records or are withholding them. Either is a problem.

Subpoena or CID history. A subpoena or civil investigative demand from DOJ, HHS-OIG, a state attorney general, or a Medicaid fraud control unit is a material disclosure item. Absence of disclosure does not mean absence of a subpoena. Ask directly and in writing.

Patient churn, readmission patterns, or census instability. In addiction-treatment and behavioral-health targets, high patient churn, frequent readmissions, and census instability can reflect patient-shuffling practices of the kind described in the Markovich matter. Test census data against clinical records and discharge documentation.

Supply-chain gaps for compounded or specialty drugs. For any target dispensing or prescribing compounded GLP-1 drugs, verify DSCSA compliance, 503A or 503B pharmacy status, shortage-list reliance history, and current FDA guidance applicability.

Diligence Tests Before Signing or Before the Wire

The following tests are organized by the diligence problem they address. They are not a complete legal or regulatory compliance checklist. Engage healthcare regulatory counsel for any transaction.

Claims-Origin and Medical-Necessity Testing

Pull prescribing metrics by clinician, drug, diagnosis, patient source, and geography. Compare to peer benchmarks where available.
Select a statistically meaningful sample of high-dollar and high-growth claims and pull the complete chart for each. Test whether the documentation supports the service as billed, not just whether a note exists.
For telehealth targets, test whether the prescribing clinician had a prior treating relationship with the patient, whether a clinical assessment was documented before prescribing, and whether the assessment was patient-specific rather than templated.
For lab targets, trace each order in the sample to the ordering physician’s treating relationship with the patient. Identify whether any orders originated from a broker, call center, or telemedicine company without a documented treating relationship.
For addiction-treatment targets, reconcile billed therapy sessions, group sessions, and medical services to attendance records, therapist rosters, and treatment plans.

Referral and Order-Source Review

Request and review all contracts with marketers, patient brokers, call centers, sober homes, referral sources, and management companies. Do not accept a summary; read the contracts.
Identify whether any contract includes a per-patient, per-referral, per-order, or per-admission payment structure. Flag for Anti-Kickback review regardless of how the payment is labeled.
For addiction-treatment targets, test whether patients were transported, housed, or provided other benefits in connection with admission or continued enrollment.
For lab targets, test whether any marketing or management contract counterparty also had a financial relationship with a telehealth company, call center, or patient broker that generated orders.

Compensation and KPI Review

Request all clinician compensation agreements, bonus structures, and performance review materials.
Identify whether any compensation metric is tied to prescribing volume, ordering volume, prior authorization approval rates, admissions, readmissions, or census.
Request clinical governance materials including medical director agreements, clinical board minutes, and compliance committee records. Test whether clinical leadership had visibility into and approval of any growth-linked clinical metrics.

Payer and Regulator Correspondence

Request all payer audit letters, prepayment review notices, post-payment review results, and repayment demands for the trailing three years.
Request all pharmacy rejection correspondence and controlled-substance diversion investigation records.
Request all Medicaid enrollment records, site-of-service approvals, and any notices of suspension, termination, or repayment demand from any state Medicaid program.
Ask in writing whether the target has received any subpoena, civil investigative demand, or informal inquiry from DOJ, HHS-OIG, DEA, FDA, FTC, or any state attorney general or Medicaid fraud control unit. Require a written representation.
Request all litigation-hold notices and compliance self-disclosure records.

Patient-Welfare and Utilization Testing

Review patient complaint and grievance logs for the trailing two years.
Test urinalysis and drug-testing frequency against clinical protocols and payer rules. Excessive testing frequency relative to clinical need is a documented risk factor in the Markovich matter.
Review discharge and readmission patterns. Frequent readmissions of the same patients across affiliated programs warrant explanation.
Test clinical staffing ratios against licensed capacity and billed service volume.

Supply-Chain and Product-Integrity Testing (GLP-1 and Specialty Drug Targets)

Verify DSCSA transaction records for all specialty drug products dispensed or prescribed.
Confirm 503A or 503B pharmacy status and verify that compounding practices are consistent with current FDA guidance, including the FDA’s clarification of policies as the semaglutide shortage resolved.
Test whether any product was sourced from a supplier that is not an FDA-registered manufacturer or licensed wholesaler.
Review adverse-event reporting records and any patient complaints related to product efficacy or adverse reactions.

How to Read the Source Documents

DOJ press releases describe alleged conduct and, where applicable, conviction or sentencing outcomes. They are not the complete record. For any matter that is relevant to a specific target, pull the indictment or information, the plea agreement if applicable, and any sentencing memoranda from the primary court docket. The indictment will describe the specific conduct alleged in more detail than the press release. The plea agreement will identify the specific counts and the factual basis the defendant admitted. Sentencing memoranda often contain the government’s detailed loss calculation methodology, which is useful for understanding how prosecutors measure harm in similar schemes.

For NPA matters like Cerebral, the non-prosecution agreement itself is the primary document. It will describe the admitted or stipulated facts, the compliance obligations, and the conditions under which the deferred fine becomes payable. Read the compliance obligations carefully: they describe the control failures the government identified, which is a direct input to buyer diligence for any comparable target.

For FTC matters, the complaint and proposed order are the primary documents. The complaint describes the alleged practices in detail. The order describes the remedial obligations, which again are a direct input to diligence for comparable businesses.

By the Numbers

Matter	Public posture as of primary sources	Public dollar figure	Primary diligence lesson
Done ADHD telehealth	Jury conviction reported; sentencing continued, verify current docket	DOJ described a \$100M scheme	Telehealth prescribing growth can become criminal evidence when clinical necessity is not independently supported
Cerebral	Non-prosecution agreement announced Nov. 4, 2024; 30-month cooperation term	\$3.652M forfeiture; \$2.922M fine deferred subject to compliance	A company can resolve criminal exposure without an indictment and still carry material buyer risk through NPA compliance obligations
Arizona AHCCCS / Tusa Integrated Clinic	Indictment June 2024; guilty plea reported on DOJ case page; sentencing posture needs verification	Approx. \$69.7M alleged billings	Medicaid behavioral-health diligence must test service documentation, patient residences, and chart integrity, not just revenue
Operation Double Helix / LabSolutions	Sentenced after trial conviction to 27 years	Over \$463M billed; over \$187M paid by Medicare	Lab revenue needs order-source and medical-necessity testing; broker-driven order volume is not the same as clinically supported revenue
Compass Detox / WAR Network	Convicted after trial Nov. 2021; sentenced Mar. 2022	Approx. \$112M billed	Addiction-treatment diligence must test patient inducements, census churn, readmission patterns, and utilization, not just payer mix
Counterfeit Ozempic / Sackman	Charged by information Jan. 2026; pending, verify current docket	No Medicare or Medicaid loss identified in DOJ release	Med-spa, pharmacy, and telehealth weight-loss targets need supply-chain provenance and DSCSA testing

Source: All figures and posture statements are drawn from the primary DOJ and FTC sources listed below. Verify before reliance.

Buyer / Investor Takeaway

Healthcare is not a sector where financial diligence alone is sufficient. The enforcement record in this cluster illustrates that revenue can be real, growing, and deposited in the bank while the underlying claims are legally defective. That gap does not show up in an income statement. It shows up when a payer audits, a regulator investigates, or a prosecutor builds a case.

For buyers, the practical implication is that healthcare diligence needs two parallel tracks. The first is the standard financial track: payer mix, revenue cycle, EBITDA normalization, working capital, and contract review. The second is a claims-origin track: medical necessity, referral source integrity, compensation structure, compliance infrastructure, and regulator correspondence. Neither track substitutes for the other.

The matters in this cluster also illustrate that enforcement risk is not limited to targets that have already been charged. The Cerebral NPA resolved an investigation that did not result in an indictment. The control failures the government identified — prescription-rate targets, deficient diversion controls, business practices that encouraged unauthorized prescribing — are the same control failures a buyer would find in diligence if they looked for them. The NPA is useful not only as a case study in Cerebral’s specific situation but as a description of the control environment that regulators expect in a telehealth behavioral-health business.

For lenders and investors who are not acquiring control, the same framework applies. A credit facility or equity investment in a healthcare business that has not been tested for claims-origin risk is a facility or investment that has not been fully underwritten.

The ACFE 2024 Report to the Nations is a useful secondary reference for framing the control environment question. The report’s consistent finding that fraud risk is visible through control weaknesses before it is visible in financial statements supports the practical argument for expanding healthcare diligence beyond the income statement.

SPP Bottom Line

The DOJ healthcare fraud enforcement record is not a list of anomalies. It is a map of recurring diligence failure points that appear across telehealth, behavioral health, addiction treatment, genetic testing, and specialty pharmacy. The mechanisms are documented in public primary sources. The warning signs are identifiable before closing. The tests are executable with the right document requests and the right questions.

SPP’s role is not to replace healthcare regulatory counsel. It is to help buyers, investors, and lenders pressure-test the numbers, the source documents, and the control environment before valuation depends on revenue that may not survive regulatory scrutiny. The question to answer before signing or wiring is the same in every healthcare deal: if the claims engine were rebuilt from scratch by a regulator or prosecutor, would the economics hold?

If you cannot answer that question with documents in hand, you have not finished diligence.