Medicare Scam Calls Are Surging Again: The Federal Charges Behind the Call Center, the Lead List, and the Billing Company

The phone rings at seven in the morning. The caller says she is with Medicare, or just with health care, and she needs to confirm a Medicare number before benefits lapse. Consumer reporters have run that story for weeks, and their advice is right: hang up, delete the text, call 1-800-MEDICARE. That advice is written for the person receiving the call.

This post is about the other end of the line. Every one of those calls sits at the front of a pipeline that can end in a federal indictment. The phone room produces the lead. The lead becomes a Medicare beneficiary identification number. The number moves to a marketing company, then to a billing entity, then into a claim. When HHS-OIG and the FBI reverse engineer that chain, everyone who touched it becomes a subject, including people who never spoke to a beneficiary and never saw a claim form. If you run a call floor, own a lead generation company, hold a nominee stake in a DME supplier, or bought a list from someone who would not say where it came from, the surge in the news is your risk.

The phone room produces the lead. The lead becomes a Medicare beneficiary identification number. When HHS-OIG and the FBI reverse engineer that chain, everyone who touched it becomes a subject.

Key Takeaways

• Buying, selling, or distributing even one Medicare beneficiary identification number is a standalone federal felony under 42 U.S.C. § 1320a-7b(b)(4), punishable by up to 10 years.
• DOJ's 2026 National Health Care Fraud Takedown charged 455 defendants across 56 federal districts with more than $6.5 billion in alleged false claims.
• HHS-OIG now alleges offshore call centers fabricated beneficiary consent recordings using artificial intelligence, then routed the data to U.S. billing entities.
• Florida charges the same conduct under Fla. Stat. § 817.568 and § 825.103, and the elderly victim enhancements stack on top of any federal exposure.
• South Florida lead generators and marketers are charged as conspirators alongside billing providers, not treated as arms-length vendors.

What Is Driving the Current Surge

Medicare open enrollment runs October 15 through December 7, and call volume climbs for weeks ahead of it. Complaints about Medicare scam calls are up roughly 40 percent over last year according to Better Business Bureau data. The scripts follow a short list of patterns. A caller asks whether you have Parts A and B, then offers a Part C plan, a new or upgraded card, extra benefits, or free equipment. Others claim to be calling from a doctor's office.

The AARP Fraud Watch Network has published the tells, and they are worth stating plainly. Medicare will not call, text, or email asking anyone to confirm a Medicare number, because Medicare already has it. There is no upgraded card or gold card. Genetic testing, braces, and durable medical equipment are ordered by a treating physician, not offered on a cold call. The channel has widened beyond the phone: more than forty health systems recently warned patients about a fake MyChart Medicare kit circulating by text and email.

What makes this wave different is the quality of the underlying data. The callers are not guessing. They work from information harvested in breaches, scraped from public sources, bought on the dark web, or collected through websites that advertise free health products and exist only to capture a Medicare number. That data is a commodity with a price, and the moment someone pays that price, a federal statute is in play.

The callers are not guessing. The list is a commodity with a price, and the moment someone pays that price, a federal statute is in play.

What the Government Is Building Right Now

In September 2026, HHS-OIG added four fugitives to its most wanted list in connection with a Pakistan-based call center. The allegations describe the whole pipeline in one case. Investigators say the call center obtained Medicare beneficiary information, including beneficiary identification numbers, through theft, deception, hacking, scraping public websites, and deceptive ads for free health products. It then called beneficiaries to capture consent for DME, COVID-19 test kits, and genetic tests that were never requested and never medically necessary. OIG alleges some of that consent was fabricated using artificial intelligence.

Read that structure carefully, because it is the template. Prosecutors build these cases backward from claims data, and the people closest to the claim absorb the charges the fugitives cannot.

"The offshore principals are hard to reach. The nominee owner in Florida is not. The marketer who brokered the list is not."— Aaron M. Cohen, AMC Defense Law

The scale is set by DOJ's annual enforcement action. On June 23, 2026, the Justice Department announced the 2026 National Health Care Fraud Takedown: 455 defendants charged in 56 federal districts, more than $6.5 billion in alleged false claims, over $182 million in assets seized. CMS separately suspended 1,079 providers and revoked the billing privileges of 1,403 more. Several charged defendants were not clinicians. They purchased and resold beneficiary identification numbers and took kickbacks for doing it.

Florida has been central to this enforcement wave for years. A West Palm Beach call center manager who ran what prosecutors called the doctor chase desk, calling physicians and representing that targeted beneficiaries were mutual patients requesting genetic tests, was sentenced to 15 years in a $67 million scheme. Both the Southern and Middle Districts of Florida have charged beneficiary identification number conspiracies built on the sale of data rather than on the billing.

Where the Criminal Exposure Sits in Florida

Florida prosecutors reach this conduct first and often. Fla. Stat. § 817.568 criminalizes the unlawful use of personal identification information, and the felony degree escalates with the number of victims and the dollar amount, with a separate enhancement when the victim is 60 or older. Fla. Stat. § 825.103 makes exploitation of an elderly person a first degree felony at $50,000 or more. Fla. Stat. § 817.034, the Florida Communications Fraud Act, allows a scheme to defraud count plus a separate count for each communication in furtherance of it, which is dangerous when the government holds a dialer log. Fla. Stat. § 817.505, the Patient Brokering Act, reaches referral payments with no federal program involved, and telemarketers face licensing exposure under Fla. Stat. § 501.616.

The Federal Charges, and Why One Beneficiary Number Is Enough

The federal charges are heavier. The most underappreciated one is 42 U.S.C. § 1320a-7b(b)(4), which makes it a felony to knowingly and willfully purchase, sell, or distribute a Medicare beneficiary identification number without lawful authority.

From there the stack is familiar. The Anti-Kickback Statute, 42 U.S.C. § 1320a-7b(b), reaches any remuneration for referrals or for arranging federally reimbursable services, and per-lead pricing is the classic fact pattern. Health care fraud under 18 U.S.C. § 1347 carries 10 years per count. Conspiracy under 18 U.S.C. § 1349 carries the same maximum as the object offense with no overt act requirement. Wire fraud under 18 U.S.C. § 1343 carries 20 years, and every call, text, and email is a wire. Aggravated identity theft under 18 U.S.C. § 1028A adds a mandatory two years consecutive, the count that turns a probationary case into a prison case. Selling protected health information can be charged under 42 U.S.C. § 1320d-6. Moving the proceeds brings in 18 U.S.C. §§ 1956 and 1957.

Sentencing exposure is driven by loss under USSG § 2B1.1, and the government calculates intended loss from the amount billed, not the amount paid. A campaign that generated $12 million in claims and collected $2 million gets argued at $12 million. Add the victim count enhancement, the vulnerable victim adjustment under USSG § 3A1.1(b), and a role enhancement under USSG § 3B1.1 for anyone who supervised a phone floor, and a first offender can face a double-digit guideline range. Restitution under 18 U.S.C. § 3663A and forfeiture run alongside it, and exclusion under 42 U.S.C. § 1320a-7 ends any future federal health program participation.

No claim has to be submitted. No claim has to be paid. The transaction in the data is the crime, and it is charged as a freestanding count when the billing side is hard to prove.

The Mistakes That Do the Most Damage in the First 72 Hours

Talking to agents at the door. HHS-OIG and FBI agents do not appear to gather your side of the story. They appear because they already have claims data, bank records, and often a cooperating marketer. An unrecorded driveway interview becomes a 302 read back at trial, and a wrong answer becomes a false statement count under 18 U.S.C. § 1001.

Deleting the dialer logs, the CRM, the recorded consent files, or the WhatsApp threads. That is the fastest route from a defensible fraud case to an indefensible obstruction case under 18 U.S.C. § 1519.

Continuing to run the campaign after a subpoena arrives. Post-subpoena conduct is the government's best evidence of willfulness.

Assuming that selling leads is not billing, and therefore not a crime. That assumption is contradicted by the plain text of § 1320a-7b(b)(4) and by dozens of charged cases.

Letting the billing company's lawyer handle it. When the government separates the phone room from the marketer from the provider, joint representation collapses, and whoever lacks independent counsel is the one described in someone else's proffer.

How These Cases Are Defended

The defense usually lives in provenance and intent. Where did the data come from, and can the government prove the defendant knew. A marketer who bought lists from a vendor with a contract, a representation of lawful sourcing, and a paper trail of consent recordings sits in a different position from one who paid cash per name. The two statutes that matter most here require knowing and willful conduct. That is a real element, and it is where a well-built record wins.

Consent files deserve early forensic attention. The government's newer theory is that consent recordings were fabricated, some with synthetic voice. If your files are genuine, prove it with metadata, call detail records, and the dialer audit trail. If a vendor supplied fabricated recordings, that reframes you as the vendor's victim, and it needs to reach the prosecutor before the charging decision.

Loss is the other battlefield. Intended loss under the guidelines is where most of the sentencing damage lives, and it is frequently overstated. Claims denied on their face, claims outside the charged period, and claims driven by other conspirators are all fair targets. Dropping a loss figure one tier is often worth more than any trial argument.

Anyone holding a provider number should expect a parallel track. A CMS payment suspension, a Medicare revocation, a False Claims Act complaint, and a licensing action can run at once, and a careless statement in the civil matter becomes an exhibit in the criminal one.

Why the Next Ninety Days Matter

Open enrollment is the industry's high season, and it generates the records these cases are built from. Every dialer campaign, lead purchase, and consent file created between October 15 and December 7 becomes discoverable material in an investigation that may not surface for two more years.

Two other clocks are running. CMS flags anomalous billing through analytics and suspends payment long before agents knock, so a suspension letter or sudden prepayment review is often the earliest visible signal that a criminal referral exists. The second is the five-year statute of limitations under 18 U.S.C. § 3282. Conduct from the COVID-19 test kit and telehealth era of 2021 and 2022 is still inside the window, and DOJ is still charging it.

If an agent has contacted you, a subpoena has arrived, a payment suspension has landed, or a vendor you worked with has been charged, the useful window is now. Not after the indictment.

Common Questions

Under Investigation for a Medicare Marketing, Lead Generation, or Billing Matter?

AMC Defense Law represents call center operators, marketing and lead generation companies, DME suppliers, laboratories, telehealth platforms, and the individuals who work inside them. The firm handles federal investigations from the target letter and grand jury subpoena stage through trial and sentencing, in the Southern and Middle Districts of Florida and nationwide.

If an agent has contacted you, a subpoena has arrived, or a business partner has been charged, the conversation is confidential and it should happen before you respond to anyone else. Call 561-542-5494 or email amc@amcdefenselaw.com to arrange a consultation.

Pre-indictment work is where these matters are won. A target letter or grand jury subpoena means the charging decision is still open.

If you or your loved ones have been arrested or are under federal investigation in a Medicare marketing, lead generation, or billing matter, call Aaron M. Cohen for a confidential consultation, 24 hours a day to get help.

This article is provided for general informational purposes only and does not constitute legal advice. Reading it does not create an attorney-client relationship. Charges described in referenced enforcement actions are allegations, and all defendants are presumed innocent unless and until proven guilty. Anyone facing a federal or state investigation should consult qualified counsel about the specific facts of their situation.

About the author: Aaron M. Cohen is the founder and principal attorney of AMC Defense Law in Boca Raton, Florida, with more than 30 years of criminal defense experience. He is admitted to practice in Florida and New York, and before the United States District Courts for the Southern District of Florida and the Southern District of New York. The firm represents clients in federal investigations and prosecutions involving healthcare fraud, Anti-Kickback Statute matters, DME and telemedicine fraud, controlled substance cases, financial crimes, and complex federal litigation, in Florida and nationwide.