The Suspicious Pharmacy Refill Pattern
A Part D plan's fraud unit notices that a pharmacy in a strip mall submits claims for a 90-day supply of a high-cost topical for 40 different beneficiaries, many of whom live more than 60 miles away. Several beneficiaries' addresses match the pharmacy's own address. One beneficiary, Mr. K, calls the plan saying he never received the medication and that a marketer came to his apartment, took his card, and told him 'not to worry about the paperwork.' The plan's special investigations unit (SIU) also sees that the same prescriber's NPI appears on nearly all the claims. The plan must decide whether to pay pending claims, what to report, and how to protect Mr. K.
1. What fraud, waste, and abuse indicators are present, and what should the SIU do first?
Read the worked answer
Indicators include: (1) a geographic anomaly-beneficiaries far from the pharmacy; (2) addresses matching the pharmacy (possible identity theft or fictitious beneficiaries); (3) a single prescriber on nearly all claims (possible kickback or prescription-mill pattern); (4) high-cost drug and 90-day quantities; (5) a marketer taking a beneficiary's card and handling 'paperwork' (possible card-sharing or identity theft); (6) Mr. K reporting non-receipt (possible billing for undispensed drugs).
First steps: open an investigation, preserve records, place a payment hold or flag on the suspect claims consistent with plan policy and contract requirements, verify with Mr. K and the prescriber whether prescriptions exist, and check whether the pharmacy is enrolled/valid. The SIU should not tip off the suspects. The plan must follow its Medicare compliance program and CMS reporting obligations.
2. What are the plan's reporting obligations, and to whom?
Read the worked answer
The plan must report suspected fraud to CMS through the required mechanisms (for example, the Health Care Fraud Prevention Partnership or CMS's fraud reporting channels) and comply with its Medicare Advantage/Part D contract requirements. If the conduct may involve federal health care program fraud, the plan should refer it to the HHS Office of Inspector General (OIG) and/or the Department of Justice, and coordinate with its Medicare Drug Integrity Contractor (MEDIC). The plan must also maintain its own fraud, waste, and abuse program and document the investigation. Timelines and channels should follow the plan's policies and CMS guidance; the compliance officer should be involved.
3. How should the plan protect Mr. K, and what should it tell him?
Read the worked answer
The plan should treat Mr. K as a potential victim of identity theft or marketing misconduct. It should: verify his identity and account, check whether unauthorized prescriptions were billed to him, correct any erroneous claims, restore any cost-sharing he was charged, and consider issuing a new member ID. It should explain in plain language what happened, what the plan is doing, and how to protect himself (do not give the card to marketers, review Explanatory of Benefits statements, report suspicious contacts). The plan should also document the marketer's conduct and refer it to the compliance/marketing oversight team, since taking a beneficiary's card and handling enrollment paperwork raises both FWA and marketing-compliance issues.