No products in the cart.
MODULE 16: LEGAL, ETHICAL, AND COMPLIANCE MANDATES
Section 3: Fraud, Waste, and Abuse Prevention
Identifying red flags for FWA in pharmacy practice, implementing effective compliance programs, and understanding reporting obligations.
SECTION 16.3
Fraud, Waste, and Abuse Prevention
From Gatekeeper to Guardian: The Pharmacist’s Role as the Ultimate Compliance Checkpoint.
16.3.1 The “Why”: Beyond Kickbacks – The High Cost of Complacency
In the previous section, we navigated the legal minefields of the Anti-Kickback Statute and Stark Law. These laws are sharp, specific, and focused on a particular type of corruption: financial relationships that taint medical judgment. That entire discussion, however, exists under a much larger, all-encompassing umbrella: Fraud, Waste, and Abuse (FWA).
AKS and Stark violations are types of fraud, but FWA covers the entire universe of improper payments, from malicious, criminal schemes to simple, negligent carelessness. The U.S. healthcare system, valued in the trillions, is estimated to lose hundreds of billions of dollars each year to FWA. This isn’t just a rounding error; it’s an amount so vast it could fund entire public health initiatives. Every dollar lost to FWA is a dollar that cannot be used to care for a patient, to fund research, or to pay for a legitimate, necessary prescription.
As an advanced specialty pharmacist, you are the final and most important gatekeeper for the pharmacy benefit, which is one of the most expensive and fraud-prone sectors of healthcare. When you verify a prescription, you are not just performing a clinical check. Your signature is a legal attestation to the payer (including the federal government) that the claim is accurate, medically necessary, and legitimate. Your professional license is, in effect, a stamp of approval that authorizes the transfer of thousands, or even hundreds of thousands, of dollars from the payer to your pharmacy.
This responsibility places an immense legal and ethical burden on you. You are no longer just a gatekeeper who checks for a valid prescription. You must now be a guardian, a clinical detective who actively hunts for the “red flags” of FWA. The government, through the False Claims Act, does not differentiate between a pharmacist who actively participates in a fraud scheme and one who recklessly disregards the warning signs. Complacency is not a defense; it is a form of complicity.
This section is your practical guide to becoming that guardian. We will deconstruct the “Unholy Trinity” of Fraud, Waste, and Abuse, moving beyond legal definitions to give you concrete, pharmacy-centric examples of what they look like in your daily workflow. We will then build, step-by-step, the two pillars of your defense: a “red flag” detection system (your offense) and an effective compliance program (your defense). Mastering this is not optional. It is the fundamental, non-negotiable duty of any pharmacist entrusted with the stewardship of high-cost therapies.
Pharmacist Analogy: The Bank Teller for the Healthcare System
Imagine you are not a pharmacist, but a senior bank teller at a high-value branch. Your core job is to dispense money based on legitimate requests. Now, let’s see how FWA looks in this context.
Scenario 1: FRAUD (The Forged Check)
A “customer” comes to your window with a $10,000 check. You immediately recognize the signature as a forgery. The account holder’s signature is on file, and it doesn’t match. You know this check is fraudulent. The customer slides you a $100 bill and winks, “Just a tip for your trouble.” You take the $100 and cash the $10,000 forged check.
This is Fraud. You had intent (“knowingly and willfully”) to deceive the bank for financial gain (the $100 bribe). This is a criminal act.
Pharmacy Equivalent: Billing Medicare for a $10,000/month oral oncology drug that you know you never dispensed, or one for which you know the PA was falsified.
Scenario 2: ABUSE (The Sloppy Check)
A customer hands you a check. In the “amount” box, it’s sloppily written and could be “$100.00” or “$1,000.00”. Bank policy clearly states that for any ambiguous check, you *must* call the account holder to verify the amount. You’re busy, and the line is long. You think, “Eh, it looks more like $1,000.” You cash it for $1,000 without making the call, knowing you are bending the rules.
This is Abuse. You didn’t intend to steal, but you intentionally bypassed policies and procedures in a way that led to an improper payment. This is not a simple mistake; it’s an improper practice.
Pharmacy Equivalent: Billing a 30-day supply for a box of insulin pens that could last 45 or 60 days, just because it’s “easier” than calculating the true days’ supply. You are bending the rules and causing an improper payment.
Scenario 3: WASTE (The Dropped Cash)
A customer legitimately cashes a $10,000 check. Your bank’s policy, based on past losses, is to dispense any amount over $5,000 in a secure, sealed envelope and to remind the customer to be careful. You, again, are busy. You just count out the $10,000 in loose bills and slide the stack across the counter. The customer scoops it up, and as they walk out the door, they drop half the stack. The money blows away in the wind. The $5,000 is gone forever.
This is Waste. It’s not fraud (the check was real). It’s not abuse (you didn’t bend a billing rule). It was negligence. Your failure to follow a common-sense policy designed to *prevent loss* resulted in a catastrophic loss. The money is just as gone as if it were stolen.
Pharmacy Equivalent: Auto-refilling a $10,000/month specialty drug and shipping it to a patient’s house without *first* calling them to confirm they are still taking it. The patient stopped the drug last week due to side effects, so your $10,000 shipment goes straight into the trash. This is pure, unadulterated waste, and it is a prime target for payers and auditors.
In all three scenarios, the bank lost money. In all three, you were the critical point of failure. Your job as a CASP is to prevent all three with equal vigilance.
16.3.2 Deconstructing the Unholy Trinity: FWA in Daily Practice
To fight FWA, you must be able to recognize it instantly in your workflow. The lines can be blurry, but the examples are distinct. The key difference is intent. The government can often prove “intent” not by reading your mind, but by demonstrating a pattern of behavior that is so reckless it becomes, in the eyes of the law, indistinguishable from intentional fraud.
Masterclass Table: The FWA Trinity in Pharmacy Practice
| Category | FRAUD (Intentional Deception) | ABUSE (Bending the Rules) | WASTE (Negligent Loss) |
|---|---|---|---|
| Legal Definition | Knowingly and willfully executing a scheme to defraud a healthcare benefit program or to obtain money by means of false pretenses. | Actions that result in unnecessary costs, often by bending rules or through improper billing. Does not require the same level of intent as fraud. | |
| Key Element | Intentional & Knowing | Reckless or Bending Rules | Careless or Negligent |
| Example: Billing & Claims | Billing for a prescription that was never dispensed. | Using an incorrect NDC (e.g., brand) to get a higher reimbursement, knowing you dispensed the generic. | Auto-refilling and billing for a prescription that the patient never picks up, which is then reversed 14 days later. (Wastes time, resources, and “locks up” the patient’s benefit). |
| Example: Prior Authorization (PA) | Falsifying clinical data. Writing “patient has failed methotrexate” when the patient has never taken it. Changing a lab value in the faxed document. | “Cherry-picking” patients. Intentionally only accepting PA requests for high-reimbursement patients and claiming to be “too busy” for complex, low-reimbursement Medicaid patients. | Submitting a PA with incomplete or missing information, getting a denial, and just giving up, causing the patient to abandon a necessary therapy. |
| Example: Compounding | Billing for a 10-ingredient formula but only putting 4 in the bottle. (This is also adulteration/misbranding). | Making a 30-day supply of a compound with a 14-day beyond-use-date (BUD), forcing 16 days’ worth of the drug to be thrown away. | |
| Example: Specialty “White Bagging” | Billing the payer for a drug that was shipped to a clinic, knowing the patient missed their appointment and the drug was never administered. | Not following proper cold chain procedures during shipping. The $20,000 drug arrives at the clinic “hot” and is unusable, but you bill for it anyway. | Dispensing a full 30-day supply of a new-start oral oncology drug. The patient develops severe side effects on Day 5 and stops. The remaining $15,000 of drug is now waste. (The proper action is a 7 or 14-day “starter” fill). |
| Example: Patient Inducements | Routinely and publicly waiving all copays for Medicare patients to “steal” them from competitors. (This is also an AKS violation). | Offering “gas cards” or “gift cards” only to patients who transfer their high-profit specialty scripts, but not to patients with low-profit scripts. |
16.3.3 Masterclass: Red Flags for FWA in Pharmacy Practice
Your most important job is pattern recognition. A single red flag might be an anomaly; a cluster of red flags is a five-alarm fire. As a CASP, you must have an internal “FWA detector” running at all times. Here is your detection guide.
Category 1: Prescriber-Level Red Flags (The “Script Mill”)
This is where FWA often begins. You are the check and balance on the prescriber. You are not a “vending machine”; you are a clinician with a duty to question. Be wary of prescribers, clinics, or telehealth platforms that show these patterns:
Playbook: Spotting a “Script Mill” Prescriber
- Geographic Impossibility: The prescriber is in Florida, the patient is in Michigan, and your pharmacy is in California. This is a massive red flag for telehealth fraud. How did this patient find you? How did the prescriber find you?
- Clinical Monotony: Every prescription from the clinic is identical. All patients get the same high-margin compounded pain cream (e.g., Lidocaine/Diclofenac/Baclofen/Gabapentin) regardless of their specific diagnosis.
- “Unholy Trinity” Prescribing: The classic red flag for diversion. High volumes of scripts for opioids, benzodiazepines, and carisoprodol (soma).
- No Patient-Provider Relationship: You call the prescriber with a clinical question, and they have no idea who the patient is. This is common with “script mill” telehealth platforms where the “exam” was a 30-second text chat.
- Cash-Pay Only: The prescriber or clinic doesn’t accept any insurance, and all their patients are also paying cash for high-cost controlled substances or compounds.
- “Rubber Stamp” PAs: A clinic sends you a PA for a specialty drug, and the clinical documentation is clearly “cloned” from another patient. The same notes, same lab values, just a different name. This is likely fraud.
- OIG Exclusions List: Tutorial: As a pharmacy manager, you have a duty to periodically check your high-volume referrers against the OIG Exclusions List (https://exclusions.oig.hhs.gov/). If you bill Medicare for a script from an *excluded* provider, that is a false claim, and you are liable for repaying it.
Category 2: Patient-Level Red Flags (Diversion & Collusion)
While we must be compassionate, we cannot be naive. Some patients are participants in FWA schemes, either as victims or as colluding partners.
Playbook: Spotting Patient-Led Fraud & Abuse
- “Doctor Shopping” / “Pharmacy Shopping”: Tutorial: You are legally and ethically required to check your state’s Prescription Drug Monitoring Program (PMP) before dispensing any controlled substance (and, in many states, other drugs of concern like gabapentin). If the PMP shows the patient received 120 oxycodone from 3 different doctors at 4 different pharmacies in the last 30 days, that is the definition of a red flag. Dispensing into that pattern without resolving the discrepancy makes you complicit.
- Clinical “Illogic”: The patient’s prescription doesn’t match their profile. A 22-year-old male getting high-dose estrogen. A patient with no history of diabetes getting 10 boxes of insulin strips. This suggests the patient is diverting the medication for others.
- Insistence on Cash: The patient has good insurance but insists on paying cash for a controlled substance. Why? Likely because they don’t want it to show up on their insurance profile, which would alert other prescribers/pharmacies.
- Altered Prescriptions: Obvious changes to quantities, dates, or sigs on a hard-copy script. This is attempted fraud. Your duty is to call the prescriber to verify the *original* intent.
- “Patient Recruiters”: A “patient” brings in 5-10 new scripts… for 5-10 different people. This person is a “recruiter” or “runner” for a fraud ring. They have paid or coerced the other individuals to get scripts, which are then diverted.
Category 3: Internal & Billing Red Flags (The “Inside Job”)
This is the most dangerous category, because it means the fraud is coming from inside your own organization. As a pharmacist, you are the final checkpoint. You are liable for the claims you verify.
Warning: Is Your Own Pharmacy Committing FWA?
- “Bill and Hold” / Premature Billing: Your manager tells you, “It’s the last day of the month, we need to make our numbers. Go through all the profiles and bill everything that’s due in the next 7 days, even if the patient hasn’t confirmed.” This is fraud. The claim you are submitting is “false” because the drug has not been dispensed.
- Improper NDC Selection (“NDC Games”): You dispense a generic, but the computer system is “helpfully” set up to always bill for the brand. This is fraud. Or, you dispense from a 1,000-count stock bottle (low AWP-per-pill) but bill for the 100-count bottle NDC (high AWP-per-pill). This is a classic fraud scheme.
- Improper Days’ Supply Calculation: You are told to bill all inhalers, eye drops, and insulin as a “30 day supply,” even when the math says otherwise. (e.g., a box of 5 Lantus pens, at 30 units/day, lasts 100 days, not 30). This is abuse, and if done as a pattern, it becomes fraud.
- “Robo-Refills” / Non-Consensual Auto-Refill: Your system automatically refills and bills every prescription on a patient’s profile every month, without their documented, affirmative consent. This leads to massive waste (unneeded drugs) and fraud (billing for unneeded drugs).
- Falsifying Clinical Documentation: The PA team is changing diagnoses, inventing “failed” therapies, or “editing” lab values on faxed forms to get PAs approved. This is arguably the single most common and dangerous form of specialty pharmacy fraud.
- No Segregation of Duties: The same person who enters the prescription also verifies it, bills it, *and* manages the inventory. This is a recipe for internal theft and fraud.
16.3.4 Building the Fortress: Implementing an Effective Compliance Program
If red flags are your “offense,” a formal compliance program is your “defense.” It is your legal shield. When the OIG or a PBM auditor knocks on your door, you can’t just say “We don’t do fraud.” You must be able to prove it. You prove it by showing them your Effective Compliance Program.
An “effective” program—one that you actually use, not just a binder on a shelf—is your single greatest mitigating factor. The OIG and DOJ can (and do) dramatically reduce fines and penalties for organizations that have an effective program and self-report their own mistakes. A compliance program is not an admission of guilt; it’s a statement of professionalism.
The OIG has defined the 7 Essential Elements of an Effective Compliance Program. As a CASP, you must know them, and more importantly, know your role in executing them.
Masterclass Table: The 7 Elements of an Effective Compliance Program (OIG Model)
| Element | What It Is (The “Legal” Requirement) | Your Role as a CASP (The “Practical” Action) |
|---|---|---|
| 1. Written Policies, Procedures & Standards of Conduct | A “Code of Conduct” that states your commitment to compliance, and a detailed Pharmacy Policy & Procedure (P&P) manual that describes the “right way” to do everything (e.g., how to handle PAs, how to check the PMP, how to bill NDCs). | You must read the P&Ps. You are legally bound by them. You must also *help write* them. As the clinical expert, you are responsible for drafting the P&Ps for “Clinical Review of Specialty Claims” or “FWA Red Flag Triage.” |
| 2. Compliance Officer & Committee | Designating a single, high-level person as the Compliance Officer (CO) who has real authority and reports to the highest level (CEO/Board). This CO is supported by a multi-disciplinary Compliance Committee. | Know your CO by name. You should be on the Compliance Committee, representing the pharmacy. You are the “boots on the ground” who brings real-world examples to the committee, and the CO is your resource for asking, “Is this new program with Dr. Smith’s office legal?” |
| 3. Effective Training & Education | Mandatory annual training for *all* employees (from the CEO to the delivery driver) on FWA, HIPAA, AKS, etc. This must be documented. | Lead the training. Don’t just click through the slides. When your techs have their training, stop for 30 minutes and provide real examples. “Let’s talk about that ‘Script Mill’ red flag. I saw one last week, and here’s what it looked like…” Document this “huddle” as a training session. |
| 4. Effective Lines of Communication | You must champion this. You must tell your technicians and staff, “If you see something that makes you uncomfortable—even if I’m the one doing it—you must report it. You can tell me, or you can use the anonymous hotline. You will never be in trouble for raising a good-faith concern.” | |
| 5. Internal Monitoring & Auditing | This is the “self-policing” part. The company must proactively *look* for its own problems. It must conduct its own internal audits. | This is your #1 job as a manager. You are the lead auditor. Your practical action is to perform monthly “self-audits.” “This month, I will pull 20 patient charts and trace their PA back to the original source.” “This month, I will run a report of all ‘Refill-Too-Soon’ overrides and check for a documented reason.” You must *document* your findings, even if they are clean. |
| 6. Enforcing Standards & Disciplinary Guidelines | A clear, written policy that is “well-publicized” to all employees. It states what happens if you break the rules. (e.g., “A mistake leads to re-training. A pattern of abuse leads to a final warning. Fraud leads to termination.”) | You must be consistent. You cannot “look the other way” for a high-performing pharmacist but write up a new tech for the same offense. This policy must be enforced fairly and equitably. |
| 7. Prompt Response & Corrective Action | When you find a problem (from an audit or a hotline report), you must fix it. You can’t just ignore it. This includes investigating, stopping the problem, and (if necessary) self-reporting to the government. | You are the first responder. You find a $5,000 billing error. You must investigate (how did it happen?), correct (fix the root cause in the system), and report (escalate to your CO, who will then coordinate repayment of the $5,000 to the payer). Hiding the problem is often worse than the problem itself. |
16.3.5 Tutorial: Your Reporting Obligations (Internal & External)
As a licensed pharmacist, you have a professional, ethical, and legal duty to report FWA and other violations. You cannot be a passive observer. But reporting is a high-stakes action, and there is a clear chain of command.
Level 1: Internal Reporting (Your First, Best Option)
In 99% of cases, your first step is to report internally. Why? Because it gives the organization a chance to fix its own problems (this is the “Corrective Action” element). Federal sentencing guidelines look very favorably on organizations that self-report and correct their own errors, often leading to no-fault settlements instead of massive fines.
Your Internal Reporting “Chain of Command”:
- Your Direct Manager: Start here. “Hi boss, I was auditing my claims and I think I found a billing error I want to show you.” (Assuming your manager is not the one *telling* you to commit the fraud).
- Your Compliance Officer / Hotline: If you are not comfortable telling your manager, or if your manager is the problem, your next call is to the CO or the anonymous hotline. This is a legally protected communication.
A Note on Anti-Retaliation: Federal laws (like the FCA) and many state laws provide strong anti-retaliation protections for employees who make good-faith reports of suspected FWA. It is illegal for your employer to fire, demote, harass, or otherwise punish you for this. This is the “shield” that allows you to speak up.
Level 2: External Reporting (When the System Fails)
You must escalate externally when the internal system fails (e.g., you report a clear case of fraud to your CO and they tell you to “mind your own business” and shred the evidence) or when the violation is so severe it poses an immediate public danger.
Your External Reporting “Chain of Command”:
- State Board of Pharmacy: You report here for issues of professional practice and conduct. Examples: a pharmacist working while impaired, significant medication errors causing harm, unsafe/unsanitary compounding conditions, massive theft of non-controlled drugs, unlicensed practice (e.g., techs verifying).
- Drug Enforcement Administration (DEA): You report here for one thing: controlled substances. Any “significant loss or theft” of controlled substances must be reported to the DEA via a Form 106. This is not optional.
- Office of Inspector General (OIG) / HHS: You report here for Medicare/Medicaid FWA. The OIG maintains its own public hotline (1-800-HHS-TIPS) for exactly this purpose. This is for reporting billing fraud, kickbacks, and patient harm related to federal programs.
- Department of Justice (DOJ) via a Qui Tam Attorney: This is the “whistleblower” path from the last section. If you have clear, non-public evidence of a *massive* fraud scheme against the government, your first call is to a private attorney who specializes in False Claims Act litigation. They will evaluate your case and, if it’s strong, file the sealed qui tam lawsuit on your behalf.
16.3.6 Conclusion: From Gatekeeper to Guardian
The concepts of Fraud, Waste, and Abuse are not abstract legal terms. They are the everyday realities of a broken and exploited system. FWA is not a victimless crime. It is not just “costing the government.”
- Fraud that falsifies a PA steals a drug from a patient who truly needs it.
- Abuse that bends billing rules drives up premiums for all of us.
- Waste that ships an unneeded $10,000 drug is $10,000 that cannot be spent on preventative care, vaccines, or a different patient’s life-saving therapy.
Your traditional role was that of a gatekeeper, ensuring that only valid prescriptions passed through. Your new role as a Certified Advanced Specialty Pharmacist is that of a guardian, who actively defends the system from those who would exploit it.
An effective compliance program, your personal vigilance in spotting red flags, and your courage to report wrongdoing are not “administrative” tasks that take you away from patient care. They are patient care. They are the ultimate expression of your duty to “do no harm” and to protect the resources that our entire patient population depends on. Your integrity is the most powerful compliance tool in the pharmacy, and it is the one thing the OIG cannot audit and the law cannot teach. It is your ultimate professional responsibility.
