Table of Contents
Ready to See Results?
From strategy through execution, Atlantic Health Strategies integrates compliance, operations, and growth into durable, measurable results. Let’s put our expertise to work for your organization.
What the Charlotte sentencing actually signals for SUD operators
The Charlotte case is a direct warning to every substance use disorder operator billing Medicaid: the U.S. Department of Justice, HHS-OIG, and the North Carolina Medicaid Investigations Division are running data-driven parallel investigations on SUD billing, and if your claim-validation, documentation-to-service reconciliation, and internal FWA audits are not tight, you are the next press release. Fix the workflows before a payer or a federal agent does it for you.
On August 28, 2026, the U.S. Attorney’s Office for the Western District of North Carolina announced the sentencing. Crystal Sherrell Jackson, a North Carolina-licensed clinical addiction specialist-associate, received 48 months in prison, three years of supervised release, and $1.6 million in restitution for submitting fraudulent claims to NC Medicaid for psychotherapy and urine drug testing that were never provided. Prosecutors said dozens of the patients billed for were dead or in prison at the time of the alleged services, which is the kind of data anomaly that a UPIC or MFCU analyst catches with a single query.
Read the case mechanics carefully. Jackson obtained CLIA licensure by submitting false documents, which unlocked the highest allowable Medicaid reimbursement rates for drug testing. That is the pattern regulators are targeting across SUD: enrollment integrity, lab arrangements, and per-service billing that does not tie to a real encounter. If your call center, marketing vendor, or in-house lab produces revenue that outpaces your clinical throughput, you already have an audit exposure.
The enforcement math: why 2025 and 2026 are different
This is not one bad clinician in Mecklenburg County. It is a national tempo shift. In the 2025 National Health Care Fraud Takedown, DOJ charged 324 defendants in schemes involving more than $14.6 billion, more than double the prior $6 billion record, and CMS reported preventing more than $4 billion in false claims while pulling billing privileges from 205 associated providers. The Charlotte indictment against Jackson was announced as part of that same coordinated sweep.
The 2026 takedown was even larger. DOJ charged 455 defendants across 56 federal districts and 45 states and territories in schemes involving more than $6.5 billion in alleged false claims, and DOJ described the operation as including the largest participation by state Medicaid Fraud Control Units in the history of the annual takedown. Many of the charged schemes involved Medicaid managed care, behavioral health services, personal care services, and pharmacy fraud. Behavioral health is now a named priority category, not a footnote.
Layer in the payment-integrity backdrop. CMS reported that improper payments in its programs are not always fraud but often reflect missing administrative steps, insufficient documentation, or payments that do not meet program requirements. The overall Medicaid PERM improper payment rate for 2024 was 5.09 percent, and a GAO report cited found that 82 percent of Medicaid improper payments in fiscal year 2023 were associated with payments for services with missing or insufficient documentation. Translation for operators: the government does not need to prove intent to claw money back. Missing notes are enough.
Ferguson framed the enforcement rationale bluntly. “Medicaid fraud is a crime on all of us,” U.S. Attorney Russ Ferguson said in the announcement, tying the case to identity theft, program integrity, and taxpayer harm.
The operator playbook: five things to do in the next 90 days
Read the Charlotte fact pattern and reverse-engineer your controls. Here is what a serious SUD operator should have done yesterday.
- Run a documentation-to-service reconciliation on every UDT and psychotherapy claim for the last 24 months. Match the CPT or HCPCS code to a signed clinical note, a legible order, and an attendance record. When your billers cannot tie a claim to a physical encounter, void it and self-disclose under the 60-day rule.
- Re-verify CLIA, NPI, taxonomy, and state licensure on every rendering provider. The Jackson case turned on false CLIA representations. Your CFO should be able to produce current certificates on demand.
- Map your level-of-care billing to ASAM Criteria 4th Edition language and actual weekly hours delivered. PHP (Level 2.5, outpatient) and IOP claims cannot be submitted before your team confirms the patient hit the weekly hour minimum for that level of care.
- Audit marketing, call center, and lab arrangements against EKRA and the Anti-Kickback Statute. Percentage-of-collections compensation for anyone touching patient referrals is a live grenade under 18 U.S.C. § 220.
- Adopt the seven elements of an effective compliance program from the OIG General Compliance Program Guidance issued November 2023. Written standards, a compliance officer with real authority, training, communication channels, monitoring, enforcement, and prompt response. If your board cannot name the seven, your program does not exist.
Operators should not wait for a subpoena from the Western District. The playbook is public. Use it.
What PE-backed buyers and sellers should read into this
For anyone in diligence right now, the Charlotte sentencing changes the risk premium on SUD assets in North Carolina and beyond. Buyers should be pulling a five-year claims sample, not a five-chart smoke test. Sellers should already have a completed operational audit and a corrective action plan sitting in the data room, ideally executed by an outside firm so the work product carries independence.
Three deal-side items I would insist on before close:
- Independent claims audit stratified by payer, level of care, and rendering provider, covering at minimum the trailing 24 months, with statistical extrapolation methodology documented.
- EKRA and AKS review of every marketing agreement, lab services agreement, and W-2/1099 compensation plan, tied to a written legal opinion, not a compliance officer’s verbal comfort.
- Reps and warranties tied to specific Medicaid billing categories, with escrow sized to the realistic downside of a UPIC extrapolation, not the negotiated purchase price haircut.
If a target cannot produce this cleanly, the discount should be material, or the deal should not close.
Frequently asked questions
What billing patterns triggered federal scrutiny in the Charlotte case and how do we detect them internally?
The government’s data pull surfaced claims for patients who were deceased or incarcerated on the date of service, plus phantom urine drug tests and psychotherapy sessions. Detect these internally by running a monthly match of your claims file against a death index and, where allowable under state law and 42 CFR Part 2, against attendance and encounter data. Any date-of-service that does not tie to a signed note and a physical or telehealth encounter should be flagged before it is billed.
What are the minimum elements of an OIG-aligned compliance program for an SUD treatment center?
The OIG General Compliance Program Guidance, published November 2023, lays out seven elements: written policies and procedures, a designated compliance officer and committee, effective training and education, effective lines of communication, enforcement through well-publicized disciplinary standards, internal monitoring and auditing, and prompt response to detected offenses with corrective action. A behavioral health operator layering ASAM, LOCUS, 42 CFR Part 2, EKRA, and state licensure on top of those seven elements is doing it right.
How often should we conduct internal FWA audits, and should they be done by internal staff or an outside firm?
At minimum quarterly for high-risk services (UDT, PHP, IOP, LOC step-downs) and annually for a full operational audit. Internal staff should run the cadence audits. An outside firm should run the annual, because independence is the whole point when a regulator asks who validated the work.
What is the difference between an FCA civil case and a criminal Medicaid fraud prosecution, and how do we prepare for either?
The False Claims Act (31 U.S.C. §§ 3729 to 3733) is civil, uses a preponderance standard, and carries treble damages plus per-claim penalties, often driven by qui tam whistleblowers. Criminal Medicaid fraud requires proof of intent beyond a reasonable doubt and carries prison time, as the Charlotte case shows. Prepare for both the same way: contemporaneous documentation, a compliance program with teeth, and a legal-privileged internal investigation protocol you can activate the day a subpoena lands.
How do EKRA and the Anti-Kickback Statute apply to marketing, call centers, and lab arrangements in SUD programs?
The Anti-Kickback Statute (42 U.S.C. § 1320a-7b(b)) covers federal healthcare program business. EKRA (18 U.S.C. § 220) reaches all payers, including commercial, and specifically targets recovery homes, clinical treatment facilities, and laboratories. Percentage-based compensation for marketers, per-head payments to call centers, and volume-based lab arrangements are the three fastest ways to end up in a DOJ press release. Restructure those relationships under a safe harbor or eliminate them.
References
- QC News: Charlotte woman sentenced to four years in prison for nearly $2 million in Medicaid fraud (DOJ, August 2026)
- Spectrum News: 8 charged in $21M Medicaid fraud scheme spanning the Carolinas (June 2025)
- Fierce Healthcare: DOJ announces largest-ever $14.6B healthcare fraud takedown
- Inside the False Claims Act: DOJ’s $6.5 Billion National Health Care Fraud Takedown Signals a New Era of Data-Driven Enforcement
- CMS: Fiscal Year 2024 Improper Payments Fact Sheet
- CBPP: Understanding the Medicaid Payment Error Rate Measure
- DOJ EDNC: $12M Medicaid Fraud Scheme Leads to 14 Years of Prison for Substance Abuse Facility