Table of Contents
Ready to See Results?
From strategy through execution, Atlantic Health Strategies integrates compliance, operations, and growth into durable, measurable results. Let’s put our expertise to work for your organization.
The Vermont WCMHS settlement, in operator terms
Washington County Mental Health Services will pay $60,661.50 to resolve allegations that it billed Vermont Medicaid for case-management hours a beneficiary never received, and the Vermont Office of the Attorney General’s Medicaid Fraud and Residential Abuse Unit (MFRAU) ran the investigation. If your organization bills Medicaid for case management, targeted case management (TCM), or any time-based behavioral health service, you need to audit your time-tracking, note timeliness, face-to-face contact logs, and medical-necessity attestations this quarter, because the exposure here is False Claims Act exposure under 31 U.S.C. §§ 3729–3733, not a soft overpayment conversation.
Attorney General Charity Clark’s announcement lays out the pattern plainly. MFRAU’s investigation found that, during the period when WCMHS was responsible for the respective client’s case management services, WCMHS budgeted an excessive number of hours of such services, significantly more than what was provided, and the excess was billed to the Vermont Medicaid program, while the beneficiary received only a small fraction of the services billed. It gets worse on the clinical side. The case management services WCMHS provided were inadequate, and at times months passed without a face-to-face visit between the case manager and the beneficiary.
A budgeted authorization got billed as delivered. Nobody at WCMHS reconciled the authorization against actual contact logs. That is a documentation failure, a utilization-review failure, and a billing failure stacked on top of each other, and it is the exact failure pattern we see in operator-side audits of community mental health and SUD agencies across multiple states.
MFCU enforcement math: why Vermont is not an outlier
The Vermont settlement sits inside a national enforcement curve that has been bending upward for three years. According to the HHS-OIG Medicaid Fraud Control Units Annual Report for Fiscal Year 2025, combined recoveries from criminal and civil cases totaled almost $2 billion for FY 2025, with criminal recoveries from convictions totaling $1.3 billion and civil recoveries totaling $706 million. MFCUs recovered $4.64 for every dollar spent by States and the Federal Government. That return on investment is why state AGs keep hiring MFCU investigators.
Volume is up too. MFCUs reported 674 civil settlements and judgments for FY 2025, and 1,185 convictions. On the federal civil side, DOJ reported that False Claims Act settlements and judgments in fiscal year 2024 topped $2.9 billion, a 30% increase over the past two years, with approximately US$1.7 billion of which involved the health care industry. One outside counsel summary of the FY 2025 MFCU report framed the environment this way: “The strong financial incentive to pursue these programs, combined with other federal anti-fraud initiatives, creates a perfect storm for heightened regulatory and enforcement activity in 2026 and beyond.”
Behavioral health is squarely in the crosshairs because the service lines are time-based, documentation-heavy, and often delivered by staff whose credentials and schedules are the audit trail. If you cannot prove the staff member, the minutes, the modality, and the medical-necessity linkage for each unit billed, you cannot defend the claim.
The five documentation elements auditors will pull first
When MFRAU, a Unified Program Integrity Contractor, or a CMS Targeted Probe and Educate reviewer requests case-management records, they are not reading your treatment philosophy. They are checking five fields against your billing. Pull a 30-chart sample from the last 90 days and look for all of them:
- Service date and start/stop times. Not a date range. Not “approximately 60 minutes.” Clock times, every encounter.
- Staff credential and signature on the day of service. Late-signed notes (over 24 to 72 hours depending on your state’s rule) are the single most common finding in our chart audits.
- Modality of contact. Face-to-face, telephonic, collateral, or indirect. Vermont’s WCMHS allegations hinge on the absence of face-to-face contact for months. Your state’s TCM rule almost certainly requires a specific minimum of in-person visits.
- Medical-necessity linkage. Each note must tie back to an active, individualized treatment plan goal using current ASAM Criteria 4th Edition or LOCUS determinations. A generic “case management provided” note does not survive utilization review.
- Reconciliation to the authorization. If payer or state authorized 20 hours per month and you delivered 7, you bill 7. Not 20. The WCMHS case is a textbook example of what happens when the budgeted figure, not the delivered figure, drives the claim.
These are the elements that live inside 42 CFR Part 455 (Medicaid Program Integrity) expectations and that every state Medicaid manual’s TCM section codifies in some form. Vermont’s own Mental Health Provider Manual and State Plan Amendment VT-25-0015 are the operator’s roadmap for the TCM target population and service limits in that state.
What the WCMHS settlement should trigger in your compliance program
If I were sitting with your executive team this week, we would do five things before month-end. None of them require a new vendor.
- Pull a case-management utilization report for the last 12 months showing authorized units, billed units, and delivered units per client. Flag any client where billed exceeds delivered by more than a rounding error.
- Audit face-to-face contact frequency against your state’s TCM rule and your payer contracts. The WCMHS allegation that months passed without an in-person visit is the kind of finding that converts a routine audit into a referral to the Attorney General.
- Reconcile the EMR time-stamp log against staff schedules. If your EMR auto-populates duration or lets staff bulk-sign notes a week late, you have an evidence problem.
- Draft a corrective action plan for any gap you find, with a dated remediation and a self-disclosure analysis. Self-identified errors with a documented CAP are treated very differently than errors a UPIC or MFCU surfaces first.
- Train billing and clinical leadership together on payer-specific TCM definitions. The disconnect between “what the authorization says” and “what the service actually was” is where False Claims Act exposure lives.
At Atlantic Health Strategies we run this exact exercise as an operational and documentation audit, not just a chart review. The point is to connect scheduling, utilization review, clinical documentation, and the 837 claim file so that if a regulator shows up, your evidence is already assembled. If you are a PE-backed buyer running diligence on a behavioral health platform, your quality-of-earnings team should pull the same case-management utilization and contact-frequency reports, because overbilled case-management units flow straight to the EBITDA line and sit on the seller’s balance sheet as a contingent refund liability.
Frequently asked questions
What triggers a state Medicaid Fraud Control Unit investigation into a behavioral health provider?
Referrals typically come from a sister state agency, a managed care organization’s special investigations unit, or a whistleblower (often a current or former employee) filing a qui tam complaint. In the WCMHS matter, the matter was referred to MFRAU by the Department of Disabilities, Aging and Independent Living (DAIL). Nationally, MFCUs are receiving a growing share of referrals from managed care plans themselves.
What documentation standards apply to Medicaid-billed case management?
Each state’s Medicaid plan and provider manual set the standard, operating within the federal framework at 42 CFR Part 455 and 42 CFR 440.169 (targeted case management). At a minimum, auditors expect contemporaneous notes with service date, start and stop times, staff signature and credential, contact modality, and a clear tie to an individualized treatment plan goal rooted in a current ASAM or LOCUS determination.
Can honest documentation errors create False Claims Act exposure?
Yes. The False Claims Act reaches claims submitted with “reckless disregard” or “deliberate ignorance” of truth or falsity, not just intentional fraud. A pattern of billing authorized units instead of delivered units, or of signing notes long after the fact, can meet that bar even without bad intent, and penalties can run per claim on top of treble damages.
How often should a behavioral health operator conduct an internal billing audit?
Quarterly, at minimum, with a focused chart audit of time-based services (case management, PHP, IOP) every month. Given that FCA recoveries in fiscal year 2024 topped $2.9 billion, a 30% increase over the past two years, waiting for an external trigger is no longer a defensible posture.
What corrective-action steps reduce liability if a billing error is self-identified?
Stop the bleeding first: pause the affected billing codes, quantify the overpayment, and document a written corrective action plan with named owners and dates. Then evaluate whether the 60-day refund rule under Section 1128J(d) of the Social Security Act is triggered and whether a voluntary self-disclosure to the state Medicaid agency or HHS-OIG is appropriate. Operators who self-disclose with a credible CAP almost always get better outcomes than those who wait.
References
- Vermont Office of the Attorney General, Attorney General Charity Clark Announces Settlement With Washington County Mental Health Services (Sept. 29, 2026)
- HHS Office of Inspector General, Medicaid Fraud Control Units Annual Report: Fiscal Year 2025
- U.S. Department of Justice, False Claims Act Settlements and Judgments Exceed $2.9B in Fiscal Year 2024 (Jan. 15, 2025)
- 42 CFR Part 455, Medicaid Program Integrity (eCFR)
- False Claims Act, 31 U.S.C. §§ 3729–3733 (Cornell Legal Information Institute)
- Vermont Department of Mental Health, Mental Health Provider Manual
- CMS, Targeted Probe and Educate (TPE) Program