A federal jury recently convicted former NFL player Joel Rufus French of orchestrating a massive health care fraud scheme that siphoned nearly $197 million from Medicare and the Civilian Health and Medical Program of the Department of Veterans Affairs (CHAMPVA). The case is a powerful reminder that compliance failures—especially in health care—can have enormous legal, financial, and human consequences.
THE SCHEME
Prosecutors described a years-long operation involving overseas call centers targeting elderly Medicare beneficiaries, including individuals with Alzheimer’s and dementia. Fraudulent telemedicine companies generated doctor orders without legitimate patient evaluations. These orders were sold to suppliers who billed Medicare and CHAMPVA for medically unnecessary orthotic braces. Claims were even submitted for deceased beneficiaries and amputees for non-existent limbs.
COMPLIANCE LESSONS
- Third-Party Risk Management
This scheme relied heavily on outside call centers and telemedicine vendors. Compliance programs must go beyond onboarding and conduct ongoing monitoring, audits, and performance reviews of third parties.
- Protecting Vulnerable Populations
Targeting cognitively impaired seniors highlights the need for enhanced consent verification, patient safeguards, and ethical billing practices.
- Ownership Transparency
The defendant concealed ownership of multiple DME companies. Compliance programs should require full disclosure of ownership, beneficial interests, and conflicts of interest.
- Clinical Documentation Integrity
Fraudulent claims were supported by sham medical orders. Strong documentation standards and validation of clinical necessity are essential.
- Data Analytics
Claims involving deceased patients, amputees, or excessive volumes should trigger red flags. Analytics and anomaly detection can prevent losses before they escalate.
- Culture of Compliance
Large-scale fraud thrives in environments where ethics are weak. Training, reporting mechanisms, and leadership accountability are critical.
This case underscores that compliance is not theoretical—it is operational, cultural, and essential. Organizations that fail to invest in strong compliance controls risk catastrophic outcomes.
