CMS DMEPOS fraud crackdown — compliance and proof-of-delivery focus for legitimate suppliers

On September 8, 2026, CMS announced it had identified 11 DMEPOS suppliers with more than $3.4 billion in suspected fraudulent billing in 2025 and 2026 — and barred them from future Medicare Advantage Part C and Part D payments by placing them on the Preclusion List.

That is not a quiet program-integrity memo. It is a public signal that CMS is using data analytics, payment suspension, enrollment tools, and the Preclusion List together — and that DME remains a high-visibility fraud category.

If you run a legitimate shop, the useful question is not “did those 11 companies deserve it?” The useful question is: what patterns did CMS call out, and how do we make sure our operation looks nothing like that when a review lands?

What CMS said happened

According to the CMS press release, the 11 suppliers generally shared several red-flag patterns:

  1. 1. No claims history before 2025 — then sudden, large-volume billing
  2. 2. Improper billing practices on the claims they did submit
  3. 3. Billing for beneficiaries who were already deceased
  4. 4. Equipment billed that beneficiaries never requested or received

Four of the suppliers had already been revoked from Original Medicare and then started billing Medicare Advantage plans instead — which is exactly the kind of hop CMS is trying to cut off with Preclusion List placement.

CMS also described concrete examples (again, from the agency’s own release):

  • A Florida supplier submitted roughly $18.4 million in catheter claims across two consecutive days in December 2025; CMS suspended payment before those dollars went out
  • A Texas supplier submitted about $5.5 million in orthotics claims; interviewed beneficiaries said they did not know the ordering providers, had never heard of the company, and did not need the braces — plus claims with dates of service after death
  • A New Jersey firm billed a Medicare Advantage plan for 38 encounters where the beneficiary was already deceased on the reported date of service
  • Another Florida firm was tied to a suspected telemarketing / oversupply pattern; beneficiaries reported braces billed that they never received

Working with HHS-OIG, CMS framed the action as stopping suspicious payments before the check clears, not only chasing money after the fact.

Why legitimate DME companies should still care

Most operators reading this are not running telemarketing brace mills. That is the point.

Enforcement waves still change the operating environment:

  • Referral partners get nervous. Hospices and home health agencies already live under their own enrollment moratoria and payment-suspension pressure. They will ask harder questions about who they buy from.
  • Auditors follow the headlines. RAC, UPIC, and MAC reviews do not need your company to be a $3.4B story. They need incomplete POD, fuzzy ordering trails, or inventory that does not match what you billed.
  • MA plans watch the Preclusion List. If your growth depends on Medicare Advantage business, “we’re not those guys” is not a documentation strategy. Clean delivery evidence is.

CMS is also tying broader DMEPOS prior-authorization and face-to-face list updates to the same fraud narrative (medically unnecessary equipment, missing medical-necessity documentation, telemarketing schemes). The Sep 8 action and the Oct 28, 2026 PA / F2F list changes sit in the same enforcement climate — even if your SKUs are not on the new PA list yet.

The operational habits that separate you from the bad actors

You cannot control CMS headlines. You can control whether your books look like a real delivery company.

1. Never bill what did not go out the door

Deceased-beneficiary and “never requested / never received” claims are the center of this story. Your defense is boring and powerful:

  • Order tied to a real patient and a real referral source
  • Delivery scheduled and completed (or refused / cancelled with a reason)
  • Signature (and photo when your agency or payer expects it)
  • Inventory decrement that matches the ticket

If billing can fire without a completed delivery record, you have a process gap — not just a software preference.

2. Make proof of delivery easy to pull, not buried in a drawer

When a reviewer or a hospice partner asks “prove this delivery,” the answer should take minutes, not a scavenger hunt across paper tickets, texts, and a driver’s personal phone.

Audit-ready POD usually means:

  • Who received it
  • When
  • What was delivered (and what was not, on partials)
  • Signature / photo evidence attached to the same order record billing uses

3. Keep the ordering trail coherent

Fraud schemes in the release leaned on ordering providers beneficiaries did not recognize and equipment nobody asked for. Legitimate shops protect themselves with:

  • Clear referral / order intake
  • Visible status for the agency that ordered (received → scheduled → out → delivered)
  • Notes when something changes mid-route

If the hospice cannot see order status without calling your office, you are already creating the silence that looks like chaos under review — even when the truck did everything right.

4. Treat sudden volume spikes as a compliance event, not only a sales win

CMS explicitly called out suppliers with no claims before 2025 and then explosive billing. Growth is fine. Unexplained growth without matching inventory, staffing, and delivery capacity is how you look like a pattern, not a business.

Before you celebrate a volume jump, ask:

  • Do we have the drivers and stock to support it?
  • Are intake and medical-necessity docs keeping up?
  • Would a stranger looking at our tickets see a coherent story?

5. Do not “fix” a revocation by hopping to MA

Four suppliers in this action had already lost Original Medicare and moved into MA billing. Preclusion List placement is CMS closing that door. If you have enrollment or ownership issues, fix them with counsel and your MAC — do not try to outrun them in another payment channel.

How DME Engine fits (soft, not a feature dump)

DME Engine is built for DME companies that live in hospice and home-health delivery work — the same operators who need tickets, truck status, and POD in one place when someone asks hard questions.

Soft product reality, not a pitch deck:

  • Order lifecycle visibility so referral partners and your office share one status story
  • Driver workflows (including the iOS Driver app) so completion, comments, signature, and optional POD photos land on the order
  • Dispatch and inventory tools so what left the warehouse can match what the ticket says

Software does not make you “fraud-proof.” It makes the legitimate story — ordered, delivered, signed, inventoried — easier to prove when the climate gets louder.

A short checklist for this week

  1. 1. Spot-check ten recent high-dollar tickets: order → delivery → POD → inventory
  2. 2. Confirm deceased / discharge / hospice-transfer patients cannot silently stay billable in your workflow
  3. 3. Ask one hospice partner whether they can see order status without calling you
  4. 4. Walk your team on what to do if a beneficiary says they never ordered the item
  5. 5. If you bill MA, make sure someone on staff knows how Preclusion List risk is monitored

See DME Engine or book a short demo

dmeengine.org · Calendly (15 min) · Phone: 866-522-1138 x3

Bottom line

CMS’s September 8 action against 11 DMEPOS suppliers tied to more than $3.4 billion in suspected fraudulent billing is a reminder that DME fraud enforcement is active, public, and multi-tool — Preclusion List, payment suspension, enrollment, and analytics included.

Legitimate suppliers win by looking nothing like the patterns CMS described: no mystery orders, no delivery without proof, no billing without a coherent patient and inventory trail. Close those loops in daily ops, and headlines like this become context — not a threat to your house.