International criminal networks are exploiting advanced technologies, including artificial intelligence and data hacking, to defraud Medicare and Medicaid of billions of dollars, with perpetrators often operating from outside the United States. These high-tech scams are outpacing the government's ability to detect and prevent them, according to a recent investigation.
Criminals are obtaining sensitive patient data through hacking and selling it on the dark web, or using it to bill for fictitious medical equipment and services. Advanced techniques, such as AI-powered voice bots, are employed to impersonate U.S. healthcare workers and trick seniors into divulging personal information over the phone. These operations are frequently managed from locations in Europe and Asia.
One notable case involved Ibrahim Khaldoon Hilmi, who was apprehended in Cyprus and extradited to the U.S. to face federal charges for allegedly orchestrating an offshore Medicare fraud scheme valued at $3.7 billion. Prosecutors claim Hilmi managed a medical device scam from the Mediterranean, facing charges of health care fraud and money laundering conspiracy in Florida.
Sophisticated scams extend to insurance companies as well. Federal authorities reported that a group based in the Philippines trained AIs to mimic the voices of elderly Americans when insurance companies inquired about suspicious claims. Gordon Schnell, a partner at the healthcare fraud whistleblower law firm Constantine Cannon, expressed concern over the escalating sophistication and scale of these schemes, noting that even a small percentage of the vast sums managed by the Centers for Medicare and Medicaid Services (CMS) amounts to billions of dollars.
A March 2026 report by cybersecurity firm Pindrop detailed how fraudsters use cloned voices to automate and authorize transactions at high speed. These AI-enabled campaigns target Interactive Voice Response (IVR) systems, using automated bots to probe for security weaknesses before escalating to human agents to extract account information. The report also found that synthetic identities, created from breached data, are used to fraudulently establish coverage or fabricate consumer consent.
In a separate, large-scale operation, the Russian mob allegedly perpetrated a "phantom catheter" scam, defrauding Medicare of approximately $1 billion. The scheme involved acquiring 30 existing U.S. medical supply companies already enrolled as Medicare providers. These companies were then used to submit fraudulent bills, primarily for urinary catheters, utilizing stolen patient data from over one million Americans. While prosecutors indicated that most of the fraudulent reimbursements were blocked, the gangsters allegedly laundered substantial funds through banks in Israel, Turkey, and China.
These criminal enterprises often leverage virtual private servers to mask their locations and use U.S.-based registered agent companies to file necessary paperwork. The ease with which individuals, regardless of citizenship or even legal status in the U.S., can purchase American companies, including Medicare providers, is a significant vulnerability. The system's design, intended to encourage foreign investment, does not distinguish between legitimate investors and criminal actors.
Further complicating fraud prevention, some private supplemental insurance companies, known as Medigap, have continued to pay fraudulent claims even after CMS identified and stopped payments to shady companies. Crypto currency is also being utilized to facilitate rapid and difficult-to-trace money transfers of illicit proceeds.
In January, a Kazakh national, Anuar Abdrakhmanov, was charged in Chicago with conspiracy to commit money laundering in connection with a Medicare fraud scheme that allegedly billed $666 million. He has not yet entered a plea. In another instance, Herbert Leon Kimble was apprehended in the Philippines for orchestrating an attempted $1.2 billion Medicare fraud scheme involving a call center in that country to generate fake orthopedic brace prescriptions. Kimble had previously pleaded guilty but fled the U.S. in 2022.
In response to these escalating threats, CMS issued new Medicare beneficiary numbers to 1.3 million Americans in the spring as part of fraud prevention efforts. While foreign networks are a significant concern, domestic fraudsters are responsible for the vast majority of improper Medicare and Medicaid payments, estimated by the Government Accountability Office to be $186 billion nationwide.