You’re a Data Point Now – How CMS Analytics Identifies Physicians Before an Investigation Begins

A note for physician clients on the shift to data-driven healthcare fraud enforcement

In May 2026, a federal jury in Los Angeles convicted a Glendale physician of a $45 million Medicare fraud scheme built around Botox injections. What should arrest the attention of every practicing physician is not the size of the loss. It is how the case started. No patient complained. No employee blew the whistle. The investigation began with a computer.

According to the Department of Justice, the case was referred for investigation after the Health Care Fraud Section’s Data Analytics Team found that the physician had been paid more by Medicare for Botox injections than any other doctor in the United States. She was an outlier in a dataset, and that statistical fact alone was enough to put federal agents on her trail. This is the defining feature of healthcare fraud enforcement in 2026, and it changes what physicians need to understand about their own exposure.

From “Pay and Chase” to Prediction

For most of the history of Medicare enforcement, the government paid claims and only later, often after a tip, worked backward to recover money already out the door. That posture has been deliberately abandoned. Authorities now aim to stop fraud before a single dollar leaves the building, using data analytics to flag anomalous billing in near real time. In April 2026 the DOJ consolidated its efforts under a new National Fraud Enforcement Division with a dedicated Data Analytics Team.

The scale is not theoretical. In its June 2026 national takedown, the government reported that CMS had suspended over 1,000 providers and revoked the billing privileges of more than 1,400 others, many flagged administratively, before any indictment. The first sign the government has noticed you may not be a subpoena. It may be a payment suspension, a prepayment review, or a records request that arrives with a theory already attached.

Anatomy of a Data-Driven Case

The Botox prosecution, United States v. Mailyan in the Central District of California, shows exactly how an outlier flag becomes a conviction. Every fact below comes from the Justice Department’s own account of the indictment and trial.

First, the statistical flag. The analytics team identified the physician as an extreme outlier, paid more than $24 million over four years, roughly six times the next-highest group of providers, all neurologists. Standing alone, that proved nothing. Being a high biller is not a crime. But it opened the door.

Second, the records tested the data, and they did not hold up. The government’s evidence showed injections billed while the physician was on vacation in Cabo, Maui, and Las Vegas; a claim for a beneficiary who was incarcerated in federal prison; and more than $19 million in injections purportedly provided on days the clinic was closed. Analytics is built to surface exactly these contradictions, checking billing data against travel records, calendars, and facility records.

Third, the cover-up made everything worse. After receiving a grand jury subpoena, the physician altered patient records, including fabricating consent forms and migraine diagnoses, and produced those altered documents to federal agents.

She was convicted of nine counts of wire fraud and three counts of obstruction. The obstruction exposure exists entirely because of what she did after she learned she was under scrutiny, not because of the original billing.

This is the most important practical point in the case. A physician who responds to a records request by “cleaning up” files can manufacture a second, independent crime, one often easier to prove than the underlying billing dispute. When scrutiny arrives, the instinct to fix the paperwork is the most dangerous instinct you have. The physician is scheduled to be sentenced on September 10, 2026, and the jury found vehicles, accounts, and four properties forfeitable.

Why Legitimate Miami Practices Get Flagged

It would be comfortable to read Mailyan as a story about a brazen fraudster with nothing to teach an honest practitioner. That would be a mistake. The model that caught her does not sort the honest from the dishonest. It sorts the typical from the atypical, and plenty of legitimate practices are atypical: a high-acuity panel, a subspecialty focus, a rural practice that is the only provider for a hundred miles. The analytics know only that your numbers sit far from those of your peers. The burden of explaining the gap, as a practical matter, lands on you. Coding drift, billing vendors paid on collections, and EHR auto-population can all produce a billing signature that reads, to a model, like a problem, with no fraudulent intent at all.

How to Reduce Your Outlier Risk

1. Know your own data. Review your billing profile against your specialty’s benchmarks. If you are an outlier on any high-value code, know it now, and know why.
2. Document the “why” in real time. Justification for high volume or coding should live in the medical record at the time of service, not in an explanation assembled later.
3. Audit your billing chain. Understand who selects your codes, how your vendor is paid, and what your EHR fills in automatically. Many outlier signatures originate downstream of the physician.
4. Never alter records under scrutiny. Never alter records under scrutiny. If a subpoena, audit, or records request arrives, preserve everything exactly as it is, stop, and call counsel before you respond. The cover-up is frequently the cleaner case for the government to prove.

The early signals are often civil or administrative rather than criminal: a prepayment review, a payment suspension, a Civil Investigative Demand, or an unusually specific records request. The window between that first contact and the hardening of the government’s theory is the most valuable period in the entire matter, and the one in which physicians acting alone most often damage their own position. A clean conscience is not the same as a clean defense.

How The Baez Law Firm Can Help Miami Physicians

The Baez Law Firm defends Miami physicians and other healthcare providers in federal and state fraud matters, from the first audit or records request through trial and post-conviction proceedings. We have represented clients accused of healthcare fraud schemes alleged to involve hundreds of millions of dollars, and we understand both the statistical theories the government now builds its cases on and the medical realities those theories often miss.

If you have received a payment suspension, a Civil Investigative Demand, a subpoena, or any contact from federal investigators, get experienced counsel involved before you respond. To discuss a matter in confidence, contact Kirsten R. Nelson at knelson@baezlawfirm.com and The Baez Law Firm.

This article is provided for general informational purposes and does not constitute legal advice or create an attorney-client relationship. The case discussed is described based on the U.S. Department of Justice’s public statements regarding the indictment and trial; allegations proven at trial remain subject to post-trial and appellate proceedings. Physicians facing an audit, investigation, or enforcement contact should seek advice from qualified counsel about their specific circumstances.