The U.S. Department of Health and Human Services, Office of the Inspector General (HHS-OIG), in cooperation with other law enforcement partners, is notifying payers about high-risk requests to re-route electronic funds transfers (EFTs) to fraudulent accounts owned by cybercriminals. State Medicaid agencies have been targeted, and an HFPP Partner noted that fraudulent EFT forms were transmitted to Medicaid to redirect funds from an institutional provider. Private sector payers have also been targeted, but currently there are no losses reported.

Partners receiving high-risk requests should:

• Confirm the requestor’s identity using information on file, not what was provided in the request.
• Refrain from providing financial or sensitive information over the phone or through email.
• Contact your HFPP Partner Liaison to be connected to the law enforcement agency investigating this scheme.

Additional information can be found here (PDF).