OIG Exclusion Screening in Medical Billing

When a person is excluded from the federal health care programs, the practical effect is blunt: those programs will not pay for anything the excluded person does, and a practice that employs or contracts with that person and bills for their work is exposed to penalties of its own. OIG exclusion screening is the control that prevents that — checking staff, contractors, and vendors against the HHS Office of Inspector General's exclusion list before hiring or contracting and on a routine schedule afterward, so an excluded person's work never ends up on a federal claim in the first place.

Updated July 30, 202612 min read

On this page

Key takeaways

An exclusion is a federal action that bars an individual or entity from the federal health care programs; no program payment may be made for any item or service an excluded person furnishes, orders, or prescribes.
The prohibition reaches beyond direct patient care. OIG's guidance is explicit that it also covers administrative and management services an excluded person provides — leadership roles, billing and accounting, IT support, staff training — when those services are payable, directly or indirectly, by a federal program.
A provider that employs or contracts with a person it knew or should have known was excluded can face civil monetary penalties if that person furnishes services payable by a federal program — which is exactly why screening is a diligence control, not a formality.
The primary list to check is OIG's List of Excluded Individuals/Entities (LEIE), which OIG updates monthly and offers as a free online search and a downloadable file. A name match alone is not conclusive — verify a potential match against a Social Security or Employer Identification Number.
OIG says there is no statutory or regulatory requirement for a provider to check the LEIE, but that screening monthly best minimizes liability; separately, 42 CFR 455.436 requires the state Medicaid agency to check the LEIE and the federal award-management list no less frequently than monthly. Some states also publish their own Medicaid exclusion lists.
Screen before hiring or contracting and on a routine schedule; document each screen; verify identity on a possible match; and if an excluded person's work was billed, correct the claims and return any overpayment — reinstatement to the programs is never automatic.

What OIG exclusion screening is

A provider exclusion is a federal action that removes an individual or entity from participation in the federal health care programs. The HHS Office of Inspector General (OIG) — the agency that investigates health care fraud and abuse — has the authority to impose it, and it publishes the results as a list. OIG exclusion screening is the mirror-image duty that falls on everyone else: the routine of checking the people and businesses a practice works with against that list, so it never unknowingly relies on someone the programs will not pay for.

The two are easy to confuse but are not the same thing. The exclusion is the government's action against a person; the LEIE — OIG's List of Excluded Individuals/Entities — is the published record of who is currently excluded; and screening is the control a provider runs against that record. This article is about the control: whom to check, against which lists, how, how often, and what to do when a name comes back a possible match. It belongs in the Compliance and Regulations category because screening is one of the diligence controls that a compliance program depends on to keep a billing operation's claims accurate and payable.

Where exclusions come from

Exclusions are grounded in Section 1128 of the Social Security Act. Some are mandatory — OIG must exclude a person convicted of a program-related crime, of patient abuse or neglect, of a felony involving health care fraud, or of a felony involving controlled substances. Others are permissive — OIG may exclude on a wider set of discretionary grounds, such as a license revocation or suspension, a misdemeanor fraud conviction, or certain defaults. A practice screening the list does not need to know why a person is excluded; it needs to know that they are.

Why it matters to a billing operation

The reason screening is not optional housekeeping is the breadth of the payment prohibition. OIG's guidance states the rule plainly: no federal health care program payment may be made for any item or service furnished by an excluded person, or furnished at the medical direction or on the prescription of an excluded person. That holds regardless of how the service is paid for — a separately billed line, a bundled payment, a cost report, a capitated rate — because the money still traces back to a federal program.

Crucially, the prohibition is not limited to hands-on clinical care. OIG is explicit that it also reaches administrative and management services an excluded person provides when those services are payable, directly or indirectly, by a federal program — an excluded individual serving in a leadership role, or providing billing and accounting, information-technology support, or staff training, is inside the prohibition even though none of that is a billable clinical service. For a billing operation, that is the uncomfortable part: the exposure is not only the excluded clinician on the schedule but the excluded person in the back office.

The standard is “knew or should have known”

A provider that employs or contracts with a person it knew or should have known was excluded can itself face civil monetary penalties when that person furnishes services payable by a federal program — and “should have known” is the operative phrase. The penalty can attach even if the excluded person is a volunteer or is paid entirely from other funds, so long as their work touches services the program pays for. Screening is how a practice answers the “should have known” question in its own favour: a documented, routine check is the difference between an honest mistake and a failure of diligence.

The downstream cost compounds. Payment received for an excluded person's services is an overpayment that generally has to be returned, and the penalty exposure sits on top of it. Catching an exclusion before the person starts — or catching a newly listed name at the next screen — is far cheaper than unwinding months of claims after an audit finds it.

Which lists to check, and whom

The primary list is the LEIE. OIG maintains it, updates it monthly, and recommends it as the first source precisely because it is OIG's own current record of health-care exclusions. Many organizations also check the exclusion and debarment records in the federal System for Award Management (SAM.gov) (opens in a new tab), the government-wide list the General Services Administration runs, which captures debarments and exclusions beyond OIG's. The two lists overlap but are not identical, which is why some compliance programs screen both.

State Medicaid programs add a layer. Federal rule (42 CFR 455.436) requires a state Medicaid agency to check a provider's exclusion status against the LEIE and the federal award-management list, and a number of states also publish their own Medicaid exclusion or sanction lists that are separate from the federal ones — Minnesota and New York are two that maintain and publish such lists and expect providers to check them in addition to the LEIE. Which state lists apply, and how they must be checked, depends on the states a practice bills, so the applicable set has to be confirmed against each state Medicaid program rather than assumed.

Employees
Everyone on the payroll whose work touches services billed to a federal program — clinicians, coders, billers, front-desk and back-office staff, and leadership. The prohibition reaches administrative and management roles, so screening cannot stop at the people who deliver care.
Contractors and temporary staff
Contracted clinicians, locum tenens, and agency or staffing-agency personnel who work under an arrangement with the practice. An excluded person supplied by an agency is still an exclusion the practice is exposed to.
Vendors and business associates
Companies the practice contracts with for services payable, directly or indirectly, by a federal program — a billing company, a coding vendor, an IT provider. These are frequently the same business associates a practice already has agreements with, so exclusion screening and vendor oversight naturally run together.
Owners, and ordering or referring providers
An excluded person may not furnish payable services through a business they own, and services ordered or prescribed by an excluded provider are not payable either — so ownership interests and the physicians who order or refer belong in the screen as well.

How to run and document the check

OIG publishes the LEIE in two forms, and which one fits depends on volume. The free online search handles a handful of names at a time and is the practical tool for a single new hire or a small roster. The downloadable data file contains the entire dataset and is what a larger organization loads into a screening process to check many names at once; monthly supplement files capture the changes since the last full file.

A name match is not a hit

Common names produce false matches, and acting on a name alone is a mistake in both directions — clearing the wrong person or flagging an innocent one. OIG's online search lets a user verify a potential match by entering the individual's Social Security number, or an entity's Employer Identification Number, before treating it as real. Confirming identity this way is part of a defensible screen; a screen that stops at a matching first and last name is not enough.

Document each screen. Keep a record of who was checked, against which lists, on what date, and the result — including the identity verification on any potential match. That record is what demonstrates the diligence the “should have known” standard turns on: if the question ever arises, a practice that can show a dated, routine screen is in a very different position from one that cannot. The person or role that owns this task should be named in the practice's compliance program, so that screening happens on schedule rather than when someone remembers.

How often to screen

Screening has two natural moments: before a person or vendor is engaged, and periodically afterward. Checking before hire or contract keeps an already-excluded person from ever being onboarded; rechecking on a schedule catches a name that becomes excluded later, because exclusions are added continuously and a person who cleared last year may be listed today.

Monthly is best practice, not a universal mandate

OIG's own guidance is careful here: it states that there is no statutory or regulatory requirement for a provider to check the LEIE, and that because OIG updates the list monthly, screening employees and contractors each month best minimizes potential overpayment and penalty liability. So “monthly” is OIG's recommended best practice for providers, not a blanket legal deadline. Separately, for Medicaid, federal rule (42 CFR 455.436) does impose a monthly cadence on the state Medicaid agency, requiring it to check the LEIE and the federal award-management list no less frequently than monthly. A practice should confirm the exact expectation that applies to it — including any state Medicaid or payer-contract requirement — rather than treat one cadence as universal.

The reason the recommended cadence tracks the list's update cycle is straightforward: screening more often than the list changes adds little, and screening less often leaves a window in which an excluded person's work could be billed before the practice notices. Matching the screen to the monthly update closes that window as tightly as the source allows.

When a name comes back a match

Verify the identity first
Before treating a match as real, confirm it against the Social Security or Employer Identification Number through OIG's search. Many apparent matches are different people who share a name.
Stop the exposure
If the match is confirmed, the excluded person cannot furnish services payable by a federal program — directly, indirectly, or by ordering or prescribing. That includes the administrative and back-office roles the prohibition reaches, and it cannot be worked around by billing the person's services under someone else's NPI.
Look back at what was billed
If the person has been furnishing services that were billed to a federal program, the amounts the program paid are an overpayment that generally must be returned, and the practice should determine the full period involved. How a practice handles that, including any obligation to disclose, is a compliance and legal question to work through with qualified counsel.
Do not assume it clears on its own
An exclusion does not lift automatically when its stated period ends. The excluded party must apply to OIG and be granted reinstatement, so a name should not be treated as cleared until reinstatement is confirmed — checking the current list, again, is how that is verified.

Educational, not legal advice

This article explains how OIG exclusion screening generally works and why a billing operation performs it. It is not legal or compliance advice; the lists that apply, the frequency expected, and the right response to a confirmed match depend on a practice's payers, its states, and its own circumstances, and the underlying guidance and state requirements change. Confirm the obligations that apply to a given practice against current OIG guidance, the applicable state Medicaid program, and qualified counsel.

Common questions

Is a provider legally required to check the LEIE?

OIG's guidance states that there is no statutory or regulatory requirement for a provider to check the LEIE. What creates the exposure is the payment prohibition and the penalty standard: no federal program pays for an excluded person's services, and a provider that employs or contracts with someone it knew or should have known was excluded can face civil monetary penalties. Because OIG updates the list monthly, OIG recommends screening monthly as the practice that best minimizes that liability. Separate rules apply on the Medicaid side — 42 CFR 455.436 requires the state Medicaid agency to check the LEIE and the federal award-management list no less frequently than monthly — and some states and payer contracts add their own requirements, so a practice should confirm what applies to it.

Which exclusion lists should a practice screen against?

The primary list is OIG's List of Excluded Individuals/Entities (LEIE), which OIG maintains and recommends as the first source. Many organizations also check the exclusion and debarment records in the federal System for Award Management (SAM.gov), the government-wide list the General Services Administration runs. On the Medicaid side, a number of states publish their own Medicaid exclusion or sanction lists separate from the federal ones and expect providers to check them too. Which state lists apply depends on the states a practice bills.

Whom does a practice need to screen?

Everyone whose work touches services billed to a federal program — not just clinicians. Because the payment prohibition reaches administrative and management services, screening should cover employees across roles, contracted and agency staff, vendors and business associates whose services are payable directly or indirectly by a federal program, owners, and the providers who order or refer. An excluded person in a back-office or leadership role is inside the prohibition even though their work is not a billable clinical service.

What happens if we find that an excluded person was billed?

First verify the match against the Social Security or Employer Identification Number, since name-only matches are often the wrong person. If it is confirmed, the excluded person must stop furnishing services payable by a federal program, and the amounts the program already paid for their work are an overpayment that generally must be returned. Determining the full period and any obligation to disclose is a compliance and legal question best worked through with qualified counsel. Note that an exclusion does not end on its own — the party must apply to OIG for reinstatement.

How is exclusion screening different from the exclusion checks done at Medicaid enrollment?

They are two sides of the same requirement. At enrollment, the state Medicaid agency screens the provider — checking the applicant and its owners against the exclusion databases before granting billing privileges. Exclusion screening, as this article uses the term, is the provider's own ongoing duty to check its workforce and vendors against those lists. The enrollment check is the payer confirming the provider; screening is the provider confirming everyone it relies on.

Key terms in this article

Defined once, on their own pages.

Continue learning

The compliance program screening belongs to, and the enrollment-side check.

Authoritative sources

HHS-OIG — Special Advisory Bulletin on the Effect of Exclusion from Participation in Federal Health Care Programs (2013) (opens in a new tab)
OIG's guidance on the scope of the payment prohibition (including its reach to administrative and management services), the civil-monetary-penalty standard for employing or contracting with an excluded person, and its recommendation to screen against the LEIE before engagement and periodically — noting there is no statutory or regulatory requirement for a provider to check the list.
HHS-OIG — Exclusions Program and the LEIE (opens in a new tab)
OIG's exclusions program pages, describing the List of Excluded Individuals/Entities, its monthly updates, the online search and downloadable file, identity verification of a potential match, and that reinstatement is not automatic.
42 U.S.C. § 1320a-7 (Social Security Act § 1128) — Exclusion of certain individuals and entities (opens in a new tab)
The statute establishing the exclusion authority and distinguishing mandatory exclusions from the broader set of permissive, discretionary grounds.
42 CFR § 455.436 — Federal database checks (opens in a new tab)
The Medicaid regulation requiring the state Medicaid agency to check a provider's exclusion status against the LEIE and the federal award-management list, no less frequently than monthly.