The New US Healthcare Reality: A Guide to HHS's CRUSH Regulations and the Overhaul of Medicare/Medicaid Fraud Detection

The United States government is fundamentally restructuring how it polices the nation's multi-trillion-dollar healthcare system. On February 25, 2026, the Department of Health and Human Services (HHS) and the Centers for Medicare & Medicaid Services (CMS) launched the Comprehensive Regulations to Uncover Suspicious Healthcare (CRUSH) initiative. The sweeping regulatory overhaul is designed to replace the traditional, retrospective approach to fraud enforcement with a preemptive, data-driven dragnet.[1][6]

For decades, federal healthcare programs have operated on a "pay and chase" model—paying out claims quickly to ensure providers are compensated, and then deploying auditors and investigators to claw back funds if fraud is later discovered. Under CRUSH, CMS is pivoting to a "detect and deploy" strategy. This new framework relies heavily on artificial intelligence and predictive analytics to analyze claims in real time, flagging anomalies and suspending payments before the money ever leaves the government's accounts.[1][7]

The initiative was announced with immediate, concrete enforcement actions that signaled the administration's aggressive posture. CMS immediately imposed a six-month, nationwide moratorium on new Medicare enrollments for certain Durable Medical Equipment, Prosthetics, Orthotics, and Supplies (DMEPOS) companies. The freeze, which also applies to changes in majority ownership, targets a sector that has historically been a hotspot for fraudulent billing schemes.[3][5]

Alongside the DMEPOS moratorium, federal regulators took unprecedented action at the state level. CMS announced the deferral of $259.5 million in quarterly federal Medicaid matching funds to the state of Minnesota. The agency cited the need to prevent the payment of questionable claims while it conducts a further investigation into unusually high spending growth in certain service categories, such as personal care and home-based services.[1][6]

To formalize the CRUSH framework, CMS published a Request for Information (RFI) in the Federal Register on February 27, 2026. The RFI solicited stakeholder feedback on a wide array of potential regulatory changes aimed at strengthening program integrity across Medicare, Medicaid, the Children's Health Insurance Program (CHIP), and the Health Insurance Marketplace. The comment period, which closed on March 30, 2026, drew hundreds of responses from medical associations, state agencies, and billing professionals.[2]

The RFI provided a window into the specific vulnerabilities CMS intends to target. High on the list are enhanced identity proofing mechanisms and stricter ownership disclosure requirements for providers and suppliers. Regulators are particularly focused on identifying individuals who own five percent or more of a Medicare-enrolled entity, seeking to prevent bad actors from hiding behind complex corporate structures or repeatedly opening new clinics after being sanctioned.[4]

Laboratory testing has also emerged as a primary target for the new enforcement regime. The RFI explicitly raised concerns about fraud involving genetic and molecular diagnostics. According to CMS data, genetic tests accounted for just 5 percent of Medicare Part B laboratory test volume in 2024, but drove 43 percent of total spending—amounting to roughly $3.6 billion. The agency is evaluating whether expanded registration requirements and stricter medical necessity checks are needed to curb improper billing in this high-cost sector.[4]

The financial stakes of the CRUSH initiative are massive. In its 2025 program integrity reporting, CMS revealed that it had already suspended $5.7 billion in suspected fraudulent Medicare payments using advanced analytics and cross-agency coordination. The agency also reported stopping an estimated $1.5 billion in suspected DMEPOS billing fraud and revoking the billing privileges of 5,586 providers and suppliers for inappropriate behavior.[7]

By shifting to a real-time enforcement model, CMS aims to protect the solvency of programs that serve more than 150 million Americans. The agency reported that its total Medicare program integrity savings surged to a record $41.9 billion in Fiscal Year 2025, yielding a return on investment of $22.30 for every dollar spent on oversight.[1]

However, the rapid deployment of AI-driven fraud detection has sparked significant anxiety among healthcare providers and medical billing professionals. Industry analysts warn that the CRUSH rule represents the largest expansion of CMS enforcement authority in recent history, effectively putting every medical biller on notice. The shift toward preemptive payment suspensions means that legitimate practices could face sudden cash-flow disruptions if an algorithm incorrectly flags their claims as suspicious.[7]

Independent physician groups have been particularly vocal about the potential unintended consequences of the initiative. The Large Urology Group Practice Association (LUGPA) issued a policy brief supporting the goal of eliminating fraud, but cautioning that new compliance requirements must not disproportionately burden independent practices. They argue that AI oversight tools must incorporate appropriate clinical context to avoid penalizing doctors who treat complex, high-acuity patient populations.[5]

State Medicaid directors have also weighed in on the operational realities of implementing CRUSH. The National Association of Medicaid Directors (NAMD) submitted comments emphasizing that while states share the federal government's urgency, effective program integrity requires robust federal-state coordination. Because modern fraud schemes often span multiple states and programs, Medicaid agencies are asking CMS for better data-sharing infrastructure and enhanced analytic capacity to track bad actors across jurisdictional lines.[8]

State officials also urged federal regulators to maintain a clear distinction between intentional fraud, administrative waste, and unintentional billing abuse. While fraud requires aggressive law enforcement intervention, waste and abuse are often the result of complex coding rules or inefficient delivery systems, which are better addressed through provider education and streamlined administrative processes rather than punitive payment suspensions.[8]

The CRUSH initiative also signals a new era of transparency regarding administrative enforcement. CMS has announced plans to publicly release information on providers and suppliers whose Medicare participation has been revoked, including their National Provider Identifier (NPI) and the specific reasons for the revocation. This public database is intended to help private insurers and state Medicaid programs identify and exclude bad actors from their own networks.[1]

As the healthcare industry awaits the final regulatory text, the landscape of medical billing has already fundamentally changed. The proposed CRUSH rule advanced to the Office of Management and Budget (OMB) for review in August 2026, indicating that formal regulations are imminent. In the interim, hospitals, independent clinics, and medical suppliers are being advised to audit their own billing patterns, upgrade their compliance programs, and prepare for an environment where every claim is scrutinized by an algorithm before a single dollar is paid.[6][7]