False Claims Act & Qui Tam Whistleblower Lawsuits

The False Claims Act (FCA, 1863) — codified at 31 U.S.C. §§ 3729–3733 — is the federal government's primary civil tool for recovering money stolen through fraud on federal programs. Anyone who knowingly submits a false or fraudulent claim for federal payment is liable for three times the government's actual damages plus approximately $14,308–$28,619 per false claim (2025 inflation-adjusted) (adjusted for inflation). The FCA's most powerful feature is the qui tam provision — a mechanism allowing private citizens ("relators") who know about fraud to file suit on the government's behalf and collect 15–30% of whatever the government recovers. The government is notified of the suit in secret, investigates, and decides whether to intervene and take over the case (which it does in about 25% of cases). Even when the government declines to intervene, the relator can proceed alone and still collect 25–30% of any recovery. The results are staggering: the FCA has recovered over $75 billion since the 1986 amendments that added the modern qui tam mechanism, including approximately $6–8 billion per year in recent years. Healthcare fraud (Medicare and Medicaid overbilling, kickbacks, unnecessary procedures) accounts for the largest share — hospitals, pharmaceutical companies, and medical device manufacturers have paid billions in FCA settlements. Defense contractor fraud, research grant fraud, and COVID relief fraud are other major categories. The retaliation protection provision — protecting employees who report suspected fraud — was strengthened in 2009 and 2021 to include more employee types and clearer remedies.

Current Law (2026)

Legal Authority

• 31 U.S.C. § 3729(a) — False claims liability (any person who knowingly submits a false claim for payment to the government, knowingly makes a false record or statement material to a false claim, or conspires to commit such violations, is liable for treble damages plus per-claim penalties)
• 31 U.S.C. § 3730(b) — Qui tam actions (any person may bring a civil action "in the name of the Government" for violations; complaint filed under seal for 60+ days while DOJ investigates; DOJ may intervene or decline)
• 31 U.S.C. § 3730(d) — Award to qui tam relator (15-25% if government intervenes; 25-30% if relator proceeds alone; plus attorney's fees and costs)
• 31 U.S.C. § 3730(h) — Anti-retaliation (employees who are discharged, demoted, harassed, or discriminated against for lawful qui tam activity are entitled to reinstatement, back pay, and compensation for litigation costs)
• 31 U.S.C. § 3729(b) — Knowledge standard ("knowing" includes actual knowledge, deliberate ignorance, or reckless disregard — NO specific intent to defraud required)

How It Works

The False Claims Act (FCA) is the federal government's most powerful tool for combating fraud against the government — and its qui tam provision, which allows private citizens to sue on the government's behalf and share in the recovery, has made it the most successful whistleblower statute in the world.

The FCA imposes liability on anyone who knowingly submits a false claim to the government, makes a false record material to a false claim, or avoids an obligation to pay the government (the "reverse false claim"). "Knowingly" is defined broadly to include actual knowledge, deliberate ignorance, and reckless disregard for the truth — no specific intent to defraud is required. A Medicare contractor billing for services not provided, a defense contractor falsifying test results, and a university mischarging grant expenses are all potential defendants. Liability is severe: treble damages (three times the government's actual loss), plus civil penalties of $13,508 to $27,018 per false claim (inflation-adjusted). In healthcare fraud cases involving thousands of Medicare claims, per-claim penalties can dwarf the underlying damages.

The FCA's qui tam provision is what makes it unique. Any person with evidence of fraud against the government can file a lawsuit "in the name of the United States" — the whistleblower (called the "relator") files under seal in federal court, serving a copy on DOJ. DOJ investigates under seal — typically 60 days, often extended for months or years — and then either intervenes (takes over) or declines (allows the relator to proceed alone). If DOJ intervenes and the case succeeds, the relator receives 15–25% of the recovery plus attorney's fees; if the relator proceeds alone, the share is 25–30%. These financial incentives generate 600–700 new qui tam cases per year — making whistleblowers the primary source of FCA enforcement. Approximately 85% of FCA recoveries come from healthcare fraud — false claims to Medicare, Medicaid, Tricare, and other federal health programs: billing for services not rendered, upcoding, referral kickbacks (which also trigger parallel Anti-Kickback Statute liability), off-label drug promotion, and false quality certification. Anti-retaliation protections make it illegal for employers to fire, demote, or harass employees for filing qui tam suits or cooperating with FCA investigations, with liability for reinstatement, back pay, and damages.

How It Affects You

State Variations

Implementing Regulations

• 28 CFR Part 0 — Organization of the Department of Justice: whistleblower protection provisions for FBI employees under FCA-related anti-retaliation authorities

• 5 CFR Part 185 (OPM) and 6 CFR Part 13 (DHS) — Program Fraud Civil Remedies Act Regulations (47 sections each — agency-level administrative proceedings for false claims under the Program Fraud Civil Remedies Act of 1986 (31 U.S.C. §§ 3801–3812)); the PFCRA is the administrative companion to the court-based FCA — agencies can pursue false claims administratively through an ALJ (or Presiding Officer) rather than going to court, making it practical for smaller fraud cases that wouldn't warrant federal litigation:

  • Civil penalty: up to $14,308 per false claim or false written statement — lower than the FCA's $13,508–$27,018 per-claim penalties but achievable through administrative process without a court filing (§ 185.103 / § 13.3); penalties apply to any person who knowingly submits a false, fictitious, or fraudulent claim or written statement to the agency
  • Investigation and DOJ approval: the investigating official conducts the investigation; before a complaint can be issued, the reviewing official must obtain written DOJ approval — DOJ verifies there is adequate evidence and that the matter meets the PFCRA threshold (§ 185.105–185.106 / § 13.5–13.6); this DOJ gateway prevents duplicative federal litigation
  • ALJ/Presiding Officer hearing: complaint served by certified/registered mail; defendant has 30 days to file an answer admitting or denying each allegation; failure to answer allows the reviewing official to refer the complaint directly to the ALJ, who issues a default decision after notice (§ 185.109–185.110); both parties may be accompanied by legal counsel; ALJ has full discovery, subpoena, and hearing management authority (§ 185.119)
  • Separation of functions (§ 185.115): the investigating official and reviewing official may not participate as decision-makers in the same case — the ALJ operates independently from the agency personnel who brought the case
  • Standard of proof: preponderance of the evidence; the ALJ's initial decision is subject to appeal to the authority head (agency level), then to federal court under the Administrative Procedure Act (§ 185.147–185.154)

The PFCRA gives agencies a faster, lower-cost tool for false-claims cases where the government's actual damages are modest (small fraudulent invoices, single false certification) and a court case would not be cost-effective. Each federal agency implements the PFCRA through its own administrative regulation — the structure is nearly identical across agencies (OPM, DHS, USDA, DOD, HHS all have parallel Parts), but the specific ALJ authorities and agency-specific penalty structures differ at the margins.

• 28 CFR Part 71 — Implementation of the Program Fraud Civil Remedies Act of 1986 (51 sections — the DOJ-wide version of the PFCRA regulations, parallel to the agency-specific regulations above). Key provisions beyond the standard template:

  • § 71.1 — Purpose: implements PFCRA (31 U.S.C. §§ 3801–3812) for DOJ components; covers false claims submitted to any DOJ-administered program — including false statements in grant applications, forfeiture submissions, and immigration fee fraud
  • § 71.13(b) — Unique provision: pursuant to 31 U.S.C. § 3730(c)(5), a private plaintiff under the False Claims Act may participate in a PFCRA hearing for the same subject matter — creating a formal coordination mechanism between the court-based FCA qui tam action and the administrative PFCRA proceeding when they overlap
  • § 71.17 — Rights of parties: both the government authority and the defendant may be accompanied and represented by counsel; may conduct discovery; may cross-examine witnesses; and may submit proposed findings and briefs — the proceeding has due process protections comparable to agency adjudications generally
  • § 71.18 — ALJ authority: the ALJ may issue subpoenas for documents and testimony, conduct prehearing conferences, rule on discovery disputes, and take all other actions needed to maintain an orderly proceeding; ALJ decisions must be based solely on the record
  • § 71.21 — Discovery: authorized types include requests for production, requests for admissions, and depositions; more limited than federal court discovery, focused on ensuring the defendant can review the government's evidence before the hearing
  • § 71.22 — Witness/exhibit exchange: at least 15 days before the hearing, parties must exchange witness lists, witness statements, and exhibits; parties may not use at hearing any documents or witnesses not previously disclosed
  • § 71.10 — Default: if the defendant fails to file an answer, the reviewing official may refer the complaint to the ALJ; after notice, the ALJ issues a written decision recommending a default judgment with the maximum applicable penalty

  The DOJ Part 71 creates an administrative enforcement track within DOJ that complements criminal prosecution under 18 U.S.C. § 1001 (false statements) and civil False Claims Act suits under 31 U.S.C. § 3729. Because PFCRA penalties apply per false claim or per false written statement (not per fraudulent dollar), the administrative track is especially useful for systematic false certification cases — where a contractor's program representations are false even if the underlying services were provided — and for cases where the dollar amount defrauded is modest but the pattern is systemic.

• 42 CFR Part 1007 — State Medicaid Fraud Control Units: the HHS OIG regulations governing the federally-funded state units that investigate and prosecute Medicaid fraud. Every state has a Medicaid Fraud Control Unit (MFCU); the units are funded 90% by federal matching funds and 10% by state funds, and they are the primary investigative and prosecutorial bodies for Medicaid fraud at the state level — generating billions in annual fraud recoveries:

  • § 1007.5 — Single, identifiable entity: the MFCU must be a single, identifiable entity of the state government — it cannot be divided across multiple agencies or blended into the Medicaid agency itself; the consolidation requirement ensures that the unit can develop specialized fraud investigation expertise and institutional identity
  • § 1007.7 — Prosecutorial authority: the MFCU must either have authority to prosecute Medicaid fraud cases in its own name (most common — the unit is typically located within the state Attorney General's office with direct prosecution authority) or have a formal agreement with the state's prosecutorial authority ensuring coordination; the prosecutorial model gives MFCUs the ability to bring criminal charges without referral delays
  • § 1007.9 — Separation from Medicaid agency: the MFCU must be separate from and independent of the state Medicaid agency; no Medicaid agency official may participate in MFCU case decisions; this independence requirement prevents the Medicaid agency from suppressing fraud investigations against its own contractors or preferred providers
  • § 1007.11 — Duties and responsibilities: the MFCU must conduct a statewide program for (1) investigating and prosecuting violations of applicable state laws pertaining to fraud in the administration of Medicaid; (2) reviewing complaints alleging abuse or neglect of patients in Medicaid-participating facilities; MFCUs must also review and investigate allegations of misappropriation of patient funds in healthcare facilities — expanding their mandate beyond billing fraud to patient safety
  • § 1007.19 — Federal financial participation (FFP) rate: the federal government pays 90% of allowable MFCU costs during the unit's first 3 years (startup rate) and 75% thereafter; allowable costs include salaries, benefits, travel, and reasonable overhead for unit employees; legal costs of prosecuted cases are eligible; costs must be directly attributable to MFCU activities — a unit sharing space and staff with other AG programs must carefully allocate costs
  • § 1007.20 — Data mining: MFCUs may use data mining — systematic analysis of Medicaid claims data to identify patterns suggesting fraud — as an investigative tool; the regulation requires OIG approval for MFCU data mining programs and specifies that data mining costs are FFP-eligible only when certain conditions are met; data mining has become one of the most powerful tools for identifying systematic false billing patterns in Medicaid

  MFCUs collectively recover approximately $2–3 billion per year from Medicaid fraud prosecutions — making them, alongside the federal FCA qui tam mechanism, the most productive anti-fraud tools in the healthcare system. MFCUs are distinct from state False Claims Acts (which many states have enacted) — MFCUs are funded federal-state partnerships with specific jurisdictional and procedural requirements, while state FCAs are legislative tools. Both work in parallel: a MFCU investigation may support both a criminal prosecution and a parallel civil state FCA or federal FCA action. MFCUs also play a critical role in nursing home and long-term care fraud — their patient abuse/neglect mandate gives them jurisdiction over care quality violations that the state Medicaid agency may be reluctant to pursue against its own contractors.

Pending Legislation

• S 4024 — Broaden FCA to reclaim federal dollars through states, 100% clawbacks within 180 days. Status: Introduced.
• HR 909 (Rep. Wagner, R-MO) — Allow FCA recoveries to fund Crime Victims Fund through 2030. Status: Passed House.

Recent Developments

• The Supreme Court's United States ex rel. Schutte v. SuperValu (2023) held that a defendant's subjective beliefs about the truth of a claim are relevant to the FCA's knowledge standard — strengthening qui tam plaintiffs' position
• Healthcare continues to dominate FCA recoveries, with major settlements involving pharmaceutical companies, hospital systems, and managed care organizations
• Cybersecurity false claims — companies that misrepresent their cybersecurity compliance to the government — are an emerging area of FCA enforcement
• The DOJ has launched the Civil Cyber-Fraud Initiative specifically targeting false claims related to cybersecurity
• COVID-19 fraud cases (PPP loans, pandemic relief programs) have generated a new wave of FCA investigations and qui tam filings
• Trump/Bondi DOJ FCA enforcement direction — Medicaid fraud emphasized, DEI claims emerging (2025): AG Pam Bondi's DOJ has maintained active FCA enforcement against healthcare fraud — the Trump DOJ consistently treats Medicaid and Medicare fraud as waste that reduces program integrity, making FCA enforcement against hospitals, pharmaceutical companies, and managed care organizations a bipartisan priority. DOJ FCA recoveries in healthcare continue at approximately $2-3 billion per year. A new area of FCA enforcement under the Trump administration: contracts with DEI provisions or certifications. Trump EO 14173 (January 2025) directed agencies to include representations from contractors that they don't maintain DEI programs violating anti-discrimination law; some legal commentators have noted this could create FCA exposure for contractors who certified compliance with DEI provisions under prior administrations. This theory remains untested in litigation but is being monitored.
• FCA and government contract mass terminations (2025): DOGE's mass termination of federal contracts — thousands of grants, research contracts, and services contracts — has created a novel FCA inversion: contractors who claim the government owes them termination-for-convenience payments are filing claims; conversely, the government is reviewing terminated contracts for any prior false certification exposure as leverage in settlement negotiations. Contractors who received DOGE-terminated contracts and billed for work that may not have been fully performed face FCA exposure. The interaction of termination-for-convenience claims and FCA defenses is an emerging area of contract litigation.
• DOGE Inspector General dismissals — FCA oversight gap (2025): Trump fired 17 Inspectors General in January 2025, including IGs at HHS, DOD, DOT, and other major contracting agencies. IGs are a primary source of FCA referrals to DOJ and conduct the underlying investigations that support qui tam cases. The IG dismissals have reduced the investigative pipeline for new FCA cases — particularly in defense contracting and Medicaid. Qui tam relators with knowledge of ongoing fraud in these areas should note that DOJ Civil Division continues operating and can investigate independently, but the loss of IG resources reduces the government's initial investigative capacity.