13.3 The OIG Exclusion List & Sanctioned-Provider Screening

The OIG Exclusion List & Sanctioned-Provider Screening

Why This Topic Matters

Every one of the fraud statutes covered so far — the False Claims Act, the Anti-Kickback Statute, and the Stark Law (Chapter 12 and Section 13.1) — describes conduct that is prohibited. This section covers the enforcement mechanism that follows: how the federal government bars people and organizations from Medicare and Medicaid entirely, and how CMS requires plan sponsors, agencies, and agents like you to actively check for those bars before doing business with anyone. AHIP tests this as a concrete, procedural compliance duty — not just legal theory — because screening lapses are one of the most common real-world compliance failures found during CMS program audits of Medicare Advantage and Part D sponsors.

Core Terms and Rules

The Office of Inspector General (OIG), part of the U.S. Department of Health and Human Services (HHS), has statutory authority under Section 1128 of the Social Security Act to exclude individuals and entities from participating in all federal health care programs — not just Medicare, but Medicaid, TRICARE, and others. OIG maintains this bar list as the List of Excluded Individuals/Entities (LEIE), a free, publicly searchable database at exclusions.oig.hhs.gov, updated monthly and currently containing tens of thousands of entries.

A separate but related list is maintained by the General Services Administration (GSA): the System for Award Management (SAM.gov) excluded parties list, which covers exclusions across the broader federal contracting and grant-making system (not just health care). CMS requires Medicare Advantage and Part D sponsors — and, by extension, the agencies and agents who sell on their behalf — to check both the LEIE and SAM.gov before hiring or contracting with anyone, and then monthly thereafter for the duration of the relationship.

Mandatory vs. Permissive Exclusions

OIG exclusions fall into two categories, and the AHIP exam tests the distinction between the two:

Note that mandatory exclusions require at least a 5-year bar — this is a specific number the exam may test directly, since it is the one hard-coded duration in an otherwise discretionary system.

What Exclusion Actually Means

Exclusion is not a mild administrative flag — it functions as a payment prohibition. No federal health care program may pay, directly or indirectly, for any item or service furnished, ordered, or prescribed by an excluded individual or entity. This prohibition is broader than most agents initially assume: it extends to administrative and management services, meaning an excluded person cannot even work in a non-clinical, back-office role (like billing or scheduling) for an organization that participates in federal health care programs, if that role touches program-related functions.

Exclusion is not automatically lifted when the exclusion period ends. The excluded individual or entity must affirmatively apply for reinstatement, and OIG reviews the application before restoring eligibility — being off the calendar does not mean back on the list is automatic removal.

Screening Obligations for Agents and Agencies

CMS requires Medicare Advantage and Part D sponsors to screen all employees and First Tier, Downstream, and Related Entities (FDRs) — a category that includes independent agents, agencies, and marketing organizations — against both exclusion databases:

• Before hire, appointment, or contracting.
• Monthly thereafter, for as long as the relationship continues.

This screening duty is one of the required elements of a compliance program (covered in full in Chapter 14), and failure to screen is a recurring finding in CMS program audits.

Penalties for Non-Compliance

If an organization employs or contracts with an excluded individual and submits claims for items or services that person furnished, OIG can impose a civil monetary penalty of roughly $25,595 per item or service claimed (2026 inflation-adjusted figure), in addition to requiring repayment of amounts already paid. An organization with a pattern of failing to screen can itself face compliance sanctions from CMS, including corrective action plans or, in severe cases, contract-level sanctions.

Exam Scenario

An agency's compliance officer runs the monthly LEIE check and discovers that a downline agent — actively selling Medicare Advantage plans under the agency's contract — was added to the exclusion list three weeks ago following a state license revocation. The agency must act immediately: the agent cannot continue selling or performing any function connected to federal health care programs, the agency must terminate the relationship (or reassign the agent to fully unrelated, non-program work, if such a role genuinely exists), and the incident must be reported through the agency's and carrier's compliance channels. Continuing to allow enrollments to flow through that agent after discovering the exclusion would itself expose the agency to civil penalties.

Key Takeaways

• OIG maintains the LEIE, a monthly-updated public database barring individuals and entities from all federal health care programs under Social Security Act §1128 authority.
• Mandatory exclusions (fraud convictions, patient abuse, controlled-substance felonies) carry a minimum 5-year bar with no OIG discretion; permissive exclusions are discretionary and vary in length.
• Exclusion is a broad payment prohibition — it bars payment for clinical services and extends to administrative/management roles connected to federal programs.
• CMS requires screening all employees and FDRs (including agents and agencies) against both the LEIE and SAM.gov before engagement and monthly thereafter.
• Reinstatement after an exclusion period ends is not automatic — the excluded party must apply and OIG must approve it.