19.2 PEPPER Compliance Risks and the False Claims Act

19.2 PEPPER Compliance Risks and the False Claims Act

Quick Answer: The Program for Evaluating Payment Patterns Electronic Report (PEPPER) flags target-area percents that sit at or above the 80th percentile (high outlier) or, for coding-focused areas, at or below the 20th percentile (low outlier). Those flags are risk signals for CDI and compliance review, not automatic proof of error or fraud. The federal False Claims Act (FCA) reaches knowing false claims; knowing includes actual knowledge, deliberate ignorance, and reckless disregard, and it does not require specific intent to defraud. Civil per-claim penalties (inflation-adjusted; look up the current notice) plus treble damages, and the duty to report and return identified overpayments, are why an ignored PEPPER outlier can become a legal problem.

This independent OpenExamPrep section helps learners study PEPPER as a compliance risk tool and the FCA as the statute that sits behind unsupported inpatient claims. Domain IV already uses PEPPER for program analysis and forecasting. Domain VII asks a different question: what must a CCDS-level professional do when the report lights up, and how knowing is defined when someone would rather not look.

What PEPPER is—and what it is not

PEPPER is a CMS-sponsored Excel workbook of provider-specific traditional Medicare statistics for discharges and services that CMS has judged vulnerable to improper payment because of billing, MS-DRG coding, or admission necessity. Short-term acute-care hospitals receive an ST PEPPER comparing the facility with other short-term acute-care hospitals in three groups: the nation, the Medicare Administrative Contractor (MAC) jurisdiction, and the state. Target areas are ratios expressed as percents: the numerator is the potentially problematic set of discharges; the denominator is a larger comparison set (often the numerator DRGs plus the DRGs those cases frequently recode into, or all medical/surgical discharges in a family).

CMS and the PEPPER user materials are explicit: PEPPER does not identify the presence of payment errors. It is a guide for auditing and monitoring. Formal tests of statistical significance are not used to call a hospital an outlier. Because of CMS data restrictions, PEPPER does not display statistics when there are fewer than 11 numerator discharges for a target area in a time period (“reportable data”).

That last point matters on the exam. A blank cell is not a clean bill of health; it may mean volume was too small to show. A high percentile is not a False Claims Act judgment. Both require record review.

How to read an outlier without panicking—or ignoring it

High outlier: at or above the 80th percentile of hospitals in that comparison group for that target area. For coding-focused areas, this often means “review for possible over-coding or unsupported CC/MCC.” For admission-necessity areas (short stays, selected procedures now payable outpatient, syncope-type medical DRGs), it often means “review whether inpatient admission was supported,” including the Two-Midnight expectation documented by the physician.

Low outlier (coding-focused target areas): at or below the 20th percentile. This can mean possible under-coding—missed CC/MCC, missed sepsis when it was the reason for admission, ventilation hours under-counted. It is still a flag, not a CMS promise of additional payment.

Comparison priority in the Compare Targets view is nation, then jurisdiction, then state. The state comparison is the smallest group, so it is the last tie-breaker, not the first panic button. A hospital can be a national high outlier and mid-pack in its state; the national flag still warrants a sample.

CDI’s job after a flag:

1. Confirm the target-area definition for the release you are holding (numerators and denominators change when MS-DRGs are re-split).
2. Pull a sample of numerator cases (and, for suspected under-coding, denominator cases that look like they belong in the numerator).
3. Score principal diagnosis, CC/MCC support, PCS duration where relevant, and query quality on those charts.
4. If the documentation supports the codes, document the clinical story (trauma center, transplant, true sepsis burden) so leadership does not “fix” legitimate severity.
5. If the documentation does not support the codes, stop the process that produced them, educate, recode what is still reopenable, and hand identified overpayments to compliance for the statutory return process.

Do not instruct physicians to stop documenting real sepsis or real severe malnutrition because a percentile is high. Do not repay every claim in an MS-DRG family without review. Do not treat the percentile itself as FCA liability.

Target areas CDI actually lives in

ST PEPPER target areas change by fiscal-year definition. Teach the types, then verify the current user guide when you sit at work. CDI-heavy examples that have appeared in recent ST PEPPER definitions include septicemia (MS-DRGs 870/871/872 versus pneumonia, ventilation, and UTI comparison DRGs), severe malnutrition as the sole MCC (E40–E43 in the PEPPER construction), ventilator support with PCS 5A1955Z on hour-threshold DRGs, medical and surgical DRGs with CC or MCC, and single CC or MCC claims. Admission-necessity examples include one- and two-day stays and selected procedure areas. Readmission and three-day skilled-nursing-facility-qualifying stay areas are more case-management than query work, but a CCDS should still recognize them as PEPPER content.

The False Claims Act, in CCDS language

The civil FCA, 31 U.S.C. § 3729, makes a person liable who knowingly presents (or causes to be presented) a false or fraudulent claim for payment, or who knowingly makes or uses a false record material to a false claim. Inpatient MS-DRG claims are claims. The coded record is the record. Materiality, in plain language, means the falsehood had a natural tendency to influence payment—an unsupported MCC that changes the MS-DRG is the textbook inpatient example.

Knowing and knowingly mean the person, with respect to the information:

• has actual knowledge,
• acts in deliberate ignorance of the truth or falsity, or
• acts in reckless disregard of the truth or falsity.

The statute says this definition requires no proof of specific intent to defraud. That sentence is the exam discriminator. “We were trying to help CMI” and “nobody forged a chart” do not end the analysis. Filing clinical-validation reports in a drawer because reversing MCCs would drop revenue is deliberate ignorance or reckless disregard if the reports showed a substantial risk that claims were false. The Supreme Court in United States ex rel. Schutte v. SuperValu Inc. (2023) confirmed that FCA scienter turns on the defendant’s subjective knowledge and beliefs at the time of the claim, not on a later-invented “objectively reasonable” reading of an ambiguous rule.

Honest isolated mistakes discovered and corrected through ordinary coding quality are not the FCA’s target. A system that ignores contrary evidence is.

Civil monetary penalties and treble damages—conceptually

If liability is found, the FCA generally imposes:

• a civil penalty per claim, in a statutory range of $5,000 to $10,000 as adjusted under the Federal Civil Penalties Inflation Adjustment Act, plus
• three times (treble) the amount of damages the government sustained because of the act.

CMS, HHS, and the Department of Justice publish inflation-adjusted amounts in the Federal Register. Those dollar figures move. For study purposes, know the structure (per-claim penalty plus treble damages) and that you look up the current notice rather than freeze a study-guide number as “the 2026 CMP.” Reduced damages (not less than double) can apply in narrow, timely self-disclosure situations defined in the statute; that is a compliance-office pathway, not a CDI workaround.

Separately, the Civil Monetary Penalties Law (42 U.S.C. § 1320a-7a) gives HHS/OIG an administrative penalty and assessment tool (including assessments of not more than three times amounts claimed for certain violations) and exclusion authority. Do not collapse CMPL and FCA into one statute, but do recognize both as why unsupported DRG assignment is not “just a coding variance.”

Qui tam provisions allow a private relator to sue on behalf of the United States. A CDI specialist who is ordered to keep producing unsupported MCC queries is looking at an ethics and employment problem; the statute is why compliance programs prohibit retaliation for good-faith reports. Escalate through approved compliance channels. Domain VII is not a course in filing lawsuits.

Reverse false claims and identified overpayments

The FCA also reaches knowingly concealing or improperly avoiding an obligation to pay money to the government. The Affordable Care Act’s overpayment provision requires Medicare providers to report and return identified overpayments on a short statutory timetable (commonly taught as 60 days after identification, with a cost-report timing rule in the statute). CMS’s Parts A and B rule, effective January 1, 2025, defines identification using the FCA knowingly standard: actual knowledge, deliberate ignorance, or reckless disregard—without waiting to finish quantifying every dollar before the clock can start. The rule also describes a time-limited suspension (up to 180 days) while a timely, good-faith investigation looks for related overpayments. Details live in 42 C.F.R. § 401.305; the CCDS point is simpler: finding unsupported malnutrition or sepsis MCCs on a PEPPER sample is the start of an identified-overpayment conversation, not optional reading.

Worked pattern (composite)

ST PEPPER shows a national 91st percentile for septicemia. CDI samples 25 MS-DRG 871 records. Twelve have a provider diagnosis of sepsis with organ dysfunction linked to the infection. Thirteen have “sepsis” copied from an emergency-department impression, no ongoing treatment for a systemic response, and a query that listed only sepsis versus “other.” The first twelve are not automatic overpayments. The second thirteen are a process failure. Compliance owns quantification and return. Continuing the same query after that sample is the mental state the FCA calls reckless disregard, even if every specialist “meant well.”

Exam traps

• Reading PEPPER as a guilt meter or as proof of innocence.
• Requiring intent to defraud before FCA risk exists.
• Inventing a 2026 per-claim dollar amount instead of describing inflation-adjusted penalties plus treble damages.
• “Fixing” a high outlier by banning legitimate diagnoses.
• Leaving identified overpayments unreturned because CMI is a dashboard metric.