CMS Flagged $3.4 Billion in Suspect DME Billing. Your Practice's NPI Can Still Be in the Trail.

On September 8, 2026, the Centers for Medicare & Medicaid Services announced that it was barring 11 durable medical equipment, prosthetics, orthotics, and supplies suppliers from future Medicare Advantage Part C and Part D payments. CMS connected the action to more than $3.4 billion in suspected fraudulent billing during 2025 and 2026.

CMS said the suppliers had submitted no claims before 2025, used improper billing practices, billed for equipment tied to beneficiaries who were already deceased, and supplied items to people who said they had never requested or received them. Four suppliers had already been revoked from Original Medicare and then began billing Medicare Advantage plans. These are CMS's findings and allegations; the announcement is an enforcement action, not a court judgment establishing criminal liability for every claim.

The scale made the story travel quickly. The operational lesson for an independent practice is quieter and closer to home. A DME supplier places the ordering clinician's National Provider Identifier on the claim. An August 2026 HHS Office of Inspector General report says physicians are not routinely notified when DMEPOS claims identify them as the ordering physician. That means a practice can sit inside the billing trail without seeing the supplier's claim in its ordinary revenue-cycle reports.

This is not a reason to stop legitimate DME orders. It is a reason to treat every order, supplier handoff, patient confirmation, and NPI association as one traceable process.

The Ordering Provider Is Part of the Claim Trail

Most independent practices do not bill the supplier's DME claim. They document the clinical need, create the order, and send it to a supplier. That separation can create a blind spot: the practice sees the encounter and order, while the supplier controls delivery records, refill contact, coding, and claim submission.

CMS requires a standard written order for DMEPOS claims. The core elements include the beneficiary, order date, item description, quantity when applicable, treating practitioner's name or NPI, and the practitioner's signature. For selected items, the order and a supporting face-to-face encounter must exist before delivery. CMS announced 22 additional codes in July 2026, bringing the list to 105 items when the expansion takes effect on October 28, 2026.

A complete order protects payment only when the rest of the chain agrees with it. The medical record must support the need. The supplier must receive the order at the right time. The patient must receive what was ordered. Refills must reflect a current patient request rather than an automatic shipment. The clinician identity on the claim must be the clinician who actually ordered the item.

Where an Independent Practice Can Lose Control

The risk rarely begins with a dramatic event. It begins when small handoffs have no owner and no one can compare the final supplier activity with the practice's record.

• Unsigned or Incomplete Requests: A supplier sends a prefilled order that staff route for signature without confirming the item, quantity, diagnosis support, or date of the relevant encounter.
• An NPI Used Outside the Practice's View: The supplier submits claims using a clinician's identity, but the practice has no regular way to see which DME claims cite that clinician.
• A Supplier Change With No Recheck: A patient or referral partner shifts to a new supplier, but the practice does not verify the supplier's enrollment, standing, contact details, or request history.
• No Patient Confirmation Loop: A complaint about unwanted, repeated, or undelivered equipment stays with the front desk and never reaches compliance or the person monitoring DME orders.
• Refills Treated as Standing Permission: The clinical order may allow refills, but the supplier still needs documented contact confirming the patient's current need before dispensing a refill.
• Records Stored in Separate Queues: The encounter, signed order, supplier request, delivery question, and patient complaint sit in different systems. During an audit, the practice can prove pieces but not the complete chain.

None of those failures proves fraud by the practice or supplier. They do show where an honest practice can become unable to explain an order made under its clinician's name.

Six Controls to Put in Place Now

The answer is not more paperwork. It is a small number of controls that make the order visible from the encounter through the patient handoff.

• Use One DME Order Queue: Route every supplier request, prescription, correction, and refill question through one named workflow. Do not let unsigned forms circulate through personal inboxes or fax piles.
• Match the Order to the Encounter: Before signature, confirm the item, quantity, diagnosis support, treating clinician, encounter date, and any face-to-face or prior-authorization requirement. The order should not create a clinical fact that is missing from the record.
• Verify the Supplier Before the Handoff: Confirm the supplier's identity, enrollment and contact details through current authoritative sources. Escalate unexplained changes, unusual urgency, prefilled clinical language, or a request to replace a valid supplier without a clear reason.
• Keep the Clinician's NPI Under Watch: Periodically review available ordering-and-referring data, supplier correspondence, payer notices, and patient complaints for DME activity the clinician does not recognize. Investigate mismatches instead of treating them as somebody else's claim.
• Close the Loop With the Patient: Give patients a simple route to report equipment they did not request, did not receive, or no longer need. Route those reports to a named owner and preserve what was checked and when.
• Sample the Full Chain: Each month, select a focused set of DME orders and reconstruct the encounter, signed order, supplier, timing, delivery or refill evidence, and any claim-related notice. Track the exceptions until they close.

If a practice finds billing it did not authorize, an unfamiliar supplier using a clinician's NPI, or a possible repayment or disclosure issue, preserve the evidence and involve the appropriate payer, Medicare contractor, legal counsel, or compliance adviser. Do not alter the record or guess at legal obligations.

The VOSKPO Approach: Make Every Order Reconstructable

VOSKPO connects the clinical order to the revenue-cycle trail without confusing the supplier's claim with the practice's own billing. The aim is to give the practice a clear view of what left under its clinician's name and what came back from the patient, supplier, payer, or contractor.

• Order Intake Control: We define one route for incoming DME requests and the minimum information that must be present before a clinician reviews them.
• Encounter and Signature Check: We test the order against the supporting visit, the correct practitioner, the required elements, and the timing rules that apply to the item.
• Supplier Exception Tracking: We record unusual supplier requests, repeat corrections, patient complaints, unfamiliar ordering activity, and unresolved delivery questions in one accountable queue.
• Focused Reconciliation: We sample orders from the medical record outward and trace payer or supplier concerns back to the clinician. The gap becomes visible before an audit letter makes it urgent.
• Management Reporting: We show the practice which suppliers, items, clinicians, locations, or handoffs create repeat exceptions, without putting patient information into ordinary dashboards or marketing systems.

This protects more than compliance. A controlled DME workflow reduces staff rework, incomplete orders, avoidable patient calls, and the time spent reconstructing what happened months later.

The KPO Layer: Keep the Control Current

DMEPOS rules change by item, date, program, and contractor. Knowledge Process Outsourcing keeps the operating instructions tied to the source instead of asking staff to remember a policy update from an email.

• Maintain the Rule Map: Link each item group to current order, face-to-face, prior-authorization, refill, signature, and documentation requirements.
• Translate Changes Into Roles: Tell the front desk, clinical team, billing team, and manager exactly what changed, when it starts, and which step each person owns.
• Keep Supplier Checks Repeatable: Define the authoritative sources, evidence to retain, warning signs to escalate, and review frequency rather than relying on familiarity with a supplier's name.
• Learn From Exceptions: Use de-identified patterns from missing orders, patient complaints, and unfamiliar NPI activity to improve the process without exposing patient information.
• Preserve the Decision Trail: Record the source, effective date, operating change, approver, and next review date so the practice can show why the workflow looked the way it did at the time.

Start with a practical test: take 25 recent DME orders and ask whether another person can reconstruct the encounter, signed order, supplier, timing, patient handoff, and final exception status without relying on memory. VOSKPO can include that order-to-outcome trace in a Free Revenue Review and show where the clinical, billing, compliance, and knowledge layers need to connect.