Template Forms Can Lead to Audit Problems

At a time when the workday seems to be growing ever more hectic, prescribers and pharmacies may find pre-printed prescription forms convenient; especially for medications which are frequently utilized by a prescriber for treatment. Unfortunately, many PBMs prohibit pre-printed prescription form use for various reasons.

Become an audit assistance member today to continue reading this article. As a member, you’ll have access to hundreds of articles and receive our monthly proactive newsletter!

Forms created by the pharmacy for the prescriber can be more problematic, as they may give the impression that the pharmacy is soliciting prescriptions or influencing the prescriber to choose one specific NDC over others. Cookie-cutter forms that contain only a small list of high AWP items, with each option featuring identical quantities, sig, and refills, are likely to attract PBM scrutiny.

Additionally, PAAS National® has seen pre-printed prescription forms recouped during audits when they have cascading or overly broad substitutions. For example, if a topical medication is not covered, and the form provides a blanket allowance for the pharmacy to substitute the next topical medication on the list until one is covered, it could raise concerns about the pharmacy’s [conflicted] influence in the prescribing process. These medications are often more costly than preferred alternatives and can raise red flags for audits if the pharmacy is observed submitting claims, reversing them, and quickly billing for a different product. Many PBM provider manuals have now added language explicitly requiring pharmacies to have a verbal conversation with the prescriber before making any substitutions, which would need to be proven with a clinical note documented on the prescription.

Here is a summary of the three big PBM positions:

  • Caremark: Pre-printed forms resulting in the dispensing of products that are not the most cost-effective items are prohibited (even if they are different salts, bases, or have different release characteristics)
  • Express Scripts: Pharmacies using forms with multiple medications and substitution language must consult (and document) consultation with prescriber prior to dispensing the appropriate medication
  • OptumRx: Dispensing or distributing Prescription Drugs/Drug Products which are not based on valid prescriptions for individually identified Members or are otherwise on pre-populated or templated prescriptions is prohibited. Such pre-populated prescriptions may also not include options for substitute products without individualized prescriber authorization or annotation.

PAAS Tips:

  • Not all template prescriptions will draw the ire of PBMs
  • PAAS has seen enforcement mostly focused on:
    • High AWP products where a cheaper alternative is available
    • Compounded pain/scar creams with broad substitution language
    • High AWP dietary supplements

The Next Big Wave: Anticipating a Surge in HIPAA Compliance Audits

Desk audits, onsite audits, invoice audits…and HIPAA compliance audits?! Unfortunately every community pharmacy has some familiarity with third party payor audits, and PAAS National® audit analysts bring their expertise to guide members through the entire audit process, ensuring everything goes as smoothly as possible.

But what about HIPAA compliance audits? With a potential surge in these audits on the horizon, it is important for covered entities (i.e., pharmacies) to evaluate their HIPAA compliance policies and procedures to fortify their program.

You may ask, “Why are these audits being performed?”. The Health Information Technology for Economic and Clinical Health (HITECH) Act requires that the Department of Health and Human Services (HHS) conduct periodic HIPAA audits, submit an annual report to Congress on HIPAA compliance, and provide annual guidance on the most effective technical safeguards for meeting Security Rule requirements. The Office for Civil Rights (OCR), within HHS, is tasked with overseeing these responsibilities. To verify OCR was performing their respective duties, the Office of Inspector General (OIG) performed a review of OCR’s HIPAA compliance audit process.

According to the OIG November 2024 brief“OCR fulfilled its requirement under the HITECH Act to perform periodic HIPAA audits. However:

  • OCR’s HIPAA audit implementation was too narrowly scoped to effectively assess ePHI protections and demonstrate a reduction of risks within the health care sector. Specifically:
    • OCR’s audits consisted of assessing only 8 of 180 HIPAA Rules requirements; and
    • Only 2 of those 8 requirements were related to Security Rule administrative safeguards and none were related to physical and technical security safeguards.
  • OCR oversight of its HIPAA audit program was not effective at improving cybersecurity protections at covered entities and business associates.”

OIG recommended OCR increase the volume and breadth of their audits to raise their assurance that covered entities (like pharmacies) and business associates have complied with the Security Rule. OIG stated these audits will also help OCR provide covered entities with more opportunities to strengthen their security over ePHI.

Additionally, on December 27, 2024, OCR issued a Notice of Proposed Rule Making (NPRM) to modify the HIPAA Security Rule to strengthen cybersecurity protections for ePHI. This is the first time since 2013 that OCR seeks to update the Security Rule. With the dramatic increase in cybersecurity threats, both malicious and unintentional, it seems that updates are more important now than ever. A fact sheet on the NPRM is available online.

Since HIPAA compliance audits may be in your future (along with Security Rule updates), now is a great time to evaluate your HIPAA compliance program to get a good handle on where your vulnerabilities are, what threats you have and the risk of those threats. If you’re not sure where to start, check out the PAAS FWA/HIPAA Compliance Program!

PAAS Tips:

  • Understand the components and importance of a HIPAA Security Risk Analysis
    • Perform an accurate and thorough assessment of the potential risks and vulnerabilities to the confidentiality, integrity, and availability of the pharmacy’s ePHI
    • Identify and implement reasonable and appropriate physical, technical, and administrative safeguards as required by the HIPAA Security Rule
  • Know the terms
    • Vulnerability – a flaw or weakness in system security procedures, design, implementation or internal controls
    • Threat – the potential for a person or thing to exercise a specific vulnerability (natural, human, and environmental)
    • Risk – a function of the probability that a threat will attack a vulnerability and the resulting impact to the organization
  • PAAS’ FWA/HIPAA Compliance Program members have access to:
    • Update their HIPAA Risk Analysis
    • Complete annual Cybersecurity training on the Member Portal
    • Policies and procedures to comply with HIPAA Privacy, Security and Breach Notification rules which include customized administrative, physical and technical safeguards
    • Contingency Planning and Preparedness
    • Pharmacist experts to support you in FWA/HIPAA Compliance
  • Watch the PAAS National® webinar, Cybersecurity Considerations for Community Pharmacies located on the Member Porta

Will Your Signature Logs Pass an Audit?

Since the beginning of the new year, PAAS National® has seen a 14% increase in audits from third-party payors (18% for onsite audits)! When collecting the requested documents for an audit, signature logs are commonplace. Invariably, the one patient who refuses to sign their name (or uses a smiley face instead) to confirm receipt of their prescriptions is selected for audit. To make matters worse, in February of 2024, OptumRx updated their Provider Manual, now stating that a missing signature is subject to full recoupment and no post audit documentation will be accepted. Consequently, questionable or missing signature logs can result in significant audit findings! 

Become an audit assistance member today to continue reading this article. As a member, you’ll have access to hundreds of articles and receive our monthly proactive newsletter!

Many pharmacies have implemented a Point-of-Sale system (POS) in their pharmacies to ease the burden of storing paper signature logs and having easy access when asked to reproduce them. However, with the cost to implement and the extra costs in having an electronic system for deliveries, some pharmacies are still using both a POS system and paper signature logs for home/facility delivery. It is important that all elements are present on both the POS signature log as well as the delivery log.

PAAS Tips:

  • Patients refusing to sign can be a challenge that pharmacies should consider addressing more aggressively
    • Try explaining that their insurance requires a legible signature for proof of receipt
      • This is an opportunity to explain that PBM’s are ruthless on audits and that a missing signature means you could be out hundreds or thousands of dollars each time they refuse to sign
    • If a patient still refuses to sign for expensive medications, offer to reverse the claim and bill it without their insurance
    • Do not sign/print the patient’s name for them, or use their initials to give the appearance of the patient signing
  • Point-of-Sale electronic logs should contain:
    • Prescription number
    • Date filled or fill number
    • Date of pick-up
    • Signature of the patient or representative who picked up the medication
  • Delivery logs should contain:
    • Patient name
    • Prescription number
    • Date filled or fill number
    • Date delivered (handwritten by the person receiving the delivery)
    • Delivery address
    • Signature of the patient or representative who received the delivery
  • See the July 2024 Newsline article, Ensuring Audit Readiness: What PBMs Look for in Signature Logs and Proof of Delivery for more information on delivery and mailing requirements.

Audit Alert: Topical Nail Treatments

What do Jublia® (efinaconazole), ciclopirox (formerly Penlac®), and tavaborole (formerly Kerydin®) all have in common? Besides each being a topical solution for the treatment of onychomycosis (Jublia® and Kerydin® for toenails and Penlac® for fingernails and toenails), they also all require knowing the number of applications per bottle for calculating an accurate days’ supply. Unfortunately, manufacturers do not provide this information in the package insert, making these days’ supply calculations more difficult to ascertain. 

Become an audit assistance member today to continue reading this article. As a member, you’ll have access to hundreds of articles and receive our monthly proactive newsletter!

Manufacturer guidelines for Jublia® indicate a patient should use one drop per toenail with the big toe requiring a second drop. A representative from the manufacturer responded to an inquiry from PAAS National® stating there are approximately 200 applications per 4 mL bottle. Confirm with the prescriber’s office how many nails are being treated (including if any big toes are affected), document with a clinical note, and update the patient’s label to include the clarification. If there is no indication of a big toe being treated, it will be assumed that it is not. Penlac® is similar to Jublia®; however, the manufacturer does not indicate how many applications are in each bottle. PAAS recommends using the same calculations as you would for Jublia®.

Jublia® example:

  • “Apply to 4 affected toenails including both big toes once daily”
  • 2 small toes + 2 big toes = (1 application x 2 small toes) + (2 applications x 2 big toes) = 6 applications/day
  • 4 mL = 200 applications ÷ 6 applications/day = 33 days’ supply
  • 8 mL = 400 applications ÷ 6 applications/day = 66 days’ supply

Penlac® example:

  • “Apply to 4 affected toenails including both big toes once daily”
  • 6.6 mL = approximately 330 applications ÷ 6 applications/day = 55 days’ supply

Kerydin® comes packaged in a 4 mL or 10 mL bottle. A representative from the manufacturer responded to an inquiry from PAAS stating each mL of the product contains 60 drops, therefore the 4 mL bottle has 240 drops and the 10 mL bottle has 600 drops. The representative went on to state patients should use 1-2 drops per treatment of the toe, with big toes requiring 3-4 drops per treatment. Kerydin® has the same clinical note documentation requirements as Jublia® and Penlac® regarding which toes are affected, and the clarification being added to the patient’s label.

Kerydin® example:

  • “Apply to 4 affected toenails including both big toes once daily”
  • 2 small toes + 2 big toes = (2 drops x 2 small toes) + (4 drops x 2 big toes) = max 12 drops/day
  • 4 mL = 240 drops ÷ 12 drops/day = 20 days’ supply
  • 10 mL = 600 drops ÷ 12 drops/day = 50 days’ supply

PAAS Tips:

  • Clinical notes should contain four elements:
    • Date
    • Name and title of who you spoke with
    • What was discussed
    • Your initials
  • Do not use PBM “drops per mL” general estimates to determine days’ supply
  • Clarify number of toes being treated, including whether the big toe is being treated
  • Update the patient label to include the clarification
  • If patients are requesting early refills, confirm they are applying correctly
  • Refer Jublia® patients to the manufacturer website for an instructional video

Caremark Aberrant Practices and Trends – Enforcement Extends Beyond the Aberrant Product List

PAAS National® analysts have worked with numerous pharmacies who have received communications related to Caremark’s proprietary Aberrant Product List or other alleged Atypical Dispensing Patterns. These letters are driven by Caremark’s Provider Manual section 3.02.03 which was expanded in 2022 as discussed in the Newsline article, Caremark® Expands “Aberrant” Language & Restricts Bulk Purchases.

These letters fall into two different categories:

Become an audit assistance member today to continue reading this article. As a member, you’ll have access to hundreds of articles and receive our monthly proactive newsletter!

Atypical Dispensing Patterns

Communications labeled Atypical Dispensing Patterns point out pharmacy claims that are seemingly “abnormal” (relative to an unknown standard) and notify pharmacies that they are being watched. These letters are educational only with no direct call to action and should be interpreted as a warning letter to prevent future enforcement actions.

Notice of Breach

Communications labeled Notice of Breach include a list of specific claims in the previous month that have created a contract violation or “breach” that must be resolved. These letters have aggressive language and indicate that Caremark may terminate the pharmacy’s network participation unless the pharmacy cures the breach and develops/implements a written Corrective Action Plan (CAP).

Breach letters are issued almost exclusively due to the dispensing of NDCs included on Caremark’s Aberrant Product List and only when the pharmacy has crossed an arbitrary threshold of 25% (by claim count or dollar amount) within a one-month period. The NDCs on this list are generally products with a high AWP that have lower cost alternatives that could be dispensed in their place.

PAAS Tips:

  • See Caremark’s Pharmacy Portal (https://rxservices.cvscaremark.com/) under Document Library>Audit (login required) for the most current Aberrant Product List
  • Notify PAAS if you are in receipt of a letter so that we can support you in developing a response
  • See the January 2023 Newsline article, Essential Elements of Corrective Action Plans for suggestions on how to develop a CAP

The NEW Inventory Transfer Log and Why it Could Save You Big!

PAAS National® analysts have walked many pharmacies through the ins and outs of invoice audits. During our consultations with members who have their results back, the question of “Why would my invoice not be accepted?” comes up regularly. The answer to this question is multifaceted and can take some investigative work to identify the root cause. The following is a non-exhaustive list of potential issues leading to invoices not being accepted:

Become an audit assistance member today to continue reading this article. As a member, you’ll have access to hundreds of articles and receive our monthly proactive newsletter!

  • Invoices were not sent directly from the wholesaler to the auditor
  • Invoices were not from a wholesaler with National Association of Boards of Pharmacy (NABP) Drug Distributor Accreditation, formerly known as VAWD, for OptumRx
  • Invoices for diabetic supplies were not purchased from an “authorized distributor” for Caremark or Express Scripts
  • Invoices show product purchases were outside the audit timeframe

Another invoice audit pitfall that has become increasingly common (possibly due to the increasing number of online purchasing platforms such as RxeedTM or MatchRX) are shortages due to incomplete documentation for pharmacy-to-pharmacy purchases. While the Drug Supply Chain Security Act (DSCSA) allows such sales between pharmacies, DSCSA requires that these transactions include the pedigree (aka Transaction Statement, Transaction History, and Transaction Information or “3Ts”) if they are for general stock replenishment, but DSCSA exempts transactions that are for a specific patient need and does not require the pedigree to be communicated for those purchases.

However, be aware that Caremark’s Provider Manual section 8.05 states that if product is received from another pharmacy, the purchasing pharmacy must obtain and maintain the entire Transaction Statement, Transaction History, and Transaction Information.

Similarly, OptumRx’s 2025 Provider Manual, First Edition Version 1.1 Section B. Pharmacy audits (Audits) and Claim Reviews states “Any inter-pharmacy transfers or purchases made through intermediary third parties or marketplaces for the purpose of increasing or replenishing stock, and not made to fulfill a specific patient need for an identified patient, are subject to the requirement to obtain transaction history, transaction information, and a transaction statement for the product. If purchases were made to fulfill a specific patient need, supporting documentation must be available and provided, if requested.” It goes on to say, “A Network Pharmacy Provider may transfer inventory to alleviate a temporary shortage or for the sale, transfer, merger or consolidation of all or part of the business of a pharmacy from or with another pharmacy, whether accomplished as a purchase and sale of stock or business assets. The transfer or purchase of covered legend and non-legend products or medical supplies form another licensed pharmacy must be verified and documented as originating from a NABP Drug Distributor Accreditation and licensed drug wholesaler, to include DSCSA-compliant transaction history, information and statement.”

PAAS has seen Caremark and OptumRx auditors request copies of the transferring pharmacy’s license and original invoices (and/or pedigree information) from the transferring pharmacy’s wholesaler. While PAAS strongly opposes these policies and enforcement efforts, PBMs hold an upper hand in an audit situation and consider the Provider Manual an extension of the agreement.

For those pharmacies who choose to make pharmacy-to-pharmacy purchases (directly, or indirectly through an online platform), PAAS recommends reviewing Caremark’s documentation guidelines and using a tool to ensure all information regarding the acquisition is appropriately gathered. PAAS analysts have developed just the tool you may wish to use, the Inventory Transfer Log! This log was developed solely to help pharmacies meet the strict requirements of PBMs and PAAS analysts strongly encourage its use for those who still choose to make pharmacy-to-pharmacy purchases. Additionally, for PAAS National® FWA/HIPAA Compliance members, this new tool can be found in Appendix B of your Policy & Procedure Manual with an accompanying Policy and Procedure in Section 4.1.4

This resource guides pharmacies through elements to document regarding the seller, the product purchased, the reason for acquisition, payment information, and even product inspection. While utilization of this tool is optional, procurement without appropriate documentation will likely cause the invoice to be excluded from an auditor’s inventory count and may lead to product shortages, audit recoupment, and (potentially) contract termination.

PAAS Tips:

  • Keep copies of all invoices and proof of purchases for 10 years as required by Medicare Part D retention requirements
  • Refer to the July 2024 Newsline article, Diabetic Test Strip Authorized Distributors, for links to manufacturer authorized distributor lists for major diabetic test strips
  • Review Section 8.05 of Caremark’s Provider Manual for more information on pharmacy-to-pharmacy transfers (available online in the Caremark pharmacy portal, log in required)
  • Pharmacies should carefully weigh the pros and cons of purchasing inventory from other pharmacies (whether directly or indirectly)
    • The November 2024 Newsline article, U.S. Government Alleges Counterfeit HIV Drugs Hiding in Pharmacy-to-Pharmacy Purchases, provides insight into the potential risks a pharmacy takes by obtaining medication outside of DSCSA “authorized Trading Partners”

Continuous Glucose Monitor (CGM) Update – New Products Recently Released 

There have been some updates to the continuous glucose monitor (CGM) world since our last Newsline article released March 2024. Abbott has released two new sensors, FreeStyle Libre 2 Plus Sensor and FreeStyle Libre 3 Plus Sensor, that can be used with the FreeStyle Libre 2 Reader and FreeStyle Libre 3 Reader, respectively.

FreeStyle Libre 2 Plus Sensor became widely available around June 2024, followed by the FreeStyle Libre 3 Plus Sensor a few months later. The biggest difference introduced with both sensors is…

Become an audit assistance member today to continue reading this article. As a member, you’ll have access to hundreds of articles and receive our monthly proactive newsletter!

they can be worn for up to 15 days and are indicated for children 2 years and older. FreeStyle Libre 2 Plus Sensors can also be integrated with insulin pumps while FreeStyle Libre 3 Plus Sensors work with Automated Insulin Delivery (AID) systems. For more information on the types of insulin pumps and AID systems, see the FreeStyle Libre website. As a reminder, FreeStyle Libre 2 Sensors and FreeStyle Libre 3 Sensors can only be worn up to 14 days and are indicated for children 4 years and older. These sensors cannot be integrated with insulin pumps or AID systems.

The chart below should be a helpful tool for referencing Dexcom and FreeStyle CGM products, NDCs, their respective NCPDP billing units, and corresponding days’ supply.

ProductNDCNCPDP Billing UnitReplacement Schedule
Dexcom G6 Receiver08627-0091-111 EachOnce a year
Dexcom G6 Transmitter08627-0016-011 EachEvery 3 months
Dexcom G6 Sensor08627-0053-033 EachEvery 30 days
    
Dexcom G7 Receiver08627-0078-011 EachOnce a year
Dexcom G7 Sensor08627-0077-011 EachEvery 10 days
    
FreeStyle Libre 14-day Sensor57599-0001-011 EachEvery 14 days
FreeStyle Libre 14-day Reader57599-0002-001 EachEvery 3 years
FreeStyle Libre Reader57599-0000-211 EachEvery 3 years
    
FreeStyle Libre 2 Sensor57599-0800-001 EachEvery 14 days
FreeStyle Libre 2 Plus Sensor57599-0835-001 EachEvery 15 days
FreeStyle Libre 2 Reader57599-0803-001 EachEvery 3 years
    
FreeStyle Libre 3 Sensor57599-0818-001 EachEvery 14 days
FreeStyle Libre 3 Plus Sensor57599-0844-001 EachEvery 15 days
FreeStyle Libre 3 Reader57599-0820-001 EachEvery 3 years

PAAS Tips:

  • See our March 2024 Newsline article, Continuous Glucose Monitor (CGM) Billing and Supply Allowance for additional Medicare Part B billing information
    • Use the CGM Supply Allowance Billing Calculator found on your DME MAC website to help determine when the next date of service can be billed
      • CGS
      • Noridian
    • Check out this similar tool myCGS for a complete claim history to be sure the patient has not received supplies from another supplier in the last 30 or 90 days
    • If the patient requires a replacement sensor, transmitter, or receiver due to a product failure, be sure to document and replace the item while reaching out to the manufacturer
  • The NCPDP billing units shown in the chart above would apply to non-Medicare Part B claims
  • Beware that any PBM, including Medicare Part B, will recoup or deny a claim if it is refilled too soon based on days’ supply guidelines above

Using and Documenting Priming Units on Insulin Pens

In 1985, the first insulin pen was invented – it gave patients a flexible way of self-administration and autonomy from burdensome vials and syringes. Today there are a multitude of insulin products available as FlexPen®, FlexTouch®, KwikPen®, and Solostar® pens that offer convenience and discretion for patients with diabetes.

The patient Instructions for Use, included with insulin pen boxes, direct patients to prime the pen needle prior to administering each dose. This is for many reasons, including removing any air between the pen itself and the pen needle, ensuring the pen is properly working, and ensuring the correct dose is administered. The usual, reliable adage has been 2 priming units per dose, but some insulin pens require three to five priming units!

PAAS National® created the Insulin Medication Chart that includes which insulin pens deviate from the standard two priming units:

Become an audit assistance member today to continue reading this article. As a member, you’ll have access to hundreds of articles and receive our monthly proactive newsletter!

InsulinPriming Units
Humulin® R U-500 KwikPen® regular insulin human5
Toujeo® Solostar® 300 Unit/mL insulin glargine3
Toujeo® MAX Solostar® 300 Unit/mL insulin glargine4

PAAS Tips:

  • If your pharmacy uses priming units to calculate days’ supply, make sure to document on the hard copy for auditing purposes.
  • When documenting priming units for the atypical products in the chart above, be sure to indicate the priming unit volume that you are calculating with

Electronic Prescription Fraud

Most community pharmacy employees know the “red flags” to spot a fraudulent written prescription such as it “looks too good”, has irregular quantities and instructions, different color ink or handwriting, and doesn’t follow the typical medical shorthand.

Unfortunately, it is much harder to spot a fraudulent electronic prescription. The bad guys are now using sophisticated computer schemes to steal login credentials from prescribers and hijack electronic health record systems to initiate thousands of fraudulent e-prescriptions to pharmacies across the country within a short period of time. When these e-prescriptions are received at the pharmacy, the normal red flags are nowhere to be seen, and they may slip through undetected.

For these fraud schemes to pay off, the criminals must actually get their hands on the medications. Target medications are often not just controlled substances that can be sold on the street, but also expensive branded medications (dispensed in manufacturer stock bottles) that can be recirculated through an illegitimate supply chain. A Drug Topics article from April 2024 outlined these schemes including the use of “drug runners” to pick up medications from unsuspecting pharmacies.

Pharmacies need to be aware that the end-to-end electronic prescribing process, while generally secure, does have the potential to be exploited by criminals. It is important that both pharmacy technicians and pharmacists play a role to protect the integrity of this process. Pharmacies should consider some basic strategies to determine authenticity of e-prescriptions to ensure your pharmacy isn’t pulled unwittingly into a fraud scheme.

Below are some techniques to spot fraudulent electronic prescriptions at your pharmacy:

Become an audit assistance member today to continue reading this article. As a member, you’ll have access to hundreds of articles and receive our monthly proactive newsletter!

  1. Know the prescriber
    1. Is this a new prescriber in your area?
    2. Have you received electronic prescriptions from this prescriber before?
    3. Is the medication within their scope of practice?
    4. Can you verify prescriber information (e.g. phone, address) through public resources?
    5. Check your state PDMP for any controlled substance prescriptions that don’t add up.
  2. Know the patient/caregiver
    1. Is this a new patient at your pharmacy?
    2. Does this patient live within your service area?
    3. How did you obtain the third-party billing information?
    4. Consider requiring a copy of photo identification for prescriptions picked up for new patients
    5. Large cash copays paid by a representative unknown to pharmacy may be a clue that they are trying to avoid detection
    6. Some level of skepticism, if all interactions are with a personal representative
  3. Review the prescription for unusual items such as:
    1. Is dose regimen outside the norm?
    2. Does patient have indication to support use?
    3. Does the patient have other prescriptions from this prescriber? Can the patient confirm they are being treated by the prescriber?
    4. Are there multiple prescriptions issued for high-cost medications brand medications, particularly those that may be dispensed in their original, intact containers?

With fraudulent electronic prescriptions being on the rise, pharmacies should consider formulating a business policy to handle these situations. A key first step is conducting due diligence before concluding that a prescription is fraudulent. When validating with a prescriber, the pharmacy should request documentation [preferably in writing] that the prescription is fraudulent. If the prescription was billed to insurance and later reversed due to a determination of it being a fraudulent prescription, the hardcopy should still be retained in case of an audit. The prescriber should take the lead on notifying authorities and researching their stolen credentials, but pharmacies may have a corresponding responsibility to notify the state board of pharmacy and/or DEA (especially when prescriptions were dispensed). FWAC Members can utilize the custom content section of their Policy and Procedure Manual to create and upload a fraudulent prescription policy.

If a prescription is dispensed and later identified as fraudulent, pharmacies are obligated to reverse the claims and likely notify the third-party payor. During a PBM audit, fraudulent electronic prescriptions will be subject to financial recoupment and the onus will be on the pharmacy to prove that they were ‘duped’ as well and not in on the fraudulent activity.

PAAS Tips:

  • DEA has a brief video about fraudulent e-prescriptions and a handout on general prescription fraud here
  • When prescriptions are identified as fraudulent, document your due diligence efforts on the prescription or in your pharmacy management software

Tennessee Pharmacist Conducts Multi-Million Dollar Health Care Fraud Scheme

In December 2024, a Tennessee pharmacist was arrested and charged with nine counts of Health Care Fraud and six counts of Aggravated Identity Theft for operating a health care fraud scheme that resulted in over $6 million worth of false claims being submitted to several insurers.

A federal indictment returned in late December revealed that a Tennessee pharmacist who oversaw a pharmacy with several locations in Tennessee, had been submitting false claims to Medicare, Medicaid, TRICARE, and Blue Cross Blue Shield for prescription drugs that were deemed not medically necessary, were not actually dispensed to a patient, or had no evidence of being ordered by a health care provider. In many instances, the pharmacist would use the identification of other people, without their consent, to receive reimbursement for claims submitted to a health care benefit program. The pharmacies profited from these schemes by receiving fraudulent reimbursement for personal use.

The case is being investigated by the U.S. Department of Health and Human Services, Office of Inspector General, the Tennessee Bureau of Investigation, and the Department of Defense, Office of Inspector General. If convicted, the pharmacist will face up to ten years in federal prison for each count of health care fraud, and two consecutive years in federal prison for the aggravated identity theft counts. The U.S. is also seeking a money judgement of $6,524,585.44, which represents the proceeds of the fraud scheme.

PAAS Tips:

Become an audit assistance member today to continue reading this article. As a member, you’ll have access to hundreds of articles and receive our monthly proactive newsletter!

  • Only bill a claim pursuant to a valid prescription on file. Billing a “test” claim or “ghost” claim is prohibited by PBMs and those claims, even if reversed, are subject to audit.
    • Failure to provide a valid hardcopy can raise red flags and lead to accusations of billing false claims