14.1 Detecting & Reporting FWA

AHIP Medicare Certification Exam

Track your progress as you read

Finished sections get a check mark.

1 Introduction

1.1 About the AHIP Medicare Certification Exam 1.2 How to Use This Study Guide

2 Chapter 2: Medicare Program Fundamentals

2.1 What Medicare Is: Program Structure & How Parts A–D Fit Together 2.2 Medicare Part A — Hospital Insurance 2.3 Medicare Part B — Medical Insurance 2.4 Medicare Eligibility Rules (Age 65, Disability, ESRD, ALS)

3 Chapter 3: Medicare Enrollment Periods

3.1 Initial Enrollment Period (IEP) 3.2 Annual Enrollment Period (AEP): October 15 – December 7 3.3 Medicare Advantage Open Enrollment Period (MA OEP): January 1 – March 31 3.4 Special Enrollment Periods (SEPs) & Qualifying Life Events 3.5 Late Enrollment Penalties (Part A, Part B, Part D)

4 Chapter 4: Medigap & Coordination of Coverage

4.1 Medigap (Medicare Supplement) Basics & Guaranteed Issue Rights 4.2 Dual Eligibility & Medicare Savings Programs 4.3 How Original Medicare, MA, Part D & Medigap Interact

5 Chapter 5: Medicare Advantage Plan Types

5.1 Medicare Advantage (Part C) Overview: How MA Differs from Original Medicare 5.2 HMO & HMO-POS Plans 5.3 PPO Plans 5.4 PFFS Plans (Private Fee-for-Service) 5.5 MSA Plans (Medicare Medical Savings Accounts) 5.6 Cost Plans & Employer Group Waiver Plans (EGWPs)

6 Chapter 6: Special Needs Plans & MA Plan Design

6.1 Special Needs Plans (SNPs) Overview 6.2 D-SNP — Dual-Eligible Special Needs Plans 6.3 C-SNP & I-SNP — Chronic Condition & Institutional Special Needs Plans 6.4 MA Benefits, MOOP & Supplemental Benefits 6.5 MA Star Ratings & Plan Quality

7 Chapter 7: Part D Structure & the 2026 Redesign

7.1 Part D Overview & Eligibility 7.2 Formularies & Drug Tiers 7.3 The 2026 Part D Benefit Redesign ($2,100 OOP Cap, $615 Max Deductible, Catastrophic Phase) 7.4 Medicare Prescription Payment Plan (Drug-Cost Smoothing)

8 Chapter 8: Part D Costs, Assistance & Appeals

8.1 Low-Income Subsidy (LIS) / Extra Help 8.2 Part D Late Enrollment Penalty & Creditable Coverage 8.3 Coverage Determinations, Exceptions & Appeals

9 Chapter 9: CMS Marketing Rules & Scope of Appointment

9.1 CMS Medicare Communications & Marketing Guidelines (MCMG) Overview 9.2 Scope of Appointment (SOA): the 48-Hour Rule & Exceptions 9.3 Permitted vs. Prohibited Marketing & Sales Activities 9.4 Marketing Events vs. Educational Events

10 Chapter 10: Enrollment & Disclosure Requirements

10.1 The Pre-Enrollment Checklist (PEC) 10.2 Enrollment Procedures & Application Requirements 10.3 Call Recording & Third-Party Marketing Organization (TPMO) Disclaimers 10.4 Agent & Broker Compensation Rules

11 Chapter 11: Marketing Conduct & Oversight

11.1 Cross-Selling Restrictions & Nominal Gift Value Rules 11.2 Marketing to Vulnerable Populations & Non-Discrimination in Sales 11.3 Website, Social Media & Advertising Compliance 11.4 Complaint Tracking Module (CTM) & Agent Oversight

12 Chapter 12: Understanding Fraud, Waste & Abuse

12.1 Defining Fraud, Waste & Abuse (and the Difference Between Them) 12.2 The False Claims Act 12.3 The Anti-Kickback Statute

13 Chapter 13: Compliance Laws & Screening

13.1 The Stark Law (Physician Self-Referral) 13.2 HIPAA Privacy & Security Basics 13.3 The OIG Exclusion List & Sanctioned-Provider Screening

14 Chapter 14: Reporting, Compliance Programs & Consequences

14.1 Detecting & Reporting FWA 14.2 Compliance Program Requirements (Seven Core Elements) & Non-Discrimination Training 14.3 Consequences & Corrective Action Plans

14.1 Detecting & Reporting FWA

Key Takeaways Explain This Topic AI

Sponsors, first-tier, downstream, and related entities are collectively FDRs; agents are almost always downstream entities.

Every Sponsor employee and FDR has three duties: comply, report, and follow the Code of Conduct -- reporting is mandatory, not optional.

Report internally first (SIU, compliance department, or FWA hotline); escalate externally to the OIG (1-800-HHS-TIPS), PPI MEDIC (1-877-7SafeRx), or CMS when warranted.

Anonymous reporting must be accepted, and non-retaliation protection applies regardless of the investigation's outcome.

The Self-Disclosure Protocol lets a Sponsor voluntarily report its own past FWA to the OIG for reduced exposure.

Last updated: July 2026

Why This Topic Matters on the AHIP Exam

Module 5 (Fraud, Waste & Abuse plus General Compliance) carries 20% of the AHIP final, and detection-and-reporting questions are the single most common question type inside that module. AHIP does not just ask you to define fraud, waste, and abuse ( FWA ) in the abstract (that was Chapter 12); it tests whether you know what to do when you see it : who counts as an FDR, what your personal duty is, which indicators should make you suspicious, where a report goes first, where it goes if the plan itself is the problem, and what protections exist for the person who reports. Get the "who do I call" chain wrong on exam day and you will miss several of the highest-value points in Module 5, because nearly every scenario question in this module is built around exactly that chain.

Where You Fit In: Sponsors and FDRs

Every person who touches a Medicare Part C or Part D enrollee's health or administrative services falls into one of four roles defined by the Centers for Medicare & Medicaid Services ( CMS ):

Role Definition Example

Sponsor The Medicare Advantage Organization (MAO) or Part D Prescription Drug Plan (PDP) itself UnitedHealthcare, Humana, CVS Health/Aetna

First-tier entity Any party that contracts directly with the Sponsor Pharmacy Benefit Manager (PBM), a field marketing organization, a claims-processing vendor

Downstream entity Any party below a first-tier entity in the chain A pharmacy contracted with a PBM, an independent agent contracted with a field marketing organization

Related entity An entity under common ownership or control with the Sponsor A Sponsor's own wellness-benefit subsidiary

Collectively, first-tier, downstream, and related entities are abbreviated FDRs . As an agent, you are almost always a downstream entity, which means the Sponsor's FWA policies, training requirements, and reporting obligations legally flow down and apply to you even though you never signed a contract with the Sponsor directly.

Your Three Personal Duties

CMS assigns every Sponsor employee and FDR the same three duties, and AHIP tends to test all three as a set:

Comply with all applicable statutory, regulatory, and Part C/D requirements, including using an effective compliance program (see 14.2).

Report any compliance concern or suspected/actual FWA violation you become aware of, even if you were not personally involved and even if you are not certain it is a violation.

Follow your organization's Code of Conduct , which states the organization's commitment to ethical behavior "from the top of the organization to the bottom."

The exam trap here is assuming reporting is optional or discretionary "if you're sure." It is not: failure to report can itself trigger discipline, up to termination of your contract or employment, independent of how the original FWA turns out to be resolved.

Recognizing FWA: Key Indicators by Role

You do not need to be a forensic auditor to detect FWA; you need to notice red flags and escalate them. AHIP scenario questions typically hand you a specific role and ask which behavior is a warning sign:

Beneficiary-related: identical prescriptions filled at multiple pharmacies from different doctors; a beneficiary's medical history that doesn't support the services billed; signs the person receiving services isn't the actual beneficiary (identity theft).

Provider-related: billing for services never rendered; prescribing a much higher quantity than medically necessary; a diagnosis code with no support in the medical record.

Pharmacy-related: billing a Pharmacy Benefit Manager for prescriptions never picked up; substituting generics while billing for brand; diverting drugs meant for a nursing home or hospice elsewhere.

Sponsor-related: encouraging inappropriate risk-adjustment diagnosis submissions; using unlicensed agents; misleading a beneficiary about the true cost of benefits.

Reporting: Internal First, External When Warranted

Every Sponsor is legally required to maintain a mechanism for reporting FWA, typically a Special Investigations Unit (SIU) and/or a dedicated FWA Hotline , and must accept anonymous reports with a firm non-retaliation guarantee : a Sponsor may never discipline you for a good-faith report, even if the investigation later finds no wrongdoing.

When you report, whether internally or externally, include:

• Contact information for the source, suspect(s), and any witnesses;
• Details of the alleged FWA;
• The specific Medicare rule allegedly violated;

Any history of prior compliance issues, training, or communication involving the suspect.

If the concern involves the Sponsor itself, or the internal channel is unavailable or feels inadequate, you can escalate externally:

• Where Contact
• HHS Office of Inspector General (OIG) 1-800-HHS-TIPS (1-800-447-8477); email HHSTips@oig.hhs.gov
• Parts C & D Plan Program Integrity MEDIC (PPI MEDIC, formerly NBI MEDIC) 1-877-7SafeRx (1-877-772-3379)
• CMS Hotline (all other federal health programs) 1-800-MEDICARE
• U.S. Department of Justice stopmedicarefraud.gov

A related but distinct pathway is the Self-Disclosure Protocol (SDP) : if a Sponsor or FDR discovers its own past FWA, it can voluntarily disclose it to the OIG under the SDP rather than wait for a government-directed investigation. Self-disclosure typically results in a lower settlement than an OIG-initiated audit or investigation because it demonstrates good faith and cooperation, and it avoids the cost and disruption of a government-directed inquiry.

Exam Scenario

An agent overhears a provider's office staff joking about billing Medicare for appointments patients "no-showed." The correct action is not to confront the office, ignore it, or wait for proof; it is to report the suspicion to the agent's own Sponsor compliance department or FWA hotline, anonymously if preferred, including whatever specific details are known. The agent does not need certainty. A good-faith suspicion is enough, and the agent is protected from retaliation for reporting it.

Key Takeaways

Sponsors, first-tier, downstream, and related entities are collectively FDRs; agents are almost always downstream entities.

Every Sponsor employee and FDR has three duties: comply, report, and follow the Code of Conduct. Reporting is mandatory, not optional.

Report internally first (SIU, compliance department, or FWA hotline); escalate externally to the OIG (1-800-HHS-TIPS), PPI MEDIC (1-877-7SafeRx), or CMS when warranted.

Anonymous reporting must be accepted, and non-retaliation protection applies regardless of the investigation's outcome.

The Self-Disclosure Protocol lets a Sponsor voluntarily report its own past FWA to the OIG for reduced exposure.