Skip to content
Back to CMS Watch
FCA SettlementJune 5, 2026·6 min read

Kaiser's $556M FCA Settlement: What the Addenda and Query Allegations Mean for Working Coders

Five Kaiser Permanente affiliates agreed to pay $556 million to resolve False Claims Act allegations tied to MA risk-adjustment addenda and physician query programs. It's the largest MA risk-adjustment FCA settlement to date. Here's what the alleged mechanics mean for coders handling retrospective review.

FCA Settlementrisk adjustmentMedicare Advantagephysician queryFalse Claims Act
Jess P., CPC

Medically reviewed by Jess P., CPC

Published June 5, 2026

A judge's gavel beside a stack of medical file folders, representing the Kaiser Permanente False Claims Act risk-adjustment settlement
Five Kaiser Permanente affiliates agreed to pay $556 million in the largest MA risk-adjustment FCA settlement to date.Image: HCC Buddy

Key Takeaways

  • On January 14, 2026, DOJ announced five Kaiser Permanente affiliates would pay $556 million to resolve FCA allegations. It's the largest MA risk-adjustment settlement on record, ahead of Cigna's $172M in 2023 and Independent Health's $100M in 2024.
  • The alleged conduct spanned 2009 to 2018: nearly 500,000 diagnoses submitted via medical record addenda, allegedly generating roughly $1 billion in improper CMS payments.
  • The fraud theory is specific: diagnoses not actually considered or addressed during the patient visit, submitted through a query-and-addendum program tied to performance evaluations and financial incentives.
  • Retrospective chart review is not inherently fraudulent. The alleged problem was the combination of mined histories, quota-driven queries, and failure to delete codes later known to lack clinical support.
  • Opioid dependence (F11.2x) and dementia (F03.xx, F01.xx, F02.xx) are categories reporting has repeatedly tied to MA upcoding, so they warrant extra scrutiny: each requires explicit physician documentation beyond a medication list or problem-list entry.

What changed at your desk

The DOJ's announcement isn't a new enforcement theory. It's a settlement that puts specific dollar figures and specific alleged mechanics on the public record. The question for working coders isn't whether Kaiser did what DOJ alleged. It's whether any part of your own addenda and query workflow looks like what DOJ described.

On January 14, 2026, DOJ announced that five Kaiser Permanente affiliates agreed to pay $556 million to resolve False Claims Act allegations related to Medicare Advantage risk-adjustment submissions. The settlement resolves civil claims only; there's no admission of liability. The cases originated from whistleblower suits filed by former Kaiser employees, with relators collectively receiving approximately $95 million.

The alleged mechanics

The DOJ's theory, as reported by KFF Health News from the allegations, breaks into three parts.

First: Kaiser allegedly mined past medical histories for diagnoses that hadn't been submitted, then used a structured query-and-addendum program to encourage physicians to add them to visit records, sometimes months after the encounter, sometimes more than a year later.

Second: Kaiser allegedly set aggressive internal targets for securing those addenda and tied physician performance evaluations and financial incentives to risk-adjustment objectives.

Third: physicians were allegedly pressured to add diagnoses "regardless of whether these conditions were actually considered or addressed by the physician during the patient visits" (DOJ language, as reported by KFF Health News). And when internal compliance personnel and physicians flagged codes as lacking clinical support, Kaiser allegedly failed to remove them.

The span: 2009 to 2018. The scale: nearly 500,000 diagnoses via addenda, allegedly generating around $1 billion in improper CMS payments.

What the settlement does NOT say

This was a civil settlement, not a criminal conviction, and not an admission of wrongdoing. The legal standard for FCA liability is "knowingly" submitting false claims. That's a specific legal element, not a general statement about retrospective coding.

Retrospective chart review is standard practice and is not inherently fraudulent. Physician queries are a legitimate documentation improvement tool. Addenda that add clinical information a provider genuinely considered but didn't initially document are appropriate; the ICD-10-CM Official Guidelines allow coding diagnoses documented as part of the record.

The line DOJ drew here was between two things: diagnoses the provider actually considered and addressed, added to the record later for accuracy, versus diagnoses the provider was pressured to add to hit a target, regardless of clinical basis. That distinction is the center of this case.

The comparison that matters: legitimate vs. what DOJ alleged

FactorLegitimate query programWhat DOJ allegedly found at Kaiser
Query basisAmbiguous documentation; clinical evidence exists in the recordMined historical data; no evidence the condition was addressed at the encounter
Physician decisionProvider adds dx based on their own clinical judgmentPressure to add dx regardless of whether it was addressed at the visit
Performance incentivesNo tie to how many diagnoses are addedEvaluations and financial incentives tied to risk-adjustment targets
TimingTimely clarification of an existing encounterAddenda added months to more than a year after the visit
Unsupported codesRemoved when identified as lacking supportAllegedly retained despite internal compliance warnings
Compliance responseFlags acted on; unsupported codes deletedFlags from own compliance team allegedly ignored

Two categories worth extra scrutiny

The DOJ allegations against Kaiser, as reported, didn't single out specific diagnosis categories. But the same KFF Health News coverage flagged two conditions that reporting and a recent Senate report on MA overbilling have repeatedly tied to upcoding across the industry. Both are HCC-generating, and both are exactly the kind of dx a query-and-addendum program can lean on, so they're worth a second look in your own queue.

Opioid dependence disorder (F11.2x category): The pattern flagged in reporting is codes in this category submitted for patients taking opioids as prescribed for pain who did not have the disorder. F11.20, F11.21, F11.23, and the rest of the F11.2x group require meeting the clinical criteria for opioid use disorder. A patient on a legitimate opioid prescription doesn't automatically meet those criteria. The distinction requires explicit physician documentation, not a medication list, not a presumption from the Rx. Coders can't make that call unilaterally; the provider has to document it.

Dementia (F03.xx, F01.xx, F02.xx): These codes require documented cognitive decline affecting function, a finding the physician actually assessed at the encounter. An unaddressed problem-list entry or a diagnosis carried forward from a prior note without fresh documentation doesn't support a current-year code. The F03 category carries severity specifiers in the current code set (F03.A mild, F03.B moderate, F03.C severe), and dementia codes are HCC-generating, so the documentation bar for each of them is real, and the incentive to code them is real too.

The pattern in both categories is the same: an HCC-generating dx that a medication list or a prior note might suggest, but that requires specific physician documentation to code. If the physician didn't document the actual disorder, as distinct from a related medication or a historical flag, there's no code.

Where this lands for coders who do retrospective review

The settlement doesn't change what good coding looks like. It does clarify what DOJ considers the fraud boundary. Three things distinguish legitimate retrospective review from what was alleged here:

The condition was addressed. Not mentioned, not inferred, not mined from history. Addressed at the encounter the addendum references. No MEAT, no code is still the right frame: the condition has to have been evaluated or managed for the dx to be codable from that visit. See the MEAT Criteria Guide for the elements.

The query is asking for clarification, not a result. A well-structured query asks "did you evaluate or treat this condition at this visit?" It doesn't presuppose the answer. When a query program's goal is to get a specific dx added, and physicians know their evaluations are tracked against how often they say yes, that's where the fraud theory starts.

Unsupported codes get deleted. This one is the simplest and the sharpest. If a code can't survive your own compliance review, it has to come out. Leaving it in when your own team flagged it as unsupported is a specific element of what DOJ described.

For coders: you don't control the query program your organization runs. You do control whether the dx you code is supported in the documentation in front of you. The addendum that adds a diagnosis still has to describe the physician actually addressing the condition at the DOS. If the addendum just adds a name to a list, it doesn't create codability. Use the Evidence Checker to work through the documentation elements for a specific dx before submitting.

The settlement in context

Stone columns and steps of a classical federal courthouse, where False Claims Act cases over MA risk adjustment are resolved
DOJ has now resolved three nine-figure FCA cases over Medicare Advantage risk-adjustment coding since 2023.

Prior to this settlement, the largest MA risk-adjustment FCA settlements were Cigna at $172 million in 2023 and Independent Health at $100 million in 2024. The $556 million settlement is more than three times Cigna's. The scale reflects both the alleged duration (nine years) and volume (approximately 500,000 diagnoses).

The case originated from whistleblower suits; the relator awards were approximately $95 million total. FCA cases in MA risk adjustment frequently originate from insiders who understand the query and addendum workflows from the inside.

What coders should do now

  1. 1Review any addendum in your queue: confirm the addendum describes the physician actually addressing or evaluating the condition at that specific DOS, not just adding a diagnosis name. If the documentation shows the condition was genuinely assessed, it's codable. If the addendum appears to add a diagnosis without supporting clinical activity at the visit, flag it for compliance review rather than coding from it.
  2. 2Evaluate whether your organization's query program is structured around clinical ambiguity or around target diagnoses. A query that asks a closed question aimed at a specific HCC-generating dx is different from a query that asks the provider to clarify documentation. If your program ties physician performance metrics to query acceptance rates, that's worth raising with your compliance team.
  3. 3For any unsupported dx your compliance or audit process flags, verify it actually gets deleted before submission, not deferred. The DOJ's specific allegation about Kaiser included failure to act on its own compliance team's findings. Keeping an unsupported code in after a flag is a materially different situation than coding in good faith.
  4. 4Apply heightened MEAT scrutiny to opioid dependence and dementia codes. F11.2x requires documented clinical criteria for opioid use disorder; a patient on a prescribed opioid doesn't meet the threshold automatically. Dementia codes require documented cognitive decline affecting function at the encounter. Run both through the [MEAT Criteria Guide](/meat-criteria) before submitting.
  5. 5Check the timing on your organization's addendum submissions. The allegation at Kaiser included addenda added more than a year post-visit. There's no bright-line time limit in FCA caselaw, but an addendum's clinical credibility degrades with distance from the encounter. If your retrospective review is pulling visits from years back, verify each addendum genuinely reflects what occurred at that DOS.

Frequently Asked Questions

Is retrospective chart review fraudulent under this settlement?

No. The settlement resolves civil claims without any admission of liability, and retrospective chart review is standard, legitimate practice in MA risk adjustment. The DOJ's fraud theory was specific to alleged conduct: diagnoses added via addenda that were not actually considered or addressed at the patient visit, through a query program with performance incentives tied to how many diagnoses were added, with unsupported codes retained despite internal compliance flags. Retrospective review that identifies diagnoses the provider genuinely addressed but didn't initially document is appropriate.

What is the False Claims Act, and how does it apply to MA risk adjustment?

The False Claims Act is a federal statute that imposes civil liability for knowingly submitting false or fraudulent claims for payment to the government. In MA risk adjustment, plans submit diagnosis codes to CMS and receive payments based on the resulting risk scores. The FCA applies when a plan allegedly submits diagnoses it knows to be unsupported by the medical record, generating overpayments from CMS. Cases frequently originate from whistleblowers (qui tam suits) by former employees with direct knowledge of the submission process.

How does this settlement compare to prior MA risk-adjustment FCA cases?

At $556 million, this is the largest MA risk-adjustment FCA settlement to date. Prior benchmarks include Cigna's $172 million settlement in 2023 and Independent Health's $100 million settlement in 2024. The scale reflects the alleged nine-year duration (2009 to 2018) and nearly 500,000 diagnoses at issue.

Which diagnosis categories should coders watch most closely?

The DOJ allegations against Kaiser, as reported, didn't single out specific diagnosis categories. But the same KFF Health News coverage flagged two conditions that reporting and a recent Senate report on MA overbilling have repeatedly tied to upcoding across the industry: opioid dependence disorder and dementia. For opioid dependence (F11.2x), the flagged pattern is codes submitted for patients taking opioids as prescribed for pain who did not meet the clinical criteria for opioid use disorder. For dementia (F03.xx, F01.xx, F02.xx), codes require documented cognitive decline affecting function, not an inferred or carried-forward problem-list entry.

What does 'no admission of liability' mean for how coders should read this?

A civil settlement with no admission of liability means Kaiser's affiliates resolved the case without a court finding that the alleged conduct actually occurred or was unlawful. The settlement doesn't establish what Kaiser did or didn't do as a matter of proven fact. For coders, the relevant takeaway isn't whether Kaiser was guilty. It's that DOJ's theory identifies specific practices (quota-driven query programs, incentive-tied evaluations, post-hoc addenda for unaddressed diagnoses, retention of flagged unsupported codes) as the alleged fraud mechanism. Whether or not Kaiser did those things, those practices are what the government targets.

Related topics:FCA Settlementrisk adjustmentMedicare Advantagephysician queryFalse Claims Act
Jess P., CPC

Jess P., CPC

Certified Professional Coder

Jess reviews HCC Buddy editorial content for accuracy against the current CMS-HCC model and the active FY ICD-10-CM tabular release.

Get CMS Updates in Your Inbox

RADV news, model changes, and coding guidance — within days of CMS publishing, not quarters.