mainstream

Infrastructure for Fraud, Waste, and Abuse (FWA) Detection

ML system that analyzes billing patterns to detect potential fraud, billing errors, or abuse (upcoding, unbundling, duplicate billing).

Last updated: February 2026Data current as of: February 2026

Analysis based on CMC Framework: 730 capabilities, 560+ vendors, 7 industries.

T2·Workflow-level automation

Key Finding

Fraud, Waste, and Abuse (FWA) Detection requires CMC Level 4 Formality for successful deployment. The typical finance & accounting organization in Healthcare faces gaps in 4 of 6 infrastructure dimensions.

Structural Coherence Requirements

The structural coherence levels needed to deploy this capability.

Requirements are analytical estimates based on infrastructure analysis. Actual needs may vary by vendor and implementation.

Formality
L4
Capture
L3
Structure
L4
Accessibility
L3
Maintenance
L3
Integration
L3

Why These Levels

The reasoning behind each dimension requirement.

Formality: L4

FWA detection requires formally documented and queryable definitions of what constitutes upcoding, unbundling, and duplicate billing — not narrative compliance policies but explicit rule sets that the ML model applies consistently across every claim. Federal Anti-Kickback Statute, False Claims Act, and OIG compliance program guidance mandate formal documentation of billing rules. For the AI to generate defensible FWA risk scores, each rule must be machine-readable: IF CPT 99215 billed WITHOUT supporting E&M documentation complexity THEN flag for potential upcoding. Without this formal ontology of billing rules, the system generates alerts it cannot justify in an audit or legal proceeding.

Capture: L3

FWA detection requires systematic capture of billed claims data with CPT codes, ICD-10 diagnoses, modifiers, and supporting clinical documentation links. Healthcare revenue cycle systems capture claims data comprehensively and CMS cost report data is systematically collected. Template-driven capture ensures each claim record includes provider ID, service date, billed codes, modifier flags, and documentation reference — enabling the ML system to compare billing patterns against clinical documentation and industry benchmarks without missing fields that would prevent rule-based FWA identification.

Structure: L4

FWA detection requires formal ontology mapping CPT procedures to acceptable ICD-10 diagnoses, valid modifier combinations, expected service frequencies, and documentation requirements. This goes beyond standardized chart of accounts — it requires relationships: CPT.99215 requires Documentation.Complexity.High AND Diagnosis.ChronicCondition, CPT.unbundling.rule maps component codes to parent procedures. Without this formal ontology, the AI cannot distinguish legitimate complex coding from abusive unbundling, generating false positives that erode provider trust and false negatives that miss genuine fraud.

Accessibility: L3

FWA detection requires the AI to access billed claims data, clinical documentation records, provider billing history, and external benchmark patterns. Healthcare ERP provides financial reporting interfaces and BI tools query the data warehouse. API access to claims data, clinical documentation systems, and provider benchmarks enables the ML system to execute cross-reference analysis — comparing billed codes to documented clinical complexity — without IT-mediated exports that would introduce lag between billing and detection.

Maintenance: L3

FWA detection rules must update when CMS publishes new billing guidance, when OIG updates work plans identifying high-risk billing patterns, and when internal audit findings reveal new FWA schemes. Healthcare finance updates chart of accounts and payroll rates event-triggered when regulatory or contract changes occur. Similarly, event-triggered updates to FWA rule sets — when CMS issues a billing alert or an internal audit identifies a new pattern — ensure the detection model reflects current regulatory requirements rather than rules from last year's compliance manual.

Integration: L3

FWA detection requires integration between the claims billing system, clinical documentation (EHR), provider master records, and external benchmark databases. Healthcare finance has existing integrations between revenue cycle and GL, with payroll and AP also connected. API-based connections between claims, clinical documentation, and provider billing history enable the ML system to execute the cross-system analysis — billing pattern vs. clinical documentation vs. peer benchmarks — that produces defensible FWA risk scores rather than single-system statistical anomalies.

What Must Be In Place

Concrete structural preconditions — what must exist before this capability operates reliably.

Primary Structural Lever

How explicitly business rules and processes are documented

The structural lever that most constrains deployment of this capability.

How explicitly business rules and processes are documented

  • Formalised FWA detection rule library with documented criteria for upcoding, unbundling, duplicate billing, and medically unnecessary service patterns linked to regulatory references

How data is organized into queryable, relational formats

  • Structured taxonomy of billing anomaly types organised by CMS fraud scheme category with severity classifications and documented false-positive tolerance thresholds per scheme

Whether operational knowledge is systematically recorded

  • Systematic capture of claim submission metadata including submitting provider NPI, facility, modifier usage, diagnosis code sequences, and rendering provider patterns into auditable records

Whether systems expose data through programmatic interfaces

  • Defined investigation authority matrix specifying which anomaly severity tiers trigger internal audit, compliance committee review, or external reporting obligations

How frequently and reliably information is kept current

  • Quarterly review cadence for detection rule efficacy with documented recalibration process when false-positive rate exceeds defined thresholds or new billing scheme patterns emerge

Whether systems share data bidirectionally

  • Integration with CMS exclusion database, state Medicaid integrity contractor feeds, and internal credentialing system to validate provider standing during anomaly investigation

Common Misdiagnosis

Compliance teams invest in statistical outlier detection models without first formalising the FWA rule library, producing anomaly flags that cannot be mapped to specific regulatory violation categories and therefore cannot support investigation or reporting.

Recommended Sequence

Start with formalising the FWA rule library with scheme-specific detection criteria before structuring the billing anomaly taxonomy, because detection model outputs require a documented regulatory reference framework to distinguish actionable violations from statistical noise.

Gap from Finance & Accounting Capacity Profile

How the typical finance & accounting function compares to what this capability requires.

Finance & Accounting Capacity Profile
Required Capacity
Formality
L3
L4
STRETCH
Capture
L3
L3
READY
Structure
L3
L4
STRETCH
Accessibility
L2
L3
STRETCH
Maintenance
L3
L3
READY
Integration
L2
L3
STRETCH

More in Finance & Accounting

Frequently Asked Questions

What infrastructure does Fraud, Waste, and Abuse (FWA) Detection need?

Fraud, Waste, and Abuse (FWA) Detection requires the following CMC levels: Formality L4, Capture L3, Structure L4, Accessibility L3, Maintenance L3, Integration L3. These represent minimum organizational infrastructure for successful deployment.

Which industries are ready for Fraud, Waste, and Abuse (FWA) Detection?

Based on CMC analysis, the typical Healthcare finance & accounting organization is not structurally blocked from deploying Fraud, Waste, and Abuse (FWA) Detection. 4 dimensions require work.

Ready to Deploy Fraud, Waste, and Abuse (FWA) Detection?

Check what your infrastructure can support. Add to your path and build your roadmap.