Rehab Insurance Fraud in California: Lessons From the CodeMax Lawsuit
Posted on October 21, 2026
I have spent more than 30 years in the substance use disorder field. Fourteen of those years were inside state government, with the Department of Alcohol and Drug Programs and the Department of Health Care Services. In my last four years there, I ran the Licensing and Certification Division.
Insurance fraud was a problem back then, and it still is today. The schemes have new names and new tricks, but the core idea hasn’t changed: bill for care that never happened, or for patients who were never really there.
A new federal lawsuit filed this summer shows how big the problem has become. I want to walk through it, because every facility owner in California should learn from it. That goes double for anyone thinking about opening a program.
What the CodeMax Lawsuit Alleges
On August 28, 2026, Health Care Service Corporation filed a civil lawsuit against CodeMax Medical Billing in federal court in the Central District of California. HCSC does business in Oklahoma as Blue Cross Blue Shield of Oklahoma. CodeMax bills insurance for addiction treatment businesses. The suit also names more than 70 other businesses, almost all of them California treatment providers. The complaint names 74 businesses in total, all based in California, and alleges CodeMax took a cut of the claims.
I want to be clear before going further. These are allegations. Nobody in this case has been found liable for anything. The defendants will have their chance to respond in court.
According to the complaint, the scheme had three parts: manufacture the patients, manufacture the claims, and maximize the profits. Here is what the insurer claims happened:
Patients who started treatment right after enrolling. The suit alleges that people enrolled in Oklahoma insurance plans began treatment in California the next day, and that some gave temporary or throwaway email addresses.
Claims for care that may not have happened. The insurer alleges inflated or fake charges, the same patient billed by two facilities on the same day, and facilities billing for more patients than their license allowed. It questions whether some patients existed at all.
Paper claims to get around fraud checks. The complaint alleges that in August 2024, CodeMax began mailing paper claims after finding they could get past the insurer’s automated review. It allegedly sent test claims first, then mailed in a large backlog once the method worked.
The numbers in the complaint are large. It lists 368 claims worth about $2.59 million mailed on August 28, 2024, and 943 claims worth about $6.23 million on September 5, 2024.
The suit brings claims under the federal RICO Act, along with fraud and unjust enrichment. Again, the court has not decided any of this yet.
I Saw This Firsthand as a Regulator
When I was at the state, I took part in more than 800 onsite visits and Drug Medi-Cal reviews. I saw what honest programs look like, and I saw the warning signs of programs that were not honest.
Real treatment leaves a trail. Staff schedules match the patient count. Charts show real progress notes. Beds match the license. Fraud leaves a different trail. Patients show up on paper but nowhere else. Two programs bill for the same person on the same day. A small house bills as if it were a hospital.
What frustrates me most is how little the basic playbook has changed. The fraud was always about money moving through insurance, never about patient care.
How Rehab Insurance Fraud Usually Works
The schemes below are common across the industry. I’m describing the patterns in general, not accusing anyone in the CodeMax case.
Paying for a patient’s insurance. Someone struggling with addiction, or someone experiencing homelessness, has no coverage. A facility or a “recruiter” buys an insurance policy in that person’s name, then bills the policy for treatment. This is illegal.
Billing for patients who aren’t there. Sometimes the person never attends the program at all, yet the facility keeps billing for days, weeks, or months of care.
Patient brokering. Recruiters get paid for each patient they bring in. The patient becomes a product. Once the insurance runs out, the patient is often dropped and sent somewhere else.
Inflated billing. Even when a patient is real, the claim lists services that were never delivered, or charges far more than the care was worth.
The Law Is Clear, and the Penalties Are Serious
People who get into this think they are working a loophole. They are committing crimes.
In 2018, Congress passed the Eliminating Kickbacks in Recovery Act, known as EKRA. It applies to all payers, which means private insurance as well as Medicare and Medicaid. Each violation can carry fines up to $200,000, up to ten years in prison, or both.
California acted the same year. SB 1228 bans facilities licensed or certified by DHCS from accepting payment or anything of value for patient referrals, and violations can lead to suspension or revocation of a license. DHCS can also fine a facility up to $2,000 for each violation.
On top of those laws, federal fraud and racketeering charges can apply. People have gone to prison for this. Owners have lost everything they built.
Fraud Hurts Everyone
It hurts patients. People who need real help get pulled into programs that only want their insurance. Some never get care. Some get worse. When insurers crack down, it becomes harder for honest patients to get treatment approved.
It hurts honest providers. Every fraud case makes insurers more suspicious of all addiction treatment. That means more audits, slower payments, and more denials for programs doing everything right.
It hurts every family that pays for insurance. Fraud is a cost, and insurers pass that cost on. The National Health Care Anti-Fraud Association conservatively estimates that 3 percent of all health care spending is lost to fraud, and some estimates run as high as 10 percent. Insurers make up those losses by raising premiums.
Americans already pay more for health care than people anywhere else. Working families feel that every month. If fraud doesn’t stop, we all pay the price.
How to Protect Your Program
If you own a facility or plan to open one, here is what I tell every client:
Never pay for a patient’s insurance. Not directly, not through a third party, not “just this once.”
Never pay for referrals. No per-patient fees to recruiters, sober living homes, or marketers.
Vet your billing company. You are responsible for every claim sent under your name. If a biller promises reimbursements that sound too good, walk away.
Stay within your licensed capacity. Your census should always match your license.
Document everything. Every claim should be backed by real charts, real staff, and real services.
Build strong policies from day one. Clear written policies protect you during audits and give your staff a standard to follow.
Compliance Is Built Into Every Program We Launch
When we help an owner open a program, we don’t treat fraud prevention as an afterthought. Every policy and procedure manual we write includes three protections:
An anti-kickback policy. It spells out that no one at your program pays or accepts anything of value for patient referrals, in line with EKRA and SB 1228. Staff know the rules, and you have the paper trail to prove it.
Honest marketing practices. Your program wins patients by telling the truth about the care you provide. No misleading ads, no paid recruiters, no promises you can’t keep.
Policies that ban paying patients to attend. That means no buying insurance policies, no cash or gifts to get someone in the door, and no perks to keep them enrolled. Patients come to your program because they need care and you provide it.
These policies keep your program compliant and legal from day one. They also send a clear message to regulators, insurers, and the families you serve: this program is here to help people.
Build It Right From the Start
Opening a rehab program in California is a real chance to help people and build a lasting business. That only works when the program is built on honest care and full compliance.
At SUD Compliance & Consulting, we help owners get licensed and certified with DHCS and build policies and procedures that stand up to audits. If you want to do this the right way, contact us today.
This article describes allegations in a civil lawsuit. None of the defendants have been found liable. This article is for educational purposes and is not legal advice.