Fraud Prevention & Internal Control Series
We understand intricate issues such as financial literacy, resource constraints, and weak internal controls in highly regulated industries such as healthcare and non-profit. We also understand the importance of integrity over public funds. We're stepping up by interpreting current events, simplifying the messaging, and delivering actionable resources.
Recent Updates
Published 1/30/26 by Ahmed Hassan
Quick summary of CMS's latest review of Minnesota's Medicaid payments
Published 1/28/26 by Ameera Hassan
One-pager summarizing updates for care providers subject to EVV requirements included
Published 1/4/26 by Ahmed Hassan
Quick update regarding Medicaid fraud investigations in Minnesota as of 12/19/2025
One-Pagers & Resources

File upload

MN DHS's EVV Requirement Update | January 2026

330.3 KB

File upload

MN New Hire Reporting Instructions | January 2026

296.9 KB

Help us improve by sharing feedback! Your input directly shapes future content and resources in this Series. Tell us what resonated, what you’d like to see next, and how we can make this Series more valuable for you.
Submit Your Feedback
Disclaimer: The materials, summaries, and resources provided through the Fraud Prevention & Internal Control Series are for general informational and educational purposes only. They are not legal, regulatory, or compliance advice, and they should not be relied upon as a substitute for professional guidance specific to your organization. Regulations and agency requirements may change, and interpretations may vary based on individual circumstances. Hassan CPA, PLLC (dba Hassan.CPA) does not assume responsibility for actions taken based on these materials, and users remain solely responsible for verifying requirements with the appropriate state or federal agencies. Use of these resources does not create a CPA–client relationship.
Minnesota Medicaid Payments Score Well in New Federal Audit
Published 1/30/2026 | By: Ahmed Hassan
New federal data from the Centers for Medicare & Medicaid Services (CMS) shows that Minnesota’s Medicaid improper payment rate is far below the national average. CMS found Minnesota at just over 2.1%, compared to 6.1% nationally.
This review looked at whether claims were billed correctly by comparing billing statements with medical records. Importantly, the data reflects the period before Minnesota began rolling out its newest fraud‑prevention steps to prevent mistakes and fraud.
CMS reviewed Minnesota’s Medicaid payments for the period July 1, 2023 – June 30, 2024, as part of the federal Payment Error Rate Measurement (PERM) program, which checks whether states and providers followed the rules when billing Medicaid. Please note this was not a fraud investigation.
So, what counts as an “Improper Payment”?
CMS considers a payment “improper” when:
  • Required documentation is missing
  • Provider enrollment steps weren’t completed
  • Eligibility information wasn’t fully verified
  • A claim was processed incorrectly
Once a payment is labeled improper, CMS takes a second step: they determine whether the service was real and the client was eligible. If both are true but the paperwork was incomplete, the claim becomes a technically improper payment.
Hassan's Insight
This is why strengthening processes and controls matters. With technically improper payments, providers won’t owe money back, but the State will flag you as they must report these under their corrective action plan to the Feds. Strong documentation, clean enrollment, and thoroughly reviewed billings protect you from being part of the problem. Want to see how a claim flows into this category?
What Else CMS Found
  • CMS reviewers confirmed that most claims were billed correctly.
  • Errors were generally tied to documentation or process, not intentional fraud.
State leaders emphasized that even low error rates require ongoing improvement. Minnesota continues to strengthen internal controls and tighten oversight.
Recent DHS Actions to Strengthen Program Integrity
Since fall 2024, Minnesota has implemented major changes to reduce fraud and prevent improper payments:
  • Identified 14 high‑risk services and launched a public program‑integrity webpage
  • Conducted audits and on‑site visits for autism service providers
  • Discontinued Housing Stabilization Services
  • Placed a moratorium on new providers in the 14 high‑risk services
  • Implemented licensure requirements for autism centers
  • Disenrolled inactive providers
  • Began enhanced pre‑payment review for fee‑for‑service claims in high‑risk areas
  • Developed plans for provider review and revalidation in those same services
These steps are designed to prevent improper payments before they occur and strengthen Minnesota’s overall Medicaid oversight.
Hassan's Insight
Remember if a service was provided but the progress note was missing, CMS counts that as an improper payment. The CMS review confirms that Minnesota is performing well, but Minnesota’s Medicaid program documentation and process issues still create risk. Providers who operate strong controls, keep their paperwork complete, maintain proper enrollment, and follow billing rules will be well‑positioned for future audits and reviews.
How Providers Should Interpret This
Providers should expect:
  • More documentation checks
  • Stricter enrollment and revalidation
  • Increased pre‑payment review in high‑risk services
  • Continued audits and monitoring
Hassan's Viewpoint
Minnesota’s results in this federal review should prompt a very important question: if the data shows our Medicaid payments were largely supported, why did the media's narrative lean so heavily toward fraud? Why was the $9B figure thrown around when Governor Walz highlighted on his 12/19/25 conference that the actual confirmed number of Fraud was in the millions, not billions (see the linked first entry in our Series titled 'Medicaid Fraud Accountability and Investigation Status as of 12/19/25'). The State's programs were described as "riddled with fraud", "drowning with fraud" and "staggering".
The CMS findings make it clear that most errors were technical due to missing documentation, incomplete enrollment steps, or verification gaps and not intentional wrongdoing. Yet for the past two years, the conversation has often centered on fraud rather than the underlying control weaknesses that actually drive improper payments. When documentation is incomplete or enrollment steps aren’t followed, even legitimate services fall into the “improper payment” category. Still, that doesn’t mean widespread fraud occurred, even at 2.1%.
I can't stop emphasizing that controls are the real issue. The following is an excerpt from the DOJs findings while investigating Housing Stabilization Services:In July 2020, Minnesota became the first state in the country to offer Medicaid coverage for Housing Stabilization Services. The Housing Stabilization Services Program is a Medical Assistance (that is, Medicaid) benefit designed to help people with disabilities, including seniors and people with mental illnesses and substance use disorders, find and maintain housing. By design, the HSS Program had low barriers to entry and minimal records requirements for reimbursement that combined to make the Program susceptible to fraud.
It seems clear that we need to start addressing the programs that were built with low barriers to entry and without strong control requirements. Those design choices led to all of this, and a system of trust should no longer be an answer. Unfortunately, significant damage to an entire community has already been done. Even though the $9B figure has yet to be proven with actual numbers or prosecutions.
Media: “$9B fraud” → Governor: fraud is in the millions → CMS: 2.1% improper payments
🧐
Sources:

File upload

CMS Report - Notification of RY 2025 Medicaid Improper Payment Rates.pdf

391.5 KB

File upload

Appendix C to OMB Circular A-123 - Requirements for Payment Integrity Improvement.pdf

2.7 MB

Minnesota Department of Human Services

DHS news releases

News releases issued by the Minnesota Department of Human Services.

Minnesota DHS Releases EVV Requirement Update
Published 1/28/2026 | By: Ameera Hassan
Beginning January 1, 2026, Minnesota Department of Human Services moved to full electronic visit verification (EVV) enforcement to ensure every agency meets federal and state requirements in documentation of services billed to the state. DHS will review provider EVV data against billing compliance standards on a set schedule and issue corrective actions when performance does not meet required levels. Enforcement applies to all providers, including FMS and MCOs. Please note that Hospice Services are exempt and PCA Supervision will no longer require EVV. Live‑in caregivers must enter EVV data once per day, not in real time. The timeline below outlines what DHS will review, what providers must do to remain compliant, and when enforcement actions will occur.
The Minnesota EVV system will verify:
  • Type of service performed
  • Who received the service
  • Date of service
  • Location of service delivery
  • Who provided the service
  • When the service begins and ends
Additional Provider Responsibilities
Monitor compliance for all tax IDs and NPI/UMPI numbers, review reports regularly, correct issues, and check MN-ITS for DHS notices. Providers must ensure third‑party systems connect to HHAX and meet state requirements. DHS does not oversee third-party devices.
Hassan's Insight
Focusing on the fundamentals is paramount in compliance. EVV is no different and providers that master documentation, enrollment, and clean data can be on cruise control when the 80% enforcement begins in October 2026.
Compliance Reports
Monthly reports are issued on the 25th. DHS reviews each report and sends corrective actions when needed. Providers may be required to submit improvement plans or meet with DHS. Enforcement may escalate if issues are not resolved.
Verification Methods
The state-selected EVV system, HHAeXchange (HHAX), offers two verification methods: the mobile application and Interactive Voice Response. Provider agencies using a third-party system may explore other methods to verify EVV that capture the required data. HHAX billing is currently optional, and providers are not required to set up billing through HHAX now. Providers may continue billing through their existing processes if they choose not to use HHAX's billing system.
Hassan's Resource
Keep up with these deadlines and feel free to download the one-pager. Remember to review Minnesota's Department of Human & Health Services (MN DHS) official update page which is linked under sources. Please note this is just a simplified one-pager for quick reference. Always review the authoritative source when evaluating compliance and regulatory requirements. In the case of this EVV update, it'd be MN DHS.
Download One-Pager:

File upload

MN DHS's EVV Requirement Update | January 2026

330.3 KB

Sources:

Minnesota Department of Human Services

Electronic visit verification

The federal government will soon require some providers to use electronic visit verification systems to document that people are receiving the services that are billed to the state. Providers of personal care, including personal care assistance (PCA) and some waiver services (beginning in 2020) and home health care providers (beginning in 2023) will use electronic visit verification to be eligible for full federal Medicaid matching dollars.

For More Information:
Medicaid Fraud Accountability and Investigation Status as of 12/19/2025
Published 1/28/2026 | By: Ahmed Hassan
Governor Tim Walz Taking Accountability
  • The Governor said he is taking responsibility for fraud that happened in the Medicaid system.
  • He promised to fix the problems and prevent fraud going forward.
  • The U.S. Attorney is handling criminal cases, but the state was the one that stopped payments first when they saw issues.
  • The state got permission to stop payments in June.
  • Payments for Housing Stability Grants were stopped in July.
  • Cases were then sent to law enforcement.
  • More arrests are expected as investigations continue.
How Much Fraud Has Actually Been Found
  • Some people claimed there was $9 billion in fraud, but there is no evidence for that number.
  • So far, the confirmed fraud is in the tens of millions, not billions.
  • Minnesota’s Inspector General asked the federal government to show proof if they believe the number is higher.
  • The Medicaid program is $18 billion over 7 years, and most of it already has strong safeguards:
  1. $6 billion goes through managed care plans
  1. $10 billion requires Electronic Visit Verification (EVV)
  1. $11 billion is approved by county case managers
What Happens When Payments Are Suspended
  • Providers get a two‑week transition period to protect clients.
  • This helps make sure clients still get care, even if payments are paused.
  • If DHS finds clear evidence of fraud, payments are stopped immediately.
  • The goal is to protect legitimate providers and clients, not punish everyone.
Hassan's Viewpoint
As an emerging Somali business leader here in Minnesota, I’ve been extremely frustrated with the narratives around fraud in Medicaid programs blaming Governor Walz and the Somali community. People may think our state was sleep at the wheel, but I've always felt that the media here was a bit too obsessed with highlighting Fraud. I've also took notice of many regulatory changes that have occurred since 2023. You see, Fraud is a topic that has been a dark cloud over my head since I moved to Minnesota in July 2023, a time when Feeding Our Future was hot on the news cycle. As a Somali CPA, it was something I couldn't avoid, and it brought a lot of shame. This same fraud topic keeps me happy driving a 2016 Volkswagen. The same fraud prompting pressured conversations once folks find out I am a Somali accountant. The awkward vibes while sitting through ethics CPE trainings focused on, you guessed it, fraud. Truth is, 2025 didn't uncover Fraud in Minnesota. The State has been all over it long before I moved here and, in the end, I believe the results will prove that.
I relocated here partly because the Minnesota Somali business community was thriving and inspirational. Minnesota Somalis were entering and leading in many key areas such as entrepreneurship, education, healthcare, and politics. Minneapolis was the hub where Somali conferences and business expos were held, and innovative ideas gained support and funding. Somalis across the world came here to do business and so did I. I saw opportunity here, a place where everyone can thrive along with all the other reasons why Minnesota is the one of the best places to raise a family. That opportunity I saw now feels diminished until a permanent solution is put in place. Taxpayers and the Somali community deserve a solution that is preventative and puts these problems to bed.
I believe by creating another layer by effectively bringing CPA firms to this mix, CPAs can be one of the answers if we leveraged the many attestation services these firms can offer. CPA firms are regulated by the Minnesota State Board of Accountancy, which require firms to maintain quality control, continuing professional education, risk management, confidentiality and independence safeguards, and a duty to protect the public interest. CPA firms may also be required to obtain peer review from an approved body such as AICPA or the MN Society of CPAs. Peer review requirements depend on the services provided.
Last year, I was one of the CPAs at the Capitol who successfully advocated for the CPA Additional Pathways bill, which Governor Walz signed into law this past May. That legislation removed a major barrier that has long limited diversity in the accounting profession. For decades, becoming a CPA required 150-credits (a five‑year college commitment), tens of thousands in student loans, and passage of one of the most difficult licensing exams in the world all while state boards enforced ongoing CPE requirements to maintain competency. The financial barrier of needing 150 college credits, essentially a master’s degree, disproportionately impacted poor students and minority communities. When communities lack access to culturally competent CPAs, the risks of fraud, waste, and abuse naturally increase. ESG professionals would immediately recognize these systemic inequities as key drivers that contributed to the very crisis we are now facing.
Discussing Fraud isn't taboo or complicated for me. I've addressed it throughout my 10-year career serving the education, non-profit, big tech, and governmental industries. During my time at Big 4 as an audit manager, I facilitated a successful SOX Controls and Fraud Training for a corporation with over $2B in revenues. We had 172 attendees, and our team received significant praise from them. Those attendees were not all accountants or financial analysts. They were also regular employees from other functions. Their participation was normal because that is how fraud prevention works. Fraud and its prevention are a shared responsibility.
At the corporate level, fraud is far more intricate than billing for services never delivered. These were complex schemes involving management override and collusion between employees. Auditors in nonprofit, government, and corporate settings are required to understand the entity and its environment, investigate management’s background and qualifications, conduct mandatory fraud audit team discussions, and hold one on one inquiries with senior leadership. We also tested entity level controls such as ethics hotlines, the company's policies, risk assessments, and more. The only way to stop the toughest fraud is a strong control environment and ethical culture from the top down. Fraud prevention was a shared responsibility in corporate.
As independent auditors, these were standard procedures over historical financial reporting and controls that were solely management’s responsibility. And guess who audited our fraud responses? The PCAOB. The many layers we see here where Fraud prevention is the goal indicates everyone shares the responsibility to stop it. So why is shared responsibility everywhere but Medicaid programs?
And when corporate fraud is caught, the person is usually pushed out quietly. No law enforcement. No media shaming. No sensationalism. Why? Because the fact they pulled it off exposes a material weakness in the company’s control environment and organizational culture. Fraud prevention becomes a bigger issue than the fraud itself because understanding how it happened matters most.
Early on I had many questions regarding Minnesota’s Medicaid fraud cases. Aren't there case managers and families involved? Where were the auditors? Who reviewed their work? Who were the accountants serving the supposed fraudsters? Why are strong controls not the expectation for taxpayer funded programs? Why does federal law require a Single Audit for grants over $750,000 (now $1 million), yet Medicaid, another form of government funding, operates without the same expectations for significant billings into the millions? Single Audits require strong controls over financial and cash management. They wouldn’t eliminate fraud entirely, but they would dramatically reduce it, and they would finally bring Medicaid programs up to the same accountability standards expected as grants. That's common sense though, and common sense isn't common. The reality is that in a world full of cybercrime, fake jobs, and widespread scams, this was inevitable.
Time to move forward. The Governor and anyone else willing to take accountability now have the chance to restructure Medicaid programs and prevention efforts for not just Minnesota, but all states. For us at Hassan.CPA, we also take accountability and share this responsibility with Governor Walz. Our goals will be simple; simplify current events and educate on the important matters. Staying focused on fraud prevention lets us stay objective. We are ready to partner with DHS, legislators, and community leaders to build a system that protects public funds, strengthens providers, and restores trust in our communities. With support, we can create a model that is fair, effective, and sustainable. We can teach. We can build systems. We can help all sides by focusing on prevention. By prioritizing what public companies do.
Source:

13:22

YouTube

Walz addresses fraud accountability

Minnesota Gov. Tim Walz addresses reporters' questions about fraud in the state as his administration questions the level of fraud alleged by federal prosecutors. kare11.com/fraud