Fraud, Waste, and Abuse Training: What Every Pharmacy Staff Member Needs

Understanding the Regulatory Requirement

The FWA training mandate for Medicare Part D comes from 42 CFR 423.504(b)(4)(vi)(C), which requires Part D sponsors to ensure that their "first tier, downstream, and related entities" - which includes network pharmacies - comply with the sponsor's compliance program requirements, including FWA training.

In practical terms, this means your pharmacy must provide FWA training to comply with your contracts with Part D plan sponsors (PBMs). Most PBM contracts explicitly require annual FWA training and may request documentation proving it was completed. Failure to comply can result in contract termination, which effectively ends your ability to serve Medicare Part D patients.

Beyond the Part D requirement, the OIG's compliance program guidance for pharmaceutical manufacturers and the broader healthcare industry identifies training and education as one of the seven essential elements of an effective compliance program. State Medicaid programs may impose their own FWA training requirements as well.

Who Needs FWA Training

The short answer: everyone. All individuals who are involved in the administration or delivery of Part D benefits must receive FWA training. For a pharmacy, this includes:

• Pharmacists (staff, PIC, and floaters)
• Pharmacy technicians (certified, trainees, and temporary)
• Pharmacy clerks and cashiers
• Billing and administrative staff
• Delivery personnel
• Pharmacy owners and managers
• Any contractor who interacts with Part D claims or beneficiaries

New hires should receive FWA training within 90 days of their start date. After that, training must be completed annually. CMS provides a standardized FWA training module through the Medicare Learning Network (MLN), and completion of the CMS module satisfies the general FWA training requirement. However, pharmacy-specific training that supplements the CMS module is strongly recommended because the CMS module is designed for all healthcare settings and does not address pharmacy-specific schemes.

Fraud vs. Waste vs. Abuse: The Distinctions Matter

Understanding the differences between fraud, waste, and abuse is fundamental to the training and to your compliance program.

Fraud

Fraud is the intentional deception or misrepresentation that an individual knows to be false, resulting in unauthorized benefit to that individual or another person. The key element is intent - the person knowingly did something wrong. Under 18 U.S.C. 1347, healthcare fraud carries penalties of up to 10 years in prison, or up to 20 years if the fraud results in serious bodily injury.

Pharmacy fraud examples:

• Billing for prescriptions never dispensed (phantom billing)
• Billing for brand-name drugs but dispensing generics and pocketing the difference
• Forging prescriber signatures on prescription orders
• Waiving copayments routinely to induce utilization (violates the Anti-Kickback Statute)
• Billing for a more expensive drug than what was dispensed (upcoding)

Waste

Waste involves the overutilization of services or other practices that result in unnecessary costs to federal healthcare programs. Unlike fraud, waste does not require intent - it results from poor practices, inefficiency, or negligence.

Pharmacy waste examples:

• Dispensing quantities beyond what the patient needs without clinical justification
• Failing to perform prospective drug utilization review, leading to unnecessary fills
• Not checking if a patient has other insurance before billing Medicare
• Processing refills for medications a patient is no longer taking

Abuse

Abuse involves practices that are inconsistent with sound fiscal, business, or medical practices, and result in unnecessary cost or reimbursement for services that are not medically necessary. Abuse is similar to waste but may involve a pattern of questionable behavior that stops short of deliberate fraud.

Pharmacy abuse examples:

• Routinely dispensing the maximum allowable quantity regardless of medical necessity
• Unbundling - billing separately for components that should be billed as a single unit
• Using incorrect DAW (Dispense as Written) codes to receive higher reimbursement
• Billing for excessive consultation time that was not actually provided

Key FWA Schemes Your Staff Must Recognize

Phantom Billing

Submitting claims for prescriptions that were never dispensed. This can occur when staff submit claims for patients who never picked up their medications and then fail to reverse the claims. Whether intentional or due to poor workflow processes, the result is the same - payment for services not rendered.

Upcoding

Billing for a higher-cost medication than what was actually dispensed. For example, dispensing a generic but billing the claim under the brand-name NDC. This can also occur with compound medications where the ingredients or quantities billed do not match what was actually prepared.

Unbundling

Separating a compound or service into individual components and billing each separately to increase total reimbursement. For example, billing a compound prescription as multiple individual prescriptions for each ingredient.

Prescription Forging and Alteration

Altering prescriptions to increase quantities, change drugs to higher-cost alternatives, or forging prescriber information entirely. Staff should be trained to verify prescriptions with prescribers when anything appears altered or suspicious.

Copay Waiver Schemes

Routinely waiving patient copayments without a good-faith determination of financial hardship. Under the Anti-Kickback Statute (42 U.S.C. 1320a-7b(b)), routine copay waivers can be considered an inducement to utilize services, which is a federal violation. Isolated instances of financial hardship waivers are permitted, but they must be documented on a case-by-case basis.

Building Effective FWA Training

Content Requirements

Your FWA training program should cover:

1. Definitions of fraud, waste, and abuse with pharmacy-specific examples
2. Applicable laws - False Claims Act, Anti-Kickback Statute, Stark Law (where applicable), and state-specific statutes
3. How to identify potential FWA in daily pharmacy operations
4. Reporting mechanisms - internal reporting procedures, compliance hotlines, and external reporting to the OIG
5. Whistleblower protections under the False Claims Act qui tam provisions
6. Consequences of FWA for the pharmacy and for individual employees
7. Prevention practices - proper billing procedures, prescription verification, and documentation standards

Delivery Methods

Training can be delivered through multiple formats:

• In-person training sessions led by the compliance officer or PIC
• Online learning modules (CMS MLN module plus pharmacy-specific content)
• Staff meetings with documented FWA discussion topics
• Written materials distributed and acknowledged by staff

The most effective approach combines the CMS general FWA module with pharmacy-specific scenario-based training. Use real examples (anonymized) of pharmacy FWA cases from OIG enforcement actions to make the training concrete and relevant.

Frequency and Timing

• Annual training is the minimum requirement for all staff
• New hire training within 90 days of employment start date
• Refresher training when significant regulatory changes occur or after an internal compliance incident
• Ad hoc training when new FWA schemes relevant to pharmacy are identified

Documentation and Attestation

Documentation is your proof of compliance. Without it, training might as well not have happened. For each training session, maintain:

• Training content - copies of materials, slides, or module descriptions
• Attendance records - sign-in sheets with printed names, signatures, and dates
• Attestation forms - individual acknowledgments that each employee completed the training, understood the content, and agrees to report suspected FWA
• Completion certificates - if using online modules (including CMS MLN certificates)
• Training schedule - annual training calendar showing planned and completed sessions

Retain all FWA training records for a minimum of 10 years. Many PBM contracts specify retention periods, and some state regulations require longer retention. When in doubt, keep records longer.

Attestation Best Practices

Each staff member should sign an annual attestation that includes:

• Acknowledgment of completing FWA training
• Commitment to report suspected FWA through appropriate channels
• Understanding of the consequences of engaging in or failing to report FWA
• Acknowledgment of non-retaliation protections for good-faith reporters

What Happens When FWA Is Suspected

Your training should include clear instructions on how staff should report suspected FWA:

1. Internal reporting - Report to the pharmacy's compliance officer or PIC first
2. Document the concern - Record what was observed, when, and by whom
3. Do not investigate independently - Staff should report, not investigate
4. External reporting options - OIG Hotline (1-800-HHS-TIPS), CMS, or state Medicaid Fraud Control Unit
5. Non-retaliation policy - Emphasize that the pharmacy will not retaliate against good-faith reporters

Under the False Claims Act's qui tam provisions (31 U.S.C. 3730), employees who report FWA to the government may be entitled to a share of any recovered funds. Staff should understand that reporting is both a legal right and a professional obligation.

Consequences of FWA: What Is at Stake

Your training should make the consequences of FWA tangible for staff - not as a scare tactic, but so they understand why compliance matters at every level of the organization.

For the pharmacy:

• Exclusion from all federal healthcare programs (Medicare, Medicaid, TRICARE, VA)
• Civil monetary penalties under the False Claims Act - up to $11,000 per false claim plus treble damages
• Recoupment of overpayments with interest
• Loss of PBM contracts and network participation
• Reputational damage that can permanently affect business viability

For individual employees:

• Criminal prosecution under 18 U.S.C. 1347 (healthcare fraud) with penalties up to 10 years imprisonment
• Personal civil liability under the False Claims Act
• Professional license revocation by the state board of pharmacy
• Exclusion from federal healthcare programs, effectively ending the individual's healthcare career
• Personal financial penalties including fines and restitution

The OIG publishes an annual Work Plan that identifies enforcement priorities for the coming year. Pharmacy-related priorities frequently include prescription billing accuracy, controlled substance dispensing patterns, and Part D program integrity. Sharing relevant excerpts from the OIG Work Plan during annual FWA training reinforces that enforcement is active and ongoing, not a theoretical risk.

Connecting FWA Training to Your Broader Compliance Program

FWA training does not exist in isolation. It connects to every other element of your pharmacy compliance program. Staff who understand FWA are better equipped to understand why OIG exclusion screening matters, why accurate documentation is critical, and why HIPAA compliance protects both patients and the pharmacy.

Make FWA training part of your compliance culture, not just an annual obligation. Reference FWA concepts during staff meetings, discuss recent enforcement actions in the pharmacy industry, and recognize staff who identify and report concerns.