Introduction
Fraud and abuse law creates a category of transaction risk unique to healthcare M&A. The three principal statutes (Anti-Kickback, Stark, and False Claims Act) interlock to create a comprehensive enforcement framework where a single improper arrangement can trigger criminal liability (AKS), civil liability (Stark), and treble-damage False Claims Act liability simultaneously. Healthcare bankers must understand this framework because it directly affects deal structure (asset vs. stock choice), due diligence scope, purchase agreement representations, and indemnification provisions.
The Three Interlocking Statutes
Anti-Kickback Statute (AKS)
The AKS is a criminal statute prohibiting anyone from knowingly and willfully offering, paying, soliciting, or receiving anything of value to induce or reward referrals of patients covered by federal healthcare programs (Medicare, Medicaid, TRICARE). The statute applies to both sides of the transaction: the person paying and the person receiving.
In the M&A context, AKS risk arises from physician compensation arrangements, medical director agreements, equipment lease arrangements, marketing relationships, and any other arrangement where the target provides value to (or receives value from) referral sources. The key analytical question is whether any arrangement could be construed as paying for referrals rather than paying fair market value for legitimate services.
- Safe Harbor
A regulatory provision that provides immunity from AKS prosecution if the arrangement meets specific requirements. The OIG has published safe harbors for common business arrangements including employment, personal services, equipment rental, space rental, and investment interests. Arrangements that meet every element of a safe harbor are protected from AKS liability. Arrangements that fall outside safe harbors are not automatically illegal but are subject to the statute's "intent" analysis. During diligence, reviewing whether the target's key arrangements fit within safe harbors is essential.
Stark Law
Stark is a civil (not criminal) strict liability statute that prohibits physicians from referring Medicare/Medicaid patients to entities with which the physician has a financial relationship, unless a specific exception applies. Unlike AKS, Stark does not require intent: if the arrangement does not fit within an exception, it violates Stark regardless of the parties' motivations. Violations result in denial of payment, refund obligations, civil monetary penalties, and False Claims Act exposure.
False Claims Act (FCA)
The FCA is the primary enforcement mechanism for healthcare fraud, imposing liability on anyone who "knowingly" submits false claims to the government. The 2009 Fraud Enforcement and Recovery Act established that claims submitted in violation of AKS or Stark are automatically "false" under the FCA, creating the critical interlocking mechanism: an AKS or Stark violation turns every related claim submitted to Medicare into a separate FCA violation.
FCA penalties include treble damages (three times the amount of each false claim) plus $13,946-$27,894 per violation (adjusted for inflation). The FCA's qui tam provision allows whistleblowers to file suits on behalf of the government and receive 15-30% of any recovery, creating strong incentives for employees to report suspected violations.
Implications for Purchase Agreements
Standard M&A purchase agreements include general compliance representations ("the target is in compliance with all applicable laws in all material respects"). In healthcare, these general representations are insufficient because the fraud-and-abuse statutes create specific, quantifiable risks that demand targeted disclosure and protection.
Healthcare purchase agreements should include specific representations addressing AKS compliance (all referral arrangements meet safe harbor requirements or have been evaluated for compliance), Stark compliance (all physician financial relationships fit within specific exceptions), FCA exposure (no pending or threatened qui tam suits, no corporate integrity agreements, no OIG investigations), coding and billing compliance, and 340B program compliance.
The indemnification provisions should include specific carveouts for fraud-and-abuse claims with extended survival periods (often 5-7 years, well beyond the typical 12-18 month general representation survival period).
The next article covers healthcare-specific reps, warranties, and indemnification provisions in purchase agreements.


