DOJ Benefits Fraud Fast-Track: The Shumate Memo & FCA CIDs
On May 27, 2026, Assistant Attorney General Brett A. Shumate of the Civil Division ordered DOJ to fast-track benefits fraud cases, completing its initial review of qui tam complaints within the 60-day seal period and no later than 120 days. The policy targets fraud on federally funded, state-administered programs such as Medicaid, food assistance, housing, and cash assistance. It implements the March 16, 2026 Executive Order establishing the Task Force to Eliminate Fraud.
The practical result is more whistleblower suits moving faster and more investigative pressure applied earlier. Companies and providers receiving federal benefits dollars should expect a rise in civil investigative demands tied to COVID-era PPP and EIDL loans, SBA small business set-asides, and Medicaid and Medicare billing. The False Claims Act recovered a record $6.8 billion in fiscal year 2025, and whistleblowers filed 1,297 qui tam suits, the most ever.
The Shumate Memo: A Clock on Benefits Fraud Cases
The False Claims Act has always given the government 60 days to review a sealed qui tam complaint and decide whether to intervene. In practice, that window rarely held. Courts routinely granted extensions, and the seal stretched for months and often years while the government investigated. The Shumate Memo confronts that gap directly.
It directs the Civil Division and U.S. Attorneys' Offices to prioritize benefits fraud qui tams and complete an initial review within the 60-day period described in 31 U.S.C. 3730(b)(4), and in no event later than 120 days. The memo flows from the President's March 16, 2026 Executive Order, which told DOJ to promote meritorious qui tams and act on them inside the statutory window to the maximum extent practicable.
This is a resource decision as much as a speed decision. The Department says it wants to clear straightforward cases quickly so its attorneys can concentrate on the largest and most complex fraud. The effect on defendants is the opposite of relief. Faster review means earlier exposure.
What Counts as Benefits Fraud
The memo defines benefits fraud as fraud on federally funded benefits programs administered by states. DOJ's announcement names Medicaid, food assistance such as SNAP, housing assistance, medical care, and cash assistance. Medicaid is the center of gravity. It is jointly funded by Washington and run by the states, and it generates the largest share of False Claims Act health care recoveries. The category turns on the funding structure, not a fixed list, so many state-run programs drawing federal dollars can fall inside it.
The Three Outcomes
At the end of its compressed review, DOJ makes one of three decisions. It can permit the relator to proceed and assume primary responsibility for litigating the case, subject to the government's ongoing supervision and ultimate control. It can conclude the allegations warrant further government investigation. Or it can move to dismiss the qui tam under 31 U.S.C. 3730(c)(2)(A) because the allegations lack adequate specificity or are legally deficient.
The memo lists the factors that push a case toward relator-led litigation. The complaint states an FCA violation if its allegations are true. The facts are corroborated by data analytics, agency information, or the relator's inside knowledge. The scheme is not novel or complex. The potential damages fall below the $10 million settlement authority of the Director of Civil Fraud under Civil Division Directive No. 1-15. And aggravating factors are present, such as beneficiary harm, ongoing misuse of federal funds, or concealment by the defendant.
Why the Memo Means More Civil Investigative Demands
When DOJ decides a benefits fraud qui tam warrants further work, the memo puts that investigation on an expedited 120-day track. The assigned attorneys must build an investigative plan that schedules the prompt issuance of inspector general subpoenas and civil investigative demands, along with early witness interviews. Extensions are not automatic. A first extension of 120 days requires sign-off from the Deputy Assistant Attorney General of the Commercial Litigation Branch. Any further extension requires the Assistant Attorney General of the Civil Division.
The civil investigative demand is the engine of this process. Authorized by 31 U.S.C. 3733, a CID lets the Attorney General compel documents, written interrogatory answers, or sworn oral testimony before any lawsuit is filed. It is not a charge. It is not a finding. It is a demand for information, and it usually arrives while a related qui tam complaint sits under seal, unknown to the recipient.
Two features of the CID raise the stakes. First, the memo directs DOJ to enforce response deadlines. If a recipient misses a deadline without a justifiable reason, the government is told to file an action to enforce the demand. Second, the memo builds in a whole-of-government referral. New benefits fraud matters go to the Criminal Division and the National Fraud Enforcement Division for evaluation of criminal violations, and to the affected agency for administrative action, including payment suspension. A civil response can surface in a criminal file.
A civil investigative demand is often the first visible sign of a sealed qui tam complaint and a parallel criminal referral. Because the Shumate Memo directs DOJ to enforce CID deadlines and to share matters across the criminal and administrative tracks, the response to a CID is rarely a routine document production. It is the opening move in a multi-front investigation.
COVID-Era Loan Fraud: PPP and EIDL Are Still Live
Pandemic relief enforcement is not winding down. It is in the middle of a long arc. About 11 million Paycheck Protection Program loans worth roughly $800 billion were issued in 2020 and 2021. The SBA Office of Inspector General has estimated that around $200 billion, or close to 17 percent of EIDL and PPP funds, went to potentially fraudulent actors. That pool is enormous, and the government is working through it methodically.
Time is on the government's side. Congress extended the statute of limitations for PPP and EIDL fraud to ten years. Loans made in 2020 remain actionable through 2030. Loans made in 2021 remain actionable through 2031. A CID about a five-year-old loan is not the tail end of a sweep. It is the active middle of one.
The civil side runs on data. PPP loan data is public, and a class of data-miner relators uses corporate ownership records, employment data, and loan information to identify potential False Claims Act claims and file qui tam suits. Those suits drive CIDs. In fiscal year 2025, DOJ obtained more than 200 settlements and judgments resolving pandemic-related fraud, recovering more than $230 million, and in January 2026 it secured a litigated FCA judgment against a California rehabilitation center and its owner for improperly receiving and retaining PPP loans. The benefits fraud fast-track now layers a tighter clock on top of all of it.
Small Business Set-Aside Fraud
Federal set-aside programs reserve contracts for specific categories of small businesses. The 8(a) business development program, the service-disabled veteran-owned small business program, the women-owned small business program, and the HUBZone program all carry eligibility rules. When a contractor certifies eligibility it does not have, the payments that follow can become false claims. The familiar theories involve misstating ownership or control, the principal place of business, employee residency in a HUBZone, or routing the work to an ineligible firm through a pass-through arrangement.
Scrutiny of these programs sharpened in 2026. The Department of Defense announced a line-by-line review of every set-aside and sole-source award above $20 million, with instructions to refer improper subcontracting and pass-through schemes to inspectors general and DOJ. The Treasury Department opened a department-wide audit of preference-based awards. Each review is a pipeline that can turn a contract-compliance question into False Claims Act exposure. Set-aside contracts are federal benefits in the broad sense the administration is using, and they share the same enforcement architecture: data, referrals, and CIDs.
Medicaid and Medicare Fraud: The Core Target
Health care is where the False Claims Act does most of its work. Of the $6.8 billion recovered in fiscal year 2025, more than $5.7 billion came from health care matters touching Medicare, Medicaid, and TRICARE. Medicaid sits squarely inside the benefits fraud definition because it is a federally funded, state-administered program. That alignment is why practitioners read the Shumate Memo as aimed, in large part, at Medicaid.
The government identifies these cases through data before a whistleblower ever appears. The Centers for Medicare and Medicaid Services and DOJ run billing data through analytics to flag providers whose patterns diverge from their peers. In April 2026, the government seized funds from a wound care clinic after analytics showed per-claim averages more than double the national norm. CMS reported preventing over $4 billion in improper payments and suspending or revoking the billing privileges of 205 providers in the months before the 2025 national health care fraud takedown.
That takedown shows the scale. In June 2025, DOJ charged 324 defendants, including 96 licensed medical professionals, across 50 federal districts in schemes involving more than $14.6 billion in intended loss. The government seized over $245 million in assets. Civil settlements with 106 defendants accompanied the criminal charges. The same machinery that produced those results now feeds the accelerated qui tam review the Shumate Memo created.
By accelerating review of qui tam complaints alleging benefits fraud, we can more rapidly identify and disrupt emerging schemes, strategically deploy enforcement resources to recover taxpayer money, and strengthen the government's broader fight against fraud.
Assistant Attorney General Brett A. Shumate, Civil Division, May 27, 2026How the Government Builds a Benefits Fraud Case
The Shumate Memo formalizes a sequence that defense practitioners already recognize. A qui tam complaint or a data-analytics referral opens the matter. A short review window forces an early decision. Investigative demands and subpoenas go out fast, often before the target understands the scope. Then the matter branches across civil, criminal, and administrative tracks. The table below maps the stages and what each one signals.
| Stage | Government Action | What It Signals |
|---|---|---|
| Data Analytics or Qui Tam Filing | CMS or DOJ analytics flag a billing outlier, or a relator files a sealed False Claims Act complaint. | The matter may be invisible to the target. A sealed qui tam is not disclosed until the seal lifts. Unusual audit requests can be an early hint. |
| Accelerated 60 to 120-Day Review | DOJ reviews the complaint and decides to permit relator litigation, investigate further, or move to dismiss. | The window is short by design. A decision to investigate triggers an expedited 120-day track with limited extensions. |
| Civil Investigative Demand or IG Subpoena | DOJ issues a CID under 31 U.S.C. 3733 for documents, interrogatory answers, or oral testimony. Inspector general subpoenas may follow. | An investigation is active. Deadlines are enforced. Material produced can be shared across components and used in a parallel proceeding. |
| Whole-of-Government Referral | The matter is referred to the Criminal Division or National Fraud Enforcement Division and shared with the affected agency. | Civil exposure can become criminal exposure. The agency may suspend or recoup payments while the case proceeds. |
| Intervention or Dismissal Decision | DOJ intervenes, declines and lets the relator proceed, or moves to dismiss under 31 U.S.C. 3730(c)(2)(A). | Declination does not end the case. The relator can litigate, and the government keeps the power to intervene or object later. |
Three points run through every stage. The False Claims Act imposes treble damages and per-claim penalties under 31 U.S.C. 3729, so the arithmetic compounds quickly. A statistical outlier is a lead, not proof, and the government's methodology and benchmark population are contestable. And a billing error or a good-faith reading of an ambiguous rule is not the knowing conduct the statute requires.
Fraudulent Intent Is Still Required
The Shumate Memo changes how a benefits fraud case begins. It does not change what the government must prove to win one. Data analytics open files. A sealed qui tam complaint or a civil investigative demand moves them forward. None of that establishes liability. The False Claims Act has two essential elements: the claim was false, and the defendant knew it. A billing outlier is a statistical fact. It is not a state of mind.
The statute sets the standard. Under 31 U.S.C. 3729(b)(1), a person acts knowingly in one of three ways: actual knowledge that the claim is false, deliberate ignorance of whether it is true or false, or reckless disregard of its truth or falsity. The same provision states that the government need not prove specific intent to defraud. But a culpable state of mind is still required. Negligence is not enough. An honest mistake is not a false claim, and a good-faith reading of an ambiguous rule is not reckless disregard.
The Supreme Court drew that line in United States ex rel. Schutte v. SuperValu Inc., 598 U.S. 739 (2023), a case about Medicaid and Medicare reimbursement. The Court held that FCA scienter turns on what the defendant actually knew and believed when the claim was submitted, not on whether some later interpretation was objectively reasonable. A defendant who genuinely believed its claims were accurate lacks the required knowledge, even where the governing rule was ambiguous. A defendant who suspected its claims were false and submitted them anyway can be liable, even where the rule was unclear. In most benefits fraud cases, that is where the case is won or lost.
Frequently Asked Questions
What did the Shumate Memo change about False Claims Act qui tam review?
On May 27, 2026, Assistant Attorney General Brett A. Shumate directed the Civil Division and U.S. Attorneys' Offices to complete an initial review of benefits fraud qui tam complaints within the 60-day seal period under 31 U.S.C. 3730(b)(4), and no later than 120 days.
At the end of that review, DOJ will either permit the relator to litigate the case under government supervision, open a further government investigation on an expedited 120-day track, or move to dismiss under 31 U.S.C. 3730(c)(2)(A) for lack of specificity or legal deficiency. The memo applies to fraud on federally funded, state-administered programs. It does not change the elements of an FCA claim. It compresses the timeline DOJ uses to act.
What is benefits fraud under the False Claims Act?
The memo defines benefits fraud as fraud on federally funded benefits programs administered by states. DOJ's announcement identifies Medicaid, food assistance such as SNAP, housing assistance, medical care, and cash assistance.
Medicaid is the most prominent target. It is jointly funded by the federal government and run by the states, and it accounts for the largest share of False Claims Act health care recoveries. The category is defined by the funding structure rather than a fixed list, so many state-administered programs that draw federal dollars can fall within it.
What is a civil investigative demand under the False Claims Act?
A civil investigative demand, or CID, is a pre-suit tool authorized by 31 U.S.C. 3733. It allows the Attorney General to compel a person or company to produce documents, answer written interrogatories, or give sworn oral testimony before the government files an FCA case or decides whether to intervene in a qui tam action.
A CID is not a lawsuit and is not a finding of wrongdoing. It signals that the government is investigating conduct that may implicate the False Claims Act. Recipients are often unaware of any underlying sealed qui tam complaint when a CID arrives. Material produced can be shared with other government components and used in parallel criminal or administrative proceedings.
What does it mean when DOJ lets a relator litigate a benefits fraud case?
Under the memo, DOJ may decline to lead a case and allow the whistleblower's counsel to litigate it while the government keeps oversight and ultimate control. DOJ weighs whether the complaint states an FCA violation, whether the facts are corroborated, whether the scheme is straightforward, whether damages fall below the $10 million settlement authority of the Director of Civil Fraud, and whether aggravating factors such as beneficiary harm or concealment exist.
Relator-led litigation does not lower a defendant's exposure. The government can still intervene later, object to dismissal, or move to dismiss, and the underlying liability standard does not change.
What is the difference between a qui tam case and a criminal fraud investigation?
A qui tam case is a civil action filed under the False Claims Act by a private whistleblower, called a relator, on behalf of the United States. It is filed under seal and investigated before the government decides whether to intervene. Liability under 31 U.S.C. 3729 carries treble damages and penalties but no imprisonment.
A criminal fraud investigation proceeds through a grand jury and can lead to prison, fines, and forfeiture. The two tracks are not mutually exclusive. The Shumate Memo directs new benefits fraud matters to the Criminal Division or National Fraud Enforcement Division for evaluation, and statements in a civil response can be used in a parallel criminal proceeding.
What are the penalties under the False Claims Act?
The False Claims Act imposes treble damages plus a separate civil penalty for each false claim. Under 31 U.S.C. 3729, the government recovers three times its actual loss and then adds a per-claim penalty on top. For violations assessed after July 3, 2025, the per-claim penalty ranges from $14,308 to $28,619, and the Department of Justice adjusts those amounts annually for inflation.
Because the penalty attaches to each individual claim, exposure scales with the number of claims, not the size of the loss. A scheme involving thousands of small claims can produce penalties that dwarf the actual damages. A successful whistleblower, or relator, generally receives 15 to 30 percent of the government\'s recovery. Some courts have reduced penalty awards as unconstitutionally excessive under the Eighth Amendment where the mandatory total is grossly disproportionate to the harm.
Why are PPP and EIDL loans still under False Claims Act investigation in 2026?
Pandemic relief enforcement is in its active middle, not its conclusion. Roughly 11 million PPP loans worth about $800 billion were issued in 2020 and 2021, and the SBA Office of Inspector General has estimated that around $200 billion in EIDL and PPP funds went to potentially fraudulent actors.
Congress extended the statute of limitations for PPP and EIDL fraud to ten years, so loans from 2020 and 2021 remain actionable into 2030 and 2031. Because PPP loan data is public, data-analytics relators file qui tam complaints that drive civil investigative demands. In fiscal year 2025, DOJ obtained more than 200 settlements and judgments resolving pandemic-related fraud.
What is the statute of limitations for COVID-19 loan fraud?
Congress enacted a ten-year statute of limitations for fraud involving PPP and EIDL loans through the PPP and Bank Fraud Enforcement Harmonization Act and the COVID-19 EIDL Fraud Statute of Limitations Act. That period applies to both criminal charges and civil claims tied to those programs.
As a result, loans originated in 2020 remain subject to enforcement through 2030, and loans from 2021 through 2031. The civil False Claims Act carries its own limitations framework under 31 U.S.C. 3731, with an outer limit of ten years from the violation. The extended window gives the government a long runway for complex investigations.
How does the False Claims Act apply to small business set-aside contracts?
Set-aside programs reserve contracts for 8(a) firms, service-disabled veteran-owned small businesses, women-owned small businesses, and HUBZone firms. When a contractor certifies eligibility it does not meet, the resulting payments can be treated as false claims. Common theories involve misrepresenting ownership or control, the principal place of business, HUBZone employee residency, or pass-through arrangements.
In 2026, the Department of Defense announced a review of set-aside and sole-source awards above $20 million, and Treasury opened a department-wide audit of preference-based awards. Both contemplate referrals to inspectors general and DOJ, which can convert contract-compliance questions into False Claims Act exposure.
How does DOJ use data analytics to identify Medicaid and Medicare fraud?
DOJ and the Centers for Medicare and Medicaid Services use billing data to flag providers whose patterns deviate from statistical peers. The Health Care Fraud Data Fusion Center combines claims data with investigative information to identify outliers in per-claim averages, service volume, and coding.
In an April 2026 action, the government seized funds from a wound care clinic after analytics showed per-claim averages more than double the national norm. CMS reported preventing over $4 billion in improper payments and suspending or revoking 205 providers' billing privileges before the 2025 national takedown. These analytics are leads. An outlier report identifies an anomaly, not intent, and the methodology and benchmark population are open to challenge.
What experience does Armstrong & Bradylyons PLLC bring to False Claims Act and benefits fraud matters?
Armstrong & Bradylyons PLLC was founded by former senior DOJ Fraud Section prosecutors. Scott Armstrong served as an Assistant Chief at the Fraud Section and was lead counsel in health care fraud cases totaling over $600 million in false claims, including the Fraud Section's first use of data analytics to convict a physician. He also co-led the investigation and charges in one of the first COVID-era PPP fraud cases, involving over $7 million.
Drew Bradylyons served as an Assistant Chief supervising the Healthcare Fraud Unit's South Florida Strike Force and as Chief of the Financial Crimes and Public Corruption Unit in the Eastern District of Virginia, where he supervised procurement and government program fraud. In that role he often supervised parallel investigations running civil fraud and criminal fraud tracks at the same time. Today the firm defends individuals in federal courts nationwide against False Claims Act allegations and parallel criminal fraud charges, from civil investigative demands and sealed qui tam complaints through trial. That work runs through the firm's white-collar defense and procurement fraud and FCA defense practices. Having built these cases at DOJ, the firm's attorneys know where the government's theories are strong and where they are vulnerable.
Where does the firm defend False Claims Act and civil fraud cases?
Armstrong & Bradylyons PLLC is based in Washington, D.C. and defends individuals in civil fraud investigations and False Claims Act matters nationwide. The firm concentrates on the districts where benefits fraud and government program fraud cases cluster.
The District of Columbia is the home of the Civil Division's Fraud Section, which sets FCA policy and runs the qui tam review the Shumate Memo accelerates. The Eastern District of Virginia, where Drew Bradylyons led the Financial Crimes and Public Corruption Unit, is one of the most active federal fraud-enforcement districts in the country and a frequent venue for parallel civil and criminal fraud cases. The District of Maryland handles substantial health care, procurement, and pandemic relief fraud matters tied to the federal programs concentrated in the region.
The firm appears in federal district courts across the United States. It defends individuals who receive a civil investigative demand, learn of a sealed qui tam complaint, or face a referral to the Criminal Division or National Fraud Enforcement Division, in these districts and wherever else the conduct is investigated.
