Anti-Kickback Statute: What Medical Practices Actually Need to Know (42 USC § 1320a-7b(b))

The federal Anti-Kickback Statute at 42 USC § 1320a-7b(b) is the intent-based criminal-and-civil prohibition on remuneration tied to referrals of federal healthcare program business. It reaches any direct or indirect payment offered, paid, solicited, or received to induce referrals — cash, gifts, free services, below-market leases, anything of value. It runs alongside but is not the same statute as Stark Law. Practices that confuse the two routinely build arrangements that fit a Stark exception while failing AKS.

What the statute actually prohibits

The AKS reaches four verbs: offer, pay, solicit, receive. The prohibited object is "remuneration" — defined broadly to include anything of value, in cash or in kind, direct or indirect. The triggering link is intent: the remuneration must be intended, at least in part, to induce the referral of an item or service paid for by a federal healthcare program, or to induce the purchase, lease, order, or arranging-for of any such item or service.

The Ninth Circuit's intent standard from Hanlester Network v. Shalala — "knowingly and willfully," meaning the actor knew the conduct was unlawful — was effectively narrowed by the Affordable Care Act amendment at 42 USC § 1320a-7b(h). Today the government need not prove the defendant knew of the AKS specifically; it must prove the defendant knew the conduct was generally unlawful. The "one purpose" test from United States v. Greber controls: if any one purpose of the remuneration is to induce referrals, the statute is violated, even when other legitimate purposes also exist.

Key practical consequences:

• Both sides are liable. Payer and payee both expose under AKS. A physician taking a kickback and the entity paying it both commit the offense.
• Indirect remuneration counts. Payments through a third party, free services, below-market arrangements, and item exchanges all qualify.
• Federal-program nexus is required. AKS reaches Medicare, Medicaid, TRICARE, VA, and other federal-healthcare-program business. Pure private-pay arrangements sit outside federal AKS, though most states have their own analogs.
• Per-violation penalties. Each prohibited remuneration event is a separate violation. A monthly improper payment for twelve months is twelve violations.

Safe harbors and how they actually function

The statutory safe harbors at 42 CFR § 1001.952 define arrangements that, if every element is met, are immune from AKS prosecution. The safe harbors are voluntary. Failure to fit a safe harbor does not by itself prove a violation — it removes the bright-line protection and leaves the arrangement to be evaluated on intent. That distinction is the single most misunderstood feature of the AKS framework.

The safe harbors most relevant to medical practices:

• Personal services and management contracts at 42 CFR § 1001.952(d) — written agreement, one-year minimum term, fair market value not tied to referral volume, services not exceeding what is reasonably necessary.
• Space rental at 42 CFR § 1001.952(b) — same architecture applied to real estate.
• Equipment rental at 42 CFR § 1001.952(c) — same architecture applied to equipment.
• Employees at 42 CFR § 1001.952(i) — bona fide employment relationships are protected; productivity-based compensation for the employee's own services is permitted.
• Investment interests at 42 CFR § 1001.952(a) — both large-entity and small-entity tests, with strict caps on referring-investor ownership and return.
• Referral arrangements for specialty services at 42 CFR § 1001.952(q).
• Value-based arrangements at 42 CFR § 1001.952(ee)–(gg) — added by the December 2020 OIG final rule, structured around care coordination and outcome-based payment.
• Patient engagement and support, CMS-sponsored model, cybersecurity technology — additional 2020 safe harbors aligned with the Regulatory Sprint to Coordinated Care.

OIG also publishes advisory opinions on specific proposed arrangements. Advisory opinions bind only the requestor on the facts presented, but they remain the clearest indication of how OIG evaluates novel structures.

How enforcement actually works

What AKS investigations most often catch is the unstated assumption that a routine referral pattern is fine because "everyone does it." OIG and DOJ run AKS cases through several channels:

• Qui tam relators. The False Claims Act qui tam provisions at 31 USC § 3730 let whistleblowers — usually former employees, ex-partners, or disgruntled vendors — file under seal. Relators collect 15-30% of the recovery. The relator bar is the single largest source of AKS cases.
• OIG audits and OIG Special Agent investigations. OIG opens cases from data analytics, hotline tips, news coverage, and CIA monitoring of prior settlements.
• MAC and UPIC referrals. A Medicare contractor that identifies a referral pattern during a billing audit can refer the matter to OIG.
• DOJ Civil and Criminal divisions. DOJ pursues parallel civil False Claims Act and criminal AKS cases. The criminal track is reserved for the most egregious matters.
• Self-disclosure. A practice that identifies an AKS exposure can file under the OIG Self-Disclosure Protocol — see our SDP guide — for negotiated resolution at typically 1.5x single damages.

Settlement multipliers outside SDP run higher. Civil resolutions commonly land at 2x to 3x single damages plus per-claim penalties. CIAs running five years are routine outcomes. Exclusion is the catastrophic end.

What practices most often miss

Across the AKS exposures d3rx has seen surface during compliance binder assembly and audit-defense workflow, the recurring themes are remarkably consistent:

• Medical director agreements that drift. The agreement was signed at fair market value with a defined scope; three years later the physician is paid the same monthly fee but the scope expanded to cover patient referrals to the hospital's surgery center. Drift kills the safe harbor.
• Marketing arrangements without contract review. A "patient navigator" or "outreach coordinator" arrangement that pays per patient enrolled in a federal program is AKS-exposed regardless of how the role is titled.
• Speaker programs with thin content. Pharma speaker programs that pay the same physicians repeatedly, at venues unrelated to education, with the same attendees, are the OIG's running case-study pattern.
• Free EHR or device interfaces outside the safe harbor. The 15% donee cost-share, no-referral-conditioning, and written-agreement elements of the EHR safe harbor at 42 CFR § 1001.952(y) are not optional.
• Joint ventures with referral sources. Investment-interest safe harbor failures dominate this category. The 40% non-referring-investor floor and the 40% non-referring-revenue floor are bright lines.
• Gifts and meals that aggregate above the OIG nominal-value exception. $15 per item, $75 per patient per year is the practical ceiling under the Beneficiary Inducements CMP — and only for non-cash, non-cash-equivalent items. General-purpose gift cards and other cash equivalents fall outside the exception regardless of dollar amount.

The practices that resolve AKS exposure cleanly are the ones that documented intent at the time of arrangement, kept fair-market-value documentation contemporaneous, and re-papered the arrangement when scope changed.

State-law overlay

Most states have their own anti-kickback analogs that reach further than federal AKS:

• California Business & Professions Code § 650 reaches all-payer (not just federal-program) referral remuneration and is the model for several other state statutes.
• New York Public Health Law § 238-a and Education Law § 6531 add layered prohibitions on referral fees.
• Texas Occupations Code § 102.001 prohibits remuneration tied to referrals of services billable to any third-party payer.
• Florida Patient Brokering Act, F.S. § 817.505, was strengthened in 2019 and is actively enforced against addiction-treatment marketing structures.

A federally-compliant arrangement can still violate state law. State Attorneys General run independent AKS-analog cases, often paired with state false-claims-act recoveries. Counsel evaluates both layers when papering any referral-adjacent arrangement.

Compliance checklist

Before signing any arrangement with a referral source, a referral recipient, or anyone in a position to influence federal-program business:

• [ ] Written agreement, signed and dated by all parties
• [ ] One-year minimum term where the relevant safe harbor requires it
• [ ] Fair-market-value compensation, supported by a contemporaneous FMV opinion or benchmark
• [ ] Scope of services defined; aggregate compensation not exceeding what is reasonably necessary
• [ ] Compensation methodology not tied to volume or value of federal-program business
• [ ] Safe harbor identified on the face of the arrangement file, with element-by-element fit documented
• [ ] OIG LEIE and SAM exclusion screening on the counterparty at signing and monthly thereafter — see the OIG LEIE monthly exclusion screening guide
• [ ] Sunshine Act / Open Payments reporting captured where the counterparty is a covered entity
• [ ] Annual contract review for scope drift, FMV currency, and operational fit
• [ ] State-law analog reviewed by counsel for the practice's state and any state where the counterparty operates

Restraint about outcomes

The AKS framework is intent-driven. No checklist, no template, and no vendor can preempt an OIG or DOJ determination that an arrangement was structured to induce referrals. What counsel and a well-documented compliance program do is materially reduce the surface area, capture intent contemporaneously, and position the practice for a defensible resolution if a matter ever surfaces.

This guide is not legal advice. The AKS analysis on any specific arrangement is a legal determination; consult outside healthcare counsel before papering anything with a referral source or referral recipient.

How d3rx fits

The d3rx compliance binder holds the source-grounded administrative documentation an AKS-defensible program is built from — the financial relationships log, the medical-director agreement file, the contract review cadence, monthly exclusion screening evidence, and the FWA training record. The d3rx audit defense workflow supports the OIG, DOJ, and qui tam parallel-track handling that an AKS matter routinely requires. d3rx does not represent the practice in any OIG, DOJ, or state proceeding and does not replace counsel; it is a point-in-time administrative documentation aid that counsel and the practice work from.