Guide

Sixty days from identification: when keeping money becomes a false claim

Summary

The 60-day rule requires you to report and return a Medicare or Medicaid overpayment within 60 days of identifying it — the later of 60 days after identification or the date a related cost report is due. Miss that window and the retained money becomes an obligation you have knowingly avoided, which is a false claim carrying treble damages. 'Identified' means when reasonable diligence would have found and quantified it.

By Gale Editorial · Updated 2026-07-26. Every figure cited to a dated source. How we write.

What the 60-day overpayment rule requires

The 60-day overpayment rule requires a provider who has received an overpayment from Medicare or Medicaid to report and return it by the later of two dates: 60 days after the overpayment is identified, or the day any corresponding cost report is due. The deadline is what gives the rule its name, and it is not a courtesy window — once the clock runs out, the money you are still holding stops being a billing discrepancy and becomes a legal exposure 1Ref 1U.S. Department of Justice (2026).The False Claims Act.That knowingly avoiding an obligation to repay the government is a reverse false claim, that 'knowingly' includes reckless disregard, and that treble damages, per-claim penalties, and qui tam suits follow — the teeth behind the 60-day deadline..

An overpayment is simply money a payer sent you that you were not entitled to keep: a duplicate payment, a service billed but not rendered, a code that paid more than the documentation supports, a payment for a patient who was not eligible that day. The rule does not care whether the error was yours, the payer's, or a clearinghouse glitch. Once you know the money is not yours, the duty to return it is on the clock, and the origin of the mistake changes nothing about the deadline.

What 'identified' means — and when the clock starts

The clock does not wait for you to finish a full audit. You have identified an overpayment when you have determined, or should have determined through reasonable diligence, that you received one and have quantified the amount. That standard has two teeth: a credible signal you ignore can start the clock anyway, and 'I hadn't gotten around to checking' is not a defense when a reasonable practice in your position would have checked.

Reasonable diligence means both proactive compliance monitoring and a timely, good-faith investigation once a credible indication surfaces. A patient complaint about a bill, a payer remittance flagging a pattern, a colleague's offhand remark about a code — any of these can be the credible signal that starts the diligence obligation running. The practical rule for a solo is to open the investigation the day something looks wrong and date it, because the record of when you started looking is what later defines whether you moved in time or sat on it.

Why a kept overpayment becomes a false claim

Keeping an identified overpayment past the deadline is not a passive oversight — it converts into an affirmative violation. Under the False Claims Act, knowingly concealing or improperly avoiding an obligation to repay the government is itself a false claim, the so-called reverse false claim, and 'knowingly' includes reckless disregard, not just deliberate intent 1Ref 1U.S. Department of Justice (2026).The False Claims Act.That knowingly avoiding an obligation to repay the government is a reverse false claim, that 'knowingly' includes reckless disregard, and that treble damages, per-claim penalties, and qui tam suits follow — the teeth behind the 60-day deadline.. The retained overpayment is the obligation you avoided, and holding it is the act.

The financial exposure is why this matters for a practice of one. FCA liability runs to treble damages plus a penalty per claim, and private whistleblowers — a former employee, a billing contractor, even a patient — can file a qui tam suit and share in the recovery 1Ref 1U.S. Department of Justice (2026).The False Claims Act.That knowingly avoiding an obligation to repay the government is a reverse false claim, that 'knowingly' includes reckless disregard, and that treble damages, per-claim penalties, and qui tam suits follow — the teeth behind the 60-day deadline.. Sustained or clearly fraudulent conduct can escalate past dollars entirely: the OIG can exclude an individual from the federal programs, after which no federal program will pay for anything that person provides 2Ref 2HHS Office of Inspector General (2026).Exclusions Program.That the OIG can exclude an individual from the federal health programs, after which no federal program payment may be made for their services — the escalation beyond dollars for sustained or fraudulent conduct.. A modest overpayment handled correctly is a refund; the same overpayment ignored is a case.

The solo workflow: from discovery to refund

When you find an overpayment, work a fixed sequence rather than improvising, because the sequence itself is what proves you acted in time. Quarantine the money so it is not spent, quantify the amount and the lookback period, determine the correct refund route for that payer, return it with a written explanation, and keep the whole trail dated. Finding your own error and returning it on your own initiative is the cleanest posture there is.

Quarantine and quantify. Set the suspected amount aside and calculate it across the full lookback the payer applies — an isolated error and a systematic one are handled very differently.
Find the pattern. If one claim was wrong, ask whether a template, a macro, or a habit made others wrong the same way. Payers mine for exactly these repeats, and upcoding that recurs across a date range is what turns a single refund into an extrapolation across a whole population of claims.
Return it correctly. Use the payer's overpayment-refund process and document the date, the amount, the claims, and the reason. The takeback letter a payer may send you is the mirror image of this move; a voluntary refund on your own initiative is the stronger footing.
Keep the trail. The dated record of when you identified, investigated, and returned is your evidence that you met the deadline — build it as you go, not afterward.

When a refund isn't enough: the self-disclosure fork

Some overpayments carry more than a repayment duty. When the money is traceable to conduct that implicates the fraud statutes — a kickback-tainted referral, a service that was never provided, a pattern that looks intentional — a simple refund may not resolve your exposure, and the honest escalation is a formal disclosure. The OIG maintains a self-disclosure protocol precisely for providers who discover conduct implicating the federal fraud laws, and it sets out what a submission must contain 3Ref 3HHS Office of Inspector General (2026).Health Care Fraud Self-Disclosure Protocol.That the OIG's self-disclosure protocol is the channel for providers who discover conduct implicating the federal fraud laws, and sets out what a submission must contain — the escalation beyond a simple refund..

Match the disclosure to the problem. If the root cause is a prohibited financial self-referral, that is a Stark matter with its own CMS pathway rather than the OIG route 4Ref 4Centers for Medicare & Medicaid Services (2026).Physician Self-Referral.That the Stark self-referral law is administered by CMS, so an overpayment traceable to a prohibited financial self-referral follows a CMS pathway distinct from the OIG route.. If it is a potential anti-kickback or false-claims issue, the OIG protocol is the channel, and its value is that a voluntary, timely disclosure is generally treated more favorably than the same conduct found by an investigator. This is the point where a solo genuinely benefits from counsel — not to draft a routine refund, but to decide which fork a specific set of facts belongs on before anything is filed.

Build the habit before you need it

The best defense against a 60-day scramble is a light-touch compliance program that catches errors before a payer or a whistleblower does. The OIG's General Compliance Program Guidance lays out seven elements — from a designated compliance contact to periodic auditing and a channel to raise concerns — explicitly scaled down for small practices, so a solo can run a real version of it without a department or a budget line 5Ref 5HHS Office of Inspector General (2023).General Compliance Program Guidance.That the OIG's seven-element compliance program is scaled to small practices, giving a solo a workable self-audit and monitoring habit that surfaces overpayments before the deadline pressure hits..

For a practice of one, the workable version is small and repeatable: a periodic self-audit of a sample of claims against the documentation, a written note of what you checked and what you found, a standing habit of investigating credible signals the day they arrive, and the refund workflow above ready to run. None of it is heavy. But a practice that audits itself on a schedule identifies its overpayments on its own timeline, where the 60-day clock is a manageable deadline rather than a surprise that starts running while you are still deciding whether to look.

Common questions

It starts when you identify the overpayment — meaning when you have determined, or reasonable diligence would have determined, that you received one and have quantified it. A credible signal you ignore can start it regardless. The refund is due by the later of 60 days after that point or the date a related cost report is due. Dating your investigation is how you show where the clock began.

Any payment you were not entitled to keep: a duplicate, a service billed but not rendered, a code paid above what the documentation supports, or a payment for a patient who was not eligible. The cause does not matter — a payer error, a clearinghouse glitch, or your own mistake all create the same duty. Once you know the money is not yours, it is an overpayment on the clock.

The federal statutory 60-day rule is a Medicare and Medicaid obligation. Commercial payers set their own overpayment-recovery terms through your contract and state law rather than this statute. That said, knowingly keeping money you know isn't yours is a bad posture with any payer, so the same discover-quantify-return workflow is the right habit across the board, whatever the specific deadline.

Reasonable diligence includes a timely, good-faith investigation, and the standard accounts for the work of quantifying. What it does not tolerate is sitting on a credible signal or slow-walking the count to run out the clock. Open the investigation promptly, document its pace, and return what you have determined. A diligent, dated investigation is the defense; an unexplained delay is the problem.

No. A routine overpayment refund is exactly that — returning money that wasn't yours, which the rules require. Fraud is a separate question about intent and conduct. Where the overpayment traces to potential fraud, the self-disclosure protocol, not a bare refund, is the channel. Returning a garden-variety overpayment promptly is the compliant move and the stronger position, not a confession.

Run your practice on Gale

The software is free. Gale earns one flat 3.5% all-in per paid transaction — only on transactions that actually pay. No subscription, no setup fee, no network cut.

Start or manage a practice →

References

1.U.S. Department of Justice (2026). The False Claims Act. U.S. Department of Justice. link ✓That knowingly avoiding an obligation to repay the government is a reverse false claim, that 'knowingly' includes reckless disregard, and that treble damages, per-claim penalties, and qui tam suits follow — the teeth behind the 60-day deadline.
2.HHS Office of Inspector General (2026). Exclusions Program. HHS Office of Inspector General (OIG). link ✓That the OIG can exclude an individual from the federal health programs, after which no federal program payment may be made for their services — the escalation beyond dollars for sustained or fraudulent conduct.
3.HHS Office of Inspector General (2026). Health Care Fraud Self-Disclosure Protocol. HHS Office of Inspector General (OIG). link ✓That the OIG's self-disclosure protocol is the channel for providers who discover conduct implicating the federal fraud laws, and sets out what a submission must contain — the escalation beyond a simple refund.
4.Centers for Medicare & Medicaid Services (2026). Physician Self-Referral. Centers for Medicare & Medicaid Services (CMS). link ✓That the Stark self-referral law is administered by CMS, so an overpayment traceable to a prohibited financial self-referral follows a CMS pathway distinct from the OIG route.
5.HHS Office of Inspector General (2023). General Compliance Program Guidance. HHS Office of Inspector General (OIG). link ✓That the OIG's seven-element compliance program is scaled to small practices, giving a solo a workable self-audit and monitoring habit that surfaces overpayments before the deadline pressure hits.

https://www.gale.care/for-providers/fa-60-day-overpayment-duty · 5 sources. Competitor details are cited to dated public sources and maintained as they change; figures are estimates, not commitments. Synthetic demonstration.

← Back to for providers