Referral flow without buying it: the AKS-safe playbook

The core rule: referrals are earned, not bought

You build referral relationships legally by making your practice genuinely worth referring to and easy to refer to, then letting a clean two-way clinical relationship carry the flow. One rule shapes everything else: federal fraud-and-abuse law broadly prohibits paying for, or being paid for, a referral tied to federally reimbursed care. Referral flow that would survive an audit is earned, never bought.

That rule sounds narrow and is not. The value that changes hands is called remuneration, and its form is irrelevant — cash, discounts, free space, and favors all count. The statute itself, the penalties, and the exceptions that make some arrangements permissible are laid out on the dedicated fraud-and-abuse pages; this playbook is about the behavior that generates referrals without going near that line. For the black-letter version — stark for the solo, and the safe harbors you actually touch — start there and bring what you learn back to the tactics below.

What "paying for a referral" actually covers

Paying for a referral covers far more than an envelope of cash. Anything of value that moves because of referrals can qualify: below-market or free rent, discounted or free services, a stipend for a role you do not actually perform, expensive gifts, sponsorships pegged to referral volume, or a standing arrangement to send patients each other's way. The label is remuneration, and its form does not save it.

This is why ordinary-looking deals become traps. Subleasing from a colleague at a friendly rate, when that colleague also refers to you, is a classic one — the rent discount can read as payment for the referrals. A safe harbor is the regulatory structure that can make a specific arrangement permissible if it meets every element, but the elements are exact and unforgiving.

Two disciplines keep you clear:

• Do not tie anything of value to who refers. Pay fair-market value for real goods and services, documented, whether or not the counterparty ever sends a patient.
• Do not self-clear a deal. Whether a given arrangement fits a safe harbor is a legal question; the fraud-and-abuse pages explain the ones a solo practice actually encounters, and a health-care attorney confirms the fit before you sign.

The protective habit under all of this is documentation and fair-market value. When you do pay a colleague — for genuine consulting time, for real supervision, for space you actually use — pay what the market pays, put it in writing, and tie it to the work rather than to any patient volume. A paper trail showing that compensation tracked real services, set in advance and independent of referrals, is what turns an arrangement that could look suspect into one you can explain.

Building genuine referral relationships

Referral flow starts with being the clinician other people trust to send someone to. Map the referrers who already serve your patients — primary care physicians, pediatricians, school counselors, employee assistance programs, and attorneys handling matters that intersect with your work — and make yourself their obvious, low-friction option. None of this involves money; all of it involves being reliably good and reliably reachable.

The behaviors that build referral relationships are well-worn practice conventions, and they compound over months:

• Be reachable. A referrer who gets a call back the same day refers again; one who hits voicemail twice stops.
• Have room. Even a short, honest wait beats a closed door — tell referrers your real availability.
• Be easy to work with. Take the intake friction onto yourself, not onto the referrer or the patient.
• Give them something to hand over with the referral kit — a one-page description of who you help, how to reach you, and what to expect — so you are the name a busy colleague remembers.

Being referrable is not a campaign; it is the accumulated reputation that makes a referral feel safe to the person making it.

Consistency beats intensity. A single lunch with a referring office fades; a reliable pattern — the same-week coordination note, the returned call, the occasional relevant article shared without a pitch — builds the trust that produces steady referrals. Introduce yourself once, deliver every time after, and let the referrer's own experience of working with you do the persuading. The clinicians who send you the most patients are usually the ones who have watched you handle a few well.

Closing the loop without a HIPAA breach

The highest-return habit in referral work is closing the loop: a brief note back to the referring clinician confirming the patient was seen and sketching the plan. Sending that to a clinician involved in the patient's care is ordinary care coordination, and it is exactly what turns a one-time referral into a standing relationship. The discipline is to send only the minimum the referrer needs, nothing more.

The line to watch is marketing. Using patient information to market your practice — folding a referred patient's details into a promotional newsletter or campaign — is a different act, and HIPAA requires prior authorization for it, with only narrow exceptions such as face-to-face communication and gifts of nominal value 1Ref 1HHS Office for Civil Rights (2026).Marketing.That using patient information to market a practice requires prior authorization, distinguishing permitted care coordination from marketing.. Care coordination is one thing; marketing to the same person is another, and the two can look deceptively similar.

Practical rules that keep the loop clean:

• Send the coordination note to the treating referrer, not to a mailing list.
• Keep it to what the referrer needs for care — minimum necessary, every time.
• Get authorization before any patient's information is used to promote the practice 1Ref 1HHS Office for Civil Rights (2026).Marketing.That using patient information to market a practice requires prior authorization, distinguishing permitted care coordination from marketing..

Co-marketing, cross-referrals, and disclosure

Reciprocal referral relationships are legitimate when they rest on genuine clinical fit — the endocrinologist sends you the patients who need therapy, you send back the ones who need medical management — and they become a problem when they harden into a quota or a trade. A two-way pattern that reflects real clinical judgment is not the same as an agreement to exchange a set number of patients, and only the former is safe.

Co-marketing is fine and often smart: a shared workshop, a guest article, a joint community talk. But when you promote each other, disclosure matters. The FTC's endorsement guidance requires that a material connection — you are compensated, or you have a business relationship — be disclosed to the audience, and that any endorsement reflect honest experience 2Ref 2Federal Trade Commission (2023).FTC's Endorsement Guides: What People Are Asking.That a material connection in co-marketing must be disclosed and that endorsements must reflect honest experience.. Do not pay for testimonials, do not trade services for reviews or referrals, and say plainly when a recommendation comes from a partner.

Where a reciprocal relationship starts to feel structured — a written arrangement, a volume expectation, money moving — stop and treat it as the legal question it is, rather than blessing it yourself.

A concrete example makes the line clear. Co-hosting a free community workshop with a physician, each of you speaking to your own expertise, is ordinary co-marketing — disclose any business relationship to the audience and keep the content educational. Agreeing that the physician will send you a fixed number of patients each month in exchange for the exposure is the version that crosses into a prohibited arrangement. The activity looks similar; the promise attached to it is what changes its character.

Reminders and referral texting: consent first

If you automate patient contact — appointment reminders, recall messages, or a note sent to a referral partner's patient — consent comes first. The TCPA requires prior express consent before an autodialed or prerecorded call or text reaches a patient, and reminder and recall programs run squarely inside that regime 3Ref 3Federal Communications Commission (2026).Telemarketing and robocalls.That the TCPA requires prior express consent before automated reminder, recall, or referral texts reach a patient.. Capture consent at intake, record it, and honor opt-outs immediately.

Two distinctions keep a texting program lawful. First, consent is specific: agreeing to receive care is not the same as agreeing to automated messages, so ask for messaging consent explicitly and log which patient gave it and when. Second, an individually typed message you send by hand sits outside the autodialer rules — it is the automated system, not the act of texting, that triggers the consent requirement. When in doubt, keep the reminder manual or keep the consent airtight.

The same consent discipline extends to any recall or re-engagement outreach you automate to former patients — reaching back out to someone who has not been seen in a while is exactly the kind of message the rules cover. Keep the consent record with the chart, note the date and channel, and stop on the first opt-out. A clean consent log is also what lets a texting program scale without becoming a liability.

A cross-state referral network

Telehealth lets referrals cross state lines, but a referral you cannot lawfully accept is exposure, not flow — you must be licensed, or hold a practice privilege, in the state where the patient sits. The interstate compacts are the scalable path. The Social Work Licensure Compact creates multistate practice privileges for eligible social workers as states implement it 4Ref 4Social Work Licensure Compact (2026).Social Work Licensure Compact.That the Social Work Licensure Compact creates multistate practice privileges for eligible social workers as states implement it., and the Counseling Compact grants licensed professional counselors a privilege to practice, including by telehealth, across member states 5Ref 5Counseling Compact Commission (2026).Counseling Compact.That the Counseling Compact grants licensed counselors a privilege to practice, including telehealth, across member states..

Before you accept an out-of-state referral, confirm three things: your license type is eligible for the relevant compact, both your home state and the patient's state have implemented it, and your malpractice coverage follows you there. If a compact does not cover you, the referral waits until you are licensed in that state — it does not become an exception.

One more landscape note. If a referral relationship ever grows into a value-based arrangement — shared savings, bundled care, a network with performance payments — the rules change, and a distinct set of value-based safe harbors comes into play. These models trace to the CMS Innovation Center 6Ref 6Centers for Medicare & Medicaid Services (2026).CMS Innovation Center.That value-based arrangements trace to the CMS Innovation Center, the on-ramp for the value-based safe-harbor context., and the moment money is tied to outcomes across practices, it is counsel territory rather than a handshake.

When to bring in counsel

Bring in a health-care attorney the moment anything of value flows toward or away from a source of referrals — that single trigger catches most of the trouble before it starts. Counsel is not for the relationships built on reputation and coordination; it is for the ones where money, space, or a contract enters the picture. The arrangements worth a call before you sign anything:

• Money or discounts tied to a party who sends or receives referrals — rent, stipends, free services, sponsorships.
• Space and staffing shares with a colleague who also refers, including a sublease at a friendly rate.
• Medical-director, supervision, or consulting contracts — legitimate when the pay matches real work, risky when it does not.
• Group or network formation, and any arrangement that touches Medicare or Medicaid patients.

Going to counsel is not a failure of nerve; it is the cheapest insurance in the practice. Walk in prepared: the fraud-and-abuse pages give you the statute, the penalties, and the safe-harbor structures a solo practice actually encounters, so you can bring a specific question instead of a vague worry. The goal is not to avoid every relationship — it is to build referral flow you would be comfortable explaining to a regulator.