Verifying the Authenticity of Federal Contacts

Verifying the Authenticity of Federal Contacts

What should you do if you get an email with the subject line “U.S. Office of Inspector General HHS – Special Investigations?” A doctor I’m working with in the northern part of the country received such an email. Fortunately, he handled it well, but there are still lessons to be learned.  The email began with:

“The United States Office of Inspector General – HHS is charged with investigating complaints relating to healthcare matters. The Special Investigations branch is tasked with investigating complaints of employee and contractor wrongdoing and whistleblower-reprisal complaints. We are in receipt of a complaint that involved a current or former employer of yours.  

You’ve been listed as a possible witness to reported allegations, and we’d like to schedule a time to virtually discuss the matter…”  

If you’re the lucky recipient of something similar, what should you do?

First, I want to emphasize that it is improper for anyone, including me, to prevent you from talking to a government agent. You always have the right to talk to a government agent, and with the exception of disclosing personal health information (PHI), there aren’t many restrictions on what you can say.

But unless we’re talking about a licensing board, or if you’ve been issued a subpoena, you also have the right to decline to speak with an agent. While I cannot forbid you from reaching out to the government agent, my strong recommendation would be for you to forward the email to your organization’s legal counsel.  

If you’re not doing that right out of the chute, there is something imperative for you to do: verify the authenticity of the communication. This particular email listed the agent’s name and a mobile and office number, as well as a general duty phone.

It didn’t include a physical address, so it was difficult to determine where the agent was located, although the area code was from the southeastern part of the country, which struck me as odd, given that the entity apparently under investigation was in the upper midwest, eight states away.

So, how do you verify the legitimacy of the agent? 

One option you should immediately reject: calling the number listed in the email. It may be tempting to call the duty number and ask if the agent is genuine. But if someone is pretending to be a government agent, it is pretty easy to create a fake signature block, and that fake signature block is going to include fake phone numbers.

I’ve written about “Vandelay Industries” before, and I am sure I will be doing so again (in Seinfeld, George routinely used a fake entity, Vandelay Industries, as a phony reference. George gave out Jerry’s number, asserting it was Vandelay Industries, asking Jerry to masquerade as a former employer, answering his home phone “Vandelay Industries,” in attempts to con prospective employers.) There are many shakedown schemes that involve people pretending to be a government agent.  

In this instance, there was one reason to believe that the email was genuine, despite the atypical geography. The email originated the domain @oig.hhs.gov. I want to emphasize that I don’t simply mean that that the U.S. Department of Health and Human Services (HHS) Office of Inspector General (OIG) address appeared in the body of a text as a hyperlink. It’s possible to set up hyperlinks to send emails to an address that differs from the words that appear in the email itself. But it’s much more difficult to hijack an actual domain.  

If I type an email address with my own hands that includes a domain that I know to be a true government domain, I can be pretty confident that the email will go to an actual government employee – or, at worst, a non-existent email address. In this case, I think that is the easiest way to verify the agent’s authenticity.

Locating a phone number for an OIG agent can be extremely difficult. But if you know their name, you can send an email to @oig.hhs.gov.

That’s what I did here, and the agent proved to be legitimate. 

EDITOR’S NOTE:

The opinions expressed in this article are solely those of the author and do not necessarily represent the views or opinions of MedLearn Media. We provide a platform for diverse perspectives, but the content and opinions expressed herein are the author’s own. MedLearn Media does not endorse or guarantee the accuracy of the information presented. Readers are encouraged to critically evaluate the content and conduct their own research. Any actions taken based on this article are at the reader’s own discretion.

Facebook
Twitter
LinkedIn

David M. Glaser, Esq.

David M. Glaser is a shareholder in Fredrikson & Byron's Health Law Group. David assists clinics, hospitals, and other health care entities negotiate the maze of healthcare regulations, providing advice about risk management, reimbursement, and business planning issues. He has considerable experience in healthcare regulation and litigation, including compliance, criminal and civil fraud investigations, and reimbursement disputes. David's goal is to explain the government's enforcement position, and to analyze whether this position is supported by the law or represents government overreaching. David is a member of the RACmonitor editorial board and is a popular guest on Monitor Mondays.

Related Stories

Leave a Reply

Please log in to your account to comment on this article.

Featured Webcasts

Proactive Denial Management: Data-Driven Strategies to Prevent Revenue Loss

Denials continue to delay reimbursement, increase administrative burden, and threaten financial stability across healthcare organizations. This essential webcast tackles the root causes—rising payer scrutiny, fragmented workflows, inconsistent documentation, and underused analytics—and offers proven, data-driven strategies to prevent and overturn denials. Attendees will gain practical tools to strengthen documentation and coding accuracy, engage clinicians effectively, and leverage predictive analytics and AI to identify risks before they impact revenue. Through real-world case examples and actionable guidance, this session empowers coding, CDI, and revenue cycle professionals to shift from reactive appeals to proactive denial prevention and revenue protection.

November 19, 2025
Sepsis: Bridging the Clinical Documentation and Coding Gap to Reduce Denials

Sepsis: Bridging the Clinical Documentation and Coding Gap to Reduce Denials

Sepsis remains one of the most frequently denied and contested diagnoses, creating costly revenue loss and compliance risks. In this webcast, Angela Comfort, DBA, MBA, RHIA, CDIP, CCS, CCS-P, provides practical, real-world strategies to align documentation with coding guidelines, reconcile Sepsis-2 and Sepsis-3 definitions, and apply compliant queries. You’ll learn how to identify and address documentation gaps, strengthen provider engagement, and defend diagnoses against payer scrutiny—equipping you to protect reimbursement, improve SOI/ROM capture, and reduce audit vulnerability in this high-risk area.

September 24, 2025
2026 IPPS Masterclass 3: Master MS-DRG Shifts and NTAPs

2026 IPPS Masterclass Day 3: MS-DRG Shifts and NTAPs

This third session in our 2026 IPPS Masterclass will feature a review of FY26 changes to the MS-DRG methodology and new technology add-on payments (NTAPs), presented by nationally recognized ICD-10 coding expert Christine Geiger, MA, RHIA, CCS, CRC, with bonus insights and analysis from Dr. James Kennedy.

August 14, 2025

Trending News

Featured Webcasts

Surviving Federal Audits for Inpatient Rehab Facility Services

Surviving Federal Audits for Inpatient Rehab Facility Services

Federal auditors are zeroing in on Inpatient Rehabilitation Facility (IRF) and hospital rehab unit services, with OIG and CERT audits leading to millions in penalties—often due to documentation and administrative errors, not quality of care. Join compliance expert Michael Calahan, PA, MBA, to learn the five clinical “pillars” of IRF-PPS admissions, key documentation requirements, and real-life case lessons to help protect your revenue.

November 13, 2025
E/M Services Under Intensive Federal Scrutiny: Navigating Split/Shared, Incident-to & Critical Care Compliance in 2025-2026

E/M Services Under Intensive Federal Scrutiny: Navigating Split/Shared, Incident-to & Critical Care Compliance in 2025-2026

During this essential RACmonitor webcast Michael Calahan, PA, MBA Certified Compliance Officer, will clarify the rules, dispel common misconceptions, and equip you with practical strategies to code, document, and bill high-risk split/shared, incident-to & critical care E/M services with confidence. Don’t let audit risks or revenue losses catch your organization off guard — learn exactly what federal auditors are looking for and how to ensure your documentation and reporting stand up to scrutiny.

August 26, 2025
The Two-Midnight Rule: New Challenges, Proven Strategies

The Two-Midnight Rule: New Challenges, Proven Strategies

RACmonitor is proud to welcome back Dr. Ronald Hirsch, one of his most requested webcasts. In this highly anticipated session, Dr. Hirsch will break down the complex Two Midnight Rule Medicare regulations, translating them into clear, actionable guidance. He’ll walk you through the basics of the rule, offer expert interpretation, and apply the rule to real-world clinical scenarios—so you leave with greater clarity, confidence, and the tools to ensure compliance.

June 19, 2025

Trending News

Happy National Doctor’s Day! Learn how to get a complimentary webcast on ‘Decoding Social Admissions’ as a token of our heartfelt appreciation! Click here to learn more →

CYBER WEEK IS HERE! Don’t miss your chance to get 20% off now until Dec. 2 with code CYBER24