DOJ's New National Fraud Enforcement Division: What Compliance Programs Need to Know Now

TL;DR

• On April 7, 2026, the DOJ created the National Fraud Enforcement Division (NFED), consolidating Healthcare Fraud, Tax, and Market/Government Fraud units under single command
• A National Fraud Detection Center will use cross-agency data to generate leads — automated pattern detection is now in the mix
• Within 120 days, DOJ will decide whether to pull civil False Claims Act enforcement into NFED — potentially triggering more parallel civil-criminal investigations
• If your organization touches government money — contracts, billing, benefits, grants — your fraud risk exposure just went up

The Department of Justice just reorganized its fraud enforcement infrastructure in a way that should get every compliance officer’s attention.

On April 7, 2026, Acting Attorney General Todd Blanche signed a memorandum establishing the National Fraud Enforcement Division — a new DOJ unit designed to do what the department acknowledged it had never actually done before: take a “comprehensive and coordinated approach to investigating and prosecuting fraud against taxpayer dollars.”

That’s a remarkable admission. For decades, fraud enforcement at DOJ operated across multiple siloed units — the Tax Section here, the Health Care Fraud Unit there, the Market, Government, and Consumer Fraud Unit somewhere else. Each had its own leadership, its own priorities, its own tempo. The NFED changes that. And for compliance teams, the structural change matters more than any individual enforcement action.

What the NFED Actually Is

The NFED isn’t a new agency or a new legal authority. It’s a coordination and command structure built on top of existing resources.

Effective immediately, the division assumed operational control of three existing Criminal Division units:

The division is led by new Assistant Attorney General Colin McDonald, who reports to senior DOJ leadership. Every U.S. Attorney’s Office across the country must designate a dedicated NFED representative within 21 days — meaning there will be a point person in every federal district within weeks.

That last part matters. Local prosecutors are now getting a direct line to centralized fraud enforcement leadership. Cases that might have stalled because of inter-unit coordination friction now have a cleaner path to prosecution.

The National Fraud Detection Center

The memorandum also directs creation of a National Fraud Detection Center staffed with data analysts from multiple federal agencies. The center’s mission: identify fraud patterns across taxpayer-funded programs and generate investigative leads.

This is the part of the memo that deserves more attention than it’s getting.

Traditional DOJ fraud enforcement was reactive — an agent gets a tip, opens a case, builds it. The Detection Center flips that model. Cross-agency data sharing means analysts can look for anomalies in Medicare billing data, federal contract awards, benefit disbursements, and tax filings simultaneously. Pattern matching at scale.

If your organization has any irregular billing patterns, contract modifications, or claim adjustments that you haven’t already self-disclosed, now is the time to get ahead of them. Waiting for an investigation to start is not a strategy.

The 120-Day Decision Everyone Is Watching

The most significant near-term uncertainty in the memo: within 120 days, DOJ will decide whether to bring civil enforcement authority — including False Claims Act enforcement — under NFED.

Right now, civil FCA enforcement sits in the Civil Division. Criminal fraud sits in the Criminal Division. Those two tracks sometimes coordinate, but they operate under different leadership and different incentive structures. Merging them under NFED would mean:

• Unified command over parallel civil and criminal investigations
• Greater leverage to extract settlements (you’re negotiating with one party controlling both tracks)
• More consistent False Claims Act qui tam case handling nationally

For healthcare organizations, government contractors, and any company that certifies compliance with federal program requirements, this 120-day window is material. If a merger happens, the playbook for managing a DOJ fraud investigation changes significantly.

Who’s Actually in the Crosshairs

The NFED memo is explicit about its priorities: fraud against “taxpayer dollars and taxpayer-funded programs.” That language carves out a specific universe of enforcement targets.

Healthcare providers and health systems. Medicare and Medicaid billing fraud has been DOJ’s bread and butter for 30 years. The Health Care Fraud Unit was already active — under NFED it gets centralized resources and cross-referral leads from the Tax Section (offshore income, unreported kickbacks) and the Detection Center.

Government contractors. The Market, Government, and Consumer Fraud Unit has jurisdiction over procurement fraud, false certifications, and cost mischarging on federal contracts. With NFED coordination, expect more referrals from agency inspectors general and cross-agency data matching on contract award anomalies.

Employee Retention Credit recipients. The ERC fraud wave is still in active prosecution. DOJ has already sentenced defendants in high-profile cases — the Goode/McCoy ERC fraud sentencing being one example. NFED centralizes and accelerates that pipeline.

Healthcare-adjacent businesses. Pharmacy benefit managers, durable medical equipment suppliers, lab services, behavioral health facilities — any business with a reimbursement model tied to federal programs is in scope.

Financial services firms. The Detection Center’s data analysts come from “multiple federal agencies” — that almost certainly includes FinCEN, IRS-CI, and potentially banking regulators. SAR data, tax filings, and transaction monitoring outputs can be cross-referenced. Firms should review suspicious activity reporting protocols for alignment with current detection capabilities.

The Compliance Failure Map

Most NFED targets don’t get there because of deliberate fraud at the executive level. They get there because of control failures that create conditions for fraud to occur — or create the appearance of fraud even where there wasn’t intent.

Billing accuracy controls. Upcoding, unbundling, and billing for services not rendered are the most common healthcare fraud theories. If your billing controls rely on individual provider judgment without systematic audit, you have a gap. Automated charge capture audits and statistical sampling of claims before submission are baseline controls at this risk level.

Contract cost accounting. For government contractors: are your cost allocations defensible? Cost mischarging cases often start with indirect rate structures that look fine on paper but break down under cross-examination. Review your timesheet controls, indirect cost pools, and subcontractor invoicing process now.

Benefit program certification. Any employee benefit program tied to federal subsidy (ACA marketplace plans, SHOP exchange, ERC claims) requires accurate attestation of eligibility and use. False certification — even negligent certification — is the threshold for FCA liability. Document your attestation review process.

Whistleblower risk. FCA qui tam relators brought 979 cases in FY 2025. Under NFED, the pipeline from relator disclosure to federal investigator gets shorter. Internal reporting programs, non-retaliation policies, and prompt investigation of internal complaints are now even more important as a first line of defense.

Your 30/60/90-Day Response

30 days:

• Map your organization’s touchpoints with taxpayer-funded programs (contracts, grants, Medicare/Medicaid, benefit programs)
• Pull the last 12 months of billing/claim rejection and adjustment data — anomalies here are where investigations start
• Verify your compliance hotline is functional and non-retaliation policy is current
• Brief your General Counsel and CFO on NFED structure and the 120-day FCA decision

60 days:

• Conduct a focused fraud risk assessment on your highest-exposure programs
• Run a statistical sample audit on Medicare/Medicaid claims, contract cost charges, or federal program certifications (whichever applies)
• Confirm your issues management process captures and tracks potential compliance deficiencies through resolution — not just “it got fixed” but documented, closed, and verified

90 days:

• Brief your Board Risk Committee or Audit Committee on the NFED and its implications for your fraud risk profile
• Assess your voluntary disclosure posture: are there any open issues where proactive disclosure is worth evaluating before the Detection Center finds them?
• Update your regulatory change management tracker for the 120-day FCA decision — when that outcome is announced, your response timeline starts immediately

If your issues management program isn’t already built to handle the pace of an active regulatory inquiry, the Issues Management Tracker is the fastest way to get there.

Context: Not a Relaxation of Enforcement

It’s tempting to read the current administration’s deregulatory posture as signaling lower fraud risk. That read is wrong for government program fraud.

The Blanche memo is explicit: fraud against taxpayer dollars is a priority. The FY 2027 budget request includes $30 million for NFED with 140 positions and 100 attorneys. The ERC fraud prosecutions, the False Claims Act cases, the healthcare fraud pipeline — these aren’t being wound down. They’re being organized.

If anything, the structural consolidation under NFED reduces the coordination friction that previously allowed some cases to stall. Unified command, dedicated district-level representatives, and a data-driven Detection Center is a more efficient enforcement machine than what existed before.

Compliance programs that are already well-run don’t need to panic. But any gap between what your program looks like on paper and what it actually does in practice is now more exposed than it was six months ago.

The time to find your gaps is before the Detection Center does.

Related: DOJ False Claims Act: How the Advanced Urology $14M Settlement Happened | ERC Fraud Sentencing: What Compliance Programs Missed