Healthcare Fraud Money Laundering Risks Exposed by US Racketeering Case

The United States Department of Justice (DOJ) has unsealed a nine-count indictment against four alleged members of a Bronx-based criminal enterprise known as the "War Room", charging racketeering, violence in aid of racketeering, firearms, fraud, narcotics and money laundering offences in connection with more than $12 million in fraudulent Medicaid claims. Louis Trejo, Kenneth Garner, Harold Stevenson and Erihk Belis are accused of fabricating patient transport data between 2023 and 2025 to support reimbursement claims for journeys to and from methadone clinics that were never provided. Three of the four were arrested on 20 August 2026; Stevenson remains at large. An indictment is an allegation only, and all defendants are presumed innocent.

The mechanics of the alleged scheme are what should hold the attention of compliance practitioners. Medicaid-eligible patients were recruited from clinics in the Bronx and Manhattan, their enrolment details entered into handsets running a legitimate driver-tracking application, and rides logged without any transport taking place. A global positioning system (GPS) spoofing application was used to falsify pickup and drop-off coordinates so that the location data would withstand scrutiny. Patients were paid weekly kickbacks in cash and in drugs, including fentanyl and heroin. The fabricated data was passed to collusive transport companies, which submitted the claims and remitted payment to the enterprise, which then laundered the proceeds. The operation was run behind a purported charity, the "Forward Foundation", complete with a whiteboard organisational chart assigning each defendant a corporate title. Where the scheme met competition, it turned violent: an armed home invasion in Teaneck, New Jersey, in January 2024 targeted the leader of a rival fraud ring.

For UK institutions, the transferable lesson is not the Medicaid programme but the control failure that made the fraud durable. This was an attack on data integrity rather than on documentation. Every artefact a reviewer would ordinarily test — the ride log, the timestamp, the geolocation trail — was present and internally consistent, because the fabrication happened upstream of the audit trail. Firms that treat application-generated telemetry as corroborative evidence, particularly in sectors where service delivery is verified digitally rather than physically, are relying on a control that can be defeated with a commodity spoofing tool. The same logic applies to gig-economy platforms, logistics providers and any payments business underwriting merchants whose activity is evidenced by app data.

The charity wrapper is the second point of exposure. Non-profit organisations occupy a well-documented vulnerability under the Money Laundering Regulations 2017 and Financial Action Task Force (FATF) Recommendation 8, and a newly registered entity with a health or addiction-support purpose, receiving regular payments from commercial transport operators and disbursing cash to individuals, presents a coherent set of indicators: inbound corporate credits inconsistent with a donations-led income profile, rapid outward cash extraction, and officer overlap between the charity and the counterparties paying it.

The context is domestically live. The Department of Health and Social Care's counter-fraud strategy for 2026 to 2029 draws on a strategic intelligence assessment estimating that £1.346 billion of National Health Service funding is vulnerable to fraud, with non-emergency patient transport a recognised risk area. Since the failure to prevent fraud offence under the Economic Crime and Corporate Transparency Act 2023 took effect, large organisations whose associated persons benefit from fabricated service claims face corporate criminal exposure of their own. Suspicion of laundered proceeds, whether the predicate conduct occurred here or overseas, engages the reporting obligations under the Proceeds of Crime Act 2002 in the usual way.

Read the press release here.