§ 800.403 Fraud and abuse.

(a) Program required. An MSP issuer must conduct a program to assess its vulnerability to fraud and abuse as well as to address such vulnerabilities.

(b) Fraud detection system. An MSP issuer must operate a system designed to detect and eliminate fraud and abuse by employees and subcontractors of the MSP issuer, by providers furnishing goods or services to MSP enrollees, and by MSP enrollees.