Note: All xpostfactoid subscriptions are now through Substack alone (still free), though I will continue to cross-post on this site. If you're not subscribed, please visit xpostfactoid on Substack and sign up.
In my last post, I recounted that after months of apparent passivity in response to a rising tide of agent fraud in the federal ACA marketplace (HealthCare.gov, used by 32 states), CMS dropped a hammer in July. To quell unauthorized plan-switching by agents assigning existing enrollees to themselves, CMS required agents seeking to act on an existing account with a different Agent Of Record or with no AOR to either conduct a three-way call with the client and the marketplace center, in which the client authorizes the new agent to act on her behalf, or have the client click the final button after an agent makes changes to the account on a commercial Enhanced Direct Enrollment (EDE) platform.
(For background on the plan-switching scandal see the initial KHN coverage. For background on the role of EDE platforms in marketplace enrollment and agent fraud, see this post.)
In practice, the latter option meant using a workaround deployed by HealthSherpa, the dominant EDE platform, whereby an agent would text a link to the new client’s phone number, enabling the client to execute the changes input by the agent. After that procedure had been operative for a few days, however, CMS shut it down, apparently concerned that some agents might be faking the phone number to which the link was sent. Reportedly, a revised HealthSherpa workaround will go live in September, or at least before Open Enrolment begins on November 1, requiring client i.d.-proofing rather than just a client phone number. While CMS had long resisted deploying the relatively simple two-factor authorization required by Covered California and other state-based exchanges before an agent could be newly assigned to an existing account, CMS has now created a system with more intrusive security measures.
Now it appears that enforcement action against agents suspected of fraud or lesser noncompliant practice may be following the same pattern: a long period of passivity followed by a sudden crackdown.
