Washington Keeps Growing Its Capacity to Prosecute Fraud, and Shrinking Its Capacity to Stop It

In one nine-day stretch this August, the federal government did three things that raise an uncomfortable question: Is Washington’s new war on fraud actually designed to stop it, or just look like it’s being stopped?

1. On August 11, Treasury’s Financial Crimes Enforcement Network finalized a rule permanently ending the requirement for U.S. companies to report who actually owns them, and began deleting the ownership data already on file.

2. On August 12, Renat Abramov, a former relationship manager at a bank branch in Sheepshead Bay, was sentenced to 18 months for laundering $8 million for a criminal organization that had, by then, submitted over $10 billion in fraudulent Medicare claims using stolen identities from more than a million Americans, as part of Operation Gold Rush.

3. On August 13, the Justice Department announced its new National Fraud Enforcement Division would reach roughly 500 attorneys and staff by August 24, organized around a memo that opens with the government’s own estimate that it loses $233 to $521 billion a year to fraud.

Look at who Operation Gold Rush has actually put in prison so far, and the 500-person DOJ Enforcement Division looks more like a headcount problem the government mistook for a deterrence strategy.

Operation Gold Rush was orchestrated by a transnational criminal organization based in Russia and elsewhere. Abramov wasn’t part of that leadership. He was a concierge banker — he opened accounts in the names of nominee owners and wired the proceeds offshore. Another defendant convicted this same month, in Ohio, opened regional bank accounts for a Florida durable medical equipment supplier that ran up $1.42 billion in false claims.

Neither man designed the scheme, owned anything, or profited beyond a fee. They were the labor — the people who have to show up in person to open an account — not the people who built the operation or keep the proceeds. Of the organization’s own leadership, eleven members have been indicted and only four have been arrested, in Estonia. The rest remain at large, presumably still in Russia or a jurisdiction the United States can’t reach into. To date: sixteen convictions, all facilitators. Zero architects.

That’s the operation working as it was designed to. A criminal organization running a fraud at this scale simply needs its facilitators to be replaceable. Every banker willing to open an account for a fee, every money mover willing to run cash through a regional branch, is a disposable, interchangeable part. When one gets caught, the organization loses nothing it can’t replace by the following week; there is always another concierge banker willing to take the job for a cut.

The leadership, meanwhile, sits behind two forms of insulation an American prosecutor’s office can’t touch:

• a border their own government won’t help the U.S. cross, and

• a layer of shell companies and nominee owners built specifically to absorb the loss of any single facilitator without disrupting the enterprise underneath it.

The 500-attorney fraud division announcement makes for a good headline, but headcount just solves a capacity constraint, and capacity was never the key constraint. Five hundred more prosecutors won’t manufacture the ability to extradite people out of Russia. The four arrests in Estonia happened because those defendants left the one place they were safe, which was a sign of their own bad judgment, not a capability the Fraud Division created.

Scaling up the part of the pipeline that was never the bottleneck, and calling the resulting wave of low-level convictions a fraud crackdown, is where this starts to look like a metric management exercise.

DOJ will report prosecutions, defendants, and dollars recovered, and all three numbers will climb, because the government has built a much larger machine for processing the layer of the organization that was always disposable and replaceable. None of that pressure reaches the people deciding to run the next scheme, just the number of Americans a press release needs.

It’s a strange moment, then, for the government to also be making the reachable layer’s job easier. Days before the DOJ memo, FinCEN finalized the repeal of the rule requiring companies to disclose who owns them — and began deleting what had already been filed. FinCEN’s own March advisory, using Operation Gold Rush as its model case, describes exactly how this organization worked: nominee owners fronting dozens of DME companies on fraudulent paperwork that concealed who really controlled them.

The advisory even tells banks to watch for a red flag straight out of this case — a beneficial owner whose name turns up on accounts for other, unrelated health care suppliers. That’s a real tool, but a bank can only see the fraud sitting inside its own four walls; if the same nominee shows up at three different banks, no single institution has the vantage point to notice. A national ownership registry was the tool built to run that exact check at scale, across every filing in the country, before any single suspicious activity report gets filed. FinCEN just deleted it and it did so five months after the administration stood up a Health Care Fraud Data Fusion Center explicitly to stop fraud data from sitting in disconnected systems, and eighteen months after suspending enforcement of the same ownership-reporting rule it has now killed outright.

The standard counterargument is that self-reported ownership data was unreliable anyway, since sophisticated rings would lie. This is a real critique of the registry’s design, and it’s also not what a filing requirement is actually for. A false ownership filing is itself a chargeable offense, exactly the kind of leverage prosecutors use to flip a facilitator into a witness against the people above him. Delete the filing requirement and that leverage disappears too. If the concern were data quality, the fix is verification, not deletion. Treasury chose deletion.

The Fraud Division isn’t a bad idea in principle, and the prosecutions of Abramov and his co-defendants are a positive development. HHS-OIG and CMS also blocked roughly $4.41 billion of the $4.45 billion Medicare had scheduled to pay this organization, which is real prevention that worked exactly as far as CMS’s authority reached, and stopped at the edge of it: nearly $900 million still got through Medicare Supplement insurers, private companies sitting just outside that gatekeeping.

A fraud strategy that measures itself in convictions of disposable facilitators, while the leadership regenerates behind a border and a rebuilt shell company within a month, isn’t a strategy the organization has any reason to fear.

Look at where this administration has actually put its money and attention when it comes to fraud, and enforcement wins every time. Prevention — the infrastructure that would catch a network like this one while it's still recruiting nominee owners and registering shell companies, rather than after it's already stolen a million identities and ten billion dollars — barely gets mentioned in the administration's own framing. And where that infrastructure already existed, it's being taken apart rather than built out.

A war on fraud that keeps expanding its capacity to prosecute while its capacity to detect and prevent simultaneously shrinks isn't actually weighing two strategies against each other. It's choosing the one that photographs better.