Since January 1, 2014, Medicare has required Part D pharmacies to get a patient’s clear yes before shipping a refill the patient didn’t ask for. CMS (the federal agency that runs Medicare) called the old practice “wasteful,” “a source of significant beneficiary aggravation,” and “a financial imposition.” A year and a half later, federal auditors found out what that waste looked like in real life. In one state, about 700 Medicaid patients got more than a year’s supply of the same drug in a single year. Automatic refill programs kept shipping and billing the drug. Nobody checked whether the patient still wanted or needed it.
Here’s what the rules, and the enforcement cases that followed them, show about prescriptions that ship before anyone asks.
Why Medicare had to require pharmacies to ask first
In 2014, CMS told contracted pharmacies they must get a patient’s clear consent before shipping or delivering a new or refill prescription the patient hadn’t asked for (CMS 2014 Call Letter, via AARP; DrugStoreNews). CMS aimed the rule at what it called the “shipment of unwanted medications.” Before this rule, many auto-refill programs worked the opposite way: a fill went out and got billed unless the patient took action to stop it.
A single state, one year, $1.6 million in medication nobody asked for
In July 2015, the Government Accountability Office (GAO), a federal watchdog agency, reviewed how well several states controlled Medicaid prescription-drug fraud. It found that automatic-refill programs were still shipping medications on autopilot — including drugs a patient had already stopped taking. That created both waste and a diversion risk: the chance that the extra medication gets sold or used by someone other than the patient it was meant for.
- In one state examined, about 700 Medicaid beneficiaries received more than a year’s supply of the same medication in 2011 alone.
- That pattern cost Medicaid at least $1.6 million in that one state, in that one year.
- GAO looked closely at four states. Only two of them had banned automatic refill outright.
- GAO called the buildup of unneeded medication a diversion risk, not just wasted money.
(GAO-15-390, U.S. Government Accountability Office, July 8, 2015)
When auto-refill becomes a False Claims Act case
In May 2018, Walmart and Sam’s Club paid $825,000 to settle claims under the federal and Minnesota False Claims Act — the law that lets the government sue over false bills to programs like Medicaid (U.S. Attorney’s Office, District of Minnesota, May 2018). The government alleged the stores billed Medicaid for prescriptions that were refilled and shipped automatically, without the patient authorization the program required. This wasn’t a new or unusual failure — it was the same gap CMS’s 2014 rule and the GAO’s 2015 audit had already named: a fill went out, and got billed, before anyone confirmed the patient still wanted it. By the time of that settlement, a growing number of state pharmacy boards and Medicaid programs were restricting or banning auto-refill outright, according to legal commentary (Mintz, 2018). That count comes from a law firm’s client advisory, not an audited regulatory tally, so treat it as a general trend rather than an exact number.
CMS’s consent rule, the GAO’s audit, and the Walmart settlement all come back to the same missing step: nobody asked the patient, before the fill shipped and got billed, whether they still wanted it.
What this does and doesn’t claim
This is the flip side of a problem we’ve covered before — needed refills that lapse because nobody caught the gap. Here the direction is reversed: medication goes out, and gets billed, when nobody confirmed it was still wanted. It’s a real, well-documented pattern. But be precise about what it has to do with ConfirmMyMeds, which is: nothing operational. This product doesn’t manage refill scheduling, shipping, consent capture, or billing, and it doesn’t touch any pharmacy’s auto-refill system. There’s also no evidence, and no claim here, that it would have stopped the specific problems in the GAO report or the Walmart settlement — those involve systems this product never interacts with. The real parallel is narrower, and it’s about the shape of the problem, not an operational connection: every source above points to the same root cause — a fill going out without the patient confirming it first. That’s the same kind of gap ConfirmMyMeds targets, but for a different event entirely: a medication list the patient confirms, outside any portal, before anyone acts on it, timestamped and attributed to them. That’s a parallel in the shape of the problem, not a claim that this product plugs into any of those systems.
ConfirmMyMeds is a working application. It asks the patient to confirm their clinic’s medication list before the appointment — outside the portal, with the bottles in hand — and returns what they confirmed, what they flagged, and what they never started, timestamped and attributed. It never writes to your record; the clinician decides what goes in the chart and what to do about a gap. We have no outcome data and make no claims about adherence or affordability outcomes. We’re looking for clinics to help us learn where it fails.
This article discusses federal and state rules and enforcement actions on automatic prescription refill programs. It isn’t legal, financial, or medical advice.