Guide
How to Screen Vendors Against the OIG List
By Keelstar Team · Updated June 1, 2026
The short answer
Before you engage a vendor who touches federal healthcare programs, search the OIG List of Excluded Individuals and Entities (LEIE) using the vendor's legal name and any known aliases. Record the search date, list version, and result. A clear search at onboarding is not enough — re-screen on a schedule because exclusions are added continuously.
What the OIG LEIE is
The U.S. Department of Health and Human Services Office of Inspector General maintains the List of Excluded Individuals and Entities (LEIE). Parties on the list are barred from participating in federal healthcare programs. Contracting with or employing an excluded party can trigger civil monetary penalties and program exclusion for your organization.
Who to screen
Screen every vendor, contractor, and individual who performs services tied to federal healthcare funding — not just clinical staff.
- Billing and revenue cycle vendors
- Medical staffing and locum agencies
- IT and software vendors with access to PHI or claims systems
- Subcontractors performing work on your behalf
- Owners and principals when the entity is a small business or sole proprietorship
How to search effectively
Search using the legal name on the W-9 or contract, then repeat with known DBAs and variations. OIG matching is name-based — typos and partial names miss hits. For entities, also search key owners and officers when your policy requires it. Document which names you searched and the disposition of each.
What to do with a potential match
A name match is not automatic guilt — common names produce false positives. Compare date of birth, address, NPI, or other identifiers when available. If the match is credible, do not engage or pay until resolved. Escalate to compliance or legal, document the hold, and retain the search record.
When to screen in the vendor lifecycle
Screen before contract execution or first payment — whichever comes first in your process. Block onboarding in your vendor packet until screening completes. After go-live, re-screen on the schedule defined in your compliance policy — monthly or quarterly is common for high-risk healthcare vendors.
Keep evidence auditors expect
An auditor or CMS reviewer will ask for dated proof of each check, not a verbal assurance. Store the search date, list source, names searched, result, and reviewer. Manual screenshots in email fail at scale — use a workflow that logs every check automatically.
NPI and identifier cross-checks
When screening clinical vendors or individual practitioners, cross-reference National Provider Identifier (NPI) data against the name on the LEIE entry. NPI registry confirmation strengthens false-positive resolution and speeds true-match escalation. Include NPI in your vendor master for all billable providers.
Healthcare-specific vendor categories
Prioritize screening for categories with direct federal program exposure: revenue cycle and coding vendors, DME suppliers, home health partners, laboratory services, pharmacy benefit managers, and medical device reps with chart access. Facilities-only vendors may sit in a lower tier — but your policy should say so explicitly.
Frequently asked questions
- Who must be screened against the OIG list?
- Any individual or entity you pay or contract with who could bill or participate in Medicare, Medicaid, or other federal healthcare programs — including billing companies, staffing agencies, and subcontractors.
- Is a one-time OIG check sufficient?
- No. The LEIE is updated regularly. A vendor cleared at onboarding can be excluded later. Continuous or scheduled re-screening with dated evidence is the standard.
Related guides
Put this into a monitored workflow
Exclusion Monitor handles this continuously — with reminders and an audit trail.