A 15-year Botox sentence shows where cosmetic-adjacent billing is exposed

A California physician billed Medicare for thousands of Botox injections on days her clinic was closed, claims worth more than $19 million. She was sentenced Oct. 29 to 15 years in federal prison.

Violetta Mailyan, 45, of Glendale, California, owned Healthy Way Medical Center, a clinic that purported to provide beauty and cosmetic services, according to the U.S. Department of Justice. A jury convicted her in May of nine counts of wire fraud and three counts of obstructing a criminal investigation of a health care offense. In all, she billed Medicare more than $45 million. The court ordered her to pay $32.9 million in restitution and forfeit more than $16 million in seized property.

A day later, in a separate case, Syed Murtuza Kablazada, 36, of Des Plaines, Illinois, pleaded guilty to two counts of health care fraud. Prosecutors said he and others acquired three Chicago-area laboratories that submitted $227 million in claims for over-the-counter COVID-19 test kits beneficiaries never requested or received. Medicare paid about $136 million.

Few practices will ever see conduct like this. Far more can end up with the problem underneath both cases: a claim the record can't back up. The risk is sharpest for practices that offer cosmetic injections alongside Medicare-covered care, and prosecutors' list works as an audit map: injections never provided, injections given only for cosmetic purposes and injections for patients whose primary care physicians had not referred them for chronic migraine treatment.

What Medicare wants in the chart

Medicare's regional contractors set the detailed coverage rules. In California, Noridian's botulinum toxin policy, finalized with a Feb. 22, 2026, effective date, says "the use of botulinum toxin for all cosmetic procedures is not a covered benefit under Medicare." The Justice Department's release doesn't cite the policy, and this version may differ from the rules in place during Mailyan's billing. It is still the published standard practices in that region can audit against now. A policy from WPS, which covers Midwestern states including Iowa and Michigan, uses the same chronic migraine thresholds. Practices elsewhere should check their own contractor's version.

For an initial chronic migraine injection, Noridian's policy looks for at least 15 headache days a month, at least 8 migraine days a month, migraines lasting 4 hours or more and a history of at least 3 months. The record also has to show an objective, significant functional disability and an inadequate response or intolerance to a 2-month trial of at least one agent in any two of four drug classes: antidepressants, beta blockers, calcium channel blockers and antiepileptics.

What to audit now

• Claims against the calendar. Compare Medicare dates of service with clinic closures, provider time off and the appointment schedule. Prosecutors said Mailyan billed for injections while she was on vacation in Mexico, Hawaii, Las Vegas, Pennsylvania and New York.
• The line between cosmetic and medical. When toxin is used for an approved diagnosis but also with cosmetic intent, Noridian says "the entire claim for the botulinum is not considered reasonable and necessary." Keep cosmetic visits, consents and payments separate from Medicare-billed care.
• Treatment history. The policy says "a vague or nonspecific physician statement that conservative treatment measures were completed is not sufficient." Name the drugs tried and why they fell short, and keep any referral in the chart.
• Baseline scores. The disability assessment has to be documented at baseline, after each procedure and at follow-up, using the same scale each time. The American Headache Society names HIT-6 and MIDAS as examples.
• Repeat rounds. Later injections require at least a 50 percent reduction in migraine days and episodes, along with less disability and documentation that biobehavioral therapy was assessed. Injections can't be given more often than every 12 weeks, and onabotulinumtoxinA doses above 195 units aren't covered.
• How records get corrected. Prosecutors said Mailyan falsified records and forged beneficiary signatures, including for a man who was in federal prison at the time of the claimed treatment. The legitimate fix for a missing signature on a record other than an order is an attestation from the record's author, according to CMS.
• Patient complaints. Kablazada paid about $11 million for the personal information of hundreds of thousands of beneficiaries, prosecutors said. When a patient reports never receiving a billed service or item, send it to whoever handles compliance rather than closing it at the front desk.

An audit that turns up bad claims starts a clock. Federal rules generally require an identified overpayment to be reported and returned within 60 days, and a timely, good-faith investigation into related overpayments can suspend that deadline for up to 180 days after the first overpayment was identified.

Outliers are also easier to find. The Justice Department's National Fraud Detection Center pools analysts and data from more than a dozen inspector general offices, and a practice can draw attention simply because its numbers don't look like its peers'. Practices already running audits on scribe and template notes can add these checks to the same review.

The rules may move again. Noridian took comments through May 16 on a further proposed version of its policy, so confirm the current text before building an audit tool around it. Kablazada faces up to 20 years in prison when he is sentenced at a later date.