EKRA Compliance for Addiction Treatment Programs: What Operators Must Get Right in 2026

Most treatment programs discover the Eliminating Kickbacks in Recovery Act the hard way, when a marketer's bonus structure, a lead-generation contract, or a lab relationship surfaces in a subpoena. EKRA is not a paperwork rule. It is a federal criminal statute, it reaches commercial insurance in addition to Medicare and Medicaid, and the compensation arrangements it prohibits are the exact ones many behavioral health programs use to grow census. If you run a detox, residential, PHP, IOP, outpatient SUD program, recovery residence, or a lab that serves them, EKRA compliance belongs at the center of how you build your growth engine, not in a binder you open after a survey.

This guide explains what EKRA actually prohibits, why its employee exception is narrower and more dangerous than the Anti-Kickback Statute safe harbor operators are used to, where treatment programs most often cross the line, and how to build a defensible compliance program before enforcement finds you.

What EKRA Is, and Why It Hits Treatment Programs Harder Than the AKS

Congress passed the Eliminating Kickbacks in Recovery Act in October 2018 as part of the SUPPORT Act, in direct response to patient-brokering scandals in the addiction treatment and toxicology-lab markets. It is codified at 18 U.S.C. § 220. In plain terms, EKRA makes it a federal crime to knowingly and willfully solicit, receive, offer, or pay any remuneration (directly or indirectly, overtly or covertly, in cash or in kind) in return for referring a patient to, or in exchange for an individual using the services of, a recovery home, a clinical treatment facility, or a laboratory.

Two features make EKRA more dangerous for behavioral health operators than the older Anti-Kickback Statute they may already know.

It is an all-payer statute

The Anti-Kickback Statute only reaches services paid for by federal health care programs like Medicare and Medicaid. EKRA reaches any "health care benefit program," which includes commercial and private insurance. For a treatment program whose revenue is heavily commercial (the reality for most residential and PHP/IOP operators), this is the critical difference. An arrangement that felt safe because "we don't take Medicaid" is squarely inside EKRA's reach. There is no cash-pay or private-insurance escape hatch.

The covered entities are exactly your world

EKRA applies to three categories: recovery homes, clinical treatment facilities, and laboratories. A "clinical treatment facility" is defined broadly as a medical setting, other than a hospital, that provides detoxification, risk reduction, outpatient treatment and care, residential treatment, or rehabilitation for substance use, pursuant to licensure or certification under state law. That definition captures nearly the entire SUD continuum of care. The laboratory prong is also broad and is not limited to toxicology, which is why lab arrangements attached to treatment programs draw so much scrutiny.

The penalties are serious. Each violation can carry a fine of up to $200,000, imprisonment of up to 10 years, or both, per occurrence. These are criminal exposures for the individuals who structure and approve the arrangements, not just civil penalties against the entity.

The Employee Safe Harbor Trap: EKRA vs. the Anti-Kickback Statute

This is the single most misunderstood point in EKRA compliance, and the one that turns routine sales practices into criminal exposure.

Under the Anti-Kickback Statute, the bona fide employee safe harbor is generous. It broadly protects compensation, including commissions and volume-based bonuses, paid to W-2 employees. Health care sales teams have operated under that assumption for decades. Many treatment programs simply reclassify an outreach or business development person as a W-2 employee and assume the commission problem is solved.

EKRA does not work that way. Its exception for employees and independent contractors is far narrower. A payment to an employee or contractor is excepted only if the payment does not vary by, and is not determined by, any of the following:

• Number of individuals referred. Compensation cannot rise with the count of patients an employee brings to the program.
• Number of tests or procedures performed. Pay cannot be tied to service volume generated by those referrals, a direct hit to lab-linked arrangements.
• Amount billed to or received from a health care benefit program. Percentage-of-collections and percentage-of-revenue compensation for referral-generating roles falls outside the exception.

The practical consequence is stark. Reclassifying a marketer from 1099 to W-2 cures nothing under EKRA if the pay still flexes with referrals, admissions, or billing. A per-admit bonus, a commission on collected revenue, or a census-based incentive paid to a business development employee sits outside EKRA's exception even when it would have been protected under the AKS. This is the trap that has produced convictions.

Where Treatment Programs Actually Get Caught

EKRA risk clusters in a handful of predictable places. These are the arrangements that show up in indictments and settlements.

• Business development compensation. Paying outreach staff a per-admission bonus, a commission on collected claims, or a percentage of program revenue is the classic exposure, whether the person is W-2 or 1099.
• Third-party marketing and lead-generation contracts. Agreements that pay an outside agency, call center, or lead aggregator per lead, per call transferred, per verified benefit, or per admission tie payment to referral volume and land inside EKRA's core prohibition, regardless of how the contract is titled.
• Recovery residence and sober living relationships. Paying a sober living operator to steer residents into your treatment program, or being paid to send residents to a particular provider, is a paradigm patient-brokering arrangement.
• Toxicology and laboratory arrangements. Per-specimen payments, percentage-of-billing splits, or free or below-cost items exchanged for a program's urine drug screening volume are high-risk given the broad laboratory prong.
• Patient and alumni referral incentives. Paying current or former patients, in cash, gift cards, free rent, or waived fees, to recruit new admissions is remuneration for referrals.
• Performance-based digital marketing. Pay-per-call and pay-per-admission digital arrangements carry EKRA risk even when the branding looks like ordinary advertising, because the compensation moves with conversions.

The through-line is compensation that varies with volume. Advertising and marketing are not illegal. Paying a fixed, fair-market fee for genuine services is generally defensible. It is the linkage between payment and the number or value of patients delivered that creates criminal exposure. The same scrutiny runs through LegitScript certification, which reviews your marketing and referral practices before the major ad platforms will run your advertising at all.

Enforcement Is Accelerating

For its first few years, EKRA enforcement was slow and the case law was thin, which lulled some operators into treating it as theoretical. That window has closed. In 2025, allegations and indictments referencing EKRA increased, and several matters in the year's national health care fraud takedown involved alleged violations of both EKRA and the Anti-Kickback Statute. In July 2025, the Ninth Circuit upheld a high-profile EKRA conviction, reinforcing that courts will read the statute's referral-payment prohibition broadly and that individual defendants face real prison exposure.

Just as important, EKRA has almost no formal regulatory safe-harbor structure. Unlike the AKS, which has a well-developed set of regulatory safe harbors that arrangements can be papered into, EKRA offers only its narrow statutory exceptions and very limited agency guidance. That means you cannot engineer your way into a comfortable safe harbor. You have to design arrangements that stay clearly outside the prohibition in the first place, which is a compliance-by-design problem, not a documentation problem.

Building an EKRA Compliance Program That Holds Up

A credible EKRA program is not a policy PDF. It is a set of structural choices that change how you pay people and how you contract for growth. The core elements below are what a defensible program looks like for a treatment operator.

• Redesign referral-generating compensation. Move business development and outreach staff to fixed salaries or hourly pay that does not vary by admissions, census, collections, or lab volume, and remove per-admit and percentage-based incentives from those roles.
• Rework every marketing and lead-generation contract. Convert per-lead, per-call, per-admit, and percentage-of-revenue arrangements into fixed-fee agreements for defined, documented deliverables priced at fair market value.
• Scrutinize call centers and aggregators. Diligence any third party that touches intake or benefit verification, because their pricing model becomes your criminal exposure if it flexes with conversions.
• Document fair market value. Support marketing and service fees with an FMV rationale so you can show payment reflects the value of the work, not the value of the patients delivered.
• Write and enforce a marketing compliance policy. Adopt a written policy governing referral relationships, marketing contracts, patient inducements, and lab arrangements, and require compliance review before any new growth deal is signed.
• Train the people who cut the deals. Make sure owners, admissions leaders, and business development staff understand that W-2 status does not rescue a volume-based bonus under EKRA.
• Monitor and audit continuously. Review compensation reports, marketing invoices, and referral-source patterns on a schedule, and investigate anything that correlates payment with volume.
• Coordinate EKRA with the AKS and state law. Analyze arrangements under all applicable regimes at once, since an arrangement can satisfy one and violate another, and many states have their own patient-brokering and client-solicitation statutes.

The Oregon and Washington Angle

EKRA is federal and applies uniformly nationwide, so Bend, Eugene, Portland, Salem, and Seattle operators face the same statute as programs anywhere else. The regional wrinkle is that federal EKRA exposure typically stacks on top of state-level anti-solicitation, unfair-trade, and patient-brokering considerations, as well as the marketing expectations tied to state licensure and certification. A referral or marketing arrangement in the Pacific Northwest can therefore trigger EKRA, the Anti-Kickback Statute where federal dollars are involved, and state requirements simultaneously. Programs pursuing OHA or Washington DOH licensure should treat marketing and referral structure as part of the same compliance foundation they build for documentation, staffing, and payer readiness, not as a separate marketing question handled downstream. Because commercial insurance dominates the payer mix for much of the Oregon and Washington residential and outpatient market, and because that mix depends on credentialing and payer contracting, the all-payer nature of EKRA means very few arrangements fall outside its scope on payer grounds alone.

Get EKRA Right Before It Becomes an Investigation

EKRA sits at the intersection of the two functions most likely to be built quickly and cleaned up later: marketing and compensation. That is exactly why it produces criminal exposure for programs that are otherwise well run. The fix is not a disclaimer or a policy template. It is structural, and it needs to be right before contracts are signed and bonus plans go live.

Saint Health Group builds this the way serious programs need it built: end to end, with one accountable partner. We assess your current marketing agreements, business development compensation, recovery-residence and lab relationships against EKRA, the Anti-Kickback Statute, and applicable state law; we redesign the compensation structures and rewrite the contracts so growth stays defensible; we write the marketing compliance policies and fair-market-value support; we train your admissions and business development teams; and we stand up the monitoring that keeps you clean as you scale. You do not get a memo and a wish of luck. You get the compliance and risk infrastructure implemented and operating.

If you are growing census, negotiating marketing and admissions contracts, or building lab and referral relationships, have them reviewed before enforcement does it for you. Schedule a consultation with Saint Health Group and we will pressure-test your growth engine against EKRA and get it right.