The $2.2 billion ACA crackdown is a preview for Medicare agents

A Physicians Mutual video opens with a dare. The Centers for Medicare & Medicaid Services (CMS) had just frozen new Affordable Care Act marketplace agents out of 2027 registration, and the speaker told viewers that if the news bothered them, they should talk about it. Then the video turned to the audience it actually wanted: Medicare agents.

Speaking in a MarketScale Studio segment, the Physicians Mutual speaker walked through a crackdown that is, on paper, an ACA story. The video's claim is that the paper will not stay that way, and that agents who sell Medicare Supplement, Medicare Advantage or Part D plans should read the new ACA rules as a draft of their own future.

In a September 22, 2026 press release, CMS said it had canceled approximately 315,000 unauthorized marketplace enrollments covering more than 760,000 people and expects roughly $2.2 billion in taxpayer-funded subsidies to be returned. The same day it issued an interim final rule, a regulation that takes effect immediately and collects public comment afterward, barring agents without a 2026 exchange agreement from registering to sell 2027 marketplace plans.

Open enrollment for 2027 coverage begins November 1, 2026, according to a September 25, 2026 client alert from the law firm Morgan Lewis. CMS's fact sheet, published with the release, describes the identity and consent rules as new protections, which gives agencies a few weeks to absorb them before the first 2027 application is filed.

How CMS concluded the enrollments were unauthorized

The cancellations took effect on August 31, 2026, CMS said in the fact sheet. The video's description of what that means is blunt: people were enrolled in coverage they did not ask for, did not approve and may not have known about. The dollars at stake are advance payments of the premium tax credit, or APTC, the subsidy the federal government pays an insurer each month on an enrollee's behalf.

Morgan Lewis, citing the Federal Register notice, described the test CMS applied. The canceled policies belonged to people enrolled with agent or broker assistance who lacked verified citizenship or immigration documentation, and for whom insurers could find no claims and could not establish contact.

CMS asked health plans to verify eligibility for nearly 1.2 million people and gave each enrollee 30 days to respond, Morgan Lewis wrote. Those who did not respond had coverage canceled, and CMS planned to investigate roughly 440,000 additional enrollees flagged for irregularities. The firm put the 760,000 canceled enrollees at about 4% of total marketplace enrollment.

Healthcare Dive, in a September 23, 2026 brief, described how such enrollments happen: brokers switching enrollees from one plan to another without permission, or enrolling people who never consented, with commission pay from insurers creating the incentive to maximize sign-ups. The pattern CMS now screens for is an application with no verifiable identity, no claims and no reachable consumer. An agent whose book carries that pattern is the one CMS's data flags.

Who is frozen out of 2027 and who only reverifies

The moratorium applies to agents and brokers who want to register for plan year 2027 but hold no active exchange agreement for 2026. An exchange agreement is the contract an agent signs with CMS to assist consumers on HealthCare.gov; without one, the agent cannot be attached to a federal marketplace application. The speaker's shorthand for the split: an agent active for 2026 is not frozen out and simply faces new verification, while an agent brand new to the ACA is the group that is blocked.

The moratorium runs until February 1, 2027 unless CMS ends it earlier, extends it or modifies it, Healthcare Finance News reported on September 24, 2026. The rule, published September 23, 2026 at 91 Fed. Reg. 60317 according to Morgan Lewis, covers the 30 states that rely on the federally facilitated marketplace, the HealthCare.gov exchange that the Department of Health and Human Services (HHS) runs for states that do not operate their own, including two hybrid states. Web brokers and agents registering with state-based exchanges are not affected, the firm noted.

Becker's Payer reported on September 22, 2026 that the rule also builds in a standing authority for HHS to impose future registration freezes whenever agent conduct poses what the agency considers an unacceptable risk. That clause outlives the current moratorium. CMS's stated purpose, in the rulemaking Becker's Payer summarized, is to buy time to put additional safeguards in place before new agents begin assisting consumers on the federal exchanges.

The data CMS used to single out 2026 registrants

The video's explanation of the why is that CMS looked at the numbers and saw something wrong. Agents who first registered for the 2026 plan year wrote a small fraction of agent-assisted enrollments but a disproportionate share of the unauthorized ones, the speaker said, with enrollments three times more likely to have unresolved income verification issues and three times more likely to be missing Social Security numbers.

CMS's fact sheet puts the multipliers a shade lower than the video's rounding: 2.8 times more likely to carry unresolved income issues and 2.7 times more likely to lack Social Security numbers, compared with agents who registered before 2026. The sheet adds that the same group's enrollments were 2.6 times more likely to have unresolved citizenship or immigration verification and 1.6 times more likely to use special enrollment periods, the mid-year windows for signing up outside open enrollment, that are not subject to verification.

Becker's Payer added the proportion that drove the freeze. New registrants accounted for 30% of the 569 agents and brokers whose 2026 activity suggested violations of exchange standards, the outlet reported from CMS's rulemaking documents, while making up only about 11% of registered agents with at least one active enrollment.

The dollar scale is larger than the recovery figure suggests. The speaker called the money CMS expects back a ton of money; Becker's Payer reported that CMS's own rulemaking, using two methodologies, estimated agent and broker noncompliance could amount to roughly $1.5 billion or $6.6 billion in improper federal spending every year. By arithmetic on those agency figures, the $2.2 billion recovery covers somewhere between four months and a year and a half of the problem.

What reverification and electronic consent will require

Every existing marketplace agent is now required to reverify identity through Login.gov or ID.me, the CMS fact sheet says. Identity proofing means matching the person at the keyboard to a government-verified identity, a higher bar than a password reset. FedScoop, in a late 2025 report on CMS's use of the service, described ID.me's method, drawn from the company's website, as combining a government ID such as a driver's license or passport, a selfie and a Social Security number.

Three more rules arrive with it, according to the fact sheet. Applications involving an agent must include a Social Security number or immigration document number that CMS can verify for every applicant other than a newborn, through every application channel, and CMS has updated its system to stop agents from being added to applications that consumers should complete themselves on HealthCare.gov. In advance of open enrollment, CMS will require electronic consumer authorization before an agent or broker takes any action on an application or enrollment.

The speaker's read is that the authorization requirement carries the loudest Medicare echo, because it turns consent from something an agent asserts into something the system records before the agent can proceed. CMS has described the requirement and its timing but has not said what form the authorization takes, where it is stored or how a consumer revokes it. For a Medicare agency, the nearest existing analog is the scope of appointment form, the record a beneficiary signs before a sales meeting listing which products the agent may discuss; the ACA version is a system gate rather than a signed sheet.

Terminations, response windows and the 2024 precedent

CMS has sent termination notices to more than 200 agents and brokers since January 2026, its fact sheet says. Over the summer it issued 569 notices of intent to terminate exchange agreements to agents who submitted 2026 applications without identifying information such as Social Security numbers. Morgan Lewis dated those notices, 100 in July 2026 and 469 in August, and Becker's Payer reported that the rulemaking described the 569 as having submitted statistically implausible rates of applications missing those details.

A notice of intent is a warning with a clock, not a termination. The fact sheet says the response window for the first 100 notices has closed and 66 of those agents have since received termination notices, with more expected once the remaining 469 windows close. Healthcare Finance News confirmed the 66-of-100 figure on September 24, 2026.

That response window is the due process the record describes for individual agents. On the rule itself, Becker's Payer reported that HHS bypassed the usual advance notice-and-comment period but said it would still consider public comments. No lawsuit or formal appeal against the moratorium had surfaced as of October 1, 2026.

The fact sheet also says CMS will support state departments of insurance and insurers in their own actions against noncompliant agents, and that it is working with the National Association of Insurance Commissioners on data sharing and enforcement. State insurance departments license Medicare agents as well as marketplace agents. A termination record shared through that channel follows the agent across product lines.

The 2026 actions sit on a longer enforcement arc. Morgan Lewis noted that in 2024 CMS suspended 850 agents' and brokers' marketplace agreements on reasonable suspicion of fraudulent or abusive conduct, a larger single action than the nearly 800 agents Health Affairs counted as terminated or in the termination process this year. The firm also cited the Government Accountability Office's undercover tests: 15 fictitious applications approved in a September 2016 report, and preliminary 2025 results showing four fictitious applications approved for plan year 2024 and 20 for plan year 2025.

Complaint volume explains the escalation. Morgan Lewis cited a July 2026 GAO report counting 299,604 consumer complaints tied to unauthorized enrollments in 2025, and a 2025 Congressional Budget Office estimate that 2.3 million enrollees improperly claimed the premium tax credit for 2025. Health Affairs noted that additional cancellations are on the way.

Where the crackdown gets complicated

Not everyone reads the numbers as proof that the problem is growing. Health Affairs, in an October 1, 2026 Forefront article by Katie Keith, pointed out that CMS's own rulemaking acknowledged a substantial decrease in unauthorized enrollments in January 2026 compared with prior years, at a time when millions of people had already dropped marketplace coverage. The article also called the cancellation process murky, noting that the most detailed accounts of CMS's criteria came from media reports rather than from the agency.

Health Affairs raised a second concern. Canceling policies for people who never used care may remove healthy enrollees from the risk pool, the shared group of insured people whose claims set premiums, and push premiums higher; for one marketplace insurer, the article reported, the disenrollments amounted to 8% to 10% of total membership. Consumers enrolled through state-based marketplaces, where CMS has acknowledged far fewer instances of fraud, should not see coverage affected, the article added.

Hospitals weighed in too. Becker's Payer carried a statement from Charlene MacDonald, president and CEO of the Federation of American Hospitals, who said fraud must be addressed but that patients who lose coverage often delay care until they are sicker, which raises costs across the system.

The Physicians Mutual speaker accepts that the rules add friction. The video's position is that a legitimate agent loses nothing by proving identity and consent, and that the rules fall hardest on agents who enroll people without their knowledge or move clients between plans for commissions.

The Medicare signal the video wants agents to read

ID.me, the vendor now reverifying marketplace agents, was also tapped for beneficiary sign-in on Medicare.gov. FedScoop reported in late 2025 that the service would be available to beneficiaries from early 2026 under a broader HHS contract running since 2022, which the outlet valued at roughly $5 million using USASpending data. The same report said CLEAR, another identity verification provider, had been selected to support Medicare.gov account creation and recovery from early 2026.

What CMS has not done is announce a consent or identity rule for Medicare Advantage or Part D agents, and the speaker is explicit that the current requirements apply to the ACA. What the video expects to follow is its own list: more accountability, more documented consumer consent, more identity verification and more proof that a client knows what happened on their own account.

Two dated markers will show how far the model travels. November 1, 2026 is when 2027 open enrollment opens with the electronic authorization requirement due in place, and February 1, 2027 is when the moratorium expires unless CMS extends it under the standing authority Becker's Payer described. The video closes with the speaker saying a few extra hoops are worth it if fewer people get enrolled without their knowledge, and asking Medicare agents whether they agree.