CMS's CRUSH Anti-Fraud Rule Reaches OMB: What It Means for Genetic Testing Labs

Short answer: On August 7, 2026, CMS sent its "CRUSH" anti-fraud regulation to the White House Office of Management and Budget for review, with a proposed rule targeted for October 2026. The rule follows a February 2026 request for information that floated mandatory MolDX/DEX registration for molecular and genetic tests nationwide. Labs should expect stronger provider-enrollment screening, faster revocation authority, and a live decision on national MolDX expansion within the next two to four months.

What CRUSH is, and why CMS built it now

CRUSH — Comprehensive Regulations to Uncover Suspicious Healthcare — is a CMS program-integrity initiative announced February 25, 2026. It reframes Medicare fraud enforcement from "pay and chase," where CMS recovers money after a fraudulent claim has already been paid, to proactive screening designed to stop improper payments before they go out the door, according to an analysis of the initiative published by WCH Service Bureau.

Genetic and molecular testing is a named target. Genetic tests accounted for roughly 43% of the $8.4 billion Medicare spent on Part B clinical lab tests in 2024 — about $3.6 billion — up from 18% of lab spending in 2018, even though these tests represent a small share of total test volume, per reporting from MedTech Dive. CMS and HHS-OIG have pointed to that growth curve, alongside two large enforcement actions — the 2019 "Operation Double Helix" sweep (35 defendants, $2.1 billion in alleged fraudulent genetic-screening billing) and a 2025 telemedicine-and-testing crackdown (49 defendants, $1.17 billion in alleged fraudulent claims) — as the case for tighter gatekeeping specifically on molecular diagnostics.

The road to OMB: RFI, industry pushback, and what's different now

CMS did not go straight to rulemaking. On February 27, 2026, it published a request for information asking whether wider use of MolDX and its DEX Diagnostics Exchange registry — currently a 28-state regional program run by Palmetto GBA and adopted by Noridian, CGS, and WPS — should become a national gatekeeping requirement for molecular and genetic tests, per GenomeWeb's coverage of the RFI. The comment period closed March 30, 2026.

The comment record, summarized by 360Dx, showed a lab industry mostly opposed and a payer and large-testing-company field mostly in favor:

• Opposed or raised serious concerns: the Association for Molecular Pathology, the American Clinical Laboratory Association, the National Independent Laboratory Association, the Healthcare Business Management Association, the American Medical Association, the College of American Pathologists, and MD Anderson Cancer Center. AMP specifically flagged "the cost, time, and resource burden associated with securing Z-codes and completing associated technical assessments."
• Supportive, with varying caveats: Natera, the Coalition for 21st Century Medicine (Grail, Exact Sciences, Tempus AI, Guardant Health, Caris Life Sciences), AdvaMed, UnitedHealthcare, Elevance, Highmark, and Devoted Health. Cigna was a partial exception, noting MolDX standards are "looser than Cigna deems appropriate" for its own purposes.

That RFI is now folded into the broader CRUSH package CMS sent to OMB on August 7, 2026 — the last formal step before a rule is published for public comment. The Unified Agenda lists an October 2026 target for the notice of proposed rulemaking (NPRM), after which a new 30-to-60-day comment window opens before anything is finalized.

What's likely in scope for molecular and genetic testing labs

CMS has not published rule text, so the specifics are not final. But based on the RFI questions, the OMB filing description, and CRUSH's stated program-integrity scope, the pieces most relevant to labs are:

• A national decision on MolDX/DEX registration. The RFI asked directly whether DEX Z-code registration and MolDX technical assessment should extend beyond the current 28-state footprint to become a de facto national requirement for billing molecular and genetic tests to Medicare.
• Faster enrollment denial and revocation for labs CMS flags as high-risk. CRUSH's program-integrity scope covers provider enrollment, medical review, and investigations — the same authorities CMS has used elsewhere to expedite action against suspicious billers.
• Broader payment suspension triggers. Expect criteria that let a MAC suspend payment on a wider set of billing-pattern signals, not just a credible allegation of fraud already under investigation.
• Stronger ownership and enrollment screening — relevant for labs that have changed ownership, added billing NPIs, or operate under multiple corporate entities.

None of this changes existing coverage criteria under current NCD, LCD, and MolDX policy today — it changes who gets to bill at all, and how fast CMS can act if it doesn't like what it sees in your claims.

What to do before October

• Know your MolDX status today. If your lab bills in a MolDX jurisdiction (Palmetto, Noridian, CGS, or WPS), confirm every test you bill has a current DEX Z-code and that your technical assessment file is current — not just filed once years ago.
• If you're outside MolDX's 28 states, don't assume you're exempt. The RFI explicitly asked why non-MolDX payors sometimes require MolDX registration anyway; a national rule would end that patchwork.
• Audit ownership and enrollment records now, not after a revocation notice. CRUSH's screening emphasis makes stale CMS-855 filings and unreported ownership changes a much bigger liability than they were a year ago.
• Watch the Federal Register, not just trade press, for the October NPRM. Once published, the comment window is short — 30 to 60 days — and this is the point where specific, lab-relevant language will finally be visible.
• Revisit denial-prevention workflows. Claims from labs with clean, well-documented medical-necessity and coding practices are the ones least likely to trigger the broader review triggers CRUSH is expected to introduce.

Frequently asked questions

Is MolDX registration already mandatory nationwide?

No. As of August 2026, MolDX/DEX Z-code registration is required only in the jurisdictions of Palmetto GBA, Noridian, CGS, and WPS — roughly 28 states. National expansion is under review as part of the CRUSH rulemaking process, with a decision not expected before the projected October 2026 proposed rule.

When will the CRUSH proposed rule actually publish?

CMS transmitted the rule to OMB on August 7, 2026. The CMS Unified Agenda projects an October 2026 notice of proposed rulemaking, but OMB review timelines vary and can run longer than planned; there is no guaranteed publication date until the Federal Register notice appears.

Does CRUSH change today's coverage criteria for genetic tests?

Not directly. CRUSH is a program-integrity rule focused on provider enrollment, screening, and enforcement authority — not a revision to the medical-necessity criteria in existing NCDs and LCDs. Coverage decisions remain governed by current national and local coverage policy.

What happens to labs already under a MolDX technical assessment?

Nothing announced changes existing MolDX participants' status. The open question is whether labs currently outside MolDX's footprint will be pulled into an equivalent registration requirement, and on what timeline, once a rule is finalized.

Should labs comment when the NPRM publishes?

Labs and their trade associations submitted extensive comments during the February–March 2026 RFI period, and CMS is required to respond to significant comments in any final rule. A new comment period will open with the NPRM; labs with operational concerns about registration timelines or technical-assessment burden should plan to participate again.

Educational disclaimer: This article summarizes publicly reported regulatory developments as of August 29, 2026, for general informational purposes. CMS has not published proposed rule text for CRUSH, and the scope described here is based on the RFI, the OMB transmittal, and secondary reporting — not final regulatory language. This is not legal, billing, or compliance advice; laboratories should consult qualified regulatory counsel and monitor the Federal Register directly before making enrollment, registration, or billing decisions.

Sources: CMS Unified Agenda and OMB regulatory review transmittal (CRUSH, submitted August 7, 2026); MedTech Dive, "Genetic tests come under scrutiny in Trump administration's fraud crackdown," March 2026; GenomeWeb, coverage of the CMS MolDX RFI; 360Dx, "Clinical Lab Industry Broadly Opposes MolDX Expansion, Comments on CMS RFI Show," April 2026; WCH Service Bureau, CRUSH initiative analysis; Discoveries in Health Policy, "CRUSH Reaches White House/OMB," August 2026; Palmetto GBA MolDX/DEX Diagnostics Exchange program documentation.