NPDB, OIG, and SAM are three federal data sources every credentialed practice should monitor on a recurring basis: the National Practitioner Data Bank tracks malpractice payments and adverse actions, the OIG List of Excluded Individuals and Entities flags providers barred from federal healthcare programs, and SAM identifies parties excluded from federal awards and procurement. Checking them once at enrollment is not enough.
If a provider on your roster appears on the OIG exclusion list, every federal dollar tied to their services can become an overpayment you have to return — sometimes with penalties. That is why credentialing teams treat NPDB, OIG, and SAM monitoring as a continuous safeguard, not a one-time box on the onboarding checklist. This guide explains what each registry is, what it catches, and how an ongoing monitoring program keeps your practice clean.
What NPDB, OIG, and SAM Actually Track
These three sources overlap a little, but each exists for a different reason. Understanding the distinction helps you read a report correctly instead of panicking at the first match.
The National Practitioner Data Bank (NPDB)
The NPDB is a federal repository of reports on practitioner conduct and competence. It collects medical malpractice payments, certain licensure and certification actions, clinical privileges restrictions, and exclusions from participation in federal programs. Hospitals query it as part of privileging, and credentialing bodies rely on it during initial and ongoing review.
An NPDB report is not a verdict. A single malpractice payment does not disqualify a provider, and many clean, excellent clinicians have an entry. What matters is the pattern, the context, and whether the provider disclosed it. The NPDB simply makes sure nothing material is hidden.
The OIG List of Excluded Individuals and Entities (LEIE)
The Office of Inspector General maintains the LEIE, a list of individuals and entities excluded from federally funded healthcare programs such as Medicare and Medicaid. Exclusions follow events like fraud convictions, patient abuse findings, license revocations, or defaulting on certain federal obligations.
This is the registry with the sharpest financial teeth. Federal programs generally will not pay for items or services furnished, ordered, or prescribed by an excluded party — and that can extend to the practice that employs or contracts with them. Because of that exposure, the OIG advises screening before hire and on a recurring schedule afterward.
The System for Award Management (SAM)
SAM consolidates federal exclusion records that reach beyond healthcare, including parties debarred or suspended from federal contracts, grants, and other awards. A provider or entity can appear in SAM for reasons unrelated to clinical care but still tied to federal-program eligibility. Screening SAM closes a gap that an OIG-only check would miss.
Why One Check at Enrollment Is Not Enough
Exclusions and adverse actions do not wait for your re-credentialing cycle. A provider who was clean when you enrolled them can be added to the LEIE the following month after an action in another state, a different employer, or a program you never billed. If you only screen at onboarding and again at re-credentialing, you can carry an excluded provider for a year or more without knowing it.
The risk is cumulative. Every claim submitted during that window can become a repayment obligation, and the dollars add up quietly. Recurring monitoring — most commonly monthly — turns a once-a-year snapshot into a moving picture, so a new match surfaces in weeks instead of months.
- People change. Providers move between practices, states, and payer panels, and actions can follow them.
- Lists change. The LEIE and SAM are updated continuously as new exclusions and reinstatements post.
- Your roster changes. New hires, locums, contractors, and even ordering and referring providers may need screening.
- The clock keeps running. Repayment exposure accrues with every claim, so detection speed directly limits the damage.
This is exactly why we run NPDB, OIG, and SAM monitoring as a standing service rather than a step buried inside enrollment.
What a Real Monitoring Program Looks Like
Good monitoring is more than running a name through a search box. The mechanics determine whether you actually catch problems or just generate noise.
A complete, current roster
You can only screen who you know about. An effective program starts with an accurate list of every provider and entity that needs checking — employed clinicians, contractors, owners, and where applicable ordering and referring providers. Stale rosters are the most common reason a match gets missed.
Identity matching that resolves false positives
Common names produce false hits. A serious program verifies matches against additional identifiers rather than flagging every name collision, then documents the resolution so an auditor can see the work. The goal is to separate a true exclusion from a coincidental name match quickly and defensibly.
Documentation you can hand to an auditor
The check itself only protects you if you can prove you did it. Each screening cycle should produce dated records showing who was checked, against which sources, and what the result was — including how any potential match was cleared. That paper trail is what demonstrates due diligence if a payer or regulator ever asks.
How Monitoring Connects to the Rest of Credentialing
Monitoring does not live in isolation. The same primary-source discipline that drives initial verification feeds your ongoing screening, and screening results feed your renewal decisions. When a monitoring match appears, it should flow straight into your review process, not sit in an inbox.
This is why monitoring and renewal work best as a connected workflow. Findings surfaced between cycles inform your re-credentialing decisions, and a clean monitoring record makes each renewal faster because there are no surprises to chase down at the deadline. If you want the broader picture of how these pieces fit together, our full credentialing services map out where monitoring sits in the lifecycle.
Common Mistakes Practices Make
Most monitoring failures are not exotic. They are predictable gaps that compound over time.
- Screening only at enrollment. The most expensive mistake — exposure builds with every claim until the next check.
- Checking OIG but skipping SAM. An OIG-only program misses exclusions that only appear in the federal award system.
- Ignoring ordering and referring providers. Your liability is not limited to the clinicians who bill under your group.
- No documentation. A check you cannot prove is, for audit purposes, a check that did not happen.
- Treating every name match as an exclusion. Without identity resolution, false positives erode trust in the whole process and real hits get lost in the noise.
Frequently Asked Questions
How often should we run NPDB, OIG, and SAM checks?
The widely followed practice is to screen before hire or enrollment and then monitor on a recurring basis afterward, with monthly screening being the common standard for OIG and SAM exclusion lists. Monthly cadence keeps the gap between a new exclusion posting and your detection of it as short as practical. NPDB queries are typically tied to credentialing and privileging events as well.
What happens if we find a match?
First, confirm it is a true match and not a name coincidence by checking additional identifiers. If it is a genuine exclusion, the provider generally should not be furnishing, ordering, or prescribing services billed to federal programs, and you will need to act on that quickly and document your response. Because the implications can involve repayment and other obligations, treat a confirmed match as administratively urgent and seek the appropriate professional guidance on next steps.
Do small practices really need ongoing monitoring?
Yes. The exclusion rules apply regardless of practice size, and a single excluded provider can create disproportionate exposure for a small group. The screening is the same work whether you have two providers or two hundred — what changes is how much a missed match could cost relative to your size.
Get Help Building a Monitoring Program
If you are not sure your current screening covers all three sources, runs often enough, or produces audit-ready documentation, that is worth a conversation. We can review your roster, set up recurring monitoring, and connect it to your renewal calendar so nothing slips. Book a free consultation to talk through your setup, or see our pricing for what an ongoing program includes.
This article is administrative credentialing guidance only and is not legal, medical, or billing advice.
Sources: National Practitioner Data Bank; Office of Inspector General (OIG); System for Award Management (SAM); Centers for Medicare and Medicaid Services (CMS); National Committee for Quality Assurance (NCQA)
Need Help with Your Application?
We handle credentialing and payer enrollment end-to-end — applications, CAQH, primary source verification, and payer follow-ups, so you get in-network faster.