Before Sunrise, the Raids Began: Inside the Alleged $1.9 Billion Lab Fraud Network That Stretched Across the Southwest

TUCSON, Ariz. — At 5:41 a.m. on March 11, 2026, a line of black Chevrolet Suburbans sat idling in a parking lot behind a shuttered Denny’s on Tucson’s east side. The engines were running, but the headlights were off. Inside the vehicles, 43 federal agents waited in body armor, listening to encrypted radio traffic and watching the clock.

Three miles away, a strip mall on East Speedway Boulevard was still dark, its businesses not yet open for the day. Above Suite 7, a sign promised something simple and reassuring: True Blood Diagnostics. Free Health Screenings. Walk-ins Welcome.

By 5:58 a.m., according to authorities, the waiting was over.

Across Arizona, New Mexico and southern Colorado, teams from the FBI and the U.S. Department of Health and Human Services Office of Inspector General moved at once on 31 clinic locations, along with homes, offices and financial targets tied to what prosecutors would later describe as a sprawling healthcare fraud enterprise. In all, 46 people were charged. The alleged scheme, investigators say, billed Medicare and Medicaid roughly $1.93 billion over 29 months for laboratory tests patients did not need, records that had been fabricated, and bloodwork that, in many cases, was never performed at all.

What authorities called the largest coordinated healthcare fraud takedown in Arizona history did not begin with a dramatic raid or a sudden tip from inside a bank. It began, prosecutors allege, with a simple insight into a vulnerable part of the American healthcare payment system: lab billing could be immensely profitable, technically complex, and slow to audit.

At the center of the case, according to the indictment described in the source material, was Derek Harmon, 39, a former pharmaceutical and medical device salesman who had spent more than a decade learning how money moved through healthcare. Prosecutors say Harmon did not build a lab empire around science. He built it around billing codes.

In October 2023, Harmon signed a lease for 12,200 square feet of office space in Scottsdale, listing his occupation as “healthcare consultant.” Investigators say that by December he had incorporated True Blood Diagnostics LLC in Wyoming, followed by another entity in Nevada, and then a series of additional companies registered through nominee agents in states with limited corporate disclosure requirements. By early 2024, prosecutors say, at least eight shell entities were in place, each designed to compartmentalize billing, limit exposure and keep the revenue stream moving even if one arm of the enterprise triggered scrutiny.

The business model, as authorities describe it, was as aggressive as it was deceptively simple.

True Blood’s first walk-in clinic opened in Tucson in March 2024, according to investigators. The storefront was clean and inviting. The services sounded benign: free blood pressure checks, free cholesterol screenings, free diabetes monitoring. No insurance required. No appointment necessary. The clinics appeared in neighborhoods with large Medicare and Medicaid populations, and the marketing was tailored accordingly. White mobile blood-draw vans showed up outside senior centers, churches, food banks and VA-adjacent community sites. The message was consistent: stop by, get tested, receive results quickly.

Patients came.

Most, prosecutors say, believed they were taking part in basic preventive care. Elderly residents on Medicare, lower-income workers on Medicaid, veterans supplementing VA services, and others seeking convenient health screenings were allegedly drawn into a system that used their names, insurance information and visit data to support a much more lucrative billing operation behind the scenes.

According to investigators, once a patient’s blood was drawn, the medical value of that sample often ended there.

The government alleges that at many True Blood locations, vials were labeled and logged, only to be discarded in biohazard waste rather than sent to a licensed laboratory for testing. Yet patients still received reports that looked polished and plausible: color-coded numbers, neatly organized panels, results calibrated to appear ordinary or mildly abnormal in ways unlikely to raise alarm. A diabetic patient might see modestly elevated glucose. A healthy adult might receive reassuringly normal numbers across the board. The reports, prosecutors say, were designed not to diagnose disease but to mirror expectations closely enough to avoid suspicion.

While patients were receiving benign-looking printouts, investigators say the billing system was telling a radically different story.

For a simple walk-in visit, prosecutors allege, True Blood and its affiliated entities submitted claims for high-dollar laboratory testing that included comprehensive genetic screening panels, cancer biomarker arrays, pharmacogenomic profiles, toxicology screens, hormone testing and other specialized diagnostics typically associated with documented medical need and physician oversight. A single free screening visit, according to the government’s theory of the case, could generate between $22,000 and $38,000 in fraudulent billing.

Scale did the rest.

By October 2024, authorities say, True Blood Diagnostics had grown to 14 locations across Arizona. By March 2025, there were 23. By August 2025, prosecutors allege, the network had reached 31 clinics across three states. Cheap retail leases, fast openings and heavy foot traffic created the appearance of a booming regional healthcare business. On paper, the clinics looked productive. In the billing system, they looked extraordinary.

Federal law requires physician authorization for laboratory tests. According to the indictment, that requirement became another piece of the alleged business model.

Prosecutors say Harmon recruited eight physicians who were paid monthly consulting or medical-director fees through shell companies. In exchange, authorities allege, the doctors signed standing orders authorizing broad panels of diagnostic testing for patients they had not examined and whose charts they often never reviewed. Some of the physicians rarely, if ever, visited the clinics, according to investigators. At least two allegedly lived out of state.

One physician named in the source material, Dr. Patricia Langford of Albuquerque, allegedly signed hundreds of standing orders a month from her home office. Prosecutors say True Blood submitted $147 million in claims using her National Provider Identifier over 14 months. Defense lawyers for several physicians, according to the source account, have argued that their clients believed they were participating in legitimate wellness testing and did not understand the scope of the billing operation. Prosecutors have countered that the volume and value of claims tied to those physician identifiers were so extreme that the defense strains belief.

Behind the storefronts, authorities allege, True Blood’s real infrastructure was digital.

Patient names, birth dates, insurance identifiers and intake data flowed into a central server system housed in a commercial data center in Tempe, according to investigators. There, a custom-built software platform allegedly matched patient information with diagnostic codes, attached physician orders, formatted claim forms and pushed them electronically to Medicare and Medicaid at industrial speed. The system, prosecutors say, could generate and submit more than 1,000 claims an hour.

The software did more than automate volume. According to federal agents, it was built to survive scrutiny.

Investigators say forensic evidence showed the platform included a “randomization module” designed to introduce small imperfections into the claims stream: occasional coding inconsistencies, minor formatting irregularities, random timing differences. In other words, prosecutors allege, the software was engineered to avoid looking too perfect. It was meant to resemble ordinary human billing activity, with just enough sloppiness to appear authentic.

Payments, authorities say, were routed through 14 shell companies with separate accounts at different financial institutions, then moved through management firms, consulting entities and holding structures before consolidating in accounts allegedly controlled by Harmon. Every transfer, investigators say, was dressed in paperwork: invoices for lab supplies, equipment leases, software licenses, consulting arrangements. Prosecutors contend most of those documents were fabricated to create the appearance of normal business operations.

For more than two years, the system allegedly worked.

Then a 26-year-old phlebotomist in Tucson noticed something she could not ignore.

According to investigators, Maria Selenus had been working at the East Speedway clinic for about seven months when she began to realize the blood rack at the end of each shift did not move the way it should. Samples were drawn, labeled and placed for transport. But the transport never seemed to happen. One evening in late October 2025, after staying late to finish paperwork, she saw a senior technician empty the rack directly into a biohazard waste container.

She watched again over the next several days, according to the source account. Same procedure. Same disposal. Same patients coming in, rolling up sleeves, trusting the process.

On Nov. 3, 2025, Selenus called the FBI’s Phoenix field office to report possible healthcare fraud. The tip, according to authorities, landed with Special Agent Christine Novak, who ran an initial check and found that True Blood Diagnostics and affiliated provider numbers had generated an astonishing volume of Medicare billing in the preceding year. The number stopped investigators cold: $847 million in submissions over 12 months, according to the account.

That figure, standing alone, was enough to draw urgent attention. Compared with a legitimate independent lab network in Arizona, which the source material says billed roughly $120 million annually, True Blood’s numbers were wildly out of proportion to its strip-mall footprint and walk-in business model.

Within 48 hours, officials had assembled a joint task force involving the FBI’s Phoenix Division, HHS-OIG, the Department of Justice healthcare fraud unit and Arizona’s Medicaid Fraud Control Unit. The investigation was given a name: Operation Bad Blood.

Agents began with the claims data.

Over the next weeks, according to prosecutors, analysts pulled every Medicare and Medicaid submission tied to True Blood over a 29-month period and mapped the architecture of the alleged fraud. They found 2.3 million individual test orders and approximately $1.93 billion in billed claims. Of that, authorities say, roughly $1.41 billion was actually paid out by Medicare and Medicaid.

One statistic stood out. The claim denial rate was just 2.1%, investigators say. Legitimate clinical labs, by comparison, typically see much higher denial rates because of ordinary coding mistakes, documentation gaps and coverage issues. In the government’s telling, True Blood’s claims were not merely profitable. They were suspiciously clean.

Cross-checking patient data produced still more red flags. Investigators found pharmacogenomic testing billed for patients with no prescriptions on file, cancer biomarker panels charged to people with no documented history of cancer, and expensive genetic testing attached to patients whose only recorded interaction had been a free blood pressure or cholesterol check. One 74-year-old retired postal worker in Mesa, according to the source material, had been billed for $187,000 in diagnostic testing over nine months after making three quick visits for routine screenings. He reportedly told investigators he never saw a doctor and had no idea what pharmacogenomics even meant.

Then the money trail widened the case.

FBI financial analysts traced payments from government programs through a layered corporate structure and into personal accounts, prosecutors say. Harmon allegedly maintained seven bank accounts across four states and spent heavily while the clinics expanded. Authorities identified a $2.8 million Paradise Valley home purchased in April 2025, a Ferrari 296 GTB registered in June 2025, and a $1.7 million Sedona vacation property acquired in September 2025.

But the luxury spending, investigators say, was not the whole story. More than $380 million had allegedly been wired to foreign jurisdictions by the time the raids were authorized. Mutual legal assistance requests were prepared, and the FBI’s International Corruption Unit was brought in to help trace where the money went. As of the date described in the source account, much of it remained unresolved.

Twelve days into the investigation, authorities say, the case took another turn.

A shell company called Pinnacle Health Consulting LLC had allegedly made 14 payments totaling $620,000 to Roland Vickers, a deputy administrator at the Arizona Health Care Cost Containment System, or AHCCCS, the agency that oversees the state’s Medicaid program. According to prosecutors, Vickers’ tax returns listed the payments as consulting income for regulatory advisory work, but investigators found no real consulting business, no corporate structure, no client list and no independent professional footprint supporting that explanation.

The significance of the payments became clearer when agents reviewed internal audit activity, according to the government. Two separate inquiries into True Blood’s billing patterns had been opened inside AHCCCS in February and July 2025. Both, prosecutors say, were escalated for review and then quietly closed without action. Both were allegedly shut down by Vickers.

One internal inquiry had been triggered after analysts saw three Phoenix-area clinics billing more than $4 million per month each in genetic testing — volumes that, investigators believed, did not match the staffing and equipment realities of small walk-in operations. The second inquiry followed a beneficiary complaint from Flagstaff about a $43,000 laboratory charge after a free diabetes screening. In both instances, prosecutors allege, oversight was neutralized before it could gain traction.

By then, Operation Bad Blood was no longer just a healthcare fraud investigation. It had become, at least in part, a public corruption case.

Through December 2025 and February 2026, surveillance intensified. Agents tracked staff movement, patient volume, waste pickups and courier schedules at all 31 locations. At 17 clinics, authorities say, they observed the same pattern described by the Tucson whistleblower: blood drawn during the day, biohazard containers collected at night, and shipments routed not to a laboratory but to a medical waste incineration facility in Chandler.

A warrant for the facility’s records, according to investigators, showed that over 11 months, True Blood locations had sent an estimated 340,000 blood sample vials for disposal. None had gone to any actual testing lab.

At the same time, cyber investigators quietly obtained forensic mirror images of four servers housed in a Tempe data center and leased under one of the shell companies. Rather than seizing the equipment and alerting the network, agents copied the drives in place over six days. What they found, prosecutors say, confirmed the scale of the operation: fabricated patient records, templated diagnostic reports, automated physician-authorizations, and software instructions aimed at managing denial rates and making false claims appear ordinary.

The source material also alleges that the billing platform had been built by a contract programmer in Kyiv, Ukraine, who was paid roughly $285,000 in cryptocurrency over 18 months. Communications recovered from the server allegedly included detailed discussions about Medicare billing code structures and randomization parameters. Whether that developer understood the full criminal purpose of the software, the source says, remained a separate legal question, and no charges had been filed against him as of late March 2026.

By late February, the evidence package was complete. Federal prosecutors in Arizona and the Justice Department’s healthcare fraud strike force signed off on a coordinated takedown designed to hit all major points of the network at once.

The operation required 31 clinic entries, 17 residential and office searches, 46 arrest warrants and nine asset seizure orders. The FBI’s Phoenix, Albuquerque and Denver field divisions worked alongside HHS agents, the U.S. Marshals Service and local law enforcement agencies in a dozen jurisdictions. The timing was precise: 6 a.m. local time, just before clinics opened but while overnight staff might still be present.

When the order came from the FBI’s Phoenix field office at 5:58 a.m. Mountain Standard Time on March 11, teams moved quickly.

At the East Speedway clinic in Tucson, agents entered through the front and detained a night-shift technician in the back, authorities say. They seized desktop computers, hard drives, a shredder and boxes of printed billing records. At a Phoenix location on West Camelback Road, investigators reportedly found 47 blood vials from the previous afternoon still sitting in biohazard containers, unsent for testing.

In Paradise Valley, agents executed a warrant at Harmon’s home shortly after 6 a.m. He was taken into custody without incident, according to authorities. Inside, investigators say they found laptops, phones, $340,000 in cash, shell-company financial records and a notebook containing handwritten Medicare reimbursement calculations by code category.

Langford was arrested in Albuquerque, the source account says, and authorities reported finding binders full of signed standing orders in her home office. Vickers was arrested in Gilbert, Arizona. Prosecutors say agents seized a personal laptop containing email exchanges with Harmon, including one March 2025 message that allegedly read: “Second inquiry closed. Appreciated transfer incoming.” A corresponding $75,000 wire hit Vickers’ account two days later, according to investigators.

By 8:30 that morning, officials said, raids at all 31 clinic sites and 17 residences had been completed. Forty-four of the 46 defendants were in custody.

Two were not.

One, Marcus Webb, a 31-year-old IT manager accused of overseeing server infrastructure and billing software deployment, was already gone. According to authorities, surveillance later placed him on a March 9 flight from Phoenix Sky Harbor to Mexico City, two days before the raids. The other, accountant Sandra Leu, who allegedly managed the shell-company financial structure, had reportedly been absent from her listed residence for at least a week.

How the two learned of the impending operation remains unresolved, according to the source material. Investigators had not ruled out the possibility of a leak from within the task force or the sealed warrant process.

The unsealed indictment, described as 127 pages, charged 46 defendants across 14 counts, including conspiracy to commit healthcare fraud, wire fraud, money laundering, receipt of illegal kickbacks and obstruction of a federal investigation. Prosecutors said Harmon faced the most severe combined exposure, with potential sentences that could effectively amount to the rest of his life in prison if convicted on the major counts.

The physicians named in the case were charged with conspiracy and kickback-related offenses. Defense attorneys argued that some doctors believed they were approving legitimate wellness panels and were unaware of the full billing scheme. Prosecutors responded with one blunt number after another: individual physicians’ identifiers had allegedly been used to authorize between $89 million and $214 million in claims, amounts the government says no reasonable practitioner could mistake for routine preventive screening.

Vickers was charged separately with bribery, wire fraud and conspiracy to obstruct a federal investigation.

The financial recovery effort began immediately, but it also revealed the scale of the challenge ahead. Domestic assets tied directly to Harmon — real estate, vehicles and bank accounts — were valued at roughly $47 million, according to the source account. With shell-company funds added, identified recoverable domestic assets totaled about $193 million. That left a gulf of more than $1.1 billion between what the government programs allegedly paid out and what investigators could immediately freeze or seize.

Some of the money, authorities say, appears to have gone abroad. Some was allegedly spent on physician payments, overhead, staffing, marketing, leases, waste disposal contracts and personal luxury purchases. Another portion reportedly moved into cryptocurrency. Investigators found evidence of about $67 million in crypto purchases through shell-company accounts, but blockchain analysis fragmented across wallets, exchanges and privacy tools before the trail went cold.

For patients, the damage was harder to see but no less serious.

According to the source material, 2.3 million fabricated test records were left sitting in Medicare-linked databases under the names of real people. Patients who believed they had received a free blood pressure or diabetes check now had claims histories showing genetic screens, cancer biomarker panels and pharmacogenomic testing. Officials warned those false records could affect future coverage decisions, referrals, prescription authorizations and even private insurance or life insurance applications if not corrected.

The Centers for Medicare & Medicaid Services, according to the account, initiated a process to flag and unwind the fraudulent claims, but cleanup on that scale could take 12 to 18 months or longer. In the meantime, some patients may discover diagnostic codes in their records that do not belong there and medical histories that do not reflect care they actually received.

Selenus, the whistleblower whose call helped crack the case open, was reportedly placed in the Justice Department’s witness protection coordination system. Under the False Claims Act, she could eventually qualify for a percentage of whatever money the government recovers. The source material says she kept returning in her mind to one elderly patient who came in month after month for a free diabetes check and brought cookies for the staff. In the government’s telling, that woman’s blood was thrown away every time.

As of March 23, 2026, authorities said 44 defendants were in custody awaiting trial, two remained fugitives, and more than $1.1 billion in Medicare and Medicaid funds was still unrecovered.

The clinics are now closed. The storefronts are empty. The mobile blood-draw vans have been impounded. The alleged network that once spread across three states has been dismantled.

But even after the raids, the broader warning in the case remained intact.

The system, investigators say, was exploited not by breaking it outright but by understanding it too well — the gaps between billing and audit, the pressure to process claims quickly, the volume that can overwhelm oversight, the way clean documentation can mask dirty intent. According to the source account, the billing lag inside state Medicaid oversight could stretch 12 months or longer. In that kind of window, a determined operator did not need a hospital, a lab campus or groundbreaking science. Prosecutors allege all he needed was a believable storefront, willing signatories, vulnerable patients, and software smart enough to mimic normal business.

That may be the most unsettling part of the case. Not just the money. Not just the number of defendants. Not even the scale of the alleged fraud.

It is the possibility that for 29 months, a healthcare business could look ordinary from the sidewalk, compassionate to patients, organized in its paperwork, and technically flawless in its billing — while the real product being sold was neither medicine nor diagnosis, but the conversion of trust into cash.