How enforcement agencies trace financial crimes across borders through digital intelligence and coordinated investigations
WASHINGTON, DC — December 13, 2025
When federal investigators first laid out the alleged mechanics of Operation Brace Yourself in 2019, the case read like a modern fraud blueprint: telemarketing, telemedicine, durable medical equipment billing, and a payment pipeline that crossed oceans before it ever touched a patient. More than five years later, the investigation’s most visible figure is not sitting in a courtroom waiting for a final sentence. He is listed by U.S. health care fraud investigators as a wanted fugitive, with a last known location in Manila, Philippines, after failing to appear for sentencing in October 2024.
Herbert “Herb” Kimble pleaded guilty in April 2019 to conspiracy to defraud the United States, according to federal investigators, after authorities tied him to a system that generated more than $1.2 billion in charges to Medicare. The government’s description of the scheme has remained consistent: an offshore call center marketed braces through television and internet ads, screened Medicare beneficiaries who called a toll-free number, and routed them into telemedicine channels that produced brace prescriptions without regard to medical necessity. Those prescriptions were then sold to durable medical equipment companies that billed Medicare, with invoices designed to disguise the true nature of the purchases.
The result was not only one of the most significant Medicare fraud cases announced in the United States that year, but a case study in how cross-border financial crime investigations now unfold. The search for a fugitive linked to a billion-dollar Medicare scheme no longer depends on a single lead or agency, and it rarely stays within a single jurisdiction. It becomes a layered hunt across travel systems, telecom infrastructure, platform data, financial compliance networks, and diplomatic and legal channels that move far more slowly than the digital footprints investigators are trying to follow.
This is the Kimble case today, a story about an old fraud method dressed in new technology, and a new enforcement reality shaped by digital intelligence, coordinated investigations, and the growing role of compliance systems in both detecting crime and locating the people accused of committing it.
Digital intelligence and the new map of cross-border fraud
“Digital intelligence” in enforcement circles is often misunderstood by the public, partly because the term can sound like a single tool. In practice, it is a mix of data sources, legal authorities, and investigative tradecraft, stitched together across agencies that do not always share the same mandate. In a complex health care fraud investigation, the map may start with billing patterns, spikes in claims, unusual ordering behavior, or clusters of beneficiaries receiving the same products. But once investigators suspect an offshore marketing hub or a foreign-based call center, the investigation becomes inherently international, and the evidence is often distributed across jurisdictions with different privacy laws, retention rules, and disclosure thresholds.
In a case like Operation Brace Yourself, several categories of intelligence tend to matter most.
First is communications intelligence in the ordinary sense, call records, routing details, device identifiers, account relationships, and the commercial infrastructure used to operate contact centers. Even when content is not available, metadata can be enough to build timelines and reveal networks.
Second is platform intelligence, which includes the digital advertising trails that bring victims into a funnel, the marketing domains, landing pages, and tracking pixels that tie campaigns to payment processors, and the social accounts and messaging platforms used to recruit staff, coordinate operations, or interface with co-conspirators.
Third is financial intelligence, which involves more than bank transactions. It includes corporate formation records, nominee arrangements, merchant accounts, payment processor histories, cross-border wires, and the compliance reports that banks and regulated intermediaries file when transactions appear suspicious. In many investigations, these filings do not, by themselves, prove criminal conduct, but they provide investigative pathways and help establish patterns that can be corroborated with other evidence.
Fourth is travel and identity intelligence, a category that has become more complicated as identity documents, visas, airline systems, and border screening tools have grown more automated. For fugitives, travel is often constrained by the need to avoid routes that create predictable government records. For investigators, that constraint itself becomes a behavioral signature.
What makes the Kimble case notable is not just the scale of alleged Medicare losses. It is the way the underlying structure of the alleged scheme anticipates and, in some ways, depends on an international division of labor. The marketing engine is offshore. The medical decision-making, at least on paper, is domestic and licensed. The billing occurs through U.S. health care reimbursement systems. The money moves through channels that can include offshore vendors, intermediaries, and layered corporate accounts.
That structure creates vulnerability for perpetrators and complexity for investigators. Every cross-border step requires infrastructure, and infrastructure leaves records. Digital intelligence is the effort to find those records, convert them into evidence, and use them to locate a person who, according to federal investigators, is now avoiding court-ordered proceedings.
Operation Brace Yourself and the alleged mechanics of a telemedicine brace scheme.
The public description of the Kimble-linked conduct is straightforward for a fugitive listing. Investigators say that from about 2014 through April 2019, Kimble controlled and operated an offshore call center that marketed orthotic braces for pain through television and internet advertisements. When Medicare beneficiaries called the advertised number, agents screened for eligibility and then persuaded callers that they needed an orthotic brace, often upselling additional braces.
The call center, investigators say, then contacted a telemedicine company. A physician connected to that telemedicine channel would often issue a prescription without regard to medical necessity. Durable medical equipment companies then purchased the prescriptions and billed Medicare for the braces. The invoices, investigators say, were structured to obscure that the product being purchased was a prescription rather than a brace. The result was more than $1.2 billion in charges to Medicare tied to these prescriptions.
The FBI’s description of the broader 2019 takedown emphasized the international element. Investigators described medical equipment companies paying a firm in the Philippines to recruit Medicare patients through advertising, including people who may or may not have needed the braces. Federal officials also described the enforcement action as a significant, months-long investigation spanning numerous FBI field offices and involving multiple partner agencies.
There is a critical policy lesson in those descriptions. Telemedicine is not inherently suspect, and durable medical equipment is integral to legitimate care. The vulnerability arises when the “decision” to prescribe is driven not by clinical need but by marketing incentives and kickback-like arrangements, and when a remote process makes it easier to scale questionable prescribing at volume.
That lesson has shaped enforcement after 2019. In the years since, federal authorities have repeatedly described telemedicine-related fraud as a growing area of risk, especially when companies use brief telephonic interactions, or no meaningful interaction at all, to justify expensive orders. Regulators have also emphasized the broader harm, not only the loss of taxpayer funds, but the corruption of clinical judgment and the targeting of beneficiaries who may be misled by advertising and pressured sales tactics.
What changed after 2019 is that the investigation did not end with the initial charges. According to federal investigators, Kimble pleaded guilty in April 2019 and cooperated for years against other co-conspirators. That cooperation phase mattered because it reflects an everyday reality in significant fraud cases: prosecutors often seek leverage against networks by using insiders to explain how money moved and who benefited.
The fugitive turn and what it signals about enforcement limits
The moment Kimble did not appear for sentencing in October 2024, the case shifted from prosecuting a fraud to locating a person. Investigators say a bench warrant was issued, and that Kimble is now a fugitive, last known to be residing in Manila.
The significance of that detail is two-fold.
First, it suggests that even after a guilty plea and years of cooperation, the final stage of the legal process can still be derailed by flight. Sentencing is when legal consequences are fixed, when restitution orders, confinement, supervised release, and financial penalties are formalized. Skipping that stage is a direct challenge to the credibility of the enforcement system.
Second, it highlights the jurisdictional limits of domestic law enforcement. A bench warrant is powerful within the United States. Abroad, its effectiveness depends on diplomacy, treaty arrangements, local law, and international policing cooperation, even with strong interagency coordination, physical location matters.
In practical terms, fugitive cases are constrained by the reality that not every country treats U.S. warrants or U.S. fraud prosecutions as top priorities. Cooperation may exist, but bureaucracy, legal thresholds, or competing domestic concerns can slow it.
For enforcement agencies, that reality changes the value of digital intelligence. The more precisely investigators can map a fugitive’s current activities, the more likely they are to prompt action through the channels available to them, including immigration enforcement, local police cooperation, or other legal processes that a person’s presence can trigger.
How investigators build a modern fugitive picture
The public rarely sees the day-to-day mechanics of fugitive investigations, but the outline is well understood in enforcement and compliance circles. In high-value, cross-border white-collar cases, investigators tend to look for convergence across independent signals rather than betting on a single tip.
One track is financial behavior. Even fugitives who attempt to live quietly need money. They may rely on pre-positioned funds, associates, informal remittance channels, or business interests that can still generate income. Investigators look for seams, payments that touch regulated institutions, property-related transactions, business registrations, and the commercial footprints that appear when a person rents, travels, communicates, or uses services.
Another track is communications behavior. A fugitive may avoid obvious lines of contact, but humans tend to maintain relationships. Investigators look for patterns across known associates, family members, former business partners, or co-defendants. Digital patterns can include account recovery attempts, login histories, device churn, and the creation of new identities within consumer platforms.
A third track is mobility behavior. This includes travel records, of course, but also the secondary effects of travel, hotel stays, airline bookings, visa interactions, border crossings, and the use of local transport systems. Even when international movement is limited, local mobility can create a signature, repeat visits to the same neighborhood, consistent use of specific services, or patterns that can be observed through lawful surveillance once a general location is identified.
A fourth track is open-source intelligence, which has become a standard part of investigations. This can include public posts, photographs, geolocation clues embedded in images, business promotions, event attendance, and even the inadvertent exposure created by friends or associates. Investigators do not need a fugitive to be active online for open-source intelligence to matter; they need the fugitive’s network to be careless.
In an offshore call center case, there is an additional dimension. Call center operations tend to involve staffing, payroll, office space, and vendor relationships. Those relationships can persist even after a case becomes public. When investigators can identify vendors that once served a network, they can look for successor entities, rebranded firms, or people who moved from one operation to another.
Cross-border legal channels and the Philippines factor
Public records in the Kimble case indicate Manila as a possible or last-known location. That matters because the Philippines has long been a hub for offshore business process outsourcing, including legitimate call centers. That environment can complicate fugitive work, simply because a person can blend into a dense economy where cross-border business ties are common.
When a fugitive is believed to be in another country, enforcement agencies typically rely on a combination of formal and informal channels. Formal channels can include requests through diplomatic missions, mutual legal assistance treaties, where applicable, and processes involving local co-operation. Informal channels include liaison relationships, intelligence sharing, and coordination through international policing mechanisms.
The public also often hears about the role of international notices and alerts, but it is essential to be precise about this. Such tools can support location and identification efforts, but they do not function as universal arrest warrants. The outcome depends on local law and local discretion. For white-collar fugitives, that discretion can be heavily influenced by whether the person triggers other violations, immigration issues, local criminal exposure, or financial conduct that attracts local enforcement attention.
Case study: The 2019 takedown model and the value of multi-agency coordination
Federal officials described Operation Brace Yourself as a large-scale action involving multiple agencies. That model has become the template for many modern fraud cases, a coordinated enforcement event that combines investigative work, arrests, searches, seizures, and parallel administrative actions.
The value of that approach is that it compresses time. Fraud networks often adapt quickly once they sense scrutiny. Coordinated takedowns aim to hit multiple nodes at once, reducing operators’ ability to destroy evidence, shift assets, or move key personnel.
The multi-agency structure also widens the evidence base. Health care fraud investigations can involve expertise from medical billing analysts, financial investigators, cyber specialists, postal inspectors, and federal agents with experience in organized crime methods. It can also include regulators who can take administrative actions that disrupt billing privileges and provider relationships, even as criminal cases move through slower court processes.
In the broader enforcement landscape, federal officials have pointed to significant “cost avoidance” after major telemedicine brace actions, arguing that coordinated disruption can reduce future losses by cutting off pathways that fraudsters rely on. That is an essential reminder that enforcement is not only punitive. It is also preventative, designed to change the incentive structure and raise the operational cost of rerunning the same scheme.
Case study: Offshore marketing hubs and the recurring call center pattern
The use of offshore call centers and marketing firms is not unique to one Medicare fraud case. Offshore hubs have been a recurring feature of consumer fraud, tech support scams, romance scams, investment schemes, and health care-related marketing abuses. The reason is simple: offshore operations can reduce costs, increase volume, and create jurisdictional friction that slows investigators.
But the call center model has built-in weaknesses.
Call centers depend on telecom infrastructure, vendor relationships, and predictable workflows. They often rely on scripted operations, training, lead lists, and customer relationship management systems. Those systems leave records. They are also usually staffed by large numbers of people, which increases the chances of leaks, informants, or inadvertent disclosures.
Enforcement agencies have learned to treat offshore marketing operations less as a single facility and more as a supply chain. The key questions become: who owns or controls the operation, how are leads generated, who pays for advertising, what platforms are used, where are payments routed, and how does the operation interface with domestic entities that trigger billing or financial activity.
In a fugitive scenario, those same questions can help locate a person. If a fugitive once controlled an offshore operation, investigators can look for residual control, continuing revenue, or the reuse of infrastructure. Even if a person attempts to cut ties, the history of connections can provide investigative targets.
Case study: Court records and the afterlife of a major fraud investigation
Significant fraud cases often have long afterlives in the court system. Separate defendants are prosecuted in different districts. Related investigations unfold over the years. Court filings can contain details about how investigators framed the case, how defendants interacted with co-conspirators, and what roles different actors played.
In the Operation Brace Yourself ecosystem, court records from later years have referenced the operation’s basic facts, including that it involved arrests and charges against 24 defendants in April 2019 and that the defendants were primarily connected to durable medical equipment companies, call centers, and telemedicine companies. Such references show how a major operation can become a foundational narrative that later trials and motions still have to address, even when the defendants are ndifferent
For the public, these court records serve another purpose. They demonstrate that significant cases are not singular events. They are sprawling legal processes that can stretch across years, as prosecutors pursue different actors, defendants litigate evidentiary issues, and courts manage the flow of related material.
For enforcement, this has a direct implication for fugitive work. Every new court filing can expose new associations, new financial details, or new operational descriptions that help investigators map where a fugitive might turn next.
The compliance overlay: how banks and intermediaries become part of the hunt
Cross-border fraud investigations increasingly depend on compliance systems, not because compliance teams “hunt fugitives,” but because regulated institutions sit at chokepoints where money and identity intersect. Banks, payment processors, and other intermediaries may detect suspicious activity, unusual transactions, or patterns that suggest the use of proxies, layering, or structuring.
The compliance world is also relevant because fugitives sometimes underestimate how hard it is to live entirely outside regulated systems. Renting property, establishing utilities, funding day-to-day expenses, and operating any business activity can force interaction with banks or platforms that collect identity information.
Even when a fugitive uses informal methods, those methods can create secondary trails, associates who move money, repeated use of particular remittance channels, or patterns that eventually touch a regulated entity.
In a health care fraud case, financial compliance can also intersect with restitution and asset recovery. When investigators and prosecutors seek to recover proceeds, they often need to trace assets across borders and through corporate structures. That effort can reveal the same networks and accounts that a fugitive might later rely on.
From fraud to flight, what the Kimble listing says about deterrence
Fugitive listings in health care fraud are relatively rare compared with the volume of prosecutions. That is why the Kimble case stands out. It raises a question that enforcement agencies have been grappling with for years: how to preserve deterrence when high-value defendants can flee and potentially remain beyond reach for extended periods.
There are practical deterrence tools. Asset seizure, forfeiture, and financial disruption can make flight less rewarding. Coordinated international engagement can raise the likelihood of location and return. Public fugitive campaigns can generate tips and constrain a fugitive’s ability to operate under the radar.
But there is also a broader policy reality. The more globalized fraud becomes, the more global enforcement must become. That involves resources, foreign partnerships, legal frameworks, and the ability to translate digital intelligence into action across borders.
The Kimble case, in that sense, is not only about one defendant. It is about the continuing evolution of fraud itself, and the effort by enforcement agencies to keep pace.
Compliance, transparency, and emerging markets, the broader enforcement context
Many offshore hubs and emerging markets are also legitimate engines of global business. The same infrastructure that supports call centers, cross-border payments, and international corporate services supports lawful trade and economic growth. That is why enforcement is often careful in how it describes offshore components; the goal is to target criminal conduct without stigmatizing entire jurisdictions or industries.
In the fraud landscape, transparency remains the most reliable long-term antidote. Transparent corporate ownership records, robust know-your-customer rules, effective suspicious transaction reporting, and coordinated law enforcement relationships reduce fraud networks’ ability to hide behind layers of companies and intermediaries.
At the same time, enforcement must navigate privacy and civil liberties frameworks that vary widely across borders. Digital intelligence is most effective when it is lawful, targeted, and corroborated. Overbroad approaches can backfire, especially when evidence must survive court scrutiny and international cooperation depends on trust.
This balance matters in high-profile fugitive cases. If the goal is to locate and return a defendant for sentencing, investigators need evidence that is both operationally useful and legally sustainable.
About Amicus International Consulting services in cross-border compliance matters
Amicus International Consulting provides professional services related to cross-border compliance planning, lawful international relocation support, and risk management consulting for individuals and organizations navigating complex jurisdictional environments. The firm’s work includes compliance-focused assessments of international exposure, lawful documentation planning, and advisory support related to evolving regulatory expectations in global mobility and cross-border financial activity.
Contact Information
Phone: +1 (604) 200-5402
Signal: 604-353-4942
Telegram: 604-353-4942
Email: [email protected]
Website: www.amicusint.ca
