An OIG Name Match Is Not a Finding
A name match in the OIG List of Excluded Individuals/Entities is a lead to investigate, not a confirmed finding about your employee or applicant. Use the official identity-verification process, keep sensitive identifiers restricted, and document the review before deciding whether the result belongs to the person you’re screening.
The HHS-OIG LEIE instructions tell users to complete identity verification using an individual’s Social Security Number or an entity’s Employer Identification Number. A spreadsheet comparison that stops at matching names leaves that step unresolved.
Why isn’t a matching name enough?
People can share names, use former surnames, or appear in different records with different name formats. A screening process should distinguish “possible match” from “verified match” rather than treating both as the same alert.
Consider two employees with the same first and last names. A name-only search may identify a record that requires investigation, but the name itself doesn’t tell you which person the record describes. Adding a confident label at that point creates a risk of acting on the wrong identity.
The broader exclusion-screening overview discusses the different databases. Here, the narrower task is resolving a potential LEIE match correctly.
What should the reviewer do first?
Return to the official source and examine the candidate record. Compare the available details through your approved screening process, then complete OIG’s identity-verification step when appropriate. Don’t treat an absent identifier in a downloaded file as proof that no additional verification is needed.
OIG explains that the downloadable database doesn’t distribute SSNs and directs users to online verification for specific identities. See its database-download guidance.
Use a controlled workflow:
- Record that the automated result is a possible match.
- Assign an authorized reviewer.
- Check the official record and the identity details needed to resolve it.
- Preserve the verification outcome and its source.
- Escalate a confirmed or unresolved issue under the organization’s compliance policy.
These are operational recommendations. Your organization’s legal and compliance teams should determine the action required for a confirmed match and the applicable screening scope.
How should sensitive identifiers be handled?
SSNs and EINs don’t belong in a shared spreadsheet, email subject line, support screenshot, or analytics event. Use the authorized screening system and limit access to the people completing the review.
The general employment record can state that identity verification was completed and identify the reviewer, source, date, and result. It doesn’t need to reproduce the sensitive value used during verification. Follow the organization’s approved evidence-retention policy for the underlying record.
This separation helps a manager understand the decision without giving every manager access to identity data. Our verification methodology also emphasizes understanding what a source establishes and what it leaves unresolved.
What if the source still doesn’t resolve the identity?
Keep the outcome pending and use OIG’s official support or guidance path. Don’t silently choose the most convenient interpretation. Record which question remains open and who will resolve it.
| Review outcome | Useful record label |
|---|---|
| Identity confirmed | Verified match; compliance review required |
| Identity ruled out through documented review | False match; evidence recorded |
| Insufficient information | Unresolved possible match; escalation assigned |
A previously cleared result also needs enough explanation for another reviewer to understand why it was cleared. A note saying only “not our person” is difficult to audit or revisit when a later search returns the same candidate.
Does clearing the LEIE match complete credentialing?
No. Exclusion screening, license verification, and organizational credentialing answer different questions. Clearing one identity alert doesn’t establish that a state license is active or that an individual meets every requirement for a role.
Keep the LEIE result alongside the other checks without merging their meanings. The credentialing-versus-licensing article explains that distinction.
Review your screening report’s labels before its next distribution. If a name-only result is displayed as a confirmed exclusion, change the workflow so identity review happens before that conclusion reaches a decision-maker. Accurate labels make both true matches and false positives easier to handle.
Source review: October 5, 2026. Check the linked official guidance for changes before acting.