Audit: Medicaid fraud detection doesn't pay off