Articles Posted in Audit

Published on:

Medicare-certified hospice providers are facing heightened regulatory oversight. In response to ongoing concerns about hospice compliance, as well as fraud, waste, and abuse within the hospice industry, both the Centers for Medicare & Medicaid Services (“CMS”) and the Department of Health and Human Services Office of Inspector General (“OIG”) have expanded their use of audits, investigations, and enforcement actions targeting hospice providers. Among these enforcement tools are Provisional Period of Enhanced Oversight (“PPEO”) audits, which apply to certain Medicare-enrolled hospice agencies. Providers should recognize that a PPEO audit can carry significant consequences, even where the perceived compliance issues appear relatively minor.

CMS introduced PPEO audits to address concerns surrounding hospice program integrity and regulatory compliance. Under the PPEO initiative, beginning in mid-2023, CMS has required audits of all “newly enrolled” hospice providers located in Arizona, California, Nevada, and Texas. Georgia and Ohio were added in late 2025. For purposes of the program, the term “newly enrolled” extends beyond providers entering the Medicare program for the first time. It also includes hospices that have undergone a Change of Ownership (“CHOW”), as defined by Medicare regulations, providers that have experienced a 100% ownership transfer, and agencies reactivating Medicare enrollment after a period of deactivation.

PPEO audits are sometimes likened to Targeted Probe and Educate (“TPE”) reviews because both processes may involve multiple rounds of claim review during which providers can receive feedback and, in some cases, an opportunity to correct identified deficiencies. That comparison, however, is limited, and in practice the two review processes differ substantially. TPE audits typically involve three rounds of review, and occasionally a fourth. CMS guidance requires the reviewing contractor to provide education to the provider and to allow time between review rounds so the provider can implement corrective measures and improve compliance. In addition, providers generally are not referred to CMS for administrative sanctions unless they fail three consecutive rounds of review by demonstrating persistently high error rates throughout the TPE process. Although TPE audits can ultimately result in revocation of Medicare billing privileges, that outcome generally occurs only after repeated unsuccessful review cycles.

Published on:

For healthcare providers enrolled in Medicare, a claims audit can present significant operational and financial challenges. When an audit results in denied claims, the appeals process often becomes lengthy, with cases taking months—or even years—to reach a final resolution. Successfully navigating each stage requires careful planning, strategic decision-making, and close attention to procedural deadlines.

Most Medicare audits begin with a request for medical records from a Medicare contractor. From the outset, providers should determine the purpose and scope of the review. Identifying the contractor conducting the audit—whether a Medicare Administrative Contractor (MAC), Unified Program Integrity Contractor (UPIC), Recovery Audit Contractor (RAC), or Supplemental Medical Review Contractor (SMRC)—can offer valuable insight into the government’s objectives. It is equally important to understand the type of audit involved. Is the review occurring before or after payment? Is it part of a Targeted Probe and Educate (TPE) initiative, a Comprehensive Error Rate Testing (CERT) review, or a Provisional Period of Enhanced Oversight (PPEO) audit? Providers should also evaluate whether statistical sampling or extrapolation may be part of the review.

The provider’s own circumstances should also factor into a response strategy. Previous audit activity, recent ownership changes, or situations where records are maintained by another organization may all influence how the audit should be handled. Depending on the issues presented and the potential exposure, providers may choose to supplement the record with additional documentation, obtain an independent clinical review, communicate directly with the auditing contractor, or prepare a comprehensive legal response. In lower-risk situations, however, submitting the requested records and waiting for the contractor’s determination may be the most appropriate approach.

Published on:

In a move aimed at addressing the persistent challenge of high healthcare spending, the Centers for Medicare & Medicaid Services (CMS) recently launched a new payment and oversight model called WISeR, short for “Wasteful and Inappropriate Service Reduction.” Set to begin in January 2026 and run through 2031, WISeR is designed to use artificial intelligence (AI) to identify and reduce the provision of services that Medicare deems unnecessary, duplicative, or low value. While its goals are familiar, the model marks a shift in how CMS is approaching prior authorization, technology use, and provider oversight.

For healthcare providers, WISeR represents both a policy change and a shift in operational workflow, especially for those practicing in the six participating states: Arizona, New Jersey, Ohio, Oklahoma, Texas, and Washington. Although the model is technically focused on a limited number of outpatient services, including certain spinal procedures, wound care treatments, and pain management interventions, its implications could be far-reaching.

WISeR does not alter Medicare’s coverage or payment rules. Instead, it changes the process through which specific services are reviewed before payment is made. Providers in participating states will face two main options: they can submit prior authorization requests through CMS-approved technology vendors or have claims for selected services reviewed through a more rigorous prepayment review process.

Published on:

For healthcare providers participating in the Medicare program, facing a claims audit can be both challenging and time-consuming. Denials are common during these audits, and when they occur, the appeals process can stretch over months or even years. Each step requires careful strategy and timely action.

Typically, a Medicare audit is initiated when a Medicare contractor requests medical records from a provider. At this early stage, it’s crucial to understand the context of the request. Identifying the type of contractor involved, whether it’s a Medicare Administrative Contractor (MAC), Unified Program Integrity Contractor (UPIC), Recovery Audit Contractor (RAC), or Supplemental Medical Review Contractor (SMRC), can provide important insight into what kind of review is being conducted. The nature of the review itself also matters: is it a pre-payment or post-payment audit? Is it part of a Targeted Probe and Educate (TPE) program, a Comprehensive Error Rate Testing (CERT) audit, or a Potential Payment Error Opportunity (PPEO) initiative? Is there a likelihood that the audit includes statistical extrapolation?

The provider’s own history and operational context can also affect the review. For instance, has the provider faced similar audits recently? Was there a recent ownership transfer? Are any necessary records held by another entity? These details may guide the provider’s next steps. Depending on the scope and risk level of the audit, providers might take proactive measures to support their claims. This could include submitting additional documentation, hiring a clinical reviewer to evaluate the claims, engaging directly with the contractor, or preparing a detailed legal response. In other situations, simply submitting the requested records and awaiting a decision may be the most prudent course.

Published on:

The HHS Office of Inspector General (OIG) recently issued several new work plan items outlining audits it intends to perform and initiative it intends to undertake. OIG investigations and initiatives can concern activities by federal healthcare programs like Medicare and Medicaid, their contractors, and participating providers. However, it is often providers who experience the downstream impacts of OIG initiatives. Healthcare providers should be aware of OIG’s enforcement priorities.

First, OIG intends to review Medicaid nonemergency medical transportation services. OIG noted that such services can pose a significant risk of fraud, waste, and abuse in Medicaid and that past OIG work has identified significant vulnerabilities in State and Federal efforts to reduce fraud, waste, and abuse involving nonemergency medical transportation in Medicaid. It appears that OIG intends to conduct targeted reviews of certain nonemergency medical transportation providers. Such providers should be prepared for increased levels of scrutiny from OIG and their local Medicaid programs.

Second, OIG intends to produce a white paper regarding fraud, waste, and abuse related to durable medical equipment (DME) in Medicare. DME has long been an area of concern for the Medicare program and federal law enforcement and OIG noted that that recent cases demonstrate that fraudsters continue to target DMEPOS billing and have developed new schemes. OIG intends to build on its extensive experience with DME fraud and provide further information about the nature of DMEPOS fraud in Medicare, key program integrity vulnerabilities, and potential actions to reduce fraud, waste, and abuse.

Published on:

Generally, in the Medicare claims appeal process, a determination that is favorable to the provider ends the appeal process. Only under very limited circumstances can the Centers for Medicare & Medicare Services (“CMS”) or its contractors directly appeal a favorable appeal determination. However, there are certain mechanisms that can be used to reopen, review, and change favorable determinations with which CMS disagrees.

The Medicare claims appeal process is a lengthy, complex, and administratively burdensome process for providers. It includes five levels of appeal, the first four of which are directly controlled by CMS or The Department of Health and Human Services (“HHS”) itself. First is Redetermination by a Medicare Administrative Contractor (“MAC”). Second is Reconsideration by a Qualified Independent Contractor (“QIC”). Third is review by an Administrative Law Judge (“ALJ”) employed by the Office of Medicare Hearings and Appeals (“OMHA”), a division of HHS. Fourth is review by the Medicare Appeals Council, another division of HHS. Fifth is review by a federal court.

Where a provider prevails at the ALJ review, a distinct CMS contractor, the Administrative QIC (“AdQIC”) is tasked with reviewing an ALJ decision. Where CMS, through the AdQIC, disagrees with the ALJ, in some limited circumstances, the AdQIC can directly file an appeal of the ALJ decision to the Appeals Council. However, more often the AdQIC will simply “refer” a provider’s victory to the Appeals Council for the Appeals Council to considering review of its “own” accord. The Appeals Council nearly always takes such cases and often overturns the provider’s favorable determination. CMS and/or HHS may also simply direct the ALJ, who is employed by HHS, to change the decision.

Published on:

Medicare-enrolled hospice providers are under increasingly close scrutiny. Due to concerns regarding hospice compliance and with fraud, waste, and abuse by hospice providers, both the Centers for Medicare & Medicaid Services (“CMS”) and the Department of Health and Human Services Office of Inspector General (“OIG”) have stepped up audits, investigations, and enforcement actions against hospice providers. One of these measures are Provisional Period of Enhanced Oversight (“PPEO”) audits of Medicare-enrolled hospices. Providers should be aware that the stakes in a PPEO audit can be unexpectedly high, while the margin for error unexpectedly low.

CMS implemented PPEO audits as a direct response to concerns regarding hospice fraud and compliance issues. Pursuant to the PPEO program, since mid-2023, CMS audits all “newly-enrolled” hospice providers in Arizona, California, Nevada, and Texas. “Newly-enrolled” is not limited to hospice providers enrolling in Medicare for the first time, but also includes those that undergo a Change of Ownership (“CHOW”) as that term is defined under the Medicare program, those that undergo a 100% change in ownership, and those reactivating Medicare enrollment after being in a deactivated status.

PPEO audits have been compared to Targeted Probe and Educate (“TPE”) audits because, like a TPE audit, a PPEO audit can include multiple rounds of review between which the provider may receive education and an opportunity to address the issue or issues identified by the review. However, this comparison only goes so far and in practice TPE and PPEO are often very different. TPE generally consists of three rounds of review, occasionally four, and the contractor conducting the review is required by CMS rules to offer education to the provider and to wait between rounds of review to give the provider a chance to implement changes and address any issues that have been identified. Further, under TPE, providers are generally not referred to CMS for sanctions until they have failed three consecutive rounds of review by demonstrating consistently high error rates across all three rounds. TPE can, and often does, result in revocation of billing privileges, but generally not before the provider has failed three rounds of review.

Published on:

The regulatory process for appealing Medicare claim denials and overpayments is a complex, lengthy, and administratively burdensome process. Through up to five levels of appeals, Medicare-enrolled providers and suppliers, and their representatives, must contend with inflexible deadlines, tight procedural and bureaucratic requirements, and biased reviewers, all while contesting the denials and asserting the medical necessity of the items or services at issue.

After a Medicare Administrative Contractor (MAC) has issued an Initial Demand, the letter that informs the provider of the claim denials, the reasons for the denials, and the amount of repayment demanded, the first step in appeal is Redetermination. Redetermination review is conducted by the same MAC who issued the Initial Demand and the contractor nearly always upholds its earlier decision. A provider can stop or halt recoupment of the alleged overpayment at this stage of appeal, but only if it requests Redetermination within a certain timeframe.

After Redetermination, the next level of appeal is Reconsideration. Reconsideration is conducted by a Qualified Independent Contractor (QIC), a separate Medicare contractor than the contractor that conducted Redetermination. The QIC is generally more impartial than the MAC, but often finds against the provider. A provider can stop or halt recoupment of the alleged overpayment at this stage of appeal as well, but only if it requests Reconsideration within a certain timeframe.

Published on:

The Department of Health and Human Services (HHS) and the Centers for Medicare & Medicaid Services (CMS) recently announced two major policy efforts directed at Medicare Advantage (MA) plans. As MA plans have become a significant share of the healthcare insurance market, healthcare providers are left wondering what impacts these attempts at MA reform will have on providers.

First, CMS has announced a significant expansion of its auditing efforts for Medicare Advantage (MA) plans. Beginning in May 2025, CMS began to audit all eligible MA contracts for each payment year and invest additional resources to expedite the completion of audits for payment years 2018 through 2024. These audits primarily involve Risk Adjustment Data Validation (RADV) audits to confirm that diagnoses used for payment are supported by medical records. CMS reported that it is several years behind in completing these audits, but that recent estimates suggest that MA plans may have been overpaid by several billion dollars.

If CMS demands that MA plans return significant overpayments, the MA plans may seek to pass this cost along to providers. Namely, where an MA plan experiences an unexpected expense in the form of an overpayment demand, it will likely seek to decrease its costs elsewhere. This may lead to increased scrutiny of claims billed to MA plans, meaning more audits and overpayment demands aimed at healthcare providers.

Published on:

The Department of Health and Human Services Office of Inspector General (“OIG”) recently announced that it would closely examine data relating to new Medicare hospice provider enrollments. These efforts build on existing practices by the Centers for Medicare & Medicaid Services (“CMS”) to increase oversight of certain Medicare hospice providers.

Hospice provides palliative care and support for patients who are terminally ill and for their families. Medicare covers hospice care only where certain criteria are met, including that a qualifying physician has certified that the patient has a terminal illness and a life expectancy of six months or less. Medicare-enrolled hospice providers are also required to be certified by CMS, be licensed as required by State and local law, and meet Medicare Conditions of Participation to receive payment.

For the past several years CMS has been concerned with hospice compliance and with fraud, waste, and abuse by hospice providers. To this end, CMS has increased audits of hospice providers, adjusted the 36-month rule restricting certain sales of hospice providers, and implemented the Provisional Period of Enhanced Oversight (“PPEO”) pilot program. Pursuant to the PPEO program, since mid-2023, CMS audits all “newly-enrolled” hospice providers in Arizona, California, Nevada, and Texas. “Newly-enrolled” is not limited to hospice providers enrolling in Medicare for the first time, but also includes those that undergo a Change of Ownership (“CHOW”) as that term is defined under the Medicare program, those that undergo a 100% change in ownership, and those reactivating Medicare enrollment after being in a deactivated status. PPEO audits function similar to TPE audits, but tend to be more rushed and less forgiving in terms of the education provided to the hospice under review. Hospices under PPEO audits should treat them with due caution and take measures to ensure that their claims and documentation meet Medicare requirements.

Contact Information