Medicaid Audits for Home Care Agencies: Who Audits, What They Check and How to Prepare
State program integrity units, Medicaid Fraud Control Units, MCOs and federal contractors all audit home care claims. The findings that cost agencies most, and a prep checklist.
By Caregiver Scheduling Team ·
Short answer. Medicaid home care claims can be reviewed by your state’s program integrity unit, Medicaid managed care plans, federal contractors and, for suspected fraud, the state Medicaid Fraud Control Unit (OIG). Most findings come down to missing or mismatched documentation. EVV data now makes mismatches easy to spot.
General information, not legal advice. Rules change and depend on your facts. Confirm with the official source linked in each section or a healthcare attorney before acting.
Who can audit a home care agency?
| Auditor | What they do |
|---|---|
| State Medicaid program integrity unit | Post-payment reviews, recoupments (42 CFR 455) |
| Medicaid managed care plan | Claims and documentation audits under your provider contract |
| Federal contractors for CMS | Data-driven reviews of Medicaid claims |
| Medicaid Fraud Control Unit | Investigates and prosecutes provider fraud and patient abuse (OIG) |
| State licensing surveyors | Not a billing audit, but findings often overlap. See survey preparation |
What findings cost agencies most?
These are common patterns in published audit reports. Each one can mean repaying claims:
- Visit billed without a matching EVV record, or EVV times that don’t match the claim
- Units billed above the authorization, or after it expired
- No signed or complete visit note for the date billed
- Caregiver not qualified on the date of service: missing training, expired credential, or no background check
- Excluded individual on payroll. Check the OIG exclusion list and your state list monthly
- Overlapping visits: one caregiver billed at two clients at once
- Services not in the plan of care
How do I prepare?
- Run a self-audit each quarter: pull 20 random claims and match each to EVV, the visit note, the authorization and the caregiver’s credentials on that date.
- Screen every employee against federal and state exclusion lists monthly.
- Keep records for the longest period your state and payers require (record retention).
- Write an audit response procedure: who receives the letter, the deadline, who pulls records.
- If you find an overpayment, report and return it. Federal law sets a 60-day deadline after it’s identified (42 U.S.C. 1320a-7k(d)).
What happens when an audit letter arrives?
- Note the deadline the day it arrives. Deadlines are short.
- Send exactly what’s requested, indexed, and keep a copy.
- Call a healthcare attorney if the letter comes from the MFCU or mentions fraud, or if the sample will be extrapolated.
How Caregiver Scheduling helps
GPS check-ins with override reasons, client signatures, task checklists in each visit note, and an audit log that keeps the original record when a time is corrected give you the records auditors ask for. On Growth and up, credentials and authorized hours are checked when you assign a visit. Caregiver Scheduling doesn’t submit claims to state aggregators.
FAQ
Is a billing error fraud? Not by itself. Fraud requires intent, but repeated errors you knew about can be treated more seriously.
Can they audit claims from years ago? Yes, within the state’s look-back and record retention periods.
Does private pay get audited? Not by Medicaid. Long-term care insurers and the VA can review claims they pay.
Change log
- 2026-11-06 Published, from the primary sources listed in the frontmatter.
Living page. Last reviewed November 6, 2026.