Medicaid Managed Care Plan Audits Versus State Audits

A pharmacy or physician practice enrolled in a Medicaid managed care network can face two distinct audit tracks on the same set of claims: a Special Investigations Unit review conducted by the health plan itself, and a state Medicaid program integrity audit conducted by the state agency. The two tracks draw on different legal authority, follow different procedures, and can each demand repayment on the same claims without either review controlling the other's outcome. A provider that treats a plan-level SIU finding as the end of the matter can be unprepared when the state opens its own investigation on the identical claims months later.

Who Conducts Each Review

A managed care organization's Special Investigations Unit conducts the first review. Under 42 CFR 438.608, every Medicaid managed care contract must require the MCO, PIHP, or PAHP to maintain a compliance program and dedicated staff for internal monitoring and auditing designed to detect fraud, waste, and abuse. The SIU reviews the claims the plan itself paid, drawing on the plan's own claims and encounter data. A state Medicaid program integrity unit conducts a separate review under 42 CFR Part 455, Subpart A, the state agency's own fraud detection and investigation program. States rely on the same encounter data the MCO must submit to the state, so a state unit can review claims a plan's SIU has already closed.

The Legal Authority Behind Each Track

The plan's SIU authority comes from the network provider contract and the federal floor 438.608 sets for that contract, a regulatory obligation the state imposes on the plan as a condition of doing business in the program. The state program integrity unit's authority comes directly from 42 CFR 455.13 through 455.23 and the state's own Medicaid provider agreement, an independent investigative function that does not depend on the plan's contract terms. A state program integrity determination is therefore not bound by how the plan's SIU resolved the same claims.

The Remedies Each Track Can Pursue

The remedies differ as much as the authority. Under 42 CFR 438.608(d), the plan recovers an identified overpayment directly: the network agreement typically requires the provider to return the overpayment to the plan within 60 calendar days, and the plan must report the recovery to the state annually. A recoupment at the plan level ends with the plan, not the state. The state program integrity unit has a wider remedy set. Under 42 CFR 455.23, the state must suspend payments to a provider once it determines a credible allegation of fraud exists and an investigation is pending. The state can also refer the matter to the Medicaid Fraud Control Unit for potential false claims act exposure, remedies an SIU review cannot reach on its own.

Overlapping Recovery on the Same Claims

Neither track waives the other. 42 CFR 438.608(a)(7) requires the plan to promptly refer any potential fraud, waste, or abuse it identifies to the state program integrity unit or the Medicaid Fraud Control Unit, so a plan-level finding routinely becomes the seed of a state review of the identical claims. This is not constitutional double jeopardy, the criminal protection against being prosecuted twice for the same offense; both proceedings here are civil and administrative. But the practical exposure is real: a provider that resolves a recoupment with the plan can still face a state audit appeal, a payment suspension, or collateral exclusion and termination consequences, including referral toward an OIG exclusion, on the same underlying claims if the two records are not reconciled early.

A plan's Special Investigations Unit closing a file does not close the state's file, and a state declining to intervene does not close the plan's.

Why Early Legal Counsel Is Critical

It is critical that a Medicaid managed care provider promptly retain experienced healthcare defense counsel upon receiving an SIU notice, a state program integrity audit notice, or a payment suspension letter. Early legal intervention can reconcile the plan-level record with the state's file before the two diverge, avoid conflicting responses to each track, and preserve the defenses available on appeal at both levels. A recoupment resolved with the plan but never reported accurately to the state can resurface as a state finding years later.

How Health Law Alliance Can Help

Health Law Alliance represents pharmacies, physicians, and other Medicaid managed care providers across both audit tracks, coordinating the response to a plan-level SIU review and a state program integrity audit so the two proceedings do not produce conflicting outcomes on the same claims, as part of the firm's Medicaid audit defense practice. The firm reconciles the plan's recovery record with the state's file, responds to payment suspensions, and represents providers through fair hearings and appeal. If your practice is facing an SIU review, a state program integrity audit, or both, contact us for a free, confidential consultation.