Every year, the New York Office of the Medicaid Inspector General (OMIG) releases its Work Plan outlining enforcement priorities. The 2026 plan sends a clear signal that Medicaid providers in New York are entering a far more aggressive enforcement environment.

Armed with advanced analytics, pattern-recognition tools, and Medicare data integration, OMIG has highlighted the areas it intends to direct its resources and attention over the coming year to proactively identify improper payments and accelerate recoveries across fee-for-service and managed care.  

In New York, effective OMIG audit defense often begins before an audit escalates, and early legal strategy can significantly impact the outcome.

A Shift Toward Aggressive, Data-Driven Enforcement

The 2026 Work Plan highlights that OMIG is continuing to expand its use of data analytics to identify providers for audit. Providers are being flagged based on unusual billing patterns, documentation inconsistencies, and perceived outliers.

The 2026 Work Plan highlights that OMIG is continuing to expand its use of data analytics to identify providers for audit. Providers are being flagged based on unusual billing patterns, documentation inconsistencies, and perceived outliers.

OMIG will particularly focus on auditing Medicaid Managed Care Organization (MMCO) payments for services not coordinated through Recipient Restriction Program providers, MMCO payments to unenrolled or excluded providers, and payments for clinic, emergency room, or ancillary services billed during inpatient hospital stays.

As explicitly addressed in the Work Plan, OMIG collaborates with and refers suspected Medicaid fraud to agency partners, including the Medicaid Fraud Control Unit (MFCU) and local, state, and federal law enforcement agencies. This means that a single audit can quickly expand beyond a financial review into a broader enforcement action, making experienced OMIG audit defense in New York imperative in 2026.

Key Enforcement Targets in 2026

Compliance Programs and Self-Disclosure

OMIG is focusing heavily on whether providers have effective compliance programs in place, anticipating the completion of approximately 200 Compliance Program Reviews (CPRs) this year. The expectation is not just that providers maintain adequate compliance programs, but that they actively identify and report issues. Failure to do so can be viewed as a systemic compliance failure rather than an isolated error.

Managed Care and Claims Oversight

With the continued expansion of managed care, OMIG is increasing oversight of claims processing and payment structures, focusing particularly on operating reports and long term care cost reports. The Report also includes a long list of areas in which OMIG intends to focus its audits, including, payments made for incarcerated individuals, deceased enrollees, retroactive disenrollments, out-of-state recipients, duplicate client identification numbers, enhanced nursing home capitation payments, and supplemental maternity, newborn, and low birth weight capitation payments. This will clearly be an area of audit priority that providers can anticipate needing to defend against.

Far-reaching provider and service-specific audits

The Work Plan identifies a far-reaching range of specific services and providers that can expect to endure audit scrutiny in the next year. Areas of focus notably include:

• Long-Term Care Services: To ensure that services are properly rendered and documented, OMIG will engage in Nursing Home Rate Audits, Minimum Data Set (MDS) Reviews, audits of Assisted Living Program provider.

• Home Health and Community-Based Services: OMIG will continue to audit services such as home health, personal care, private duty nursing, private duty independent nursing independent, nursing home transition and diversion, consumer directed personal assistance, and traumatic brain injury.

• Direct Medical Care: Audits will validate care provided by physicians and in the fee for service and managed care environments, supplementing traditional audits of Diagnostic and Treatment Centers and Hospital Outpatient Departments with Physician services and Independent Laboratory Review based on forthcoming audit protocols.

• Pharmacy and Durable Medical Equipment (DME): Pharmacies will continue to see audits, with particular focus on controlled substance claims, and fee-for-service DME audits will continue.

• Transportation: After a year of intense enforcement actions in the non-emergency transportation services space, OMIG will continue to focus on transportation ambulette and taxi/livery, promising updated audit protocols that will include a focus on improperly claimed tolls.

Recovery Audit Contract (RAC) Review Shake Up

Another notable change announced in the Work Plan is Performant, New York’s RAC, will continue to focus audits on ensuring that Medicaid was the payor of last resort, but will now be incorporating available Medicare data in its 2026 projects. This data will specifically be utilized in audits of Medicare-Medicaid duplicate payments and outpatient crossovers.  

The Real Risk: Documentation and Extrapolation

One of the most significant risks providers face is not necessarily the underlying care provided, but the documentation supporting it.

OMIG audits often focus on:

• Missing or incomplete records

• Inconsistencies across documentation

• Failure to meet technical requirements

These issues can then be used to support statistical extrapolation, turning a limited number of findings into large-scale recoupment demands.

What begins as a documentation issue can quickly become a six- or seven-figure liability, making early OMIG audit defense in New York essential.

What OMIG Audit Defense in New York Involves

Effective OMIG audit defense in New York requires more than responding to document requests. It involves a strategic approach to managing risk and limiting exposure.

• Managing OMIG audit responses and document production

• Responding to Attorney General referrals, subpoenas, and investigations

• Challenging statistical extrapolation and recoupment calculations

• Protecting provider licenses and Medicaid enrollment

• Working to prevent escalation to civil or criminal enforcement

• Early involvement can significantly impact both the scope and outcome of an audit.

‍

What Providers Should Do Now

The 2026 OMIG Work Plan makes one thing clear: enforcement is increasing, and expectations are rising.

Providers should:

• Conduct internal reviews of high-risk billing areas

• Ensure documentation is complete and consistent

• Evaluate compliance programs for gaps

• Address potential issues before they are identified externally

Most importantly, providers should understand that Medicaid audits are no longer routine administrative matters. The 2026 OMIG Work Plan is not simply guidance. It is a roadmap for how New York intends to identify, investigate, and pursue providers.

For many, the question is no longer whether they will face scrutiny, but when.

If you have received a Notice of Intent to Audit, OMIG request, or subpoena, seek experienced OMIG audit defense in New York immediately. Early intervention can significantly impact the outcome, limit exposure, and protect your ability to continue operating.