A Medicaid site visit can arrive as a scheduled appointment or as an inspector standing at the front desk with no warning. Under 42 CFR 455.432, state Medicaid agencies, their contractors, and CMS itself have the authority to conduct unannounced on-site inspections of any enrolled provider location, and the visit exists to verify that the information a provider submitted at enrollment is accurate and that day-to-day operations match what was represented on paper. A mismatch, missing documentation, or a staff member who improvises an answer can trigger termination, a payment suspension, or a referral for a fuller audit.
Announced and Unannounced Visit Authority
Federal rule requires enrolled providers to permit unannounced on-site inspections of any and all provider locations by CMS, its agents, its designated contractors, or the state Medicaid agency. Site visits can occur pre-enrollment, before a new provider is approved to bill Medicaid, or post-enrollment, as part of routine revalidation or targeted review. The regulation's stated purpose is narrow but consequential: confirm the provider's submitted information is accurate and confirm compliance with federal and state enrollment requirements. The rule builds in no separate notice requirement, and a provider that plans only for scheduled visits is planning around the wrong assumption.
Risk Levels That Trigger a Site Visit
Federal rule sorts enrolled providers into three categorical risk levels, and the level determines how often a site visit is likely. Limited risk screening covers license verification and database checks, including a check against the OIG exclusion list. Moderate risk adds an on-site visit to the limited-risk requirements. High risk adds fingerprint submission and a criminal background check on top of the moderate-risk requirements, including the site visit. A provider's risk level can change: it escalates automatically to high when the state imposes a payment suspension based on a credible allegation of fraud, when a prior overpayment finding exists, or when the provider or an owner had an exclusion within the preceding ten years.
What Inspectors Review Once They Arrive
Site visits follow a consistent pattern regardless of which agency conducts them. Inspectors typically request a sample of patient records, the practice's written policies and procedures, staff licenses and certifications, and documentation of the drugs or services routinely provided. For pharmacies and dispensing practices, that review commonly extends to medication and narcotic storage, drug invoices, and inventory records. The Medicaid Provider Enrollment Compendium describes the visit's purpose as confirming the accuracy of submitted information and verifying that operations match enrollment records. An inspector who cannot confirm what was represented on the enrollment application has grounds to flag the location for further review.
Preparing Staff and Records Before Inspectors Arrive
The staff member who greets an unannounced inspector sets the tone for the visit. Every location should designate a single point of contact, typically the compliance officer or office manager, who is notified immediately when an inspector arrives and who accompanies the inspector throughout. Front-desk and clinical staff should know that refusing entry is not the answer: under 42 CFR 455.416, the state Medicaid agency must terminate or deny enrollment when a provider fails to permit access for a site visit under 455.432, absent a documented finding that termination is not in the program's best interest. Staff licenses, certifications, and current policies should be stored where they can be produced within minutes, not located under pressure. Findings from a site visit can feed directly into a broader audit, and a provider that later disputes a finding will need the audit appeal process, so records should be organized as though every visit could become the record in a future dispute.
An unannounced Medicaid site visit is not the moment to improvise: refusing entry can trigger termination under federal rule, and disorganized records read as noncompliance even when the underlying practice is sound.
Why Early Legal Counsel Is Critical
It is critical that healthcare providers promptly retain experienced healthcare defense counsel upon receiving notice of a site visit, an audit, or any other government inquiry connected to Medicaid enrollment. Early legal intervention can protect the provider's rights, ensure staff give appropriate responses to an inspector's questions, avoid inadvertent admissions that later support a recoupment or a False Claims Act theory, and preserve defenses that are available before findings are issued but harder to raise afterward. Delaying legal representation until after a termination notice can significantly affect the outcome.
How Health Law Alliance Can Help
Health Law Alliance represents pharmacies, clinics, and provider groups nationwide through Medicaid enrollment screening, site visits, and the audits that often follow them, from staff preparation before an inspector arrives through any appeal of an adverse finding. If your practice has received notice of a site visit, or an inspector has already been on site and left findings behind, contact our Medicaid audit defense team for a free, confidential consultation.
