New York's Office of the Medicaid Inspector General (OMIG) opens thousands of provider audits each year, and each one runs on a fixed procedural clock. A records demand can reach six years of billing history, a Draft Audit Report can turn a handful of questioned claims into a six-figure recoupment through statistical extrapolation, and a Final Audit Report starts a 60-day window to request a hearing that closes for good once it passes. The mechanics below use New York's OMIG audit as the worked example; most state Medicaid inspector general offices run a comparable version of the same three-stage process. For a compliance officer, the audit is a civil proceeding with a fixed timeline and real dollar exposure, not a paperwork exercise.
How an OMIG Audit Begins
An OMIG audit opens with written notice and a records demand identifying the provider, the program area, and the claims under review. Under 18 NYCRR 504.3 and 517.3, OMIG's review is limited to services furnished or billed, whichever is later, within the six years preceding that notice, except where OMIG suspects fraud, in which case the lookback period can extend further. OMIG must commence the audit within 60 days of its written notice, or 120 days if it issues a follow-up notice. Providers agreed, as a condition of Medicaid enrollment, to keep records for six years, and a provider that cannot produce a record for a sampled claim risks having that claim, and its share of the extrapolated projection, treated as an overpayment by default.
The Draft and Final Audit Report
Field work produces a Draft Audit Report (DAR): preliminary findings and a defined window to respond before anything becomes final. If a provider does not respond to OMIG's initial letter within 90 days, OMIG issues the DAR directly; the provider then has 30 days from receipt to submit a written response, with receipt presumed five days after the DAR's date. The DAR response is the last chance to correct the record before OMIG issues a Final Audit Report (FAR), its final determination of the overpayment amount, including interest, and the document that sets out hearing rights.
A recoupment demand built on a small sample of claims can be projected across six years of billing before a provider ever reaches a hearing.
Extrapolation and the Statistical Sample
Most OMIG audits review a sample of claims, not every claim in the lookback period, and apply the sample's error rate to the full claim population, so a finding on a small number of claims can produce a demand many times larger. New York's Court of Appeals upheld this practice in West Midtown Mgt. Group, Inc. v. New York State Department of Health, Office of the Medicaid Inspector General, 31 N.Y.3d 533 (2018), holding that OMIG's authority to audit by statistical sampling is implicit in its general authority over the Medicaid program. Under 18 NYCRR 519.18(g), a certified sampling method is presumed accurate absent contrary testimony from a qualified witness or a full accounting of every sampled claim. That presumption puts the burden on the provider to challenge the sampling frame or the extrapolation math, not just the claims OMIG flagged.
The 60-Day Appeal Window
A FAR is not the end of the matter, but the clock on contesting it is short. A provider that disagrees with a FAR's findings must submit a written request for an administrative hearing within 60 days of the FAR's date. Missing that window generally forfeits the right to challenge the sampling methodology, the extrapolated total, and the individual claim denials, leaving repayment as the only remaining path. Where an audit surfaces something beyond a billing error, the matter can also be referred to the state's Medicaid Fraud Control Unit for a parallel criminal inquiry, examined in Medicaid Fraud Control Unit Investigations: What Providers Face. That referral does not pause the FAR's 60-day appeal deadline.
Why Early Legal Counsel Is Critical
It is critical that healthcare providers promptly retain experienced healthcare defense counsel upon receiving an OMIG records demand, Draft Audit Report, Final Audit Report, or Medicaid Fraud Control Unit inquiry. Early legal intervention can protect the provider's rights, ensure appropriate responses to government requests, avoid inadvertent admissions, preserve every available defense to the extrapolated finding, and allow counsel to communicate with the auditor on the provider's behalf. Delaying representation can significantly affect the outcome and expose the provider to unnecessary risk, particularly once the 60-day hearing-request window is running.
How Health Law Alliance Can Help
Health Law Alliance defends providers against OMIG audits, Draft and Final Audit Reports, and the extrapolated recoupment demands that follow, along with the Medicaid Fraud Control Unit inquiries that can run alongside a civil audit. The firm's attorneys have overseen 2,000+ audits and build the response and hearing-request strategy around the same statistical and procedural questions OMIG's own protocols raise. If your practice has received an OMIG records demand or a Final Audit Report, contact us for a free, confidential consultation.
