Every Medicaid MCO, PIHP, or PAHP under 42 CFR Part 438 must run a program integrity function, and the unit that investigates specific allegations is known as a Special Investigations Unit (SIU). When an SIU decides a provider's billing pattern looks like more than a documentation error, the plan's internal review ends and a state-level matter begins. Federal regulation requires the plan to refer that finding to the state Medicaid Program Integrity Unit, or, when the suspected conduct is potential fraud, directly to the state's Medicaid Fraud Control Unit (MFCU). That referral changes who reviews the claims and what the finding can become.

How the SIU Fits Into the Plan's Compliance Program

42 CFR 438.608(a)(1) requires every Medicaid managed care contract to include a compliance program designed to detect and prevent fraud, waste, and abuse. The plan must designate a Compliance Officer who reports to the chief executive and the board, and establish a Regulatory Compliance Committee that CMS guidance says should include members with auditing, clinical, legal, and statistical backgrounds. The SIU sits inside that structure as the unit that investigates specific allegations once they surface, from data mining of claims data, an enrollee complaint, or a routine audit. CMS guidance notes that states may contractually require MCPs to staff SIUs with persons who have different kinds of investigative backgrounds, and that the state's Program Integrity Unit should assess an SIU's preliminary work before duplicating it.

When a Plan Finding Becomes a State Referral

42 CFR 438.608(a)(7) requires the plan's contract to direct prompt referral of any potential fraud, waste, or abuse the SIU identifies to the state Medicaid Program Integrity Unit, or to send potential fraud straight to the MFCU. States set the pathway by contract, and some require both units to receive the same referral at once. CMS encourages defining 'prompt' as within two business days of the SIU identifying the issue. Overpayment findings run on a separate clock: under 438.608(a)(2), the plan must report every overpayment it identifies or recovers, flagging any portion tied to potential fraud, to the state within 30 calendar days. The dollar figure in that report becomes the basis for the recoupment the state's case pursues.

What the State Does With the Referral

Once the state's Program Integrity Unit receives a referral, 42 CFR 455.14 requires it to conduct a preliminary investigation to decide whether the facts support a full investigation. For potential fraud, the unit must also coordinate with the MFCU to determine whether a credible allegation of fraud exists, as required under 455.21 and 455.23. That determination triggers payment suspension: 438.608(a)(8) requires the plan to suspend payments to the provider once the state makes it. The matter has now left the plan's audit posture for the state's fraud-control apparatus, with exposure under the False Claims Act, OIG exclusion, or a case the MFCU pursues criminally.

A plan's internal finding becomes a state matter the moment the SIU decides the conduct looks like fraud rather than error, and an MFCU file does not close just because the provider explains it to the plan.

What a Provider Can Do Before the Referral

The 60-day rule at 438.608(d)(2) lets a provider that discovers its own overpayment self-report it to the plan within 60 calendar days of identifying it. A timely self-report stays inside the plan rather than becoming an SIU-surfaced finding. A provider disputing a plan-level finding still has an audit appeal available. Once an SIU inquiry has opened, incomplete records or a late answer to a document request can read as conduct that supports a referral. Providers that have faced a state-level matter, such as New Jersey Medicaid Fraud Division Investigations, New York OMIG Audits: Process and Defense, or Nursing Facility Medicaid Audits: MDS Reviews and Cost Reports, describe the same shift: the state's timeline, not the plan's, governs.

Why Early Legal Counsel Is Critical

It is critical that healthcare providers promptly retain experienced healthcare defense counsel upon receiving an SIU inquiry, a potential fraud referral, or any communication from the state's Program Integrity Unit or the MFCU. Early legal intervention can protect the provider's rights, ensure appropriate responses to the plan's and the state's requests, avoid inadvertent admissions, preserve relevant defenses, and allow counsel to communicate with the plan or the state on the provider's behalf. Delaying legal representation can significantly affect the outcome of a matter and expose the provider to unnecessary risk.

How Health Law Alliance Can Help

Health Law Alliance's attorneys have overseen 2,000+ audits and handled 5,000+ matters, with 25+ years of experience. If your practice has received an SIU inquiry or notice that a managed care plan has referred your matter to the state agency or the MFCU, contact us for a free, confidential consultation and put an attorney between your practice and the referral before the state's review goes further.