A Medicaid audit and a Medicaid criminal investigation are different proceedings, with different agencies, different rules, and different consequences. A state program integrity unit can request records, apply extrapolation, and issue a recoupment demand. A Medicaid Fraud Control Unit (MFCU) can execute a search warrant, interview employees separately, and refer a matter to prosecutors under the federal health care fraud statute or a state criminal fraud statute. The signals that a civil audit has turned criminal are specific and recognizable, and once they appear, how a pharmacy or practice responds has to change immediately.

The Line Between an Audit and an Investigation

A Medicaid program integrity audit is a civil proceeding. The state Medicaid agency, or its contractor, reviews a sample of claims, applies extrapolation across the lookback period, and issues a recoupment demand that a provider can contest through an audit appeal. The provider's exposure at this stage is financial: repayment, interest, and potential network consequences.

A criminal referral runs through a different agency entirely. The Medicaid Fraud Control Unit is typically housed in the state attorney general's office, structurally separate from the state Medicaid agency, and can pursue charges under 18 U.S.C. 1347, the Anti-Kickback Statute at 42 U.S.C. 1320a-7b(b), or a state healthcare fraud statute. These are criminal statutes, distinct from the civil False Claims Act, and a provider's counsel treats a criminal referral and a False Claims Act exposure as separate risks that call for separate defenses. Our overview of Medicaid Fraud Control Unit investigations covers how that referral and investigation process unfolds in more detail.

Signals the Matter Has Turned

Several concrete signals separate a civil audit from a criminal investigation already underway. A payment suspension imposed under 42 CFR 455.23, the federal rule authorizing suspension of Medicaid payments upon a credible allegation of fraud, means the state has already referred the matter to the Medicaid Fraud Control Unit, or is about to. Requests that shift from spreadsheets and claim summaries to original patient charts, appointment logs, and employee interviews signal that an investigator, not an auditor, is now directing the matter. A preservation letter delivered by an investigator, instructing the provider not to alter or delete records, mirrors a criminal evidence-preservation notice rather than a routine audit document request. The appearance of state attorney general investigators, a grand jury subpoena, or a search warrant removes any doubt. A request that a specific individual, rather than the business entity, retain separate counsel usually means the state is evaluating that individual's criminal exposure, not just entity-level recoupment.

When a spreadsheet request becomes a subpoena for original patient records, the matter has moved from an audit to an investigation.

What Changes Immediately

Once the matter turns criminal, the response changes immediately. Communications that once went to a program integrity analyst now implicate the Fifth Amendment for any individual who might testify or be interviewed. Employees are never coached on what to say, and interviews happen separately, with separate counsel where an employee's interests diverge from the entity's. A criminal conviction under 18 U.S.C. 1347, the Anti-Kickback Statute, or a state healthcare fraud statute exposes an individual or entity to mandatory OIG exclusion from Medicare and Medicaid under 42 U.S.C. 1320a-7, a consequence that can end a career or a business independent of any sentence the court imposes. Defense counsel now communicates directly with the prosecutor or the MFCU investigator, in place of the informal back-and-forth that characterized the audit phase.

Why Early Legal Counsel Is Critical

It is critical that healthcare providers promptly retain experienced healthcare defense counsel upon receiving a subpoena, audit notice, investigative request, or other government inquiry. Early legal intervention can protect the provider's rights, ensure appropriate responses to government requests, avoid inadvertent admissions, preserve relevant defenses, and allow counsel to communicate with investigators on the provider's behalf. Delaying legal representation can significantly affect the outcome of a matter and expose the provider to unnecessary risk.

How Health Law Alliance Can Help

Health Law Alliance defends pharmacies, physicians, and healthcare practices at both stages of this cascade, from the initial program integrity audit through a Medicaid Fraud Control Unit referral. We evaluate whether a payment suspension, a changed document request, or an interview request signals that a matter has turned criminal, and we structure the response accordingly. If your practice is facing a Medicaid audit, or has received a request that reads like more than an audit, Health Law Alliance's Medicaid audit defense team can help. Contact us today for a free consultation.