Payment can be suspended on a credible allegation of fraud — before any finding is made.
Medicaid audits arrive on a state-run track: state Medicaid agency program-integrity audits, state OMIG (Office of the Medicaid Inspector General) reviews, Medicaid Fraud Control Unit (MFCU) investigations, and Medicaid managed care organization (MCO) audits. A federal overlay runs alongside it — UPICs (Unified Program Integrity Contractors) audit Medicaid claims under CMS contract, and federal rules at 42 CFR Part 455 govern every state program.
Medicaid is state-administered and jointly funded, and federal enforcement is being pushed down to the states. The identity of the auditing body shapes the procedural framework and the realistic exposure. The posture determines whether the state suspends every Medicaid payment under 42 CFR 455.23 on a credible allegation of fraud, whether extrapolation turns a small claim sample into a program-wide overpayment demand, and whether the matter is heading to the MFCU as a criminal referral.
Health Law Alliance defends Medicaid audits and investigations for pharmacies, physicians, hospitals, home health, hospice, DME, and behavioral health providers nationwide. Our defense framework runs from the document request response through extrapolation challenges, payment-suspension good-cause submissions, state fair hearings and administrative appeals, and the self-disclosure decision where one has to be made.
.png)
A payment suspension under 42 CFR 455.23 can stop every Medicaid payment on a credible allegation of fraud before any finding is made. Extrapolation turns a small claim sample into a program-wide overpayment demand. And because state Medicaid agencies are required to refer suspected fraud to the Medicaid Fraud Control Unit, what looks like a billing audit can become a criminal investigation. The defense posture has to address all three from the first notice forward.
Under 42 CFR 455.23, a state Medicaid agency must suspend payments to a provider when it determines there is a credible allegation of fraud, unless a good-cause exception applies. The suspension covers every Medicaid payment, not just the claims under review, and it can arrive with little or no advance notice — before any overpayment finding and before any charge. Most pharmacies and practices with a significant Medicaid mix cannot operate through an extended suspension. The immediate defense objective is the good-cause submission: demonstrating to the agency that suspension, in whole or in part, is not warranted while the underlying review is defended.
State Medicaid audits use statistical extrapolation the same way federal contractors do: the auditor reviews a sample of claims, calculates an error rate, and projects it across the full claim universe for the audit window. A modest sample finding can produce a seven-figure extrapolated overpayment demand. State methodologies vary widely — sample frames, sample sizes, and projection formulas differ by state and by contractor — and that variation is where the defense lives. A successful methodology challenge in the administrative appeal can reduce the demand to the actual sample-claim amount, typically a small fraction of the extrapolated number.
The MFCU (Medicaid Fraud Control Unit) is not an auditor — it is a criminal law-enforcement unit, typically housed in the state Attorney General's office. Federal regulations require state Medicaid agencies to refer credible allegations of fraud to the MFCU, so an audit finding that suggests intent moves from the program-integrity track to the criminal track. MFCUs issue subpoenas, execute search warrants, and coordinate with HHS-OIG and DOJ on parallel federal exposure. The audit is rarely the end of the matter when findings cross the referral threshold; the audit defense and the criminal defense have to run as one matter from the first contact.
Medicaid is one program in name and fifty-one programs in practice. Each state administers its own program under a federally approved state plan, with its own audit apparatus, its own appeal procedure, and its own deadlines — all overlaid by federal program-integrity rules at 42 CFR Part 455. Defense counsel that treats a Medicaid audit like a Medicare audit misses the procedural posture and the realistic exposure.
Our bench includes a former Assistant U.S. Attorney with DOJ Director's Award recognition and senior healthcare-company counsel. We have defended program-integrity audits and investigations across state Medicaid agencies, OMIG, MFCU, and UPIC review, challenged extrapolated recoupment demands, and coordinated audit defense with parallel False Claims Act and criminal exposure. This is the protocol.
From the day the notice arrives: identify the auditing body (state Medicaid agency, OMIG, MFCU, UPIC, MCO special investigation unit), the audit type, the claim window covered, and the document request as written. Most document requests can be narrowed through written response on scope and timing. We conduct a privileged pre-production review of every document before it leaves the practice — because state Medicaid agencies are required to refer suspected fraud to the MFCU, the production has to be built with potential criminal review in mind.
When the auditor issues draft or final findings: respond on the substantive defense for each flagged claim and challenge the statistical methodology where extrapolation is used. State extrapolation practices vary — sample frame, sample size, projection formula — and that variation makes the methodology frequently vulnerable. A successful challenge at the rebuttal or exit-conference stage often reduces the overpayment demand by a meaningful percentage before the matter reaches the fair hearing.
Where the state has suspended payments under 42 CFR 455.23, we prepare the good-cause submission to lift or narrow the suspension while the underlying review is defended. On the appeal track, we file the state administrative appeal or fair hearing request within the state's deadline, build the substantive and statistical record for the hearing officer, and preserve the issues for state court review where the hearing does not resolve the matter. The record built at the earliest stage is the record the hearing officer reviews.
When the matter involves an MFCU investigation, a state or federal False Claims Act theory, or a potential criminal referral, the criminal defense (subpoena management, proffer decisions, target-letter response) runs in parallel with the audit defense as one coordinated matter. Where an overpayment has been identified, we counsel the 60-day repayment obligation and the self-disclosure decision — whether, when, and in what form to disclose. Our former-prosecutor bench coordinates the audit, civil, and criminal tracks to avoid admissions in one forum that hurt the defense in another.
State program-integrity units use claims data analytics, managed care referrals, and federal-state data sharing to identify providers for review. The following triggers are the most common predicates for a Medicaid audit document request, payment suspension, or MFCU investigation.
Outcomes are summarized for confidentiality. Client names, precise geography, and identifying facts are redacted.
Recoupment Reversed
Provider received a postpayment review finding with statistical extrapolation across a multi-year claim window. Health Law Alliance challenged the auditor's sample frame, sample size methodology, and projection application errors at the administrative rebuttal and appeal stages. The extrapolated recoupment demand was reduced to the actual sample-claim amount, a small fraction of the original number. The procedural record built at the rebuttal level supported the reduction without requiring a full hearing.
DOJ Declination
Healthcare company received a program-integrity referral that produced a Civil Investigative Demand from the DOJ Civil Division covering alleged $6M in false claims. Health Law Alliance produced documents under a negotiated rolling schedule, presented the factual rebuttal of the government's theory in a meeting with the line attorneys, and prepared a written submission addressing the materiality and falsity defects. DOJ declined both civil intervention and criminal referral. Early engagement, before the matter surfaces through other channels, is the highest-leverage window in any FCA matter.
Indictment Dismissed
Solo physician faced a multi-count federal indictment that included healthcare fraud counts following an upstream program-integrity referral to the local U.S. Attorney. Health Law Alliance filed responsive motions, built the procedural record, and challenged the government's theory through pre-trial motion practice; the indictment collapsed before trial. The audit-to-criminal escalation risk is real in matters where the auditor's findings include intent evidence; a unified defense across the administrative appeal and the parallel criminal track is the most efficient way to avoid the criminal exposure.
Attorney advertising. Prior results do not guarantee a similar outcome. Case summaries are generalized for confidentiality and are not a substitute for legal advice on your specific matter.
Anthony's background as a former federal prosecutor and executive for major healthcare companies provided a level of expertise and insight that made all the difference. His deep understanding of healthcare law, particularly in litigation and compliance matters, helped navigate complex legal issues with ease.
Seven questions that come up on almost every first call. The answers below are general; specific situations require privileged consultation.
Before you produce documents to the state, before a payment suspension freezes cash flow, before the matter reaches the MFCU, have a privileged conversation with attorneys who defend Medicaid audits and investigations across state agencies, OMIG, MFCU, and UPIC review. Free, confidential, no retainer.
