An audit letter asks for twenty charts. Several months later a demand arrives for $780,000, based on errors found in nine of them, extrapolated across three years of claims. The practice's actual overpayment, if the auditor is right about all nine, is a few thousand dollars. The rest is statistics.
This is the mechanism that closes medical practices in New York, and it is defensible, but only within deadlines that are short and unforgiving. The Law Offices of Albert Goodwin represents providers in audits, overpayment demands, and payor disputes in New York City.
The first thing to establish is the source of the audit, because the procedure and the deadlines differ entirely.
Medicare overpayment determinations move through five levels: redetermination by the contractor, reconsideration by a Qualified Independent Contractor, a hearing before an Administrative Law Judge at the Office of Medicare Hearings and Appeals, review by the Medicare Appeals Council, and judicial review in federal court.
Two points matter more than the rest. First, each level has a filing deadline, generally measured in days from receipt of the prior decision, and missing one can end the appeal regardless of the merits. Second, filing at the first two levels within the specified periods can stop recoupment from beginning while the appeal proceeds, which is often the difference between a practice that survives the process and one that does not. Recoupment by offset against current claims payments is what actually causes providers to fail, because it removes operating cash while the appeal is pending. Interest accrues on amounts ultimately upheld, which is a real consideration in deciding how far to appeal.
The ALJ level is where most successful appeals are won, because it is the first stage at which the provider appears before an adjudicator who is not the entity that made the determination, and it permits live testimony including from a treating physician and a coding expert. Backlogs at that level have historically been long, which cuts both ways.
Statistical extrapolation converts a small sample into a large demand, and challenging it is frequently the highest-value work in an audit defense. Federal rules constrain when extrapolation may be used, generally requiring a determination of a sustained or high level of payment error or that documented educational intervention has failed. Where it is used, the sampling methodology must be statistically valid, and it frequently is not.
Grounds we examine: whether the universe of claims was correctly defined; whether the sample was truly random and adequately sized; whether the sample frame included claims that should have been excluded, such as claims already adjusted or outside the audit period; whether stratification was appropriate; whether the point estimate rather than the lower bound of the confidence interval was used; and whether the error rate finding that justified extrapolation was itself supported. A successful methodological challenge can eliminate the extrapolated portion entirely, reducing a seven figure demand to the actual sampled overpayment.
Commercial audits are governed primarily by the provider agreement, but New York's Insurance Law places limits that providers frequently do not invoke.
New York restricts how far back an insurer may reach to recover an overpayment, generally barring a request for reimbursement of an overpayment made more than twenty-four months after the original payment, subject to exceptions including cases involving fraud or abusive billing and coordination of benefits situations. Insurers must also provide written notice stating the basis for the recovery before offsetting. Separately, New York's prompt payment law requires insurers to pay or deny clean claims within stated periods and provides for interest on late payments, which is a counterweight worth asserting where the payor is both auditing and paying slowly.
Provider agreements themselves are worth reading closely for the audit provision: the notice required, the response period, the internal appeal process and its deadlines, whether offset is permitted during an appeal, and any arbitration clause. Many agreements impose a short window to dispute an audit finding, after which the provider is deemed to accept it.
Prepayment review requires the provider to submit documentation with every claim before payment, which delays cash flow severely even where claims are ultimately paid. Payment suspension, available in program integrity matters on a credible allegation of fraud, stops payment entirely. Both are operationally existential for a practice, and both have procedures for challenge and for demonstrating that the underlying concern has been addressed. Responding with a documented corrective action plan, rather than only disputing the findings, is often what shortens the period.
Federal law requires a provider that has identified an overpayment from Medicare or Medicaid to report and return it within sixty days of identification. An overpayment retained beyond that period can be treated as an obligation under the False Claims Act, which carries treble damages and per-claim penalties. This transforms what would be a billing correction into potential fraud exposure.
The practical implication is important and frequently mishandled: when an internal review or an audit reveals a genuine billing error, the practice has an affirmative obligation, and the clock runs from identification, which includes the point at which the provider should have determined the overpayment through reasonable diligence. Self-disclosure protocols exist at the federal level and through OMIG in New York, and a voluntary disclosure handled properly generally produces a far better outcome than the same issue discovered later by an auditor. That decision should be made with counsel, because a disclosure is an admission and its scope needs to be defined carefully.
Payors sometimes respond to an audit by terminating the provider agreement, often without cause under a notice provision. For a practice with substantial volume from one plan, that is a larger event than the overpayment itself. Where the payor participates in Medicare Advantage or state programs, procedural protections and appeal rights may apply, and provider agreements frequently contain their own notice and hearing provisions. Where the termination is with cause based on the audit findings, defending the findings and the termination are the same project. Reporting consequences also follow, including disclosure obligations on credentialing applications to other payors and hospitals.
See Stark and anti-kickback compliance, HIPAA and records, and collecting unpaid receivables.
The most consequential decisions in an audit are made in the first response, before any demand exists: which records are produced, how they are organized, and what is said about them. Practices that hand over charts and wait are usually reacting to a demand months later with fewer options. If you have received a records request, an overpayment determination, a prepayment review notice, or an SIU letter, contact us before responding.
Call the Law Offices of Albert Goodwin at 212-233-1233 for a consultation.
You can contact us by phone at 212-233-1233 or by email at [email protected].