Medicaid Billing Audit Findings for U.S. SNFs and ALFs: A Practical Self-Diagnostic

A Medicaid claim can be paid and still create audit exposure.

For skilled nursing facilities and assisted living providers, audit risk often comes from a gap between the service delivered, the record that supports it, the resident’s eligibility and authorization status, and the payment ultimately billed or retained.

That does not mean a facility committed fraud. It means that if a state Medicaid program integrity unit, Medicaid managed-care plan, Recovery Audit Contractor, or government reviewer selects a claim, the facility must be able to show, quickly and completely, why the payment was appropriate.

For business office directors, administrators, CFOs, and revenue-cycle leaders, the most useful question is not:

What are the most common Medicaid billing mistakes?

It is:

If an auditor selected five recent Medicaid claims today, what would our files prove?

Key Takeaway: Audit readiness is not a compliance binder. It is the ability to retrieve a complete, internally consistent, state- and payer-appropriate claim file quickly enough to support payment.

Why Medicaid documentation matters

Medicaid payment integrity is heavily dependent on documentation.

CMS reported a national Medicaid improper payment rate of 6.12%, representing an estimated $37.39 billion in federal improper payments for fiscal year 2025. CMS attributed 77.17% of Medicaid improper payments to insufficient documentation, while emphasizing that an improper payment does not necessarily mean fraud or abuse occurred. (Read CMS’s FY 2025 Improper Payments Fact Sheet).

CMS’s Payment Error Rate Measurement, or PERM, program reviews state Medicaid and CHIP programs on a rotating basis. Improper-payment findings can involve missing documentation, insufficient documentation, eligibility-verification gaps, incorrect payment, or other deviations from program requirements. (Read CMS’s explanation of improper-payment measurement).

For SNFs and ALFs, this matters because Medicaid claims are rarely supported by one document.

A claim may depend on a combination of:

• Medicaid eligibility for the billed dates
• Payer and program assignment
• Resident admission and census status
• Level of Care documentation
• Prior authorization or continued-stay approval, where required
• PASRR records for relevant Medicaid-certified SNF admissions
• Physician orders, nursing records, medication administration records, therapy notes, and care-plan documentation
• MDS or other assessment data where applicable
• HCBS waiver or service-plan records for applicable assisted living or community-based services
• Patient liability or share-of-cost calculations
• Accurate coding, billing units, modifiers, and claim dates
• Remittance advice, claim adjustments, and appeal documentation

If these records do not align, the facility may have difficulty defending payment even if appropriate care was delivered.

What audit activity can look like

Medicaid program integrity oversight can take several forms:

• State Medicaid agency audits
• State Medicaid Office of Inspector General reviews
• Managed-care plan audits
• Utilization review
• Payment integrity review
• Provider enrollment review
• Post-payment review
• Medical-record request
• Recovery Audit Contractor activity
• Program-specific waiver or HCBS review
• Focused review after a billing pattern, complaint, or referral

Not every state uses the same audit approach, terminology, sampling method, provider category, or reporting format. The right preparation starts with the state Medicaid program, relevant MCOs, provider manuals, and audit notices that apply to your facility.

Texas is one public example of active nursing-facility review activity. In its fiscal year 2026 second-quarter report, the Texas Health and Human Services Office of Inspector General reported identifying $2,879,983 in nursing-facility utilization-review overpayments for recovery and collecting $427,206 in the same quarter. (See the Texas HHS OIG FY 2026 Q2 quarterly report).

The Texas figures do not establish a national nursing-facility error rate. They do show that nursing-facility utilization review is an active program-integrity function with real financial consequences.

Audit readiness should be treated as an operating discipline—not something that starts when a records request arrives.

The five-point Medicaid billing self-diagnostic

Take five recent Medicaid claims from your actual workflow. Do not choose the easiest claims or the best-organized charts.

For each claim, ask the following questions.

1. Can the file independently support the billed service?

An auditor reviews what is in the record, not what staff remember happened.

For each sampled claim, confirm that the documentation supports:

• The resident’s presence or eligibility for the billed date of service
• The service, level of care, or accommodation billed
• The clinical need for the service where required
• The provider’s role and qualifications where relevant
• Required orders, assessments, care plans, or authorizations
• The dates, units, modifiers, and codes submitted on the claim

If the explanation depends on a staff member saying, “We know the care occurred,” the record may not be strong enough for an external review.

Self-test: Can an independent reviewer understand the clinical and billing rationale without needing a verbal explanation from your team?

2. Do clinical records and billing records tell the same story?

Internal inconsistency creates avoidable risk.

Review whether the following align with the selected dates of service:

A mismatch does not always mean a claim is wrong. It does mean the file needs investigation before an external reviewer identifies the gap first.

3. Was coverage valid for the exact dates billed?

Checking Medicaid eligibility only at admission is not enough.

Coverage may change because of:

• Eligibility redetermination
• Managed-care plan assignment or disenrollment
• Change in payer source
• Spend-down or patient-liability update
• Waiver or HCBS program status
• Level of Care or authorization expiration
• Medicare exhaustion or coordination-of-benefits change
• Resident discharge, transfer, leave, or bed-hold status
• Retroactive Medicaid approval or termination

For each sampled claim, verify the resident’s coverage, program, payer, authorization, and billing status for the specific dates of service on the claim.

Self-test: Can your team produce the eligibility response, plan assignment, authorization, or program-status record that supports each billed date?

4. Can you retrieve the full file quickly?

A complete chart is not useful if it takes days to locate the records.

Test retrieval, not just document existence.

For a random claim, ask the responsible team to assemble a complete support file that includes:

• Claim and claim-submission confirmation
• Remittance advice, adjustment, or payment record
• Eligibility and payer-verification evidence
• Authorization and Level of Care records, where required
• PASRR documentation for applicable SNF admissions
• Supporting clinical records
• Resident liability documentation
• Relevant correspondence with the payer, state, MCO, or case manager
• Any corrected claim, appeal, or reconsideration records

Set an internal retrieval target that reflects your actual audit and payer-response obligations. Many organizations use a 24- to 48-hour internal goal, but the external deadline will depend on the payer or reviewing agency.

Self-test: Can your facility assemble an indexed, reviewer-ready claim packet before the external response deadline becomes urgent?

5. Does the file meet your state and payer requirements?

Federal Medicaid rules establish important standards, but state Medicaid agencies and managed-care plans may apply additional requirements.

The state-specific elements may include:

• Nursing-facility Level of Care documentation
• Prior authorization or concurrent review
• PASRR process and retention requirements
• Patient liability calculations
• Minimum Data Set timing and assessment rules
• State-specific billing codes, modifiers, and units
• HCBS waiver enrollment, service plan, and EVV evidence
• Provider enrollment and revalidation requirements
• Documentation format and retention rules
• Timely filing, corrected claim, reconsideration, and appeal requirements

A claim file that appears complete under a general internal standard may still be incomplete for a specific state program or MCO.

What can happen after an audit finding

An audit finding is not always final. The provider may have an opportunity to submit records, clarify facts, dispute an error, correct a claim, appeal a determination, or establish a repayment arrangement, depending on the authority conducting the review and the applicable program rules.

Potential outcomes may include:

• Request for additional records
• Claim adjustment or recoupment
• Denial of payment
• Refund demand
• Corrective action plan
• Provider education
• Prepayment review
• Payment hold
• Referral for additional review
• Repayment agreement
• Administrative appeal or hearing process

The notice itself matters. It typically identifies the claims, record-request deadline, scope, audit period, alleged issue, appeal rights, and response instructions.

Do not treat an audit notice as a routine billing message. Assign ownership immediately and preserve the relevant record set.

About extrapolation

Some federal and state audit programs may use statistical sampling and extrapolation when permitted by law and program policy. In those cases, a reviewer examines a sample of claims and may estimate an overpayment across a larger universe of claims.

Extrapolation is not automatic in every audit. The methodology, sample size, confidence standard, appeal rights, and provider obligations vary by program and jurisdiction.

The practical risk is still important:

A small number of unsupported claims can create exposure beyond the individual claims reviewed if the audit program has authority to extrapolate.

That is why internal sample reviews should focus on recurring patterns, not merely on correcting one isolated claim.

Build an audit-ready operating process

A facility does not need to audit every claim manually. It needs a repeatable process that finds meaningful documentation and payment risk early.

Use a quarterly sample review

At least quarterly, sample a mix of:

• Medicaid fee-for-service claims
• Medicaid managed-care claims
• New admissions
• Continued-stay claims
• Higher-acuity residents
• Claims with authorizations
• Claims with resident liability
• Retroactive Medicaid claims
• HCBS or assisted-living claims, where applicable
• Recently denied, adjusted, or recouped claims

Review the sample against the five-point diagnostic.

Track:

• Number of claims reviewed
• Documentation gaps identified
• Eligibility or authorization issues
• Coding, unit, or payer setup issues
• Record-retrieval time
• Root cause
• Dollar value at risk
• Corrective action owner
• Completion date
• Re-test result

Create a claim-support packet

For claims with higher audit or payment risk, create an indexed support packet that can be assembled consistently.

A practical structure may include:

• Resident and claim summary
• Eligibility and payer verification
• Authorization, LOC, PASRR, waiver, or program documents as applicable
• Clinical documentation and orders
• MDS or assessment records where relevant
• Resident-liability documentation
• Claim, remittance, and adjustment records
• Denial, appeal, or correspondence records
• Internal review notes and corrective action

This does not replace the legal medical record. It makes the supporting evidence easier to retrieve, review, and defend.

Separate correction from concealment

When internal reviews identify an error, preserve the original record and follow applicable correction policies.

Do not delete, backdate, alter, or recreate documentation to make a file appear complete after the fact. Clinical-record corrections should follow facility policy, state requirements, professional standards, and legal guidance.

The correct response is to:

• Identify the issue
• Determine whether the claim is affected
• Correct records appropriately and transparently, if permitted
• Correct, void, rebill, refund, or appeal the claim as required
• Identify the root cause
• Update the workflow
• Train the responsible team
• Re-test the process

Three audit-readiness failures to prevent

The scenarios below are illustrative. They are not client case studies or legal advice.

1. The claim was paid, but the record did not support the billed level

A nursing facility had documentation for the resident’s care, but the nursing notes, assessment information, and billed payment classification were inconsistent.

The issue was not that the resident received no care. The issue was that the record did not clearly support the specific payment level claimed.

Prevention: Review payment-relevant assessment data and supporting clinical records together before billing and at defined intervals after payment.

2. The documents existed but could not be retrieved

A records request arrived for a set of Medicaid claims. Some records were in the EHR, others were stored in a billing platform, and payer correspondence lived in individual email accounts.

The facility spent valuable time locating and reconciling documents instead of reviewing the claims themselves.

Prevention: Use a standardized claim-support structure and conduct periodic retrieval drills using random claim samples.

3. A state requirement was missed

A facility followed its general Medicaid documentation checklist but did not include a state- or payer-specific authorization, service plan, or program status record.

The clinical care was appropriate, but the file did not meet the specific payment requirement.

Prevention: Maintain current state and payer documentation checklists, monitor provider notices, and update workflows after recurring denial or audit-feedback trends.

How LTCPro supports audit readiness

LTCPro helps U.S. skilled nursing and assisted living facilities strengthen the revenue-cycle controls behind audit-ready Medicaid billing.

Depending on the facility’s state, payer mix, systems, service lines, and available documentation, LTCPro can help:

• Review a sample of claims for documentation, eligibility, authorization, and payment-support gaps
• Organize claim-support packets and retrieval procedures
• Track payer-specific documentation, authorization, and timely-filing requirements
• Improve Medicaid eligibility and payer-verification controls
• Build worklists for claims, denials, AR, authorizations, and missing documentation
• Identify recurring remittance, payment-adjustment, and denial patterns
• Support claims correction, follow-up, appeal preparation, and AR escalation
• Improve coordination between admissions, clinical, business-office, billing, and finance teams
• Create audit-readiness reporting for leadership review

LTCPro does not conduct government audits, provide legal advice, make clinical determinations, replace required independent assessors, or guarantee an audit outcome. Facilities should involve qualified legal counsel, compliance leadership, clinical teams, and applicable state or payer contacts when responding to an actual audit or overpayment notice.

LTCPro’s role is to help facilities identify and improve the operational gaps that can turn routine Medicaid claims into preventable audit exposure.

FAQ

What do Medicaid billing audits look for in skilled nursing facilities?

Audits may review whether the resident was eligible, whether the service or level of care was supported, whether required authorizations and assessments were in place, whether documentation supports the claim, whether patient liability was handled correctly, and whether the provider complied with state and payer billing rules.

Are Medicaid improper payments always fraud?

No. CMS states that improper payments do not necessarily indicate fraud or abuse. They can result from insufficient documentation, eligibility-verification issues, missing records, administrative error, overpayment, or underpayment. CMS reported that 77.17% of Medicaid improper payments in fiscal year 2025 were attributed to insufficient documentation. (Read CMS’s FY 2025 improper-payment fact sheet).

How often should an SNF or ALF conduct an internal Medicaid billing audit?

A quarterly sample review is a practical minimum for many facilities. Higher-risk operations may need monthly targeted reviews of new admissions, Medicaid-pending accounts, retroactive claims, high-acuity claims, authorization-dependent services, or payers with recurring denial patterns.

What is a Medicaid utilization review audit?

A utilization review examines whether services, level of care, payment, and documentation meet applicable Medicaid program requirements. The exact scope differs by state and payer. Texas, for example, publicly reports nursing-facility utilization-review recovery activity through its Health and Human Services OIG. (See the Texas HHS OIG quarterly report).

Can a Medicaid audit use sample extrapolation?

Some audit programs may use statistical sampling and extrapolation if permitted by their governing authority and methodology. It is not universal. Review the audit notice, program rules, calculation method, and appeal rights carefully, and seek legal or compliance advice when necessary.

How quickly should a facility retrieve Medicaid claim records?

The external deadline depends on the reviewer and request. Internally, aim to assemble an indexed claim-support packet within 24 to 48 hours so your team has time to review quality and respond accurately before the official deadline.

What documents should be included in a Medicaid claim-support packet?

Include eligibility and payer verification, authorizations and LOC documentation where applicable, PASRR records for relevant SNF admissions, clinical records supporting the service, resident-liability documentation, claim-submission records, remittance advice, denial or adjustment records, and relevant payer correspondence.

Key takeaways

• Medicaid audit exposure is often a documentation and workflow issue, not proof of fraud. CMS reported a 6.12% Medicaid improper-payment rate for fiscal year 2025, with 77.17% attributed to insufficient documentation. (Read CMS data).
• A paid claim can still be vulnerable if the clinical record, eligibility, authorization, payer information, resident liability, and billed service do not align.
• State Medicaid agencies, MCOs, and program-integrity entities use different review models. Confirm the rules and audit processes that apply to your facility.
• Run a quarterly five-point review: supporting documentation, internal consistency, date-specific coverage, retrieval readiness, and state/payer-specific requirements.
• Treat record retrieval as a tested operational capability, not an assumption.
• Some audit programs may use statistical extrapolation, making recurring file weaknesses more consequential than a single isolated claim.
• LTCPro can help facilities strengthen the billing, documentation, authorization, AR, and claims-support processes that make Medicaid audit responses faster and more defensible.