A letter from the Office of the Medicaid Inspector General can turn an ordinary Tuesday into a stressful one. If you treat Medicaid patients in New York, understanding what triggers an OMIG audit and how to respond is not optional background reading.
It can be the difference between a manageable paperwork exchange and a recoupment demand that threatens your practice. Many audits start with a data flag, not an accusation of wrongdoing, and a careful, timely response can resolve many findings before they escalate.
Mathew Levy, Esq., has spent years guiding physicians through this kind of state scrutiny.
What Counts as an OMIG Audit, and Why It Targets Physicians?
OMIG is an independent office inside the New York State Department of Health, and its job is to protect the integrity of the state’s Medicaid program. It does that through investigations, reviews, and audits of providers, including physicians who bill Medicaid directly or through a managed care plan.
OMIG focuses specifically on New York Medicaid billing. Its 2026 enforcement priorities span long-term care, behavioral health, home care, and, new this year, a direct medical care review area confirming physician visits and orders across both fee-for-service and managed care billing.
What Usually Triggers an OMIG Audit in 2026?
OMIG rarely picks a physician at random. Audits typically start when a pattern in the data looks different from what a reviewer expects to see. Common triggers include:
- Billing volume or coding levels that run well above peers in the same specialty and region.
- Documentation that does not support the level of service billed, especially for evaluation and management visits.
- A sharp jump in claims for a specific procedure or service in a short period.
- A referral from a Medicaid managed care plan, a patient complaint, or a whistleblower tip.
- Participation in a service area named in that year’s OMIG Work Plan, such as telehealth or behavioral health services.
None of these flags prove wrongdoing on their own.
Desk Audit or Field Audit: Knowing Which One You’re In?
The format of the audit shapes how much warning you get. A desk audit happens by mail or electronic submission, and it does not always include a conversation before the draft findings arrive.
A field audit works differently. It includes an on-site visit, an entrance conference where OMIG explains what it is reviewing, and an exit conference where preliminary findings get discussed before anything is finalized.
Either way, audits proceed under New York’s Medicaid provider regulations, and providers agree to permit them simply by enrolling in the program.
The Draft Audit Report and the 30-Day Response Window
When OMIG believes it has found an overpayment, it sends a Draft Audit Report describing each disallowed claim and the reason behind it. Under 18 NYCRR Section 517.5, a physician has 30 days from receipt to respond in writing, and receipt is presumed five days after the report’s date.
A response should address every contested claim individually, attach the supporting records OMIG asked for, and state plainly which findings you dispute and why.
One detail many physicians miss: if you review your own billing while an audit is open and find a separate overpayment unrelated to that audit, your self-disclosure obligation still runs on its own 60-day clock.
Eligibility for that voluntary program depends on the overpayment being unconnected to the audit already underway, so the two tracks need separate, careful handling rather than one combined letter.
Responding the Right Way When an OMIG Letter Arrives
Start by confirming exactly which claims and time period the audit covers, then pull the supporting medical records, prescriptions, and billing data for each flagged claim.
A physician should match every disputed finding to specific documentation rather than offering a general explanation.
A Medicaid audit can expand into a broader inquiry involving the Medicaid Fraud Control Unit or federal agencies. Having counsel who has negotiated with the U.S. Attorney’s Office on healthcare billing matters can change the posture of the response from day one.
Attorney Mathew J. Levy is recognized by Super Lawyers for healthcare transactional and regulatory work. He has negotiated settlement agreements with federal prosecutors for clients under healthcare-fraud investigation. That experience can matter if an OMIG audit ever reaches that point.
What Happens After the Final Audit Report?
If OMIG is not persuaded by your response, or if no response arrives, it issues a Final Audit Report setting the confirmed overpayment amount and explaining your hearing rights. From that date, a physician has 60 days to submit a written request for an administrative hearing.
A few practical notes shape what comes next:
- Do not void or adjust claims in response to a Final Audit Report, since that does not resolve the matter or satisfy repayment obligations.
- Keep every record related to the audited claims for at least six years, since destroyed or missing records create their own reporting duty.
- A hearing request preserves your right to challenge the findings before an administrative law judge. Missing the 60-day window generally forecloses the chance to contest the findings at all.
Frequently Asked Questions
How far back can an OMIG audit reach into my billing history?
OMIG generally reviews claims within the period providers are required to keep records, which is six years under state Medicaid regulations. A physician should assume any claim within that window could be pulled into a sample.
Can I negotiate the overpayment amount before a Final Audit Report issues?
Yes, a well-documented response to the Draft Audit Report is the main opportunity to reduce or eliminate findings before they become final. Once OMIG issues its determination, challenging the amount shifts to the administrative hearing process rather than informal negotiation.
Does an OMIG audit affect my Medicaid enrollment or license?
An audit on its own does not automatically affect enrollment, but findings that suggest something beyond a billing error can lead to a separate exclusion proceeding or a referral to New York’s physician licensing authority. That is a distinct process from the audit itself, with its own notice and appeal rights.
What if I find a billing mistake on my own, outside of any audit?
Physicians are required to report, return, and explain identified overpayments within 60 days under Social Services Law Section 363-d, separate from any active audit. Voluntary disclosure is handled through OMIG’s Self-Disclosure Program, and good faith self-reporting can factor into how any enforcement action is resolved.
Do I need a lawyer for a desk audit, or only for a field audit?
No rule requires a lawyer for either type of audit, but having one is usually the safer choice. A desk audit reviews records you send in, and a field audit happens on site, but either can lead to a large recoupment demand. Deadlines to respond or appeal are often short, and a lawyer can help you meet them and protect your appeal rights.
Weiss Zarett Brofman Sonnenklar & Levy, P.C: Your New York Healthcare Law Firm
Facing an OMIG letter, draft report, or hearing deadline is unsettling, especially when the paperwork arrives with little warning and a short fuse attached.
The firm’s healthcare regulatory attorneys, including Mathew Levy, Esq., who brings over 25 years of healthcare transactional and regulatory experience, working directly with physicians navigating these Medicaid compliance questions. If an audit letter or hearing deadline is sitting on your desk right now, the next step matters.
