Compliance

How to Prepare Your Home Care Agency for a Medicaid Audit

BridgeCare OS · 2026-06-06 · 7 min read

Is Your Home Care Agency Ready for a Medicaid Audit? Here's How to Find Out Before an Auditor Does

Caregiver with elderly patient at home
Photo by RDNE Stock project via Pexels

The letter arrives without warning. A state auditor is requesting access to your billing records, caregiver documentation, and client files — and you have 30 days to respond. For many home care agency owners, this scenario triggers immediate panic. But for those who have made audit readiness a routine part of their operations, it's little more than an administrative exercise.

Medicaid audits are becoming increasingly common across the home care industry. As Medicaid spending on home and community-based services (HCBS) continues to rise — topping $110 billion annually in the United States — state and federal agencies are intensifying their oversight efforts. The Office of Inspector General (OIG) has consistently flagged home health and personal care services as high-risk areas for fraud, waste, and abuse.

The good news? A Medicaid audit doesn't have to be a crisis. With the right systems, documentation habits, and a proactive mindset, you can walk into any audit with confidence. This guide breaks down exactly what auditors look for and how to make sure your agency is always prepared.

Understanding the Types of Medicaid Audits You May Face

Home care professional assisting patient
Photo by RDNE Stock project via Pexels

Before you can prepare effectively, it helps to understand what kind of audit you might be dealing with. Not all audits are the same, and each comes with different focuses and timelines.

Routine Post-Payment Reviews

These are the most common type. After Medicaid has already paid your claims, auditors review a sample of them to verify that services were actually rendered, properly authorized, and correctly billed. Discrepancies can result in repayment demands — sometimes with interest and penalties.

Prepayment Review (Prepayment Audits)

Some states place agencies under prepayment review if billing anomalies are detected. This means claims are scrutinized before payment is released, which can severely impact your agency's cash flow. Avoiding this status requires clean billing from the start.

RAC Audits (Recovery Audit Contractors)

Recovery Audit Contractors are hired by states and CMS to identify overpayments. RAC auditors work on a contingency basis — they get paid a percentage of what they recover — so they are highly motivated to find problems. These audits can go back several years.

Program Integrity Investigations

If there's a complaint, a tip to a fraud hotline, or a statistical outlier in your billing patterns, you may face a more intensive program integrity investigation. These can involve interviews, site visits, and law enforcement in serious cases.

What Medicaid Auditors Actually Look For

Compassionate care hands
Photo by RDNE Stock project via Pexels

Understanding what triggers scrutiny — and what auditors specifically examine — is the foundation of smart home care audit preparation. Here are the most common red flags and documentation requirements:

Building an Audit-Ready Operation: Step-by-Step

Step 1: Conduct Internal Mock Audits Regularly

Don't wait for a state auditor to find problems first. Schedule internal chart reviews at least quarterly. Pull a random sample of client records — including service notes, authorizations, billing claims, and corresponding EVV data — and verify that everything lines up. Document your findings and address gaps immediately.

Assign this responsibility to a compliance officer or a designated staff member. Even in smaller agencies, having one person own this process makes a significant difference.

Step 2: Get Your EVV Compliance Locked Down

Electronic Visit Verification is no longer optional. As of 2023, states face federal funding penalties for non-compliance with EVV requirements, meaning they are actively auditing agencies for proper EVV use. Make sure your caregivers understand how to clock in and out correctly, that your EVV system captures location and service type accurately, and that exceptions are documented properly.

Platforms like BridgeCare OS integrate EVV directly into scheduling and billing workflows, so clock-in data flows seamlessly into your billing records — reducing the risk of discrepancies that auditors love to find.

Step 3: Organize and Standardize Your Documentation

One of the most common reasons agencies fail audits isn't fraud — it's disorganization. If you can't produce a document, it might as well not exist. Create a standardized documentation checklist for every client file, including:

Store these records in a HIPAA-compliant system where they can be retrieved quickly. If an auditor requests records from three years ago on a Friday afternoon, you need to be able to produce them without a crisis.

Step 4: Verify Medicaid Eligibility Before Every Month of Service

Clients can lose Medicaid eligibility due to changes in income, residency, or coverage gaps — sometimes without any notice to your agency. Billing for services delivered during a period of ineligibility is a recoverable overpayment, even if you had no idea. Build a monthly eligibility verification check into your billing workflow and document every verification with a timestamp.

Step 5: Train Your Billing Staff on Medicaid-Specific Rules

Medicaid billing rules vary by state, by waiver program, and by service type. A billing error that costs you $200 per claim can add up to tens of thousands of dollars across a year — and trigger a full-scale audit. Invest in ongoing training for your billing team and subscribe to your state Medicaid program's provider updates so you're never caught off guard by rule changes.

Key areas to train on include:

Step 6: Maintain a Caregiver Compliance File for Every Employee

Auditors will pull caregiver qualification records for the specific employees who delivered services on billed claims. For each caregiver, maintain a file that includes:

Pro Tip: Check the OIG exclusion database and your state's Medicaid exclusion list monthly — not just at hire. Employing an excluded individual, even unknowingly, can result in significant penalties and recoupment of all claims that person was involved in delivering.

Step 7: Respond Promptly and Professionally to Audit Requests

If you do receive an audit notice, how you respond matters. Here are the ground rules:

  1. Don't ignore it. Missing a deadline can result in automatic findings against you.
  2. Engage a healthcare attorney or consultant with Medicaid audit experience before you respond.
  3. Only provide what is requested. Don't volunteer additional records or information beyond the scope of the request.
  4. Keep copies of everything you submit to auditors.
  5. Track all communications with dates, names of auditors, and summaries of conversations.
  6. Exercise your appeal rights. If you receive an adverse finding, you have the right to appeal — and many agencies successfully overturn findings on appeal with proper documentation.

How Technology Can Reduce Your Audit Risk

Many of the documentation and compliance gaps that auditors find come down to manual, fragmented systems — paper timesheets that don't match billing, spreadsheets with missing entries, or notes stored in different places. Modern home care management platforms dramatically reduce this risk by connecting your scheduling, EVV, documentation, and billing in one unified system.

When every caregiver clock-in automatically creates an EVV record, which flows into a service note prompt, which then populates a billing claim — the margin for human error shrinks significantly. Agencies using BridgeCare OS benefit from this kind of end-to-end workflow, making audit-readiness a byproduct of daily operations rather than a separate, stressful project.

Creating a Culture of Compliance

Ultimately, the most audit-ready agencies aren't the ones scrambling to organize files when a letter arrives — they're the ones where compliance is woven into everyday culture. This means:

This kind of culture doesn't happen overnight, but it starts with clear expectations, the right tools, and consistent follow-through from leadership.

Final Thoughts

A Medicaid audit doesn't have to be the moment your agency dreads. With strong documentation practices, airtight EVV compliance, regular internal reviews, and a technology platform that keeps your records connected and accessible, you can face any auditor with confidence.

The agencies that struggle most aren't necessarily doing anything wrong — they're just unprepared. And in the world of Medicaid compliance, being unprepared is a risk you simply can't afford. Start building your audit-ready operation today, and you'll sleep a lot better every time an envelope arrives from the state.

#medicaid audit #home care audit preparation #compliance #evv #billing

Ready to modernize your home care agency?

BridgeCare OS unites scheduling, EVV, billing, and family transparency on one platform. Start your 14-day free trial — no credit card required.

Start Free Trial →