Health Care Defense Attorneys Offer a Legal Perspective on RAC Audits
In addition to the risk of facing a federal investigation, healthcare providers who participate in Medicare and Medicaid are also at risk for being targeted in a Recovery Audit Contractor (RAC) audit. These audits can have severe consequences, and providers need to be proactive about protecting themselves before, during, and after the process.
Originally launched as a demonstration in 2005 to satisfy the mandates of the Medicare Prescription Drug, Improvement, and Modernization Act of 2003, the Fee for Service (FFS) Recovery Audit Program is another tool in the government’s belt for combating Medicare and Medicaid fraud. Unfortunately, like the government’s other tools, the FFS Recovery Audit Program is often used against innocent providers.
If you are a healthcare provider facing an RAC audit, it is critical that you seek experienced legal representation. RAC audits can result in substantial financial liability; and, while there is an appeals process, it is far better to end the audit without a finding of liability as opposed to disputing audit results with the Centers for Medicare and Medicaid Services (CMS). Continue reading to learn seven important pieces of information about RAC audits, then contact The Criminal Defense Firm for a free consultation.
1. CMS’s Fee for Service Recovery Audit Program
Through the FFS Recovery Audit Program, CMS works with private auditing contractors who are granted the authority to investigate potential fraudulent reimbursement claims on behalf of the government. Originally established to combat fraud through Medicare (Parts A and B), the FFS Recovery Audit Program has been expanded to cover:
- Medicare (Parts A and B)
- Medicare Advantage (Part C)
- Medicaid
- Prescription Drug Plans (Part D)
Recovery audit contractors are charged with identifying any possible false or fraudulent claims submitted to Medicare or Medicaid. This includes (but is not limited to) claims involving:
- Reimbursement for non-reimbursable services (e.g., services that are not medically necessary)
- Coding errors
- Duplicate and triplicate billings
- Incorrect payments that have not been refunded
2. RAC Audits Target All Improper Medicare and Medicaid Reimbursement Claims
This last point cannot be emphasized enough. When you are the subject of an RAC audit, all of your Medicare and Medicaid receipts from the past three years are potentially on the table. While RAC audits are technically supposed to identify both overpaid and underpaid claims, when we discuss RAC compensation below you will learn why recovery audit contractors are much more aggressive in pursuing overpaid claims.
The FFS Recovery Audit Program has three stated purposes:
- To help providers avoid (unknowingly) submitting false and fraudulent claims,
- To help the CMS reduce waste, and
- To help protect taxpayers and future Medicare beneficiaries.
However, RAC audits are much more than just a preventative measure. They can also lead to substantial financial liability for providers accused of submitting false or fraudulent claims by a recovery audit contractor.
3. An Overview of the RAC Audit Process
Here is a brief overview of what healthcare providers can expect during the RAC audit process:
Step 1: You Will Receive a Demand Letter
The RAC audit process begins with the receipt of a demand letter. The letter will state that you have received an improper payment from Medicare or Medicaid, and it will state that you either need to pay a refund or else accept recoupment (which includes payment of interest).
Step 2: You Will Have to Deal with the RAC
At this point, unless you agree with the letter’s conclusions, you will need to work with the recovery audit contractor in order to avoid the need to file a formal appeal. This could involve providing records that challenge the auditor’s findings or taking other steps to prove that your billings have been legitimate. Healthcare providers can either challenge recovery audit contractor’s findings in their entirety or if called for under the circumstances dispute only certain allegations of impropriety.
Step 3: If the RAC Determines You Have Received Any Overpayments, You Will Be Required to Repay
It is important to understand that the original demand letter has consequences. While providers have the ability to work with recovery audit contractors (to a certain extent), once you receive a demand letter, you have to pay unless you can convince your RAC that you have not received any improper payments. In fact, if you do nothing in response to a demand letter, the government will recoup the claimed overpayments (with interest) automatically without your involvement.
4. Recovery Audit Contractors Operate on a Contingency-Fee Basis
Under the FFS Recovery Audit Program, recovery audit contractors operate on a contingency-fee-basis. This means that they get paid a percentage of any amounts they recover on behalf of Medicare or Medicaid. As a result, they are highly motivated to identify alleged overpayments, and with little oversight, they also have little incentive to put equal effort into identifying underpayments.
While this contingency-fee structure is ostensibly intended to further protect taxpayers and future beneficiaries by ensuring that CMS only pays for “successful” services, it ultimately results in pitting recovery audit contractor’s interests directly against those of Medicare and Medicaid providers.
5. Strategies for Avoiding Liability Due to RAC Audits
There are a number of measures, both proactive and reactive, that healthcare providers can take to minimize their exposure in the event of a RAC audit. Lack of focus on compliant billing practices and gaps in the process can lead to unintentional improper claims, and these need to be avoided as much as possible in order to reduce the risks of a “successful” RAC audit. Responding to recovery audit contractors appropriately is key as well, and providers should have systems in place that allow them to effectively and efficiently defend their Medicare and Medicaid reimbursement claims.
Some of the steps that healthcare providers can take to protect themselves against refund and recoupment requests resulting from a RAC audit include:
- Implementing billing systems and procedures with appropriate checks to avoid improper reimbursement claims, and updating them as necessary when Medicare and Medicaid rules change.
- Implementing systems designed to ensure timely responses to RAC audit requests.
- Communicating effectively during RAC audits, and ensuring that only designated employees with appropriate training have contact with recovery audit contractors.
- Monitoring claim denials and promptly addressing any issues leading to the submission of improper claims.
- Seeking legal counsel regarding appropriate billing, risk mitigation, and audit response practices.
6. Providers Are Entitled to Appeal the Outcome of Their RAC Audits
As we noted above, when a RAC audit results in a finding of liability, healthcare providers have the right to file an appeal. However, the window for filing an appeal is limited, and there are strict rules and requirements that must be followed in order to appeal the outcome of a RAC audit successfully.
Appealing the outcome of a RAC audit requires intimate familiarity with both the Medicare and Medicaid billing rules and the complex procedures involved in the appellate process. Having the right legal representation is critical, and there are only a limited number of law firms that have the experience and resources necessary to effectively argue RAC audit appeals.
7. Choosing the Right Legal Representation for Your RAC Audit or Appeal
When choosing legal representation for your RAC audit or appeal, you need a law firm that offers a unique blend of in-depth healthcare law knowledge and vast Medicare defense experience. At The Criminal Defense Firm, our team of senior healthcare fraud defense attorneys and former federal prosecutors brings decades of experience to representing healthcare providers in RAC audits and appeals. We represent clients in RAC audits and appeals nationwide, including:
- Durable Medical Equipment, Prosthetics, Orthotics, and Supplies (DMEPOS) Companies
- Home Healthcare Service Providers
- Hospices
- Hospitals
- Pharmacies (including Compound Pharmacies)
- Physician-Owned Entities
- Physicians in Private Practice
- Toxicology Laboratories
- Other Medical Services and Healthcare Providers
The Criminal Defense Firm is led by experienced healthcare fraud defense lawyers who have successfully represented numerous clients in Medicare investigations.
If you have been contacted by a recovery audit contractor, or if you have received a demand letter in connection with a RAC audit, we encourage you to contact us promptly to discuss your case. You will work directly with our team of senior attorneys, and we will help you quickly take the necessary steps to limit your exposure to financial liability.
Contact The Criminal Defense Firm About Your RAC Audit
For more information about the steps you can take to protect yourself during a RAC audit or to discuss preparing for your RAC audit appeal, contact The Criminal Defense Firm. To schedule a free and confidential consultation, call 866-603-4540 or contact us online now.

Brian Kuester offers his extensive experience to counsel companies and individuals under civil or criminal government investigation. When resolution requires litigation, clients choose Mr. Kuester’s proven court and litigation experience.