The Role of Recovery Audit Contractors (RACs) in Medicare Audits
For many California healthcare providers, a Medicare audit begins with a letter from a Recovery Audit Contractor (RAC) requesting records or notifying the provider that certain claims are under review. While RAC audits are intended to identify improper Medicare payments, they can also expose providers to substantial repayment demands, lengthy appeals, and increased regulatory scrutiny. In some cases, a RAC audit may uncover issues that lead to additional administrative investigations or referrals to other government agencies.
At the Law Offices of Art Kalantar, we represent California healthcare providers responding to Medicare and Medi-Cal audits, allegations of fraud and abuse, and healthcare criminal defense. Understanding how Recovery Audit Contractors operate—and knowing how to respond strategically—can help providers protect their rights and reduce unnecessary financial and legal exposure.
What Is a Recovery Audit Contractor?
Recovery Audit Contractors are private companies that contract with the Centers for Medicare & Medicaid Services (CMS) to identify improper Medicare payments. Congress expanded the RAC program after demonstration projects showed that outside auditors could recover significant amounts of improperly paid Medicare funds while also identifying certain underpayments.
Unlike Medicare Administrative Contractors, which process and pay claims, RACs are responsible for reviewing claims after payment has already been made. Their primary mission is to identify overpayments that should be recovered and, less frequently, underpayments that should be reimbursed to providers.
RACs review claims submitted by hospitals, physicians, outpatient facilities, skilled nursing facilities, home health agencies, and other Medicare providers.
The Legal Authority Behind RAC Audits
The RAC program is authorized under federal law and administered by CMS. RACs must follow detailed CMS regulations and contractual requirements when conducting audits, including limitations on the number of records they may request within specified time periods and procedures governing medical record reviews.
RACs generally conduct two types of reviews:
- Automated reviews rely solely on claims data and are used when improper payments can be identified without reviewing medical records. Examples include duplicate billing or claims that violate clear Medicare payment rules.
- Complex reviews require examination of medical records to determine whether services were medically necessary, properly documented, or accurately coded. These reviews often involve physician documentation, treatment notes, diagnostic testing, and supporting records.
Although RACs possess significant authority to review claims, providers also have important procedural rights, including the right to appeal adverse determinations.
How the Contingency Compensation Model Works
One of the most distinctive features of the RAC program is its compensation structure. Recovery Audit Contractors are generally paid on a contingency basis. Rather than receiving a fixed fee, they earn a percentage of the overpayments they successfully identify and recover for Medicare. If an overpayment determination is later overturned on appeal, the RAC typically must return the contingency payment associated with that claim.
This payment model has generated ongoing discussion within the healthcare industry. Critics argue that contingency compensation may encourage aggressive auditing and broad interpretations of Medicare billing requirements.
Supporters contend that the model incentivizes efficient detection of improper payments and protects taxpayer funds.
Regardless of differing views, providers should recognize that RACs are specifically tasked with identifying recoverable overpayments and often focus their resources on claims they believe present a high likelihood of repayment.
Common Targets of RAC Audits
RACs use data analysis, historical payment trends, and CMS-approved audit issues to identify claims for review. Although audit priorities evolve over time, certain categories consistently receive attention because of their complexity or history of improper payments.
Common RAC audit targets include:
- Inpatient admissions that auditors believe should have been billed as outpatient services.
- Medical necessity determinations for hospital stays and procedures.
- Evaluation and management coding.
- Durable medical equipment claims.
- Skilled nursing facility services.
- Home health services.
- Inpatient rehabilitation facility claims.
- Outpatient therapy services.
- Duplicate claims or duplicate payments.
- Incorrect application of Medicare billing rules or modifiers.
Providers should not assume that being selected for review means they have engaged in misconduct. RACs often examine claims simply because they fall within identified audit categories or statistical outlier patterns.
The RAC Audit Process
A RAC audit generally begins with a request for records or notice of review. Providers must respond within specified deadlines by producing the requested documentation. The contractor reviews the submitted records to determine whether Medicare payment requirements were satisfied. If the RAC concludes that an overpayment occurred, it issues a determination explaining the basis for its findings.
Providers typically have an opportunity to challenge these determinations through the Medicare appeals process. Depending on the circumstances, appeals may involve redetermination, reconsideration by a Qualified Independent Contractor, hearings before an Administrative Law Judge, review by the Medicare Appeals Council, and ultimately judicial review in federal court.
Because appeal deadlines are strictly enforced, prompt action is essential.
Why Documentation Matters
Documentation frequently determines the outcome of a RAC audit. Even when medically necessary services were actually provided, incomplete or inconsistent documentation may lead auditors to conclude that Medicare payment requirements were not satisfied. Missing physician signatures, inadequate treatment notes, incomplete medical necessity documentation, or inconsistencies between records can all result in adverse findings.
Providers should remember that auditors evaluate what is documented, not what providers intended or later remember. Strong documentation practices remain one of the most effective defenses against repayment demands.
Can a RAC Audit Lead to Broader Investigations?
In many cases, RAC audits remain administrative matters focused solely on payment accuracy. However, significant or recurring billing issues identified during the audit may attract additional scrutiny. Patterns suggesting repeated documentation deficiencies, improper coding, or questionable billing practices may be shared with other CMS contractors or program integrity entities. If investigators believe the evidence suggests intentional misconduct rather than isolated mistakes, the matter may be referred for civil or criminal investigation. Although most RAC audits do not result in fraud prosecutions, providers should take every audit seriously and respond as though the findings may receive additional review.
Practical Strategies for Responding to RAC Audits
A thoughtful and organized response can significantly improve a provider’s position during a RAC audit. Important strategies include preserving all relevant records, carefully reviewing the specific claims under examination, confirming that documentation supports the services billed, and maintaining organized records of all communications with auditors. Providers should also evaluate whether the auditor has properly applied Medicare coverage rules and followed applicable CMS procedures. In some cases, repayment demands result from incorrect interpretations of Medicare policy rather than actual billing errors.
Early legal guidance can be particularly valuable when audits involve substantial repayment demands, statistically extrapolated overpayments, or issues that could extend beyond routine administrative review. The Law Offices of Art Kalantar regularly represents California healthcare providers responding to RAC audits, Medicare appeals, government investigations, and healthcare fraud allegations. Strategic legal representation can help providers protect their rights while working toward the most favorable outcome possible.
Frequently Asked Questions
What is a Recovery Audit Contractor (RAC)?
A Recovery Audit Contractor is a private company hired by CMS to identify Medicare overpayments and underpayments through post-payment claim reviews.
How do RACs get paid?
RACs generally receive a percentage of the overpayments they successfully recover, although they may have to return those fees if the provider later prevails on appeal. This contingency arrangement incentivizes RACs to aggressively identify high amounts of alleged overpayments.
Can I appeal a RAC audit determination?
Yes. Providers have multiple levels of appeal under the Medicare appeals process, but strict filing deadlines apply.
What types of claims do RACs audit most often?
RACs commonly review inpatient admissions, medical necessity determinations, coding accuracy, durable medical equipment claims, therapy services, and other areas with historically high improper payment rates.
Should I hire an attorney after receiving an RAC audit notice?
Yes. Experienced legal counsel can help protect your rights, manage document production, evaluate repayment demands, and prepare effective appeals when appropriate.
Protect Your Practice During Medicare and Medi-Cal Audits
An RAC audit should never be viewed as a routine administrative inconvenience. Even a limited review can result in significant repayment demands or uncover issues that lead to broader government scrutiny. Responding strategically from the outset can help protect your financial interests and reduce the risk of unnecessary escalation.
If your practice has received a Recovery Audit Contractor notice or is facing a Medicare repayment demand, the Law Offices of Art Kalantar can help. Our firm represents healthcare providers throughout California in Medicare and Medi-Cal audits, appeals, Qui Tam/False Claims Act matters, and healthcare criminal defense. Contact us today to discuss your situation and develop a strategy to protect your practice, your professional reputation, and your future.
