ABA Medicaid Audits: What Triggers a Payment Review at Your Clinic?
An ABA Medicaid audit usually starts long before anyone calls your clinic. It starts with your claims data. When your billing looks different from similar clinics (more hours, faster growth, the same plan for every child) the state or a Medicaid plan pulls a sample and asks for records.
The stakes are real. Federal auditors at HHS-OIG reviewed Medicaid autism therapy payments in Indiana, Wisconsin, Maine and Colorado and found close to $200 million in improper payments. In each state, all 100 sampled months had at least one flagged claim line.
What is an ABA Medicaid audit and who runs it?
An ABA Medicaid audit compares the claims you billed with your session notes, treatment plans, staff credentials and authorizations. Reviewers want proof that each unit happened, was medically needed and came from a qualified person.
Several groups can run one:
Your state Medicaid program integrity unit
A Medicaid managed care plan's special investigations unit
HHS-OIG, which has audited ABA payments state by state since 2022
State-hired contractors, such as Optum in Minnesota
The Medicaid Fraud Control Unit, when fraud is suspected
This isn't the same as an internal ABA billing audit, which you run yourself to find revenue leaks. A payer audit can take money back.
What triggers an ABA Medicaid audit? 8 red flags reviewers watch
Most ABA Medicaid audits start with data patterns, not one bad claim. CMS listed many of them in its State Medicaid and CHIP ABA Toolkit, released August 4, 2026, after Medicaid ABA spending grew 421% from 2021 to 2025.
Red flag | What it looks like in your claims | Why it gets flagged |
Fast billing growth | Revenue jumps soon after Medicaid enrollment | CMS names it a risk signal |
Max hours for almost everyone | Top authorized hours billed for 80%+ of clients | Looks like a preset package |
40+ hours a week | High weekly totals, no progress data | CMS says it raises audit risk |
Overlapping sessions | One RBT or child billed in two places at once | The time can't add up |
Copy-paste notes | Same note text for different children | Notes weren't written for that session |
Group billed as individual | Several kids, one RBT, all billed 97153 | Group time paid at the 1:1 rate |
Two providers, one child | 97153 and 97155 stacked with no reason | Extra staffing needs clinical proof |
Lumped units | Hundreds of 15-minute units on one line | Hides whether therapy was continuous |
Tips from parents and former staff open audits too. Sometimes the trigger is your service type. Since late December 2025, Minnesota has sent every claim for its autism benefit (EIDBI) through prepayment review, flagged or not.
Billing 97153 and 97155 for the same child on the same day? Check your ABA modifier rules for same-day claims first.
Which documentation gaps turn an ABA Medicaid audit into a payback?
Paperwork drives most findings. In HHS-OIG's Colorado audit (report A-09-24-02004), the 100 sampled months showed:
Marked improper:
93 had session notes or in-home EVV records that didn't meet requirements
18 included services from staff without proper credentials
7 lacked a diagnosis or treatment referral
Marked potentially improper:
88 showed possible non-covered care, like recreation, schoolwork or day care
76 billed for non-therapy time
67 looked like group activity billed as individual therapy
Maine's top problem was simpler: a missing assessment, or one without a staff or parent signature.
Here's the part that hurts. OIG checked 1,919 Colorado claim lines out of 1.06 million, then projected the error rate across all of them. Many state reviewers use the same sampling math on single clinics, so small errors become big repayments.
CMS also flags reevaluations that don't show progress. Every CPT 97151 reassessment should tie new goals and hours to measured change.
What happens during an ABA Medicaid audit, step by step?
Data flag. Your claims stand out, or a tip comes in.
Records request. You get a client list, dates and a deadline. Late records are usually treated as unsupported.
Review. Prepayment review holds new claims until checked. A post payment audit looks back at paid claims.
Findings. A report lists each failed claim and the dollar amount, often projected across all your claims.
Payback or appeal. The state can take money back from future payments. You can usually appeal within a set window.
A credible allegation of fraud is worse: federal rules require the state to suspend payments, which can stop payroll money overnight.
How do you stay ready for an ABA Medicaid audit?
Pull a small sample of Medicaid claims every month and check:
Every billed unit matches a signed note with start and stop times
EVV times match the note for in-home sessions
Each RBT and BCBA had active credentials and Medicaid enrollment that day
The treatment plan explains why this child needs these hours, using the child's own data
The diagnostic evaluation, referral and signed assessment are in the chart
No note describes play time or day care and no two notes read the same
Credential lapses slip through after staff turnover. ABA credentialing services track every expiration and enrollment date so a lapse never reaches a claim.
ABA Medicaid audit FAQs
What is the most common finding in an ABA Medicaid audit?
Weak session notes. In HHS-OIG's Colorado audit, 93 of 100 sampled months had session notes or EVV records that didn't meet federal and state rules. Notes missing times, signatures, goals worked on or the child's response leave billed units unsupported, even when therapy really happened.
Can an ABA Medicaid audit stop my clinic's payments?
Yes. Prepayment review holds claims until reviewers check them, which slows cash flow. After an audit, the state can take overpayments back from future payments. If the state finds a credible allegation of fraud, 42 CFR 455.23 requires it to suspend payments unless a good-cause exception applies.
Does billing 40 hours a week raise ABA Medicaid audit risk?
It can. CMS's August 2026 ABA Toolkit says 40 or more weekly hours raises audit risk and that high-intensity plans shouldn't be approved by default. High hours are still allowed when the treatment plan shows why this child needs them and progress data backs it up.
Get ahead of your next ABA Medicaid audit
An ABA Medicaid audit rarely starts with one claim. It starts with patterns and clinics that check notes and credentials before billing have far less to defend.
Pacemave's ABA therapy billing services review claims against session notes and authorizations before they go out, so problems get fixed while they're cheap. Already holding a records request? Start with the checklist above, then talk to a team that knows Medicaid ABA rules.
