- Do not model recovery against the $15.9M headline. The presently collectible floor across the three audits is the sampled-enrollee amount — $769,195 + $828,010 + $830,334 ≈ $2.43M, roughly 15% of the recommended total.
- Flag the extrapolated remainder as contingent, not receivable: it depends on the Fifth Circuit or on CMS re-promulgating the RADV rule with proper notice and comment.
- Separate your own program-integrity exposure from MA plan exposure in reserve discussions. Provider-side extrapolation is long-established and unaffected by the vacatur.
- Quantify what a prepayment-review or payment-suspension event would do to days cash on hand. That, not the audit finding itself, is the balance-sheet event.
Free briefStatus as of Sep 2026
The Real MA vs. Provider Audit Asymmetry Is Provisional Remedy, Not Error Rate
Three OIG contract-level Medicare Advantage audits produced roughly $15.9M in extrapolated refund recommendations. The circulating framing — a 91% error rate versus a provider's denial rate — does not survive inspection, and the most consequential fact is missing from it entirely: the regulatory basis for collecting extrapolated MA audit findings is currently vacated. This brief states the defensible version of the double-standard argument and the tasks it creates by role. No purchase required.
Published by the PAULA Intelligence Team|Reviewed by a board-certified Physician Advisor
Where the comparison fails
A provider's prepayment-review trigger derives from broad-based review. The OIG figure derives from a stratum engineered for error. The 91% and a provider's denial rate are not like quantities, and any argument built on setting them side by side will be dismantled the first time it meets a payer's counsel.
Compare the instruments, not the numbers
| Dimension | MA organization | Provider |
|---|---|---|
| Consequence of adverse finding | Refund recommendation | Prepayment review, payment suspension, recoupment, referral, exclusion |
| Cash flow during dispute | Uninterrupted | Can be interrupted immediately |
| Finality of the auditor's finding | Non-binding recommendation; CMS decides | Contractor action often effective on notice |
| Extrapolation | Contested and currently unavailable | Long-established in FFS program-integrity practice |
| Self-disclosure of post-period error | Recommended; plans deny obligation | Affirmative 60-day overpayment reporting obligation |
| Practical posture | Litigate the methodology | Comply and appeal afterward |
The asymmetry is not in detection or in the recommended dollar amount. It is in provisional remedy and burden allocation: providers experience consequences before adjudication concludes; MA organizations do not. That version of the argument holds regardless of whether the 91% headline is fair.
Why these three recommendations may not be collected as written
The vacated rule expressly governed collection of extrapolated findings from OIG audits as well as CMS RADV audits.
Note the parity irony this creates: the mechanism the plans are contesting — extrapolation without an FFS offset — is routine in provider program integrity. The current legal position is that plans may be entitled to a methodological protection providers do not enjoy. That is a sharper and more defensible framing of the double-standard argument than the error-rate comparison.
Tasks by role
- Do not carry the 91% figure into peer-to-peer. It comes from a stratum engineered for error; a facility denial rate is not a like quantity, and the comparison collapses under scrutiny.
- Keep risk-adjustment coding accuracy and utilization-management coverage decisions in separate arguments. They are separate mechanisms, and conflating them weakens both.
- Where documentation-integrity findings recur, treat them as a shared capture-point defect — the OIG's own FFS work has found comparable failure rates in traditional Medicare.
- Note the burden asymmetry in your program-integrity policy: providers carry an affirmative 60-day overpayment reporting obligation; plans dispute that they carry an equivalent post-period self-disclosure duty.
- Track recommendation status on A-07-22-01207, A-07-22-01208, and A-03-22-00004 verbatim as OIG states it. A closed recommendation is not evidence money was collected; an open one is not evidence it was not.
- Build the internal position on the defensible frame — provisional remedy and burden allocation — not on the error-rate headline.
- Brief medical staff that the audit story concerns documentation support for submitted diagnoses, not clinical judgment or coverage denials.
- Prioritize point-of-capture documentation specificity where unsupported codes originate; a remedy aimed only at plans misallocates a shared defect.
- Price the MA-plan exposure at the sampled-enrollee floor with an explicit contingent layer for extrapolation, tied to the Fifth Circuit calendar.
- Recognize the parity irony: with the rule vacated, plans may currently hold a methodological protection providers do not enjoy. That is the sharper double-standard argument.
- Treat consistent 80–91% stratum failure rates across further audits in the same OIG series as the signal that would strengthen a systemic-defect reading.
What PAULA is monitoring
Fifth Circuit oral argument — Humana v. Kennedy, No. 25-11293
Determines whether extrapolated recovery, including for these three OIG audits, is available. The date comes from a single secondary source and is not yet confirmed against the court's own calendar. Monitored: held / continued / rescheduled status, panel composition, opinion, judgment, mandate, supplemental briefing order, or stay.
Recommendation status update — A-07-22-01207, A-07-22-01208, A-03-22-00004
First public signal of CMS's collection posture. Monitored: any change in recommendation status and any published CMS response or refund determination, reported verbatim as OIG states it.
CMS decision on PY 2020 and PY 2024 extrapolation collection
CMS has deferred. The audits are designed to support extrapolation.
Whether CMS re-proposes the RADV rule with proper notice and comment
The remand path independent of the appeal.
Further audits in the same OIG series
Consistent 80–91% stratum failure rates would strengthen the systemic-defect reading.
Monitoring scope behind this brief
A weekly monitor watches the OIG All-Reports index filtered to Medicare Part C — the surface where contract-level MA compliance audits are published — plus Fifth Circuit developments in Humana v. Kennedy and any CMS re-proposal of the RADV rule. This closes a real gap: PAULA's existing payer monitor watched the OIG Enforcement feed and Work Plan, neither of which carries these audits, which is why the March 2026 reports went unsurfaced for six months. The monitor carries both mandatory caveats above — high-risk-stratum scope and extrapolation collectibility — as binding output rules.
PAULA's payer policy monitoring covers UnitedHealthcare, Aetna, Cigna, Anthem, Humana, and BCBS FEP. BCBS of Alabama is now monitored directly: a weekly job diffs the full published and draft policy set for contract H0104 (Blue Advantage) and the commercial and Credence lines against the plan's own public policy feed, plus the delegated Carelon and EviCore draft guideline pages. Baseline at 2026-09-15: 982 active policies, 16 drafts. Priority Health and Gateway remain uncovered individually; the OIG Part C feed is the catch-all for enforcement activity against plans outside the monitored set.
Sources cited in the underlying analysis: Humana Inc. v. Becerra (N.D. Tex., No. 4:23-cv-00909-O); Humana v. Kennedy (5th Cir. No. 25-11293); 88 FR 6643; CMS HPMS memo of Jan 27, 2026; CMS PY 2024 RADV methods and instructions of Aug 28, 2026; OIG audits A-07-22-01207, A-07-22-01208, A-03-22-00004. Public analysis may lag a newly detected change while evidence is verified.
See where this lands for your organization.
The 5-minute PAULA Risk Assessment shows where payer policy, denial risk, and revenue exposure may affect you — no spam, and we will not disclose or sell your information to anyone.
Be notified when a new briefing publishes.
CMS rules, payer behavior, prior authorization, and denial exposure — translated into role-specific action. No spam, and we will not disclose or sell your information to anyone.