Medicare and Medicaid audits differ in process. Yet one thing remains the same, in practice: the administrative process has become so burdensome that many providers quietly decide it is safer to stop treating Medicare and Medicaid beneficiaries altogether.
Which appeal process is easier? Which appeal process costs more in attorneys’ fees, wasted internal time, and burden? Let’s go through each process.
For providers, it’s not just the audit that hurts; it’s the appeal process that follows.
Medicare is a federal program administered by the Centers for Medicare & Medicaid Services (CMS), but audits are farmed out to a patchwork of contractors. Medicare Administrative Contractors (MACs) conduct claims processing and post-payment reviews; Recovery Audit Contractors (RACs) are contingency fee hunters focused on overpayments; Unified Program Integrity Contractors (UPICs) conduct fraud, waste, and abuse investigations.
Authority for these reviews and recoupments comes from the Medicare statute and implementing regulations, including 42 U.S.C. § 1395ddd and 42 C.F.R. Part 405 (claims, appeals, reopenings and recoveries).
Medicaid, by contrast, is a joint federal–state program. CMS oversees broad policy and funding measures, but each state Medicaid agency designs its own audit and appeal structure, often with its own contractors (e.g., “program integrity” units, outside vendors, MCOs, or Managed Care Organizations). The federal backbone is 42 U.S.C. § 1396a and 42 C.F.R. Part 455 (program integrity), but the nuts and bolts of an audit and appeal may be in state statutes, regulations, and Medicaid provider manuals.
The result: a provider that treats both Medicare and Medicaid patients may face completely different rules, deadlines, forms, and proceedings for essentially the same alleged billing conduct. Which appeal process do you think is easier? Have you ever thought about it?
Although the Medicaid appeal processes are slightly different in each state, in my opinion, overall, the Medicaid appeal process is easier, faster, and less expensive. Generally, there are administrative courts that are informal, compared to federal or state courts. Plus, Medicaid audits are not a required five-level process. It can be a shorter process.
The Medicare Appeal Gauntlet
The Medicare appeal process is formally standardized in five levels, set out at 42 U.S.C. § 1395ff and 42 C.F.R. Part 405, Subpart I:
- Redetermination by the MAC (42 C.F.R. § 405.940–958); and
- Reconsideration by a Qualified Independent Contractor (QIC) (42 C.F.R. § 405.960–978).
These first two levels are rubber stamps. Then these follow:
- Administrative Law Judge (ALJ) hearing at the Office of Medicare Hearings and Appeals (42 C.F.R. § 405.1000–1064). This is your first time before an independent arbiter;
- Medicare Appeals Council review (42 C.F.R. § 405.1100–1130); and
- Judicial review in federal district court (42 C.F.R. § 405.1136; 42 U.S.C. § 1395ff(b)). The federal district court is the best venue. But jeez, it takes four prior levels to get there.
On paper, this looks like due process. In reality, small and mid-size providers rarely have the time or resources to run this gauntlet. Even CMS has admitted massive ALJ backlogs, with providers waiting years for a hearing while recoupments proceed – although recently, the backlog has lessened. Like I said before, it takes four levels and a lot of attorneys’ fees to get there.
Extrapolated statistical overpayments, technical documentation denials, and aggressive “medical necessity” determinations mean providers often must choose between:
- Spending more on legal and expert fees than the alleged overpayment; or
- Writing a check (or tolerating recoupment) and moving on.
Many choose the latter, and some quietly withdraw from Medicare altogether.
Medicaid Audits: Fifty Different Mazes
For Medicaid, the audit and appeal process is fragmented:
Federal rules require states to operate Medicaid program integrity programs, and to investigate fraud, waste, and abuse. See 42 C.F.R. §§ 455.12–455.23.
But appeal rights, timelines, and forums are largely creatures of state law (state Administrative Procedure Acts, or APAs, Medicaid regulations, and provider agreements).
A provider is entitled to: a) an informal reconsideration, b) a state fair hearing, or an administrative law judge proceeding, followed by c) judicial review in state court. Three levels versus five.
That may not sound like a huge difference, but Medicaid appeals could be hundreds of thousands of dollars for attorneys’ fees less than Medicare appeals.
Meanwhile, providers may endure prepayment review or withheld payments for months, even years, with no meaningful opportunity to restore cash flow.
Because Medicaid reimbursement rates are already low, many providers conclude that one serious audit or prepayment review could be a business-ending event. Rather than risk another, they simply stop taking Medicaid.
Why Providers Walk Away
Across both programs, several structural features push providers out:
- Front-loaded recoupment: In both Medicare and many state Medicaid programs, the agency begins recoupment before the provider receives a final adjudication on the merits.
- Asymmetric resources: CMS, states, and their contractors are repeat players; providers must hire counsel and experts on a one-off basis.
- Complex, inconsistent rules: Medicare’s highly technical regulations (LCDs, manuals, transmittals) and Medicaid’s state-by-state variation make compliance and defense expensive.
- High stakes, low margins: In safety-net practices, an aggressive audit can erase months of revenue, even if the provider ultimately prevails years later.
The legal framework was designed to protect public funds. But without balancing protections for timely, fair, and affordable review, it drives exactly the opposite of what policymakers say they want: fewer providers willing to treat Medicare and Medicaid beneficiaries.
Until Congress and state legislatures meaningfully streamline the audit and appeal process, many providers will continue to see participation in these programs not as a public service, but as an existential risk.


















