If you run a home health agency, few moments feel more disruptive than opening a letter from your Medicare Administrative Contractor and realizing the agency is now under review. The request may look routine. It rarely feels routine. Claims may be moving, cash flow may already be tight, and staff who should be focused on patient care suddenly need to reconstruct orders, notes, signatures, visit support, and billing logic under deadline.
That pressure is exactly why MAC audit preparation deserves more attention than it usually gets. In home health, reviews are rarely just about one missing document. They expose whether the agency’s clinical record, billing file, payroll support, and cost reporting discipline actually agree with one another. When they do, an audit becomes a manageable compliance exercise. When they do not, even a small review can expand into denials, repayment exposure, or a longer period of scrutiny.
What a MAC audit usually means in home health
For background, a MAC audit in the home health setting can take more than one form. Sometimes it begins with an Additional Documentation Request tied to specific claims. Sometimes it is part of Targeted Probe and Educate. CMS’s ADR guidance, last modified March 4, 2026, says MAC medical reviews are handled through ADRs and that providers generally receive 45 calendar days to respond to MAC prepayment and post-payment requests. CMS’s TPE page, also last modified March 4, 2026, says a traditional TPE round generally involves review of 20 to 40 claims, at least 45 days for the provider to improve, and up to three rounds on the selected topic (CMS ADR guidance; CMS TPE overview). (cms.gov)
That distinction matters because agencies often hear the word audit and assume fraud is being alleged. In many cases, the issue is narrower. The MAC may be testing whether billed services met Medicare coverage rules, whether documentation supports medical necessity and eligibility, or whether a recurring pattern of errors suggests the agency needs closer oversight. The tone may feel punitive, but the review itself often starts as a documentation and payment integrity exercise rather than an accusation of intentional misconduct (CMS ADR guidance; CMS TPE overview). (cms.gov)
Why home health agencies are especially exposed
Home health is vulnerable to audit attention because Medicare payment depends on several layers of support lining up at the same time. Eligibility has to be right. Orders and certifications have to be current. Visit documentation has to reflect what was ordered and why it was reasonable. Coding has to match the clinical story. Claims have to translate all of that into a bill the Medicare system can defend later.
In other words, a home health agency can deliver appropriate care and still create audit risk if its record trail is inconsistent. A therapist visit that is clinically justified but documented late can create a very different review outcome than the same visit documented clearly and signed on time. A valid period of care that supports payment under PDGM can still draw denial risk if the face-to-face support, plan of care, and visit narrative do not tell one coherent story. That is also why agencies thinking about MAC exposure often benefit from tightening upstream reimbursement habits, including their handling of PDGM payment mechanics and LUPA exposure in home health.
The cost report connection agencies sometimes overlook
A MAC audit is not only a claims problem. It can also become a cost report problem, or reveal one that was already there. CMS’s Cost Reports page, updated April 30, 2026, states that Medicare-certified institutional providers submit an annual cost report to a MAC and continues to list the Home Health Agency 2020 form, CMS-1728-20, with data available through fiscal year 2025 (CMS Cost Reports). (cms.gov)
That means the agency’s claims posture and its financial reporting posture are linked more closely than many operators assume. If an HHA reports staffing costs, visit statistics, contracted services, or overhead allocation methods one way on the cost report but tells a different story in its operational files, the inconsistency can become visible. The takeaway is straightforward. A MAC review tests not just whether a claim can be defended, but whether the agency’s broader records are internally consistent (CMS Cost Reports). (cms.gov)
That is one reason we encourage agencies to think of audit readiness as part of healthcare accounting, not as a separate compliance silo. Clinical records, payroll support, general ledger mapping, and reimbursement logic should be built to reconcile. If your team is still working on that foundation, our piece on healthcare accounting basics can help frame the underlying discipline.
Timing is part of the risk
Deadlines are where manageable reviews often become painful. CMS’s current ADR guidance says providers responding to MAC prepayment and post-payment reviews are generally given 45 calendar days to submit the requested documentation, and failure to respond timely can lead to claim denial (CMS ADR guidance). (cms.gov)
On the cost report side, the CMS Provider Reimbursement Manual states that cost reports are due on or before the last day of the fifth month following the close of the cost reporting period, with a 150-day rule for reports ending on a day other than month-end. The same manual says extensions are not granted except in extraordinary circumstances outside the provider’s control (CMS Provider Reimbursement Manual, Part 2). (cms.gov)
In practical terms, an HHA that waits to assemble support after a letter arrives is already behind. The documentation that matters most in a MAC review usually lives in different places: the EMR, signed orders, billing edits, payroll records, therapy logs, scheduling systems, and the accounting file used for cost reporting. The agency that can gather those pieces quickly, index them, and explain how they fit together usually has a far better experience than the agency that treats each document request as a scavenger hunt.
Where agencies usually get tripped up
Across claim review and cost report review, the same pressure points show up again and again. The first is the gap between clinical truth and documentary proof. Staff may know the patient was homebound, know the skilled service was needed, and know the care was delivered exactly as intended. But reviewers do not audit what the team remembers. They audit what the record shows. If the note is thin, the signature is delayed, the certification trail is incomplete, or the billed service is more specific than the narrative support, the agency has handed the reviewer an avoidable weakness.
The second pressure point is fragmentation. Intake may hold one part of the file, clinicians another, billing a third, and finance a fourth. In day-to-day operations that can feel workable. Under audit conditions it becomes a serious control issue. The moment an agency needs to trace one claim from referral through certification, visit delivery, coding, claim submission, payment, payroll cost, and cost report treatment, weak handoffs become obvious.
The third pressure point is financial support that was technically recorded but never really prepared for outside review. Contract labor expenses may sit in the ledger without clean backup tying them to disciplines or service lines. Allocation percentages may have been reasonable when created but not preserved in a way another person can follow months later. Visit statistics may reconcile loosely in conversation but not exactly on paper. Those are not dramatic failures. They are ordinary administrative gaps. Yet they are often the gaps that make a MAC review more expensive and distracting than it should be.
What reviewers are actually testing
Most MAC reviews in home health are less mysterious than they first appear. Reviewers are usually asking a plain question: if we start with the claim, can we work backward through the medical record and the agency’s support files and see a complete, Medicare-compliant basis for payment?
For HHAs, that often means they are examining whether the patient met benefit eligibility, whether the certification and recertification trail is complete, whether visit notes and orders support the billed services, whether diagnoses and coding choices are supported, and whether the service pattern looks consistent with the plan of care. In a cost report context, the same mindset shows up differently. Reviewers are looking for trial balance support, defensible allocation statistics, complete revenue and expense mapping, and reasonable links between the agency’s operations and what appears on CMS-1728-20 (CMS Cost Reports; CMS Provider Reimbursement Manual, Part 2). (cms.gov)
This is why the agencies that struggle most with MAC audits are not always the ones with the weakest patient care. Often, they are the ones with fragmented processes. Clinical staff document one way, billing interprets another way, finance books costs using a third logic, and nobody notices the mismatch until the contractor asks for proof.
How to respond without making the situation worse
Once a MAC request arrives, the first job is to slow the situation down internally. Not by missing deadlines, but by replacing panic with structure. Someone should own the response. Someone should own the document index. Someone should verify that what leaves the agency is complete, legible, and matched to the exact claims or periods under review. That sounds basic, but it is where many agencies lose control.
A strong response package does not drown the reviewer in paper. It answers the question the reviewer is likely to ask next. If the issue is homebound status, the record should make that support easy to find. If the issue is physician certification, signatures and dates should not be buried. If the issue touches cost reporting, the agency should be ready to trace reported figures back to the ledger, payroll records, invoices, and allocation workpapers. The more work the reviewer has to do to understand your file, the more room there is for misunderstanding.
It is also important to avoid the instinct to fix the historical record in a way that creates a new compliance problem. Late entries, corrected notes, and explanatory memoranda may be appropriate in some situations, but they need to be handled according to policy and with clear dating and attribution. A rushed clean-up that makes the file look altered or backdated can be more damaging than an honest gap that is clearly explained.
Why TPE deserves special attention
Targeted Probe and Educate is often described as educational, and that is true as far as it goes. CMS says the provider is given one-on-one education after denials in a TPE round, then at least 45 days to make changes before another sample is reviewed. CMS also says a provider that remains noncompliant after three rounds may be referred for next steps that can include 100 percent prepay review, extrapolation, Recovery Auditor referral, or other action (CMS TPE overview). (cms.gov)
So while TPE is not the same as an enforcement case, it should be treated seriously from the first round. The agencies that get the most value from TPE are the ones that use the education to change workflows, not just to appeal isolated denials. If the problem was face-to-face support, then intake, QA, and clinician education may all need attention. If the issue was documentation for therapy or aide services, supervision, visit note standards, and billing edits may all need to move together.
In that sense, a MAC audit can be useful. It forces the agency to identify whether errors are random or systemic. Random errors can be corrected claim by claim. Systemic errors require process redesign.
Cost report discipline reduces audit stress
Home health agencies sometimes separate claims compliance from year-end financial reporting, but MAC scrutiny tends to erase that distinction. CMS continues to identify annual cost reporting as part of the institutional provider reporting framework, and the home health cost report remains part of CMS’s current cost report materials (CMS Cost Reports). (cms.gov)
That is why cost report support should be built monthly, not reconstructed five months after year-end. Payroll should be reviewed with cost centers in mind. Contract labor should be coded cleanly. Allocation bases should be documented while people still remember why they were chosen. Related-party arrangements should be analyzed before filing, not after a reviewer starts asking questions. Visit statistics used in the report should be reconcilable to operational systems. When those habits are in place, a MAC cost report review is still disruptive, but it is rarely chaotic.
For many agencies, this is the point where outside help becomes practical. Not because an outside firm can make the audit disappear, but because a third party can often see the disconnects internal teams have normalized. An experienced reimbursement and accounting partner can test whether the record trail actually ties from the chart to the claim to the ledger.
Building an audit-ready HHA
Audit readiness in home health is not a single binder on a shelf. It is a way of running the agency. We generally look for the same patterns each time. Orders are tracked before they age. Clinical documentation and billing edits speak the same language. Finance can explain how payroll and overhead were assigned. Cost report workpapers exist before filing. When an ADR comes in, there is a defined path from intake to submission. That kind of structure does not eliminate review risk, but it changes the agency’s posture from reactive to prepared.
It also tends to improve daily operations. Cleaner documentation supports cleaner billing. Cleaner billing supports fewer denials. Better financial mapping supports better cost reporting. Better cost reporting supports better leadership decisions. The work that makes an HHA more defensible in a MAC audit is often the same work that makes it easier to manage the business week to week.
A steadier way to think about MAC risk
A MAC audit can feel like a referendum on the entire agency. Usually it is not. More often, it is a stress test of whether the agency’s documentation, billing, and accounting processes hold together under scrutiny. That is uncomfortable, but it is also useful. It shows where the organization has real discipline and where it has been relying on memory, heroics, or last-minute cleanup.
The key takeaway is simple. Home health agencies are in a stronger position when they prepare for MAC review before there is any review to answer. Claims support, physician documentation, visit records, allocation workpapers, and cost report files should all be treated as parts of one compliance story. When that story is coherent, the audit is still work, but it is work the agency can manage.
Click the button below to schedule a time to chat.
Appendix: Sources
CMS Additional Documentation Request guidance
