Dr. Oz’s 50-State Medicaid Audit

What Every Provider Needs to Know — and Do Right Now

By Oksana Pokoyeva, Billing Department, WCH

The Federal Crackdown Has Gone Nationwide

On April 22, 2026, Dr. Mehmet Oz — Administrator of the Centers for Medicare & Medicaid Services (CMS) — announced a sweeping nationwide escalation of the federal government’s anti-fraud campaign: all 50 states must now formally explain their plans to revalidate Medicaid providers. States have 30 days to submit their fraud prevention strategies to CMS, or face direct federal audits. This is no longer a targeted investigation of a handful of blue states — it is a structural reckoning with how Medicaid is administered across the entire country.

The announcement was made during a Politico healthcare summit and follows months of escalating federal pressure that began with Minnesota, spread to New York, California, and Maine, and has now crossed every state line. The Trump administration’s anti-fraud task force, led by Vice President JD Vance, has already frozen $259.5 million in Medicaid payments to Minnesota and halted reimbursements to more than 450 hospice centers and home health agencies in Los Angeles.

For healthcare providers — especially those billing Medicaid — the message is unambiguous: scrutiny is coming, and it is coming fast.

The States in the Crosshairs

While the audit now covers all 50 states, federal investigations and enforcement actions have been most concentrated in a distinct group of states. Below are the highest-risk jurisdictions, starting with New York:

State: New York
Key Exposure: $115.6B Medicaid spend / FY2025; CMS probe active; CDPAP fraud; home health aide schemes; formal federal letter received; ranked among top 5 worst offenders 
Risk Level: CRITICAL 

State: Minnesota 
Key Exposure: $259.5M in federal payments frozen; ABA, autism care, housing stabilization fraud; the state has filed a lawsuit against the federal government 
Risk Level: CRITICAL

State: California
Key Exposure: 450+ hospice/home health agencies suspended in Los Angeles alone; $600M+ in alleged fraud; formal CMS letter received 
Risk Level: CRITICAL

State: Illinois
Key Exposure: Singled out in Trump executive order; brothers charged with $300M Medicare/Medicaid fraud; under federal scrutiny 
Risk Level: HIGH 

State: Maine 
Key Exposure: Formal CMS letter received; cited in presidential executive order; DME and home health fraud patterns flagged 
Risk Level: HIGH 

State: Ohio 
Key Exposure: Ranked among top 5 worst offenders in $380M multi-state fraud analysis; provider revalidation gaps identified
Risk Level: HIGH 

State: Arizona 
Key Exposure: Ranked top 5 in provider fraud exposure; sober living home and behavioral health billing abuse flagged 
Risk Level: HIGH 

State: Pennsylvania 
Key Exposure: Formal House Energy & Commerce Committee letter received; large percentage increase in Medicaid spending flagged 
Risk Level: ELEVATED 

State: Colorado
Key Exposure: Named in presidential executive order; formal congressional letter received; spending growth patterns under review
Risk Level: ELEVATED

State: Texas 
Key Exposure: Historical DME and behavioral health fraud cases; DOJ recoveries documented; CMS monitoring active 
Risk Level: ELEVATED

New York: Ground Zero Under the New Regime

New York stands at the epicenter of this crackdown — and not only because of its scale. The state’s Medicaid program is the largest in the nation, with $115.6 billion in spending for nearly 7 million enrollees in fiscal year 2025. Size alone makes it a target, but the specific fraud vectors being investigated make New York providers particularly exposed.

Federal investigators have scrutinized home health aide programs, the Consumer Directed Personal Assistance Program (CDPAP), and behavioral health services. CMS has formally alleged data errors in figures used to justify the New York probe — errors CMS itself acknowledged — but that has not slowed the pace of the investigation. If anything, the administration’s public posture is to act first and refine later.

A Washington Examiner analysis of Medicaid spending data placed New York in the top five states for payments made to providers subsequently found to be fraudulent. For any New York Medicaid provider — especially in home care, mental health, ABA therapy, or DME — the risk of appearing on a CMS audit list is no longer hypothetical.

What CMS Is Actually Looking For

According to Dr. Oz and House committee correspondence, the federal government is specifically focused on providers in what CMS terms “high-risk” service categories. These include:

• Applied Behavioral Analysis (ABA) / Autism Spectrum Disorder services
• Home and Community-Based Services (HCBS), including personal care and home health aides
• Substance abuse treatment centers and sober living facilities
• Hospice and skilled nursing facility billing
• Durable Medical Equipment (DME), prosthetics, orthotics — CMS has already imposed a 6-month enrollment freeze nationwide
• Providers billing for services to individuals without legal status or for “phantom” patients

CMS has made clear that provider revalidation — the process of verifying that enrolled Medicaid providers are legitimate and compliant — is the central enforcement mechanism. States that fail to demonstrate robust revalidation processes face not just audits, but payment freezes or disallowances that can take years and legal proceedings to resolve.

The Problem With the Federal Approach: Speed Without Precision

There is a significant, well-documented risk in how CMS is executing this campaign. Georgetown University’s Center for Children and Families and the Kaiser Family Foundation (KFF) have both noted that the administration’s new approach — relying on deferrals and payment suspensions to “prevent” fraud rather than confirming it first — breaks from decades of federal-state Medicaid administration norms.

The most concrete illustration: CMS made a material factual error in the data it used to open the New York Medicaid fraud probe. The agency acknowledged this publicly. Yet the investigation has continued without pause. As one attorney representing suspended providers in California put it, CMS is “revoking and suspending, but asking questions later.”

The consequence for providers is severe: payment suspensions can destroy cash flow before any fraud is proven. Disallowance appeals average 15 years to fully resolve at the Departmental Appeals Board. The burden of proof lies with the provider or state — not with CMS.

This is not merely a bureaucratic problem. It is a structural risk that every Medicaid-participating provider now faces: being caught in a broad enforcement sweep based on incomplete or erroneous data, with no rapid mechanism to clear your name.

Get Ahead of the Audit: The WCH Credentialing Solution

This is precisely the environment in which a proactive credentialing strategy is no longer optional — it is mission-critical. At WCH, our team of certified credentialing specialists has spent decades navigating the complexities of Medicaid and Medicare provider enrollment. We know what CMS auditors look for when they examine provider legitimacy — because proper credentialing is the first and most powerful line of defense.

The single most effective thing a provider can do right now — before an insurer’s audit, before a CMS letter arrives, before a payment suspension disrupts operations — is to ensure that their credentialing and enrollment records are complete, current, and fully defensible. This is what WCH does best.

Our credentialing services directly address the exact risk categories CMS and the House Energy & Commerce Committee have flagged:

• Provider revalidation & re-enrollment support: We manage the end-to-end revalidation process — NPI updates, PECOS and state Medicaid portal submissions, license verification, and exclusion screening — so your enrollment record withstands federal scrutiny.
• Enrollment record integrity review: We identify and correct gaps, expired documents, or inconsistencies in your credentialing file before CMS does.
• High-risk service line credentialing: Specialized credentialing support for ABA, home health, HCBS, DME, and behavioral health providers — the exact categories under active federal investigation.
• Exclusion and sanction screening: Ongoing monitoring against OIG, SAM, and state exclusion databases to ensure no provider in your organization triggers automatic disqualification.
• Payer enrollment management: Active management of your Medicaid and Medicare enrollment status across all relevant payers, with rapid response to revalidation requests or requests for information.
• Credentialing Corrective Action support: If gaps are identified, we prepare and submit the documentation CMS and state agencies require — precisely the kind of organized, proactive response that protects providers during government review.

Proper credentialing is not just an administrative function — it is your legal identity as a Medicaid provider. When regulators arrive — and in the current federal enforcement climate, that possibility is increasingly real — providers need enrollment files that are fully secured, licenses that are meticulously current, and documentation that withstands scrutiny without ambiguity.

The time to update your credentialing is not when CMS sends a letter. It is now — while you still control the outcome.

Contact WCH today to schedule a credentialing review and enrollment status assessment. Our team brings decades of hands-on experience serving providers in New York and across the country — precisely the states facing the greatest federal scrutiny right now.

Sources

1. Associated Press / KSL.com — “Dr. Oz announces a 50-state audit of Medicaid program oversight,” April 22, 2026
2. Stateline — “In Medicaid fraud crackdown, feds now looking to audit all 50 states,” April 21, 2026
3. Kaiser Family Foundation (KFF) — “CMS’ New Approach to Federal Medicaid Spending in Cases of Potential Fraud,” March 2026
4. Georgetown University Center for Children and Families — “States Work to Prevent Fraud Against Medicaid,” April 17, 2026
5. House Energy and Commerce Committee — Letters to 10 states on Medicaid program integrity, March 3, 2026
6. Washington Examiner — “Dr. Oz announces Medicaid fraud audit for all 50 states,” April 22, 2026
7. NPR — “The threats to Minnesota’s Medicaid funds are unprecedented. Other states could be next,” March 18, 2026
8. The Lund Report — “Trump says he’s going after Medicaid fraud, but is mostly focusing on blue states,” April 2026
9. Becker’s Payer Issues — “Federal Medicaid fraud probe spreads to 10 states,” March 7, 2026
10. FOX 9 Minneapolis — “Where fraud has been uncovered in other states: In-depth analysis,” December 2025