A billing error does not always arrive with an audit letter. It may surface during a routine claims review, an employee report, a software check, or a review of documentation that does not support what Medicaid paid. Once a New York provider identifies an improper Medicaid payment, the issue moves from an accounting concern to a legal and regulatory deadline.
An OMIG self-disclosure in New York is the process used to report, return, and explain certain Medicaid overpayments to the New York State Office of the Medicaid Inspector General. Choosing the right path matters. So does timing. A rushed submission may leave out important facts, while delay may expose the provider to penalties tied to each affected item or service.
Providers should assess a possible disclosure as soon as credible facts suggest that Medicaid paid more than the provider was entitled to receive. That assessment should address what happened, how many claims were affected, when the issue was identified, whether the matter is already part of an audit or investigation, and whether the error appears routine, systemic, or potentially intentional.
The Direct Answer: When Should a Provider Consider OMIG Self-Disclosure?
A provider should consider OMIG self-disclosure when an internal review identifies a Medicaid overpayment that has not already been identified within an existing government audit, investigation, or payment adjustment process.
New York law generally requires a provider to report and return an overpayment, and explain why it occurred, within 60 days after identification. A later deadline may apply when a corresponding cost report is due.
The decision should not turn only on the dollar amount. OMIG states that there is no minimum reporting threshold. Even a relatively small improper payment may need to be disclosed through the proper process.
Common reasons to begin a self-disclosure review include:
- Duplicate or excessive payment: Medicaid paid twice, paid too many units, or paid more than the proper rate.
- Incorrect code or modifier: A billing employee used the wrong procedure code, rate code, modifier, or service date.
- Insufficient documentation: The record does not support the billed service, time, units, or medical necessity requirement.
- Authorisation problem: A service lacked required approval, or the approval did not cover the billed period or service.
- Excluded person involvement: The provider learns that an employee, contractor, owner, or servicing professional appeared on an exclusion list during a relevant period.
- System or software error: A billing update, claim rule, mapping defect, or configuration issue caused repeated improper claims.
- Coordination of benefits issue: Medicaid paid when another payer had responsibility, producing a credit balance or excess payment.
- Employee misconduct allegation: A credible report suggests that someone submitted false claims, altered records, or concealed billing errors.
The presence of one of these facts does not by itself determine which OMIG process applies. It does mean the provider should begin a controlled inquiry rather than make isolated claim changes without understanding the full scope.
What Is an OMIG Self-Disclosure in New York?
OMIG’s Self-Disclosure Program gives Medicaid entities and providers a route for reporting, returning, and explaining self-identified Medicaid overpayments.
The program covers providers enrolled in Medicaid, Medicaid managed care organisations, and other entities involved in billing for or receiving Medicaid funds.
The process is not simply a repayment channel. OMIG makes clear that voiding or adjusting affected claims does not, by itself, satisfy the duty to report and explain the overpayment. A provider may fix the claim transaction and still have an unmet disclosure duty.
That distinction catches many providers off guard. Billing staff may believe that reversing a claim closes the issue. From OMIG’s standpoint, the state also needs an account of why the improper payment occurred and, when applicable, what the provider changed to prevent a repeat.
A sound provider self-disclosure therefore addresses three connected duties:
- Report: Tell the proper recipient that an overpayment was identified.
- Return: Repay the improper Medicaid funds through a void, adjustment, lump-sum payment, or approved instalment arrangement.
- Explain: Describe the cause, affected period, people or systems involved, calculation method, and corrective action.
When Is a Medicaid Overpayment Considered Identified?
The 60-day period does not necessarily start when someone first suspects that a claim may be wrong.
New York Social Services Law Section 363-d states that an overpayment is identified when the provider has, or should have through reasonable diligence, determined that an overpayment was received and quantified its amount. The law also addresses situations in which a provider fails to use reasonable diligence even though an overpayment existed.
This creates a practical tension. A provider needs enough time to investigate and quantify the issue, but it should not let an inquiry drift without a written plan, assigned responsibility, and clear deadlines.
Consider a clinic that discovers one claim paid under an incorrect modifier. At first, the clinic may not know whether the problem affected one patient or every similar claim submitted during the past year.
The first discovery triggers the need for a prompt inquiry. The provider then needs to determine the cause, search for related claims, quantify the improper payment, and document when those findings became sufficiently clear.
A defensible identification record may include:
- Discovery date: When the first credible issue was reported or found.
- Inquiry start date: When the provider assigned the review and preserved relevant records.
- Scope decisions: Which claim types, dates, locations, billing staff, and payers were reviewed.
- Quantification date: When the provider could reasonably state the amount, or the best supported amount available.
- Decision date: When the provider selected the full or abbreviated disclosure path.
Providers should avoid using uncertainty as a reason for inactivity. The state standard focuses on reasonable diligence, not perfect certainty.
Full OMIG Self-Disclosure Versus the Abbreviated Process
OMIG offers two main paths. The correct choice depends on the cause and seriousness of the overpayment, not merely how easy it is to reverse the claims.
When the Full Self-Disclosure Process Is Usually Appropriate
The full process is used for non-claim-based Medicaid overpayments and for fee-for-service claim overpayments that do not fit the abbreviated path.
OMIG lists systemic billing problems, software errors, documentation failures, exclusion issues, credible fraud allegations, substantial program effects, and matters requiring a corrective action plan among the situations suited to a full submission.
A full disclosure generally requires a detailed statement, certification, affected claims data or a mixed-payer calculation when applicable, the overpayment amount, the cause, relevant legal or policy requirements, people involved, and corrective steps.
A provider should give serious attention to the full process when:
- The issue affected many claims: A billing rule or software setting produced repeated errors.
- The cause reaches past one employee mistake: Policies, supervision, training, or internal controls failed.
- Corrective action is needed: The provider must revise procedures, retrain staff, audit prior claims, or change billing controls.
- The facts may suggest intent: An employee report, altered record, or unusual billing pattern raises fraud concerns.
- An excluded person is involved: Services or claims may be tied to a person or entity barred from program participation.
- The overpayment is not tied to individual claims: The issue concerns capitation, cost reporting, a mixed-payer calculation, or another non-claim payment.
When the Abbreviated Self-Disclosure Process May Fit
The abbreviated path is intended for routine, transactional fee-for-service errors that have already been repaid through claim voids or adjustments.
OMIG lists typographical mistakes, routine credit balance issues, certain authorisation or documentation errors caused by human mistake, incorrect codes, NAMI adjustments, and routine enrollment issues as possible candidates.
Under this path, the affected claims must be voided or adjusted before submission. Providers may submit each event separately or aggregate qualifying items into a monthly submission for claims corrected during the prior month.
OMIG may still request more facts or direct the provider to use the full process.
A one-time data-entry error may fit the abbreviated path. The same error repeated across hundreds of claims because staff followed an incorrect written billing procedure may call for the full path. Cause and scope matter more than the label placed on the mistake.
Managed Care Overpayments Require a Different First Step
A network provider that received an overpayment from a Medicaid managed care organisation generally should report, return, and explain the payment under that plan’s self-disclosure procedures.
OMIG instructs managed care plans to maintain processes for participating providers and subcontractors.
When the plan is unresponsive, OMIG directs the network provider to document its contact attempts and submit that record with a full disclosure to OMIG for review. Excess capitation payments identified by a managed care organisation must go through OMIG’s full process.
Providers should separate fee-for-service claims from managed care payments early in the inquiry. Sending every item to the same recipient may create delay or an incomplete repayment record.
When a Provider Should Not Use the Self-Disclosure Process
Not every repayment issue belongs in a new self-disclosure.
OMIG states that providers generally should not submit an overpayment that is already included in an OMIG audit, an investigation by another enforcement body, or another existing review. Providers may need permission from the agency handling that matter before voiding or adjusting claims.
The program also is not used to reconcile Medicaid underpayments. Those claims must be handled through the applicable rebilling process.
Nor is a separate disclosure generally needed for an overpayment already addressed through a broader state rate adjustment, cost settlement, or similar payment mechanism.
Before filing, the provider should ask:
- Is OMIG already reviewing these claims? An existing audit may control repayment and communication.
- Has another agency identified the same conduct: A federal inquiry, Attorney General matter, or Medicaid Fraud Control Unit investigation may affect eligibility.
- Is the payment part of a rate or cost settlement: The existing adjustment process may be the proper route.
- Is this really an underpayment: OMIG’s self-disclosure process does not offset or reconcile money owed to the provider.
- Does the issue involve separate conduct: A provider under audit may still be eligible to disclose a different overpayment that is unrelated to the audit.
Eligibility is significant. State law says a participant generally must disclose conduct that OMIG has not already identified, meet the reporting deadline, and not be a party to a related criminal investigation by the Medicaid Fraud Control Unit or a federal or local agency.
A current OMIG audit does not always bar disclosure, but the disclosed conduct must be unrelated to that review.
The Six-Year Lookback Period Can Expand a Small Discovery
OMIG states that the self-disclosure lookback period is six years from the date of service.
That does not mean every error automatically affected six years of claims. It means the provider’s scope analysis should consider whether the same cause existed during that period.
A software rule installed three months ago points to a different affected period than a billing policy used for several years.
Scope work often includes reviewing:
- Claim history: Search for the same code, modifier, provider, service, location, or billing pattern.
- System history: Identify when a software setting, fee schedule, or claim edit changed.
- Staff history: Determine when the involved employee or contractor began handling the claims.
- Policy history: Compare written billing instructions across the affected years.
- Payer history: Separate Medicaid fee-for-service, managed care, Medicare, and commercial claims.
- Record support: Test whether clinical or operational records support each billed service.
A provider that tests only the first claim found may understate the problem. A provider that assumes every claim is wrong may overstate it. The inquiry should use a reasoned method tied to the actual cause.
What Should a Provider Do After Finding a Possible Overpayment?
A disciplined response helps preserve facts and reduces avoidable mistakes.
1. Stop the Error From Continuing
Correct the billing setting, suspend the questionable claim type, or add a temporary review before more claims go out. This step should be narrow enough to avoid disrupting valid patient care or lawful billing.
2. Preserve Claims and Supporting Records
Keep claim files, remittance records, patient charts, authorisations, schedules, employee communications, billing manuals, software logs, and contractor records connected to the issue.
Do not alter records to make them appear more complete than they were at the time of billing.
3. Identify the Payment Stream
Determine whether the payment came through Medicaid fee-for-service, a Medicaid managed care plan, capitation, a cost report, or another payment route. This affects where the disclosure goes and which process applies.
4. Define the Scope
Trace the error to its source. Then search for claims produced by that same source.
Use the six-year period where the facts call for it, but tie the review period to evidence rather than guesswork.
5. Quantify the Medicaid Overpayment
Create a claim-by-claim calculation when possible. Keep the original claim identifiers, dates of service, amounts paid, amounts that should have been paid, void or adjustment transactions, and any third-party payments.
6. Assess Legal and Enforcement Risk
A simple transaction error is different from altered documentation, excluded-person involvement, kickbacks, fabricated services, or conduct already known to investigators.
The provider should assess whether the facts may carry administrative, civil, licensing, or criminal exposure before giving OMIG a written account.
7. Select the Proper Disclosure Path
Use the abbreviated process only when the error is routine, transactional, and already corrected through voids or adjustments.
Use the full process when the matter is systemic, substantial, non-claim-based, tied to exclusion or possible misconduct, or requires corrective action.
8. Track the 60 days
Maintain a written timeline showing discovery, inquiry steps, quantification, submission, OMIG acknowledgement, requests for added material, and repayment.
For a full disclosure, OMIG’sacknowledgementt pauses the repayment deadline while the provider remains cooperative in the process.
How Repayment Works After a Full Disclosure
After reviewing a full submission, OMIG may issue a Determination Notice stating the confirmed overpayment, credit for amounts already repaid, any remaining balance, and payment instructions.
OMIG generally expects payment within 15 days after notice of the amount due, subject to the governing deadline and any approved instalment arrangement.
Repayment may occur through claim voids or adjustments, a lump-sum payment, or an instalment arrangement approved by OMIG.
A provider seeking instalments may need to provide financial records and sign a Self-Disclosure and Compliance Agreement. OMIG has discretion over whether to allow extended repayment.
Cash-flow pressure should be raised early. Waiting until after OMIG issues its determination may reduce the time available to support a request for payment terms.
How Self-Disclosure Connects to a Provider’s Compliance Program
Self-disclosure should not sit apart from the provider’s compliance program.
The same facts that caused the overpayment may reveal a weak claim review, unclear billing instruction, poor contractor oversight, missing exclusion checks, inadequate training, or an internal reporting failure.
Corrective action may include:
- Policy revision: Rewrite the billing or documentation rule that caused the error.
- Staff instruction: Train the people who create, code, review, or submit affected claims.
- Claim testing: Review a sample or full set of later claims to confirm the correction worked.
- System control: Add an edit that blocks duplicate units, unsupported codes, or expired authorisation periods.
- Exclusion screening: Check employees, owners, contractors, and servicing professionals at the required frequency.
- Reporting channel: Give staff a clear route to raise billing concerns without retaliation.
- Board or leadership oversight: Report material findings and corrective work to the proper governing body or senior officer.
OMIG states that corrective steps listed in a full disclosure are expected to be implemented. For entities required to maintain an effective compliance program, OMIG may consider that work during a later compliance program review.
A disclosure that repays money but leaves the cause untouched invites the same error to return. It may also weaken the provider’s position if a later audit finds the same conduct.
What Are the Risks of Waiting Too Long?
Failure to report, return, and explain an identified Medicaid overpayment may lead to monetary penalties.
OMIG states that penalties may reach $10,000 per item or service, or up to $30,000 per item or service when a penalty under the same provision was imposed within the prior five years. Other state or federal consequences may also apply.
Delay creates practical problems as well. Employees leave. Records become harder to find. Software logs disappear. Memories weaken. A narrow billing mistake may continue across more claims.
What began as a manageable repayment may then appear to be a failure of oversight or reasonable diligence.
Providers also face risk after submitting. False material statements, intentional omissions, failure to cooperate, missed payments, or violation of an agreement may end participation in the program.
OMIG states that it may use disclosed material and pursue applicable civil or criminal action tied to the conduct.
Self-disclosure is not immunity. It is a regulated process that demands accuracy and continued cooperation.
Can Good-Faith Self-Disclosure Help a Provider?
New York law allows OMIG to waive interest for an eligible participant and states that good-faith participation may be considered as a mitigating factor in an administrative enforcement action.
Those outcomes are discretionary, not promised.
The practical value of a timely disclosure may include a clearer repayment process, a documented correction, a chance to seek instalments when full payment is not feasible, and evidence that the provider acted after discovering the issue.
Those benefits depend on truthful facts, accurate calculations, eligibility, and continued compliance with OMIG requests.
A provider should not file merely to appear cooperative. It should file because the facts and law call for disclosure, after the scope, recipient, process, and legal risk have been carefully assessed.
When Should a Provider Speak With an OMIG Attorney?
Legal counsel may be useful as soon as the provider finds an issue that is systemic, financially substantial, tied to several entities, connected to an excluded person, based on an employee allegation, or capable of suggesting intentional conduct.
Counsel can assist with:
- Issue assessment: Distinguish a routine claim correction from conduct that may trigger wider exposure.
- Inquiry structure: Set the scope, preserve records, interview involved staff, and document factual findings.
- Process selection: Assess whether the full process, abbreviated process, managed care procedure, or existing audit channel applies.
- Overpayment calculation: Work with billing staff, auditors, and financial professionals to support the repayment figure.
- Written submission: Present the facts accurately without speculation, omission, or unnecessary statements.
- Agency communication: Respond to OMIG questions, repayment demands, and requests for corrective action.
- Related defence: Address any connected audit, healthcare fraud inquiry, professional license matter, or criminal investigation.
The provider’s first written account may shape how the agency understands the conduct. That makes early factual discipline important.
Frequently Asked Questions About OMIG Self-Disclosure in New York
Is there a minimum amount that must be disclosed?
No. OMIG states that there is no dollar threshold. All self-identified inappropriate Medicaid overpayments should be reported through the proper route.
Does voiding a Medicaid claim satisfy the disclosure duty?
No. OMIG states that a void or adjustment alone does not satisfy the duty to report and explain the identified overpayment.
How long does a provider have to disclose an overpayment?
The usual deadline is 60 days after identification, or the date a corresponding cost report is due, whichever is later.
Identification includes determining that an overpayment was received and quantifying it through reasonable diligence.
What is the OMIG self-disclosure lookback period?
OMIG states that the lookback period is six years based on the date of service. The actual affected period should still be tied to the cause and evidence.
Can a provider use the abbreviated process for a repeated billing error?
Possibly, but repeated errors often require closer review.
The abbreviated process is aimed at routine, transactional errors already repaid through voids or adjustments. A repeated error caused by a system, policy, or control failure may require the full process.
Can a provider disclose an issue while under OMIG audit?
A provider may be eligible to disclose separate conduct that is unrelated to the current audit.
It generally should not start a new disclosure for the same claims or conduct already within the audit without coordinating with the agency contact.
Does self-disclosure prevent civil or criminal action?
No. OMIG states that disclosed material may be used and that applicable civil or criminal penalties may still be pursued.
Good-faith participation may count as a mitigating factor in an administrative action, but it does not assure a particular result.
Speak With Norman Spencer Law Group PC About an OMIG Matter
A Medicaid overpayment can raise questions about repayment, audits, compliance duties, licensing, and possible fraud exposure.
Norman Spencer Law Group PC represents New York healthcare providers and professionals in OMIG matters, Medicaid investigations, healthcare fraud cases, and related government inquiries. The firm’s existing OMIG practice page explains its work involving provider audits and investigations.
Providers that have found a possible overpayment should act promptly, preserve the record, and determine which reporting route applies before making incomplete or conflicting submissions.
Contact Norman Spencer Law Group PC at (212) 577-6677 to discuss the facts and possible next steps.
Attorney Advertisement. This article provides general information and is not legal advice. Reading it does not create an attorney-client relationship.
