Audit Defense Guide · 2026

RAC Audit for Home Health: A Complete Defense Guide

Recovery Audit Contractors (RACs) target home health agencies for post-payment claim recovery, with a 3-year lookback that creates massive exposure. Here's how RAC audits work, what triggers them, and how to defend your agency.

Key Takeaways

  • RAC = Recovery Audit Contractor — private contractors hired by CMS to recover Medicare overpayments.
  • 3-year lookback — RAC can review claims paid up to 3 years ago. Hundreds of past claims at risk per audit.
  • Post-payment recoupment — Medicare already paid; RAC is recovering money. Different from TPE.
  • Appeal process: Reopening → Redetermination → Reconsideration → ALJ → DAB.
  • Documentation consistency across years matters — RAC patterns can extract overpayment from many claims at once.

What RAC Stands For

RAC = Recovery Audit Contractor. RACs are private companies that contract with CMS to identify and recover Medicare overpayments. Unlike TPE reviews, which are run by your regional MAC for educational purposes, RACs are paid based on the overpayments they identify — meaning they have a direct financial incentive to find and recoup money from your agency.

RACs operate post-payment, meaning Medicare has already paid the claim and the RAC is reviewing it after the fact to determine whether the payment should be recouped. This is fundamentally different from pre-payment review, where a claim is held until the documentation is reviewed.

How RAC Audits Work — The Process

  1. Pattern identification. The RAC's analytics flag claims based on automated rules, statistical patterns, or comparison to peer agencies in your region.
  2. ADR issuance. The RAC issues Additional Documentation Requests for each flagged claim, with a 30-day response window.
  3. Documentation review. You submit the requested clinical documentation. The RAC reviews against Medicare requirements (Conditions of Participation, OASIS-narrative consistency, F2F encounters, homebound status, skilled need).
  4. Decision. The RAC issues one of three decisions: paid claim stands (no recoupment), partial overpayment identified (partial recoupment), or full overpayment (full recoupment).
  5. Recoupment. If overpayment is identified, the RAC initiates recovery — typically by withholding from future Medicare payments to your agency.
  6. Appeal. You can appeal through the standard Medicare appeal process (see below).

The 3-Year Lookback — Why RAC Is High-Stakes

RACs can review claims paid up to 3 years from the date of submission. This creates massive financial exposure — a single RAC audit can potentially recoup payments on hundreds of historical claims if the same documentation pattern is found across the lookback window.

Example: an agency that has been documenting homebound status weakly for 3 years could face a RAC audit that finds 200+ claims with the same issue. At an average claim value of $3,500, that's potentially $700,000+ in recoupment from a single audit.

This is why documentation consistency across years matters as much as documentation quality on individual claims. RACs find patterns. Strong documentation today doesn't help if the documentation from 2024 shows the pattern they're looking for.

What Triggers a RAC Audit

  • RAC's automated rules identify pattern in your claims (e.g., high primary diagnosis concentration in certain clinical groups)
  • Outlier billing patterns compared to peer agencies
  • Prior denials or audit findings trigger expanded review
  • Specific RAC focus areas — RACs publish their current focus areas (which clinical groups, which item types)
  • Cross-referencing with other audits — failing TPE often leads to RAC follow-up

RAC vs TPE — Key Differences

Dimension TPE Review RAC Audit
Auditor Your MAC (regional contractor) Private RAC contractor
Purpose Educational + corrective Recovery of overpayments
Timing Pre-payment or post-payment Post-payment only
Lookback window Recent claims Up to 3 years
Sample size 20-40 claims per round Dozens to hundreds based on patterns
Outcome Pass/fail → next round if fail Direct recoupment if overpayment found
Recourse Education + correction Standard Medicare appeals

How to Respond to a RAC ADR

The RAC ADR response process is identical to standard ADR response — but the stakes are higher because each finding becomes a recoupment, not just a denial. Follow the standard 7-step ADR response process with extra emphasis on:

  • Complete chart compilation — RACs are aggressive about flagging missing documentation
  • OASIS-narrative consistency — RAC's most common citation
  • Strong narrative cover letters tying documentation to the specific service billed
  • Pattern documentation — show that the agency has consistent practices across the period in question
  • Submission within deadline — late = automatic denial = automatic recoupment

How to Appeal a RAC Denial

If the RAC denies a claim and initiates recoupment, you can appeal through the standard Medicare appeal process:

  1. Reopening — within 12 months for clerical errors
  2. Redetermination (Level 1) — appeal to your MAC within 120 days of denial
  3. Reconsideration (Level 2) — appeal to a Qualified Independent Contractor within 180 days
  4. Administrative Law Judge (ALJ) hearing (Level 3) — within 60 days of Reconsideration decision
  5. Departmental Appeals Board (Level 4) — final administrative appeal

Most successful RAC appeals are won at Level 1 (Redetermination) or Level 2 (Reconsideration) with strong documentation and clear narrative justification. For end-to-end appeal management, see Medicare Appeal Services.

RAC Defense Strategy

Surviving RAC audits requires a layered defense:

  1. Upstream prevention — strong real-time documentation and OASIS QA prevents the patterns RACs target. Lime's ambient scribe + OASIS Review handle this.
  2. Pattern monitoring — quarterly self-audits to identify patterns before RAC does
  3. Strong ADR response capacity — fast, consistent responses to every ADR. Lime's ADR Response Service handles this.
  4. Appeal capacity — when denials happen, immediate appeal preparation. See Medicare Appeal Services.

RAC Audit FAQs

What is a RAC audit in home health?
RAC stands for Recovery Audit Contractor. RACs are private companies contracted by CMS to identify and recover Medicare overpayments through post-payment claim review. RAC audits target home health agencies whose claims show patterns historically associated with overpayment — improper coding, insufficient documentation, missing F2F encounters, or OASIS scoring inconsistencies. Unlike TPE, RAC reviews are post-payment, meaning Medicare has already paid the claim and the RAC is recovering money. RAC audits can review up to 3 years of past claims.
How does a RAC audit work?
A RAC audit follows a defined process: (1) the RAC's analytics flag claims for review based on automated rules, (2) the RAC issues an ADR for each flagged claim with a 30-day response deadline, (3) the agency submits documentation, (4) the RAC reviews the documentation against Medicare requirements, (5) the RAC issues a decision (paid claim stands, overpayment identified, or claim denied), (6) if overpayment is identified, the RAC initiates recoupment, (7) the agency can appeal through the standard Medicare appeal process if disputing the finding.
How far back can a RAC audit go?
Medicare RACs can review claims paid up to 3 years from the date of submission. This means a RAC audit initiated today can review claims billed back to 2023. The 3-year lookback creates significant exposure for agencies — a single RAC audit can potentially recoup payments on hundreds of historical claims if the same documentation pattern is found across the lookback window. This makes consistent documentation quality across years (not just months) critical.
What's the difference between RAC and TPE audits?
Key differences: TPE is run by your MAC (regional Medicare contractor) for educational purposes; RAC is run by private contractors specifically to recover overpayments. TPE samples 20-40 claims per round across 3 rounds; RAC can sample dozens to hundreds of claims based on identified patterns. TPE looks at recent claims; RAC has a 3-year lookback. TPE is graduated (round 1 → 2 → 3); RAC is direct recovery. Failing TPE leads to escalation; failing a RAC means immediate recoupment with appeal as the only remedy. RAC reviews tend to be higher-stakes financially per audit.
How do you appeal a RAC denial?
RAC denials follow the standard Medicare appeal process: (1) Reopening — within 12 months for clerical errors, (2) Redetermination — Level 1 appeal to your MAC within 120 days of denial, (3) Reconsideration — Level 2 appeal to a Qualified Independent Contractor within 180 days, (4) Administrative Law Judge (ALJ) hearing — Level 3 appeal within 60 days, (5) Departmental Appeals Board — Level 4 appeal. Each level has specific timelines and procedures. Most successful RAC appeals are won at Level 1 or 2 with strong documentation and narrative justification.
Who are the current RACs for home health?
Medicare divides the country into RAC regions, with one RAC contractor per region. Performant Recovery and Cotiviti (formerly HMS) are among the active home health RACs. Specific RAC assignments rotate periodically, so check the CMS RAC contractor directory for the current contractor in your region. Each RAC has its own focus areas and documentation requirements, though all operate under standard CMS RAC rules.

Facing a RAC audit? We'll handle every ADR + appeal end-to-end.

Book a 30-min Call