Medicare Payment Suspension for "Credible Allegation of Fraud": How to File a Rebuttal Before the Deadline

Few letters create more urgency for a healthcare organization than a notice that its Medicare payments have been suspended. A payment suspension means Medicare stops paying the provider's claims, sometimes immediately and sometimes for many months, while an investigation or review takes place. When the suspension is based on a "credible allegation of fraud," the stakes are especially high.

Payment suspensions have become one of the most frequently used tools in Medicare program integrity. The Centers for Medicare & Medicaid Services (CMS) reported imposing 537 Medicare payment suspensions in 2025, with more than $5.7 billion on hold at the end of the year. CMS's Fraud Defense Operations Center reported suspending payments to 249 providers and suppliers in 2025 and 267 more in the first half of 2026.

Federal regulations give providers an important right when a suspension is imposed: the opportunity to submit a written rebuttal statement explaining why the suspension should not be imposed or should be removed. In most cases, the notice asks for the rebuttal within 15 days. Missing that window means losing an early chance to present your side.

This article explains what a Medicare payment suspension is, what "credible allegation of fraud" means, how the rebuttal process works under 42 CFR 405.370 through 405.375 and the Medicare Program Integrity Manual, how to prepare an effective rebuttal, and what happens afterward. It is educational and is not legal advice. Any provider that receives a payment suspension notice should contact experienced legal counsel right away.

What Is a Medicare Payment Suspension?

Federal regulations define suspension of payment as the withholding of payment by a Medicare contractor from a provider or supplier of an approved Medicare payment amount before a determination of the amount of the overpayment exists, or until the resolution of an investigation of a credible allegation of fraud.

In practical terms, the provider can usually continue to submit claims, and claims may continue to be processed, but the money is held rather than paid. Under the regulations, amounts withheld during a suspension are applied to any overpayment that is later determined, and any excess is released to the provider unless there is a legal requirement to pay it to another entity.

Grounds for a Payment Suspension

Under 42 CFR 405.371 and Chapter 8 of the Medicare Program Integrity Manual, CMS may approve a payment suspension when:

• There is reliable information that an overpayment exists.

• There is reliable information that payments to be made may not be correct.

• There is reliable information that the provider has failed to furnish records and other requested information needed to determine amounts due.

• There is a credible allegation of fraud against the provider.

Suspensions based on the first three grounds are often called "general suspensions," and suspensions based on a credible allegation of fraud are called "fraud suspensions."

What Does "Credible Allegation of Fraud" Mean?

CMS regulations at 42 CFR 405.370 define a credible allegation of fraud as an allegation from any source, including but not limited to fraud hotline complaints, claims data mining, patterns identified through provider audits, civil false claims cases, and law enforcement investigations. Allegations are considered credible when they have indicia of reliability.

Under 42 CFR 405.371(a)(2), Medicare payments may be suspended in cases of suspected fraud if CMS or a Medicare contractor has consulted with the HHS Office of Inspector General (HHS-OIG), and as appropriate the Department of Justice, and determined that a credible allegation of fraud exists, unless there is good cause not to suspend payments.

Examples From CMS Guidance

The Medicare Program Integrity Manual explains that fraud suspensions may also be imposed for reasons not typically viewed as false claims. Examples include:

• A Quality Improvement Organization determining that diagnosis related groups were upcoded.

• A suspected violation of the physician self-referral law.

• Credible allegations of kickbacks from law enforcement, even when services were rendered and may be medically necessary.

• Forged signatures on medical record documentation, such as certificates of medical necessity or treatment plans, or other misrepresentations to obtain payment.

The Program Integrity Manual exhibits also describe the kinds of information that can support a finding, including data analysis showing a provider's utilization is well above that of its peers without an apparent legitimate rationale, statements from beneficiaries or their families, corroboration from provider employees, prepayment and postpayment review of medical records, and recommendations from HHS-OIG, the FBI, or federal prosecutors.

Importantly, a credible allegation of fraud is not a finding that fraud occurred. It is a threshold determination that an allegation has enough reliability to justify withholding payment while the matter is investigated.

Good Cause Exceptions

The regulations allow CMS to find good cause not to suspend payments, or not to continue a suspension, even when there is a credible allegation of fraud. Examples described in the regulations and the Program Integrity Manual include situations where law enforcement asks that a suspension not be imposed because it could compromise an investigation, where beneficiary access to necessary items or services would be so jeopardized as to cause a danger to life or health, and where other available remedies would more effectively or quickly protect Medicare funds.

How the Payment Suspension Process Works

Who Is Involved

Payment suspensions are approved by CMS through the Center for Program Integrity (CPI). The Unified Program Integrity Contractor (UPIC) typically recommends the suspension, notifies the provider once it is approved, coordinates with the Medicare Administrative Contractor (MAC) to implement it, reviews claims during the suspension, and handles rebuttal statements. In fraud cases, the UPIC may send an informational copy of notices to HHS-OIG, the FBI, or the U.S. Attorney's Office when law enforcement is involved.

Prior Notice vs. No Prior Notice

The Program Integrity Manual states that when prior notice is appropriate, the UPIC will in most instances give at least 15 calendar days' prior notice before the suspension takes effect. However, in cases involving suspected fraud or where delay could harm the Medicare trust funds, CMS may impose the suspension without prior notice, and the provider is notified at or after the time the suspension begins.

For credible allegation of fraud suspensions, providers should expect that payments may already be withheld when the notice arrives.

What the Notice Includes

The Program Integrity Manual and the CMS model payment suspension letters indicate that a notice generally includes:

• The basis for the suspension, such as a credible allegation of fraud.

• A statement that CMS approved the suspension.

• Examples of claims or conduct underlying the suspension. CMS model letters state that the list of examples is not exhaustive because the investigation is continuing.

• The effective date and scope of the suspension.

• A statement that the suspension is not appealable.

• The provider's opportunity to submit a rebuttal statement within 15 days.

• The address where the rebuttal should be sent.

Notices are sent by certified mail or another trackable delivery method.

Duration of a Payment Suspension

Under 42 CFR 405.372(d), suspensions are time-limited, with different rules depending on the basis. General suspensions are generally limited to 180 days, with the possibility of an extension. For suspensions based on a credible allegation of fraud, the Program Integrity Manual explains that the suspension may continue beyond 360 days with a written request for extension from law enforcement if the investigation has not been resolved, and that after 18 months, good cause not to continue the suspension is deemed to exist unless certain criteria are met.

The UPIC recommends termination of a fraud suspension when, among other things, the amount of the overpayment has been determined.

The Right to Submit a Rebuttal Statement

What the Regulations Say

Under 42 CFR 405.372(b)(2) and 42 CFR 405.374, a provider has the opportunity to submit a written statement, with any pertinent evidence, explaining why the suspension should not be put into effect or should be removed. Under 42 CFR 405.374, the provider generally has at least 15 days following the date of notification to submit the statement, although this time may be shortened or lengthened for cause.

The Program Integrity Manual states that for suspensions imposed without prior notice, providers are also afforded the opportunity to submit a rebuttal, and that CMS suggests a 15-calendar-day response time for consistency.

How the Rebuttal Is Reviewed

Under 42 CFR 405.375, CMS or the contractor must consider the statement, including any pertinent evidence, together with other material bearing on the case, within 15 days from the date the statement is received, and determine whether the facts justify the suspension. CMS model letters state that the reviewer will determine whether the suspension should be removed, modified, or remain in effect within 15 days of receipt of the complete rebuttal package, and that the provider will be notified in writing.

The suspension stays in effect while the rebuttal is reviewed.

The Suspension Itself Is Not Appealable

The payment suspension action is not appealable through the Medicare claims appeal process. The rebuttal statement is therefore the main administrative opportunity to challenge the suspension directly. This makes the quality and timeliness of the rebuttal especially important.

How to File a Rebuttal Before the Deadline: Step by Step

Step 1: Calculate the Deadline Immediately

Read the notice the day it arrives. Identify the date of the notice, the date of receipt, and the rebuttal deadline stated in the letter. CMS model letters ask for the rebuttal within 15 days, and some versions refer to 15 days of receipt of the notice. The Program Integrity Manual notes that for prior notice, day one begins the calendar day after the notice is mailed. When in doubt, use the earliest possible date as your deadline.

If you need more time, you can ask the UPIC in writing for an extension and explain the reason, because 42 CFR 405.374 allows the time to be lengthened for cause. Do not assume an extension will be granted, and get any extension confirmed in writing.

Step 2: Contact Experienced Legal Counsel

A credible allegation of fraud suspension often means law enforcement may be involved. Legal counsel experienced in Medicare program integrity and health care fraud matters can help evaluate risks, including how statements in a rebuttal could be used in a parallel civil or criminal matter.

Step 3: Preserve All Records

Issue a legal hold to preserve medical records, billing data, emails, text messages, and other documents. Do not alter, backdate, or destroy any records. Altering documents after receiving notice of an investigation can lead to serious consequences, including obstruction charges.

Step 4: Understand the Basis of the Suspension

Review the notice carefully to identify:

• The specific allegations or concerns described.

• The example claims, beneficiaries, dates of service, or billing patterns listed.

• The time period and scope of the suspension.

Because CMS model letters state that listed examples are not exhaustive, the rebuttal should address both the specific examples and the general concerns.

Step 5: Gather Supporting Evidence

Depending on the allegations, helpful evidence may include:

• Complete medical records for the example claims, including orders, certifications, plans of care, progress notes, test results, and signatures.

• Proof of delivery for items such as durable medical equipment.

• Documentation of the ordering practitioner's relationship with the patient.

• Staffing records, schedules, and visit logs showing who provided services and when.

• Enrollment records showing accurate ownership, location, and operational status.

• Explanations for billing patterns, such as a new service line, a new location, a specialized patient population, or a coding policy change.

• Internal audit results, compliance program documents, and corrective actions already taken.

• Evidence that identified errors were isolated, have been corrected, and any resulting overpayments have been or will be returned.

Step 6: Write a Clear, Factual Rebuttal Statement

An effective rebuttal statement is typically:

• Organized. Begin with a short summary of why the suspension should be removed or modified, then address each concern in turn.

• Factual. Focus on verifiable facts and documents, not opinions or emotional appeals.

• Specific. Respond directly to each example claim or concern identified in the notice.

• Supported. Reference attached exhibits for every factual statement.

• Professional. Keep a respectful tone toward CMS and the contractor.

• Accurate. Every statement must be truthful. False statements to the government can create separate legal liability.

Where appropriate, the rebuttal may also explain why a good cause exception applies, such as a serious risk to beneficiary access in an underserved area, or why other remedies, such as pre-payment review, would adequately protect Medicare funds. Requesting partial removal or modification of the suspension may also be an option.

Step 7: Submit the Rebuttal Correctly

• Send the rebuttal to the exact address or contact listed in the notice.

• Use a trackable delivery method and keep proof of delivery.

• Include the provider's name, National Provider Identifier, Medicare identification numbers, and any reference numbers from the notice.

• Keep a complete copy of everything submitted.

Step 8: Follow Up

Track the 15-day review period after receipt. If you do not receive a response, follow up in writing with the UPIC. Continue responding promptly to any records requests during the suspension.

Common Mistakes to Avoid

Providers responding to a payment suspension under time pressure sometimes make avoidable mistakes. Common pitfalls include:

• Waiting too long. Treating the notice as routine correspondence and starting work days later leaves little time to gather records and prepare a thoughtful response.

• Missing the correct address. Sending the rebuttal to the MAC's general address, or to a contact other than the one named in the notice, can delay review.

• Responding only in general terms. A rebuttal that says the provider did nothing wrong, without addressing the specific examples and supporting documents, is unlikely to be persuasive.

• Submitting incomplete records. Missing orders, unsigned notes, or illegible documents can weaken the response.

• Creating new documents after the fact. Late entries or addenda must be clearly identified and dated in accordance with Medicare documentation rules. Records should never be created or changed to appear as though they existed earlier.

• Making statements that cannot be supported. Every factual claim should be backed by evidence, because unsupported or inaccurate statements can damage credibility and may create legal risk.

• Overlooking related programs. A Medicare suspension may be accompanied by Medicaid or Medicare Advantage actions, and each may have its own process.

• Ignoring ongoing obligations. Providers must continue to respond to records requests, maintain accurate enrollment information, and meet other program requirements during the suspension.

• Going it alone. Because credible allegation of fraud suspensions often involve law enforcement, responding without experienced counsel can increase risk.

What Happens After the Rebuttal?

After reviewing the rebuttal, CMS or the contractor will decide whether the suspension should be removed, modified, or continued, and will notify the provider in writing with an explanation. Possible outcomes include:

• Removal of the suspension, with withheld amounts handled under the regulations.

• Modification, such as a partial suspension.

• Continuation of the suspension while the investigation or review proceeds.

During the suspension, the UPIC may review claims and determine overpayments. If an overpayment is determined, the provider receives an overpayment determination, which can be appealed through the Medicare claims appeal process: redetermination by the MAC, reconsideration by a Qualified Independent Contractor, a hearing before an Administrative Law Judge, review by the Medicare Appeals Council, and judicial review in federal court.

Managing the Business Impact of a Suspension

Because payment suspensions can last months, providers should plan for the financial and operational impact:

• Assess cash reserves and available financing.

• Communicate carefully with staff, focusing on facts and confidentiality.

• Continue to provide appropriate patient care and arrange transitions if needed.

• Continue submitting accurate claims, because withheld payments may later be released or applied to determined overpayments.

• Make sure Medicaid and other payers are handled appropriately, as state Medicaid programs must suspend payments when there is a credible allegation of fraud under 42 CFR 455.23, subject to good-cause exceptions.

How to Reduce the Risk of a Payment Suspension

• Maintain an effective compliance program consistent with HHS-OIG's General Compliance Program Guidance.

• Monitor your billing data for outlier patterns compared with peers, and document legitimate reasons for unusual patterns.

• Conduct regular internal audits of documentation, orders, signatures, and coding.

• Keep enrollment information accurate, including ownership and practice locations.

• Respond completely and on time to all Additional Documentation Requests, because failure to furnish records is itself a ground for suspension.

• Screen staff and vendors against exclusion lists.

• Review referral and marketing arrangements for compliance with the Anti-Kickback Statute and the Stark Law.

• Protect beneficiary and provider identifiers from misuse.

Frequently Asked Questions

How long do I have to file a rebuttal?

The regulations provide at least 15 days following notification, and CMS notices typically request the rebuttal within 15 days. The time can be shortened or lengthened for cause. Always follow the deadline stated in your notice.

Can I appeal a payment suspension?

No. The suspension action is not appealable. The rebuttal statement is the main way to challenge it directly. Overpayment determinations made later can be appealed.

Will my payments resume while the rebuttal is reviewed?

No. The suspension remains in effect during the review.

How long can a fraud suspension last?

Fraud suspensions can last until the investigation is resolved, subject to the time limits and extension rules in 42 CFR 405.372(d). The Program Integrity Manual explains that extensions beyond 360 days require a written request from law enforcement and that after 18 months good cause not to continue is deemed to exist unless certain criteria are met.

Does a credible allegation of fraud mean I committed fraud?

No. It means CMS determined that an allegation has indicia of reliability sufficient to justify withholding payment while the matter is investigated.

Should I submit a rebuttal if law enforcement is involved?

This is a decision to make with experienced legal counsel, who can weigh the benefits of presenting your position against any risks in a parallel investigation.

Conclusion

A Medicare payment suspension based on a credible allegation of fraud is a serious event, but providers have rights. The rebuttal statement under 42 CFR 405.372 and 405.374 is a time-sensitive opportunity to explain why the suspension should not be imposed or should be removed. Because the suspension itself cannot be appealed, a timely, organized, factual, and well-supported rebuttal is essential.

Providers can protect themselves by acting immediately when a notice arrives, involving experienced counsel, preserving records, gathering strong evidence, and submitting a clear rebuttal before the deadline. Over the longer term, a strong compliance program, accurate documentation, and regular monitoring of billing patterns reduce the risk of a suspension in the first place.

How HealthBridge Can Help

HealthBridge is a healthcare management consulting firm that specializes in Medicare program integrity, compliance, and audit response. We help providers organize medical records and billing data, analyze the issues raised in payment suspension notices, prepare supporting documentation for rebuttal statements in coordination with legal counsel, and strengthen compliance programs to reduce future risk. If your organization has received a payment suspension notice or wants to be prepared, please get in touch with us. We will be happy to help you with this topic.

References

• Electronic Code of Federal Regulations. 42 CFR Part 405, Subpart C, Suspension and Recoupment of Payment to Providers and Suppliers and Collection and Compromise of Overpayments. https://www.ecfr.gov/current/title-42/chapter-IV/subchapter-B/part-405/subpart-C

• Electronic Code of Federal Regulations. 42 CFR 405.370, Definitions. https://www.ecfr.gov/current/title-42/section-405.370

• Electronic Code of Federal Regulations. 42 CFR 405.371, Suspension, Offset, and Recoupment of Medicare Payments. https://www.ecfr.gov/current/title-42/section-405.371

• Electronic Code of Federal Regulations. 42 CFR 405.372, Proceeding for Suspension of Payment. https://www.ecfr.gov/current/title-42/section-405.372

• Electronic Code of Federal Regulations. 42 CFR 405.374, Opportunity for Rebuttal. https://www.ecfr.gov/current/title-42/section-405.374

• Electronic Code of Federal Regulations. 42 CFR 405.375, Time Limits for, and Notification of, Administrative Determination After Receipt of Rebuttal Statement. https://www.ecfr.gov/current/title-42/section-405.375

• Electronic Code of Federal Regulations. 42 CFR 455.23, Suspension of Payments in Cases of Fraud. https://www.ecfr.gov/current/title-42/section-455.23

• Centers for Medicare & Medicaid Services. Medicare Program Integrity Manual, Chapter 8. https://www.cms.gov/regulations-and-guidance/guidance/manuals/downloads/pim83c08.pdf

• Centers for Medicare & Medicaid Services. Medicare Program Integrity Manual, Exhibits. https://www.cms.gov/regulations-and-guidance/guidance/manuals/downloads/pim83exhibitspdf.pdf

• Centers for Medicare & Medicaid Services. CMS Manual System, Pub. 100-08 Medicare Program Integrity, Transmittal 12515 (Model Payment Suspension Letters). https://www.cms.gov/files/document/r12515pi.pdf

• Centers for Medicare & Medicaid Services. CMS Manual System, Pub. 100-08 Medicare Program Integrity, Transmittal 13762. https://www.cms.gov/files/document/r13762pi.pdf

• Centers for Medicare & Medicaid Services. Medicaid Integrity Education, E-Bulletin: Payment Suspensions Snapshot. https://www.cms.gov/Medicare-Medicaid-Coordination/Fraud-Prevention/Medicaid-Integrity-Education/Downloads/ebulletins-payment-suspensions.pdf

• U.S. Department of Health and Human Services, Office of Inspector General. The Use of Payment Suspensions To Prevent Inappropriate Medicare Payments (OEI-01-09-00180). https://oig.hhs.gov/oei/reports/oei-01-09-00180.pdf

• Centers for Medicare & Medicaid Services, Center for Program Integrity. Crushing Fraud: Annual Report 2025. https://www.cms.gov/files/document/crushing-fraud-annual-report.pdf

• Centers for Medicare & Medicaid Services. Fraud Defense Operations Center Fast Facts. https://www.cms.gov/files/document/fdoc-fact-sheet-updated.pdf

• Centers for Medicare & Medicaid Services. Crushing Fraud through the Fraud Defense Operations Center, Fast Facts (CY 2026 update). https://www.cms.gov/files/document/cpi-fdoc-fact-sheet-updated-first-year.pdf

• U.S. Department of Health and Human Services, Office of Inspector General. General Compliance Program Guidance. https://oig.hhs.gov/compliance/general-compliance-program-guidance/

• Centers for Medicare & Medicaid Services. Original Medicare (Fee-for-Service) Appeals. https://www.cms.gov/medicare/appeals-grievances/fee-for-service