Surviving a Medicare Payment Suspension: A Cash-Flow, Legal, and Documentation Response Plan for Providers

A Medicare payment suspension can change the financial picture of a healthcare organization overnight. When CMS suspends payments, the provider usually continues to deliver care and submit claims, but the money stops arriving. Payroll, rent, supplies, and other obligations do not stop, and the suspension can last for months.

Payment suspensions have become a common Medicare program integrity tool. The Centers for Medicare & Medicaid Services (CMS) reported imposing 537 Medicare payment suspensions on providers and suppliers in 2025, with more than $5.7 billion on hold at the end of the year. CMS's Fraud Defense Operations Center alone reported payment suspensions for 249 providers and suppliers in 2025 and 267 more in the first half of 2026.

Surviving a payment suspension requires more than a single response letter. It requires a coordinated plan that addresses three areas at the same time: cash flow, legal strategy, and documentation. This article provides an educational, step-by-step response plan that providers can adapt to their own situation. It does not replace advice from qualified legal counsel and financial advisors, who should be involved as early as possible.

Understanding the Payment Suspension

What a Payment Suspension Is

Federal regulations at 42 CFR 405.370 define suspension of payment as the withholding of payment by a Medicare contractor of an approved Medicare payment amount before a determination of the amount of an overpayment exists, or until the resolution of an investigation of a credible allegation of fraud.

Under 42 CFR 405.371, CMS may suspend payments when there is reliable information that an overpayment exists, that payments to be made may not be correct, or that the provider has failed to furnish requested records, or when there is a credible allegation of fraud. The Medicare Program Integrity Manual explains that Unified Program Integrity Contractors (UPICs) typically recommend suspensions, CMS's Center for Program Integrity approves them, and the UPIC coordinates with the Medicare Administrative Contractor (MAC) to implement them.

What Happens to the Withheld Money

Withheld payments are not automatically lost. Under 42 CFR 405.372(e), amounts withheld during a suspension are applied to any overpayment that is determined, and any excess is released to the provider unless there is a legal requirement to pay it to another entity. In other words, the outcome of the review determines how much of the withheld money the provider eventually receives.

How Long Suspensions Last

Under 42 CFR 405.372(d), general suspensions are time-limited, typically 180 days, with the possibility of extension. For suspensions based on a credible allegation of fraud, the Program Integrity Manual explains that the suspension may continue beyond 360 days with a written request from law enforcement, and that after 18 months good cause not to continue the suspension is deemed to exist unless certain criteria are met. Providers should plan for the possibility of a long suspension.

The Rebuttal Right and the Lack of Appeal

Under 42 CFR 405.372(b)(2) and 405.374, providers may submit a rebuttal statement, generally within 15 days of notification, explaining why the suspension should not be imposed or should be removed. Under 42 CFR 405.375, CMS or the contractor must consider the rebuttal within 15 days of receipt. The payment suspension itself is not appealable, which makes the rebuttal the main early opportunity to challenge it.

The First 72 Hours: Immediate Actions

The first few days after receiving a suspension notice are critical. A focused, organized response sets the tone for everything that follows.

Read and Log the Notice

• Record the date the notice was received and the date on the notice.

• Identify the basis for the suspension, the scope (full or partial), the effective date, and the example claims or concerns listed.

• Calculate the rebuttal deadline and add it to a central calendar with reminders.

Assemble a Response Team

A typical response team includes:

• An executive lead with decision-making authority.

• Legal counsel experienced in Medicare program integrity and health care fraud matters.

• The compliance officer.

• The chief financial officer or finance lead.

• Clinical leadership for medical necessity and documentation questions.

• Billing and coding leadership.

• A records custodian responsible for collecting and producing documents.

Limit the team to people who need to know, and route communications through counsel where appropriate to help protect privileged discussions.

Preserve Records

Issue a written legal hold that suspends routine deletion of medical records, billing data, emails, text messages, and other relevant information. Make sure vendors, such as billing companies and electronic health record providers, preserve data too. Never alter, backdate, or destroy records. Doing so can lead to serious legal consequences.

Determine Whether Law Enforcement Is Involved

A suspension based on a credible allegation of fraud may indicate a parallel investigation by HHS-OIG, the FBI, or the Department of Justice. Counsel should evaluate this possibility before the organization makes any statements to the government.

Part One: The Cash-Flow Response Plan

A payment suspension is, first, a liquidity crisis. Organizations that act quickly to protect cash give themselves more time to resolve the underlying issues.

Step 1: Measure the Impact

• Calculate the share of revenue that comes from Medicare fee-for-service.

• Estimate monthly Medicare receipts that will be withheld.

• Identify whether the suspension is full or partial and which claims or services are affected.

• Determine whether other payers, such as Medicaid or Medicare Advantage plans, may take related action.

Step 2: Build a Short-Term Cash Forecast

A rolling 13-week cash flow forecast is a common tool in financial stress situations. It shows expected cash receipts and disbursements week by week and highlights when cash may run short. Update the forecast weekly as circumstances change.

Step 3: Prioritize Essential Payments

When cash is limited, organizations must decide what to pay first. Common priorities include:

• Payroll and payroll taxes, because failing to pay employees and payroll taxes creates serious legal and operational risks.

• Items essential to patient safety and care delivery.

• Insurance, including malpractice and liability coverage.

• Rent and utilities needed to keep operating.

Step 4: Preserve and Access Liquidity

• Review cash reserves and available lines of credit.

• Consult with lenders early. Some loan agreements require notice of material events, and early communication can preserve relationships.

• Explore financing options carefully, with advice from financial and legal professionals.

• Review owner contributions or other capital sources, if available.

Step 5: Reduce and Defer Expenses

• Identify discretionary spending that can be paused.

• Negotiate payment terms with vendors.

• Review staffing models, while making sure staffing remains sufficient to deliver safe, compliant care.

• Delay non-essential capital projects.

Step 6: Strengthen Non-Medicare Revenue

• Make sure claims to other payers are submitted promptly and accurately.

• Work down existing accounts receivable from other payers.

• Review patient collections processes for compliance and efficiency.

Step 7: Keep Submitting Accurate Medicare Claims

Continue submitting accurate, well-documented claims during the suspension. Withheld amounts are applied to any determined overpayment, and any excess is released. Stopping claim submission entirely could reduce the amount ultimately available to the provider and may raise questions. Discuss billing strategy with counsel.

Step 8: Plan for Multiple Scenarios

Prepare plans for a short suspension, a long suspension, and a suspension followed by an overpayment determination. Identify the decision points at which the organization would need to consider more significant changes, such as reducing services or arranging patient transitions.

Part Two: The Legal Response Plan

Engage Experienced Counsel Immediately

Counsel can evaluate the basis for the suspension, the risk of parallel civil or criminal proceedings, and the best approach to the rebuttal and to communications with the government.

Prepare and Submit the Rebuttal

An effective rebuttal statement is typically organized, factual, specific, and supported by documents. It should address the example claims and concerns identified in the notice, explain any legitimate reasons for billing patterns that may have raised concerns, and describe corrective actions already taken. Where appropriate, it may argue that a good cause exception applies, such as a serious risk to beneficiary access to care, or request modification to a partial suspension. Every statement must be accurate.

Submit the rebuttal to the address in the notice using a trackable delivery method, and keep a complete copy.

Manage Parallel Proceedings

Health care fraud matters can involve administrative, civil, and criminal tracks at the same time. Information provided in one context may be shared with others as permitted by law. Counsel should coordinate the organization's approach across all tracks.

Address Medicaid and Other Payers

State Medicaid programs must suspend payments when there is a credible allegation of fraud under 42 CFR 455.23, subject to good-cause exceptions. A Medicare suspension may therefore be accompanied by Medicaid action. Medicaid managed care plans and Medicare Advantage plans may also take their own actions under their contracts. Counsel should review each payer relationship.

Protect Individuals and the Organization

The interests of the organization and of individual owners, executives, or employees may differ. Individuals may need separate counsel. Review indemnification agreements and insurance coverage, including directors and officers insurance and any regulatory coverage, and notify carriers as required by the policies.

Prepare for Government Contact

Make sure staff know how to respond to agents, subpoenas, or civil investigative demands, including immediately notifying the designated contact and counsel. The organization should not discourage employees from speaking with the government, but employees may be informed of their rights in a lawful, non-coercive way with counsel's guidance.

Consider Disclosure Options When Appropriate

If the organization's own review identifies problems, counsel can evaluate options such as returning overpayments under 42 CFR 401.305, the HHS-OIG Health Care Fraud Self-Disclosure Protocol, or, for potentially criminal conduct, voluntary self-disclosure to the Department of Justice under the joint policy announced by DOJ's National Fraud Enforcement Division and HHS-OIG in October 2026.

Part Three: The Documentation Response Plan

Gather the Records for the Example Claims

Collect complete medical records for every claim, beneficiary, and date of service listed in the notice. Depending on the service type, this may include orders, certifications and recertifications, face-to-face encounter documentation, plans of care, visit notes, test results, signature logs or attestations, and proof of delivery.

Conduct a Privileged Internal Review

Under the direction of counsel, review a broader sample of claims to understand whether issues are isolated or systemic. An internal review helps the organization prepare its rebuttal, anticipate the contractor's findings, and identify corrective actions.

Respond Promptly to UPIC Requests

During a suspension, the UPIC may request additional records. Failure to furnish records is itself a ground for suspension under 42 CFR 405.371. Track every request and deadline, review records for completeness and legibility before submission, and keep copies and proof of delivery.

Do Not Create After-the-Fact Records

Late entries and addenda must follow Medicare documentation rules, be clearly identified, and be dated when written. Records must never be created or changed to appear as though they existed earlier.

Fix Documentation Practices Going Forward

• Retrain clinicians and staff on documentation requirements for your service lines.

• Review electronic health record templates for individualization and accuracy.

• Implement pre-billing audits for high-risk services.

• Track and report documentation error rates to leadership.

Part Four: Operations, Patients, and Staff

Maintain Patient Care

Patient safety and continuity of care come first. If the organization must reduce services, plan safe transitions and comply with all applicable discharge and notice requirements.

Communicate Carefully with Staff

Share accurate, limited information with staff, focusing on what they need to know to continue working effectively. Avoid speculation, and remind staff of confidentiality expectations and the organization's non-retaliation policy.

Keep Enrollment and Compliance Obligations Current

Continue to report enrollment changes on time, respond to revalidation requests, and meet all program requirements. A suspension does not pause other compliance obligations.

Inform the Governing Body

The board or owners should receive regular updates on the status of the suspension, financial impact, legal strategy, and corrective actions.

Part Five: After the Suspension

Possible Outcomes

A suspension may end with removal and release of withheld funds, with an overpayment determination offset against withheld funds, or with other actions such as revocation of enrollment or referral to law enforcement. The UPIC recommends termination of a fraud suspension when, among other things, the amount of any overpayment has been determined.

Appealing an Overpayment Determination

Overpayment determinations can be appealed through the Medicare fee-for-service appeal process:

• Redetermination by the MAC, generally requested within 120 days.

• Reconsideration by a Qualified Independent Contractor, generally requested within 180 days of the redetermination decision.

• A hearing before an Administrative Law Judge, generally requested within 60 days of the reconsideration decision.

• Review by the Medicare Appeals Council.

• Judicial review in federal district court.

For Medicare overpayments, filing a redetermination request within 30 days and a reconsideration request within 60 days of the relevant decision can affect whether recoupment is delayed during the appeal.

Understanding Extrapolation

Contractors may use statistical sampling to estimate overpayments across a larger universe of claims when permitted under Section 1893(f)(3) of the Social Security Act, such as when there is a sustained or high level of payment error. Providers can challenge the sampling methodology as part of an appeal, often with the help of a qualified statistician.

Repayment Options

If an overpayment is owed, providers may be able to request an extended repayment schedule under 42 CFR 401.607 when repayment within the standard timeframe would create a hardship. Interest may accrue on unpaid balances.

Corrective Action and Monitoring

After the suspension, implement and monitor corrective actions, update the compliance program, and continue internal audits. Consider an independent review to confirm that improvements are working.

A Sample 30-60-90 Day Response Timeline

Every suspension is different, but a structured timeline helps keep the response on track.

Days 1 to 15

• Log the notice, assemble the response team, and engage counsel.

• Issue the legal hold and notify key vendors.

• Build the first version of the 13-week cash flow forecast.

• Gather records for the example claims and begin the privileged internal review.

• Prepare and submit the rebuttal statement by the deadline.

• Notify insurance carriers as required by the policies.

Days 16 to 30

• Track the contractor's review of the rebuttal and follow up in writing if needed.

• Begin cost reduction and vendor negotiations.

• Communicate with lenders and confirm available liquidity.

• Respond to any additional records requests from the UPIC.

• Brief the governing body on the situation and the plan.

Days 31 to 60

• Update the cash forecast weekly and adjust spending decisions.

• Complete the internal review and identify root causes.

• Begin implementing corrective actions, including training and documentation changes.

• Review Medicaid, Medicare Advantage, and commercial payer relationships for related actions.

Days 61 to 90 and Beyond

• Continue responding to contractor requests and maintaining compliance.

• Monitor corrective actions and audit their effectiveness.

• Prepare for possible outcomes, including an overpayment determination, appeal, or extended repayment request.

• Reassess the organization's financial strategy if the suspension continues.

Common Mistakes to Avoid During a Suspension

• Treating the notice as routine and missing the rebuttal deadline.

• Responding to the government without first consulting experienced counsel.

• Failing to preserve records, or altering records after the fact.

• Stopping all billing without considering how withheld funds are applied and released.

• Ignoring payroll tax obligations to preserve cash in the short term.

• Communicating too broadly or speculatively with staff, patients, or the public.

• Overlooking related actions by Medicaid or Medicare Advantage plans.

• Focusing only on the immediate crisis without fixing the underlying documentation or compliance problems.

A Payment Suspension Response Checklist

• Log the notice, calculate the rebuttal deadline, and calendar all dates.

• Assemble the response team, including experienced legal counsel.

• Issue a legal hold covering all records and electronic data.

• Determine whether law enforcement may be involved.

• Build a 13-week cash flow forecast and update it weekly.

• Prioritize payroll, patient care, insurance, and essential operating costs.

• Communicate early with lenders and key vendors.

• Continue submitting accurate claims, with counsel's guidance.

• Gather records for all example claims and conduct a privileged internal review.

• Prepare and submit a timely, factual, well-supported rebuttal.

• Respond promptly to all UPIC requests.

• Review Medicaid, Medicare Advantage, and other payer implications.

• Review insurance coverage and notify carriers as required.

• Keep the governing body informed.

• Plan for appeals, extrapolation challenges, and repayment options.

• Implement and monitor corrective actions.

Frequently Asked Questions

Can I keep billing Medicare during a suspension?

Generally, yes. Claims continue to be processed, but payments are withheld. Withheld amounts are applied to any overpayment determined, and any excess is released.

How long will the suspension last?

It depends on the basis. General suspensions are typically limited to 180 days with possible extension. Fraud suspensions can last until the investigation is resolved, subject to the limits described in 42 CFR 405.372(d) and the Program Integrity Manual.

Can I appeal the suspension?

No. The suspension action is not appealable, but you may submit a rebuttal statement. Later overpayment determinations can be appealed.

Will a suspension affect my Medicaid payments?

It may. States must suspend Medicaid payments when there is a credible allegation of fraud, subject to good-cause exceptions, and federal and state agencies share information.

Should I stop treating Medicare patients?

That is a business and clinical decision that should be made carefully, with patient safety as the priority and with input from counsel. Abruptly stopping services can harm patients and create additional legal risks.

Conclusion

A Medicare payment suspension is one of the most serious challenges a provider can face, but it can be managed with a clear plan. Acting quickly to protect cash, engaging experienced counsel, submitting a strong rebuttal, organizing documentation, responding promptly to contractor requests, protecting patient care, and planning for appeals and repayment all improve an organization's chances of coming through the process intact. Just as important, the lessons learned should lead to stronger compliance practices that reduce the risk of future suspensions.

How HealthBridge Can Help

HealthBridge is a healthcare management consulting firm that specializes in Medicare program integrity, compliance, and audit response. We help providers organize records and billing data, analyze the issues raised in suspension notices, support rebuttal preparation in coordination with legal counsel, respond to UPIC requests, model cash-flow scenarios, and strengthen documentation and compliance programs. If your organization is facing a payment suspension or wants to be prepared, please get in touch with us. We will be happy to help you with this topic.

References

• Electronic Code of Federal Regulations. 42 CFR 405.370, Definitions. https://www.ecfr.gov/current/title-42/section-405.370

• Electronic Code of Federal Regulations. 42 CFR 405.371, Suspension, Offset, and Recoupment of Medicare Payments. https://www.ecfr.gov/current/title-42/section-405.371

• Electronic Code of Federal Regulations. 42 CFR 405.372, Proceeding for Suspension of Payment. https://www.ecfr.gov/current/title-42/section-405.372

• Electronic Code of Federal Regulations. 42 CFR 405.374, Opportunity for Rebuttal. https://www.ecfr.gov/current/title-42/section-405.374

• Electronic Code of Federal Regulations. 42 CFR 405.375, Time Limits for, and Notification of, Administrative Determination After Receipt of Rebuttal Statement. https://www.ecfr.gov/current/title-42/section-405.375

• Electronic Code of Federal Regulations. 42 CFR 401.305, Requirements for Reporting and Returning of Overpayments. https://www.ecfr.gov/current/title-42/section-401.305

• Electronic Code of Federal Regulations. 42 CFR 401.607, Claims Collection. https://www.ecfr.gov/current/title-42/section-401.607

• Electronic Code of Federal Regulations. 42 CFR 455.23, Suspension of Payments in Cases of Fraud. https://www.ecfr.gov/current/title-42/section-455.23

• Centers for Medicare & Medicaid Services. Medicare Program Integrity Manual, Chapter 8. https://www.cms.gov/regulations-and-guidance/guidance/manuals/downloads/pim83c08.pdf

• Centers for Medicare & Medicaid Services. CMS Manual System, Pub. 100-08 Medicare Program Integrity, Transmittal 12515 (Model Payment Suspension Letters). https://www.cms.gov/files/document/r12515pi.pdf

• Centers for Medicare & Medicaid Services, Center for Program Integrity. Crushing Fraud: Annual Report 2025. https://www.cms.gov/files/document/crushing-fraud-annual-report.pdf

• Centers for Medicare & Medicaid Services. Fraud Defense Operations Center Fast Facts. https://www.cms.gov/files/document/fdoc-fact-sheet-updated.pdf

• Centers for Medicare & Medicaid Services. Crushing Fraud through the Fraud Defense Operations Center, Fast Facts (CY 2026 update). https://www.cms.gov/files/document/cpi-fdoc-fact-sheet-updated-first-year.pdf

• Centers for Medicare & Medicaid Services. Original Medicare (Fee-for-Service) Appeals. https://www.cms.gov/medicare/appeals-grievances/fee-for-service

• U.S. Social Security Administration. Social Security Act, Section 1893, Medicare Integrity Program. https://www.ssa.gov/OP_Home/ssact/title18/1893.htm

• U.S. Department of Justice, Office of Public Affairs. National Fraud Enforcement Division and the Department of Health and Human Services Announce Self-Disclosure Protocol for Criminal Health Care Fraud. https://www.justice.gov/opa/pr/national-fraud-enforcement-division-and-department-health-and-human-services-announce-self

• U.S. Department of Health and Human Services, Office of Inspector General. Health Care Fraud Self-Disclosure. https://oig.hhs.gov/compliance/self-disclosure-info/

• U.S. Department of Health and Human Services, Office of Inspector General. The Use of Payment Suspensions To Prevent Inappropriate Medicare Payments (OEI-01-09-00180). https://oig.hhs.gov/oei/reports/oei-01-09-00180.pdf

• U.S. Department of Health and Human Services, Office of Inspector General. General Compliance Program Guidance. https://oig.hhs.gov/compliance/general-compliance-program-guidance/