Table of Contents
The Five-Record Rule
Simplify Your Home Care Operations
CareCade helps DDA and HCBS providers manage scheduling, EVV, and billing in one platform.
In 2026, most states deny Medicaid home care claims that fail EVV validation — and auditors now cross-check GPS location, visit timestamps, and documentation consistency against every claim. An audit-proof agency keeps five records aligned on every visit: the schedule, the check-in/out with location, the session note, the service code, and the claim. When all five tell the same story, audits are paperwork. When they don't, audits are existential.
This isn't a fraud lecture. The agencies that get burned in audits are rarely committing fraud — they're committing inconsistency, and in the hard-edit era, inconsistency reads as fraud until proven otherwise.
What Changed
Two shifts turned audits from occasional to structural:
First, hard edits. States moved from warning about bad EVV data to denying claims over it — we covered the mechanics in our hard-edits explainer. Most states now expect 85%+ EVV accuracy, and claims with missing times, suspect timestamps, or out-of-area GPS data bounce automatically.
Second, cross-referencing. Auditors no longer review documents one at a time. They pull your claims, your EVV feed, and your notes, and diff them. A visit billed for three hours with a check-out 95 minutes after check-in isn't a paperwork quirk anymore — it's a finding, and findings multiply: one becomes a sample, a sample becomes an extrapolated recoupment across every similar claim.
The Five Records, and How They Drift Apart
| Record | What auditors check | How it drifts |
|---|---|---|
| Schedule | Was this visit planned, for this client, this caregiver? | Last-minute swaps never entered in the system |
| Check-in/out | Times + GPS at the service location | Caregiver clocks in from the parking lot… of a different errand |
| Session note | Activities matching the service billed | Notes written days later, from memory, generic |
| Service code | The code matches what the note describes | "Personal care" billed, note describes companionship |
| Claim | Hours/units match all of the above | Billing enters what was authorized, not what happened |
Every one of those drifts is innocent in isolation. Stacked across a year of visits, they build the statistical pattern that auditors are trained — and now equipped — to find.
The Prevention Playbook
1. Make the schedule the single source of truth
Every visit that happens should exist in the schedule before it happens — including swaps and emergency coverage. If your scheduling still lives in group texts, that's the first hole to close; it's the record all four others hang from. (How the platform handles this.)
2. Verify at the door, not from memory
GPS-verified check-in/out at the client's location, on the caregiver's phone, at the actual moment. This is the record that hard edits test first, and it's also your best defense: a year of clean, location-verified visits is the most persuasive document an audited agency can produce. Washington agencies can see how they compare on our verification-rate benchmarks.
3. Write notes during the visit, tied to the visit
Session notes composed at the kitchen table Friday night describe a week, not a visit. Notes written in the visit window, attached to that visit's record, describe the visit — and match its timestamps by construction. AI-assisted notes cut the time cost, but the caregiver reviews and owns every word (our position on that is a whole article).
4. Reconcile before you bill, not after you're asked
Run a weekly pre-billing pass: visits where check-in/out duration doesn't match billed units, notes missing, codes mismatched. Ten minutes weekly beats a recoupment letter annually. Agencies running connected scheduling-to-billing systems get this reconciliation as a report instead of a project.
5. Keep the audit trail immutable
Corrections happen — a caregiver forgets to clock out, a code gets fixed. What matters is that corrections are visible as corrections: who changed what, when, and why. Systems that let anyone silently edit past records don't protect you; they convert every honest fix into an unexplainable anomaly.
If the Audit Letter Arrives Anyway
- Don't panic-correct. Editing records after an audit notice is the single worst move available. Freeze, then respond.
- Assign one owner. One person coordinates the response, tracks every document request, and keeps copies of everything submitted.
- Pull the five records for every sampled visit and check alignment yourself before the auditor does. Know your weak visits before the meeting.
- Answer what's asked. Volunteer documents responsive to the request, not your entire filing cabinet.
- Get help at the first extrapolation. The moment an auditor moves from "these visits" to "this error rate across all claims," the financial stakes justify a healthcare attorney.
The Honest Version of "Fraud Prevention"
Actual fraud — billing for visits that never happened — is rare and unambiguous, and EVV has made it nearly impossible to sustain. What the hard-edit era really punishes is operational looseness: real care, delivered by real caregivers, documented casually. The fix isn't integrity training. It's infrastructure that makes the consistent record the path of least resistance — where checking in properly is easier than not, and where the note, the code, and the claim inherit their facts from the same verified visit instead of being retyped three times.
That's the quiet reason agencies on modern platforms sail through audits: not because their people are more honest, but because their records physically can't drift apart.
FAQ
What triggers a home care Medicaid audit?
Common triggers include EVV data-quality patterns (missing times, out-of-area GPS), billing patterns that deviate from peers, claim/documentation mismatches found in hard-edit denials, and complaints. Some audits are simply random.
What is the 85% EVV accuracy threshold?
Most states now require roughly 85%+ of visits to pass EVV validation to avoid penalties, claim denials, or enhanced review. Persistent failures below that line invite audits.
What records should agencies keep aligned for every visit?
Five: the schedule entry, the GPS-verified check-in/out, the session note, the service code, and the claim. Auditors cross-reference all five; mismatches become findings.
Should we fix old records before an audit?
No. Corrections after an audit notice look like concealment even when innocent. Respond with records as they stand, and let corrections that predate the notice show their normal audit trail.
How does EVV help rather than hurt in an audit?
A history of GPS-verified, timestamped visits is affirmative evidence that billed services occurred as claimed — the strongest documentation an agency can produce. See our EVV verification benchmarks for how Washington agencies score.
CareCade ties schedule, GPS verification, notes, and billing records to the same visit — so your five records can't drift. See how it works.