When Medicare payments stop, the immediate risk is both legal and operational. An agency notice can affect staffing, vendors, patient services and an organization’s ability to keep treating beneficiaries. A rushed response, however, can squander a short rebuttal opportunity or create inconsistencies in the clinical record. The first 48 hours should therefore be spent on three coordinated tracks: identifying the precise legal action, preserving the underlying evidence, and measuring patient and business consequences. The goal is not to send the largest possible stack of charts. It is to determine what CMS has actually done and what reliable information answers the governing standard.
Hour 0–4: authenticate the notice and identify the actual action
Obtain the complete suspension notice, every attachment, the original electronic message or envelope, and the record of when the practice received it. Confirm the issuing contractor, CMS contact, provider and pay-to identifiers, percentage or amount withheld, effective date, and any specific allegation or finding. Preserve remittance advice and identify when funds actually stopped. Some practices first discover the problem in their bank or remittance data; that observation is not a substitute for establishing the terms of the agency’s action.
Read the precise citation. 42 C.F.R. § 405.371(a)(1) addresses suspension based on reliable information that an overpayment exists or prospective payments may be incorrect. Subsection (a)(2) addresses credible allegations of fraud, involving required consultation and good-cause considerations. Other rules cover certain Medicaid-related suspensions and reporting failures. A suspension based on a credible allegation is not proof of fraud; a suspension based on potentially incorrect payment does not necessarily imply criminal intent. The agency’s stated ground drives the response.
Hour 4–12: separate rebuttal from appeal and calendar the real deadlines
Under 42 C.F.R. § 405.372, notice and timing vary by ground and circumstances. Some suspensions may begin without advance warning. When advance notice and § 405.374 apply, the provider generally receives at least 15 days after notification to submit rebuttal information, although the time may be adjusted for cause. If suspension is imposed without prior notice, § 405.372(b)(2) provides an opportunity to explain why it should be removed. Record the exact submission route and the language of the notice; do not assume the same day count fits every letter.
The rebuttal is different from the familiar Medicare redetermination and reconsideration process for appealable claim-level decisions. Under § 405.375, the responsible agency must evaluate a received rebuttal and pertinent evidence within 15 days and issue the required findings, but the suspension-related administrative determination is not itself an appealable initial determination. Filing a rebuttal does not necessarily postpone withholding. Separate denial, overpayment, recoupment and enrollment notices may create distinct rights, so maintain independent timelines for each.
Hour 12–24: preserve records before anyone tries to “fix” them
Issue a controlled preservation instruction to the staff and vendors who hold relevant material. Preserve original EHR entries and audit logs, physician orders, consents, encounter notes, coding and billing histories, electronic claims, payment files, financial correspondence, third-party revenue-cycle data, internal communications and relevant electronic messages. Document custodians, system locations and any routine deletion settings. Keep records in ordinary lawful operations; do not backdate, overwrite, discard, or selectively alter notes to make past care appear different. Any legitimate record correction must be transparent and governed by applicable rules.
Set up a claim-level chronology. Identify the services allegedly implicated, how the clinical workflow operated, which practitioners were responsible, when records were created, and which applicable coverage rule controlled on each service date. A hospice or home-health provider may need certification, election, plan-of-care and longitudinal eligibility material; a laboratory may need orders, diagnostic indication, test documentation and claims data. A payment suspension may involve broader investigative issues as well. Neither clinical records alone nor billing spreadsheets alone capture the whole problem.
Hour 24–36: establish financial exposure and patient-access evidence
Prepare a defensible short-term cash forecast. Separate Medicare receipts actually being withheld from Medicaid, commercial-payer, patient and other collections. Identify payroll, physician and nursing coverage, essential medications and supplies, vendors, lease obligations and patient services at risk. Build a weekly view of committed expenditures and likely receipts under realistic assumptions, not a prediction that CMS will release funds within days. Preserve supporting bank, remittance, payroll and aged-receivable records.
Patient access may be especially important where the suspension is based on a credible allegation of fraud. Section 405.371(b)(1) lists good-cause circumstances, including a determination that beneficiary access to services would be so jeopardized by full or partial suspension as to cause danger to life or health. This requires patient-centered evidence: geographic availability, alternative providers, clinical acuity, continuity plans and staffing consequences. The fact that a business would suffer financially is not automatically the same as meeting that regulatory patient-access standard.
Hour 36–48: frame a narrow, evidence-supported response
Counsel and the clinical team should identify what the notice alleges, what authority permits the action, what facts are verifiable, and what supporting exhibits may be appropriate. A rebuttal might address the reliability of particular information, the applicable suspension ground, good-cause factors, or relevant corrective and patient-continuity facts. A claim-by-claim denial response may instead require medical-necessity and coverage analysis under the specific policy. Do not combine these proceedings merely because they arise from the same investigation.
A persuasive submission should have a precise opening position, an exhibit index, cited regulations, a factual chronology, and a limited explanation of what the records establish. It should acknowledge genuine uncertainties instead of speculating about government motives or promising outcomes. Where parallel civil, criminal, enrollment or professional-licensing exposure may exist, evaluate privileges, representation, conflicts, and communications before conducting sensitive interviews or voluntarily submitting expansive narratives.
Do not assume the suspension ends after 180 days
Section 405.372(d) generally discusses a 180-day suspension period and possible extension, but it expressly provides different treatment for credible-allegation-of-fraud suspensions. Section 405.371(b) addresses periodic CMS review of continued fraud-based withholding and an 18-month good-cause provision with significant exceptions. The answer depends on the legal basis and the investigation’s posture. Do not make staffing or patient-care decisions based on a universal 180-day promise. A subsequent overpayment determination and allocation of withheld funds also require their own legal analysis.
The first-48-hours checklist
- Full agency notice, attachments, method and proof of receipt
- Exact legal basis, affected provider identifiers, withholding percentage and effective date
- Separate calendars for rebuttal, record requests, denials, recoupment and other actions
- Preservation hold covering EHR, billing, remittances, audits and vendor-held records
- Clinical record matrix matched to service dates and applicable coverage authorities
- Verified cash-flow analysis, patient continuity plan and documentary support for any good-cause position
- Response owner, authorized agency contact, counsel review and proof-of-submission process
Primary sources, related analysis and consultation
- 42 C.F.R. § 405.371 (legal grounds and good-cause factors)
- 42 C.F.R. § 405.372 (suspension procedures and duration)
- 42 C.F.R. § 405.374 and § 405.375 (rebuttal and disposition)
- CMS Medicare Program Integrity Manual, chapter 8 (administrative action and sampling)
For the next analytical step, read payment suspension versus overpayment, rebuttal and good-cause grounds, and the payment-suspension practice page. See also UPIC audit defense for situations with broader program-integrity review.
Editorial update: Brian M. O’Loughlin, JD, RN | Substantive update October 24, 2026. This article is original educational analysis of the cited primary authorities and does not disclose private client strategy.
Payments suspended? BOLO Health Law helps healthcare providers identify the procedural route, build an accurate evidence file, and assess patient and cash-flow implications. Request an initial matter review or call 609-200-6677. Do not transmit patient records or privileged details through initial intake.
Attorney advertising. General information, not a specific legal opinion. Deadlines and rights depend on the actual notice and current law. An inquiry does not create representation or suspend any deadline; conflicts and a written engagement agreement are required. Review our editorial standards.