CMS Freezes $1B in Medicaid Funds as Pay-and-Chase Era Ends
- Matthew Merkel
- 2 days ago
- 6 min read
A seismic shift is underway in federal healthcare compliance. On July 21, 2026, the U.S. Department of Health and Human Services (HHS) and the Centers for Medicare & Medicaid Services (CMS) announced a historic, proactive enforcement action: the immediate deferral of more than $1 billion in federal Medicaid matching funds to California ($867.5 million) and Minnesota ($199 million).
For decades, the federal government operated under a reactive pay-and-chase system—reimbursing state claims first and relying on post-award audits to claw back misspent funds years later. That era is now over. Under the direction of HHS Secretary Robert F. Kennedy Jr. and CMS Administrator Dr. Mehmet Oz, federal regulators are leveraging predictive data analytics to hold back federal dollars before the check clears. As CMS Administrator Dr. Oz plainly put it: "CMS is done trying to chase down stolen and misused funds after they've already left the building."
For state Medicaid directors, county administrators, and pass-through entities, this shift marks a new operational reality. Failing to maintain audit-ready internal controls and addressing indicators of fraud no longer results in a distant audit finding—it can trigger an immediate, catastrophic cash-flow crisis.
Here is an in-depth breakdown of the federal regulations driving these deferrals, the data anomalies that flagged California and Minnesota, and how a proactive audit model can serve as a roadmap for state program integrity.
The Legal Framework: How Federal Payment Deferrals Work
Federal Medicaid funding operates as a joint state-federal match governed by Title XIX of the Social Security Act. However, when federal algorithms flag potential fraud, noncompliance, or unsupported documentation, CMS can invoke 42 C.F.R. § 430.40 to issue a formal Payment Deferral.1
A deferral is an administrative hold—not an outright, permanent disallowance. When CMS issues a deferral:
The Clock Starts: The federal government temporarily holds back matching funds for specific, high-risk expenditure claims submitted in a state's quarterly Form CMS-64.2
The Burden Shifts: The state is given a 60-day window to produce granular, verifiable documentation proving that the underlying medical services were allowable, medically necessary, delivered by eligible providers, and provided to enrollees who actually met eligibility rules.3
The Outcome: If the state satisfies CMS with audit-ready proof, the deferred funds are released. If the state fails to substantiate the claims, CMS moves to a permanent disallowance, forcing the state to absorb 100% of the cost.4
This mechanism allows federal regulators to enforce compliance without waiting for long-term criminal investigations to conclude.
Anatomy of a Deferral: California and Minnesota Under the Microscope
CMS did not select California and Minnesota at random. Both states were flagged by CMS’s Integrated Data Repository (IDR) and the Department of Justice’s (DOJ) Data Fusion Center through automated data mining that identified extreme statistical anomalies across high-risk service categories.
California: The Outlier Growth Trap ($867.5 Million) 5
The Flag: Nearly half of California’s $867.5 million deferral stems from its In-Home Supportive Services (IHSS) program, which provides home care to seniors and individuals with disabilities. Federal algorithms flagged spending growth in California's home care sector that far exceeded national trends without a corresponding demographic or policy justification.
The Compliance Breakdown: When CMS requested underlying case files and billing validations to justify the rapid expenditure spike, California failed to provide sufficient, timely documentation. Under 42 C.F.R. § 430.40, CMS calculated the deferred amount to match the unverified growth rate, pausing the funds until the state can prove the services were legitimate and medically necessary.
Minnesota: The Disqualified Provider Anomaly ($199 Million) 5
The Flag: CMS conducted focused financial reviews across 14 high-risk service areas in Minnesota—primarily focusing on Personal Care Assistance (PCA) and home-based community services.
The Compliance Breakdown: Federal data matching cross-referenced Minnesota’s claims against national exclusion databases and state vital statistics records. The review uncovered:
Claims for Deceased Individuals: More than $3 million in Medicaid claims submitted for care allegedly delivered to individuals after their recorded date of death.
Excluded Providers: A significant portion of the $199 million was tied to claims submitted by healthcare providers who had previously been flagged, suspended, or terminated from the Medicaid program due to noncompliance, yet remained active in the state's billing pipeline.
The Arizona Case Study: From a $2.8B Crisis to a Model of Program Integrity
To understand how states can avoid federal deferrals, look no further than Arizona.
Between 2019 and 2023, Arizona fell victim to one of the most egregious healthcare fraud schemes in U.S. history. Fraudulent operators opened hundreds of unlicensed sober living homes, preying on vulnerable Native American populations, billing the Arizona Health Care Cost Containment System (AHCCCS) for up to $8,000 per patient per day for care that was never delivered. The systemic failure cost taxpayers an estimated $2.8 billion.
Yet, despite this massive historical loss, CMS has not deferred federal Medicaid funds to Arizona. Why? Because when the crisis came to light, Arizona took immediate, aggressive, and proactive corrective action that transformed the state into a federal partner rather than an administrative target.
The Corrective Blueprint Executed by Arizona:
Immediate Pre-Payment Suspensions: The Arizona Attorney General’s Office, led by AG Kris Mayes, alongside AHCCCS, immediately suspended payments to more than 300 fraudulent providers under Credible Allegation of Fraud (CAF) rules, halting active financial hemorrhaging.
Commissioning an Independent Forensic Audit: Rather than attempting an internal cover-up, AHCCCS, through a contractor, analyzed its data pipeline, audit claims history, and uncovered systemic vulnerabilities in enrollment and billing.
Methodical Implementation of Audit Findings: The contractor delivered 25 concrete, programmatic recommendations to overhaul state internal controls. Arizona aggressively executed 20 of those 25 recommendations within 12 months—including setting up specialized fraud units, tightening site-visit requirements, and integrating death-record cross-checks.
AI-Driven Risk Detection and Pre-Payment Reviews: Arizona upgraded its Medicaid data infrastructure—the backend software responsible for verifying enrollees and approving provider claims. The state integrated AI algorithms to evaluate risk levels in real time, catching unverified billing patterns before payments leave state accounts.
Humanitarian and Law Enforcement Synergy: The AG’s office secured more than 180 indictments and 41 convictions while partnering with crisis agencies to protect displaced patients left stranded without housing or care following the emergency suspension of fraudulent sober living providers. This comprehensive approach proved to CMS that Arizona was managing both the law enforcement and human elements of the crisis.
Because Arizona shut down the active billing leak and adopted CMS-aligned pre-payment controls, fraud in the targeted behavioral health sector dropped by 92%, and the state preserved its federal funding pipeline.
The Path Forward: How States Can Prevent Fraud and Avoid Funding Freezes
The lessons from California, Minnesota, and Arizona converge on a single truth: traditional, passive compliance is a liability.
To navigate this new era of real-time federal scrutiny, state health departments, county agencies, and pass-through entities must modernize their internal controls around four core pillars:
Strategic Pillar | Action Item for State and Local Entities |
|---|---|
1. Independent Forensic Auditing | Engage third-party compliance experts to conduct comprehensive data-driven risk assessments and analytics of high-growth programs before federal regulators trigger a focused review. |
2. AI-Enabled Pre-Payment Screening | Transition from manual post-payment audits to automated billing filters that continuously cross-reference claims against vital statistics, NPI registries, and provider exclusion lists. |
3. Enhanced Subrecipient Monitoring | Establish continuous, site-level monitoring and strict pre-award risk evaluations for subrecipients, personal care agencies, and contracted MCOs. |
4. Robust Documentation Architecture | Ensure that every federal claim drawn down is backed by an audit-ready, centralized electronic record system capable of satisfying a CMS 60-day deferral inquiry. |
How Vander Weele Group Empowers Public Agencies
Navigating the shifting regulatory landscape requires more than basic check-the-box auditing. At the Vander Weele Group, we bring more than two decades of specialized experience conducting oversight of large-scale federal, state, and municipal grants programs. Our Agent Tipster and customized Medicaid fraud detection models rapidly identify fraud indicators and billing anomalies in large Medicaid data sets. Having monitored billions in public funding across 23 states, our interdisciplinary team of forensic auditors, regulatory attorneys, and data analysts helps public entities design, implement, and maintain bulletproof compliance infrastructures.
Whether your agency needs risk modeling, pre-drawdown claim validations, independent forensic audits, or turn-key internal control reviews, we ensure your programs meet the highest standards of federal integrity—protecting your state’s funding and preserving the vital services your communities rely on.
Is your agency’s compliance infrastructure prepared for real-time CMS scrutiny?
Contact the Vander Weele Group today to schedule a demo of our Medicaid Intelligence Engine, a systematic process to identify and investigate billing anomalies.
📞 Phone: 773-929-3030
🌐 Website: www.VanderWeeleGroup.com
on federal grant oversight and regulatory compliance.
1 42 C.F.R. § 430.40 (Deferral of claims for FFP), Centers for Medicare & Medicaid Services, Department of Health and Human Services
2 42 C.F.R. § 430.40(a) (Requirements for deferral), Centers for Medicare & Medicaid Services, Department of Health and Human Services
3 42 C.F.R. § 430.40(b)(2) & § 430.40(c)(1) (State's responsibility & Handling of documents), Centers for Medicare & Medicaid Services, Department of Health and Human Services
4 42 C.F.R. § 430.40(c)(4), § 430.40(e), and 42 C.F.R. § 430.42 (Disallowance of claims for FFP), Centers for Medicare & Medicaid Services, Department of Health and Human Services
5 HHS Defers More Than $1 Billion in Medicaid Payments to California, Minnesota Pending Review of High-Risk Claims in Crackdown on Fraud, U.D. Department of Health and Human Services
Comments