Table of Contents
Ready to See Results?
From strategy through execution, Atlantic Health Strategies integrates compliance, operations, and growth into durable, measurable results. Let’s put our expertise to work for your organization.
What Just Happened in Massachusetts, and Why It Matters Beyond ABA
Direct answer: In late February 2026, MassHealth directed Carelon Behavioral Health to issue retroactive recoupment letters to ABA providers based on a calendar-year 2024 audit of supervision ratios, with a 30-day payment deadline that ran ahead of any appeal. If you operate autism services, SUD, or mental health in any state, you should read this as a template, not a Massachusetts story.
According to reporting on the dispute, MassHealth conducted a retrospective audit of calendar year 2024 ABA Medicaid claims and directed Carelon Behavioral Health to issue recoupment letters to Massachusetts providers in late February 2026, setting a 30-day payment deadline, and Carelon’s letter stated explicitly that filing a dispute would not suspend its right to collect. The standard being enforced: at least one hour of LABA supervision, billed under CPT 97155, for every ten hours of direct service billed under CPT 97153, with providers whose supervision fell below five percent of direct service hours told that every dollar received for direct services was recoverable.
The Massachusetts Office of the Inspector General set the table for this in March 2024. The OIG’s Healthcare Division estimated that MassHealth overpaid up to $17.3 million in claims to service providers for children diagnosed with ASD, due in part to a lack of strong internal reviews. The OIG’s investigation found that ABA providers billed and MassHealth paid claims for services that did not meet the required 10:1 supervision ratio in the amount of $16,761,445. Inspector General Jeffrey S. Shapiro put the agency position bluntly: “It is equally concerning that ABA service providers billed for services that did not meet MassHealth’s supervision standard, resulting in a lower level of service for children with ASD who are on MassHealth. That is unacceptable.”
Authorizations were on file. Services were rendered. The money is still being pulled back. Massachusetts is following a pattern visible in New York, Tennessee, and Indiana, where state Medicaid agencies use post-payment review as a budget tool. When state revenue tightens, the targets shift from ABA to PHP, IOP, residential, and community-based BH. For PE-backed platforms and multi-state operators, this is the exposure that does not show up cleanly on a pro forma until it shows up as a recoupment letter. By then, the multiple has already been struck.
Where Providers Are Actually Getting Hit
The Massachusetts cases are not abstract. They tie to specific, repeating failure points our auditors see in chart audits across states.
- Supervision ratios. BCBA/LABA supervision hours not documented to the contracted ratio. MassHealth requires ABA providers to have licensed applied behavior analyst (LABA) staff supervise all paraprofessional staff a minimum of one hour for every 10 hours of direct services. Supervision notes that do not name the supervisee, the client, and the clinical content of the session do not defend the claim.
- Medical necessity drift. Treatment plans not updated at the cadence the state plan requires. Goals carried forward verbatim for 12-plus months. No documented response to lack of progress.
- Authorization mismatch. Hours billed exceeding hours authorized, or service codes delivered that do not match the authorized level of care.
- Rendering provider issues. Services billed under a credentialed provider that were actually delivered by someone else, or delivered before the rendering provider’s effective date with the payer.
- Parent or caregiver participation. Required for ABA in many state plans. If it is not documented, the state’s position is that it did not happen.
- Impossible billing patterns. The Massachusetts OIG found that MassHealth made payments of $439,632 to ABA providers that were indicative of “impossible billing” (more than 24 hours of service for a member on a given service date), and that MassHealth paid 561 ABA service claims purportedly provided to 311 members on holidays, amounting to $162,535. These are the kind of data-mining hits that surface in automated review long before a chart ever gets pulled.
For BH levels of care under the ASAM Criteria, 4th Edition, the parallel exposure points are weekly hour minimums for Level 2.5 partial hospitalization (an outpatient level of care) and Level 2.1 intensive outpatient, dimensional documentation supporting the level of care billed, and discharge documentation that ties cleanly to continued stay criteria. State auditors and CMS program integrity contractors read those notes the same way MassHealth is reading ABA notes. Strictly.
Post-Payment Review Is the New Budget Tool
State Medicaid programs have figured out something uncomfortable for providers. Pre-payment edits are politically expensive because they delay care. Post-payment recoupment is politically cheap because the care already happened and the headline is fraud, waste, and abuse, not access.
The Massachusetts OSA pattern speaks for itself. In one annual report alone, the Medicaid Audit Unit identified more than $211 million in unallowable, questionable or potentially fraudulent billings. The COVID-era telehealth audit hit harder. State Auditor Suzanne M. Bump found that during the period January 1, 2020 through June 30, 2021, MassHealth made payments totaling $91,852,881 to providers for telehealth behavioral health services that did not have proper documentation. A statistical sample of 47 claims were reviewed and for all 47 claims, providers were unable to provide documentation to substantiate that all required procedures were performed. Forty-seven for forty-seven. That is the kind of finding that gets extrapolated across a population.
Federal lookback rules give states wide latitude. RAC auditors are limited to a 3 year look back period according to 42 CFR 455.508, but other auditors do not have that same limitation and can look back for longer periods of time, and whenever “credible allegations of fraud” is involved, the lookback period can be for 10 years. A platform acquired in 2023 can be on the hook for claims paid years earlier under the prior owner. Reps and warranties help. They do not make the cash claw back stop. PE counsel are now asking diligence questions about state Medicaid recoupment exposure, not just commercial payer denials. If you are reassessing feasibility in Massachusetts, New York, Washington, or any state with an active OIG, an active OSA, and an active MFCU, you have to price the recoupment risk in. It is no longer tail risk.
The Defensible Response Playbook
When a recoupment letter or audit notice lands, the providers who fare best are the ones who already had the infrastructure in place. The ones who try to build it during the response window almost always settle for more than they should.
- Audit readiness baseline. A real chart audit against the state plan, the payer manual, and the ASAM Criteria, 4th Edition or LOCUS where applicable. Not a sample of ten charts. A statistically defensible sample sized to the volume.
- Corrective action plan with dates and owners. Auditors and state agencies respond to CAPs that show identification, root cause, remediation, and monitoring. Vague CAPs read as performative.
- Appeal posture, set early. Many states run tight appeal windows, sometimes 30 days. In the current Massachusetts ABA matter, providers had 30 days to remit payment and 60 days to file a dispute, but Carelon’s letter stated explicitly that filing a dispute would not suspend its right to collect, meaning payment was due before any appeal could be resolved. Counsel and a clinical reviewer should sit in the same room, not sequentially.
- Payer and state engagement. Silence reads as guilt. AHS auditors document structured engagement with the state Medicaid agency or its audit contractor, and we have seen recoupment demands reduced by more than half through clinical rebuttal alone, when the documentation actually supports it.
- Forward-looking controls. Supervision ratio dashboards, weekly hour tracking pulled directly from the EMR, treatment plan refresh alerts, and a UR function that actually talks to billing.
Atlantic Health Strategies runs operational and documentation audits that look at how clinical delivery, UR, scheduling, attendance, and billing connect. That is where the recoupment exposure actually lives.
What Multi-State and PE-Backed Operators Should Do This Quarter
If you operate in more than one state, the single highest-value exercise right now is a state-by-state risk map. Which states have active OSA, OIG, or MFCU behavioral health audits underway. Which states have published recoupment patterns. Which of your service lines map to those patterns. Which acquired entities have unaudited claims sitting inside the state lookback window.
The criminal side is escalating too. Massachusetts Attorney General Andrea Campbell’s office secured criminal indictments against a Randolph-based ABA provider in June 2025 for allegedly fabricating documentation, with the Statewide Grand Jury returning indictments for fraudulently billing MassHealth more than $1 million for services that were never provided. The Massachusetts Medicaid Fraud Division receives 75 percent of its funding from the U.S. Department of Health and Human Services under a grant totaling $5.9 million for federal fiscal year 2025, with the remaining 25 percent funded by the Commonwealth. Federal money is funding state enforcement, and the U.S. House Committee on Energy and Commerce has already demanded that 10 states turn over information about how they handle fraud, waste and abuse, with autism therapy cited as a specific area of concern.
For platforms in diligence or post-close integration, pressure-test the pro forma against recoupment scenarios. Do not assume past authorization equals future payment. Authorizations were on file in Massachusetts too. If you want to talk through state Medicaid exposure, audit readiness, or a rapid risk assessment for a multi-state platform, reach out directly. The operators who get ahead of this will not be the ones writing the largest checks back to the states.
Frequently asked questions
What triggered the 2026 MassHealth ABA recoupment letters?
MassHealth ran a retrospective audit of calendar-year 2024 ABA claims and concluded that providers had billed too few hours of LABA supervision (CPT 97155) relative to direct service hours (CPT 97153). Carelon Behavioral Health issued recoupment letters at MassHealth’s direction in late February 2026 with a 30-day payment deadline, and providers who fell below a 5% supervision-to-direct-service threshold were told the full amount paid for direct services was recoverable. The Massachusetts OIG’s March 2024 report estimating up to $17.3 million in ABA overpayments laid the groundwork.
How far back can a state Medicaid agency recoup payments?
Under 42 CFR 455.508, CMS-administered Medicaid RAC auditors are limited to a three-year lookback from the date of payment. Other Medicaid audit contractors (program integrity units, OIGs, MFCUs, OSAs) are not bound by that limit and routinely look back further. When credible allegations of fraud are involved, the lookback can extend to 10 years. The Medicare 60-day rule and six-year lookback for overpayments under the Affordable Care Act add another layer for dually participating providers.
Does the Massachusetts ABA pattern apply to PHP, IOP, and residential SUD providers?
Yes. The mechanics are identical: a state agency identifies a documentation or supervision standard, applies it retroactively to paid claims, and directs recoupment through the MCO or contractor. For ASAM Criteria, 4th Edition levels of care, the parallel exposure points are weekly service-hour minimums for Level 2.5 PHP (an outpatient level of care) and Level 2.1 IOP, dimensional documentation supporting the level of care billed, and discharge documentation that ties to continued stay criteria. The same OSA that found $91.8 million in undocumented telehealth BH payments in Massachusetts is reading SUD and MH notes today.
What should a PE-backed multi-state operator do in the next 90 days?
Build a state-by-state risk map identifying active OSA, OIG, MFCU, and program integrity activity in every state where you operate. Run a statistically defensible internal chart audit against state plan and payer manual standards, not a 10-chart sample. Pressure-test the pro forma against recoupment scenarios using realistic extrapolation methodologies. For any acquired entity inside the lookback window, treat unaudited claim volume as a contingent liability and reserve accordingly.
References
- Massachusetts Office of the Inspector General. Inspector General Estimates MassHealth Overpaid Up to $17.3 Million to Service Providers for Children With Autism (March 2024)
- Massachusetts OIG. 2024 Annual Report: MassHealth’s Applied Behavior Analysis Program – Service Providers
- Massachusetts Office of the State Auditor. Audit Finds MassHealth Made $91,852,881 in Telehealth Behavioral Health Payments Without Proper Documentation
- Massachusetts OSA. Annual Report Identified More Than $211 Million in Inappropriate MassHealth Payments
- Behavioral Health Business. Massachusetts Autism Therapy Providers Rattled by Contentious Medicaid Clawback Effort (May 2026)
- Acuity News. Massachusetts ABA Audit Crisis: Providers Fight MassHealth Recoupment (April 2026)
- Breaking News ABA. Massachusetts ABA Provider Indicted for $1 Million Fraud
- CMS. Medicare Fee for Service Recovery Audit Program