Stop Treating RADV Like a Surprise Audit—It's a Revenue Leak

In March 2026, CMS announced it would expand RADV audits from roughly 60 Medicare Advantage plans per year to all approximately 550 eligible MA contracts — annually. Simultaneously, it scaled its medical coder workforce from 40 to 2,000. That is a 50-fold increase in audit infrastructure, and it is already running.

RADV audits are no longer a payer problem. They are a physician practice problem. Every HCC diagnosis your team submits traces back to an encounter note your physicians wrote. If that note does not support the code, your practice is the exposure point.

According to MGMA's 2026 Regulatory Burden Report, 95% of medical group practices reported worsening regulatory burden — with audits and appeals ranked as the single biggest issue. This checklist is for the administrator who does not have time for a compliance glossary. You need a pre-audit action plan, and you need it before the notice arrives.

Why Internal Medicine Practices Are a Primary RADV Target in 2026

Internal Medicine practices sit at the center of every RADV audit because they generate the highest concentration of HCC-qualifying diagnoses — chronic kidney disease, heart failure, diabetes with complications, COPD. When CMS selects a Medicare Advantage enrollee for audit, it traces every submitted diagnosis code directly back to the originating encounter note. That note is almost always yours.

The coding model has also fundamentally shifted. The V28 risk adjustment model, fully operative as of January 1, 2026, eliminated more than 2,000 previously valid ICD-10-CM codes from risk-adjusted payment eligibility — dropping the valid code set from 9,797 to 7,770, according to RAAPID Inc. Practices still coding on V24 logic aren't just leaving money on the table. They're generating active audit flags.

Consider a patient with Type 2 diabetes and CKD Stage 3a. The HCC value of E11.3511 + N18.31 — diabetes with diabetic chronic kidney disease, CKD Stage 3a — is materially higher than a generic "diabetes with complications" code. But if the encounter note documents only "diabetes, uncontrolled" with no mention of the CKD stage, the higher HCC code is unsupported. CMS auditors will recoup the risk-adjusted payment differential.

• An OIG audit released in March 2026 found unsupported high-risk diagnosis codes in 247 of 271 sampled enrollee-years — a 91% error rate, according to RAAPID Inc.
• The most common error pattern: a history-of condition submitted as an active, face-to-face diagnosis without current-year MEAT evidence.
• Unsupported codes don't just trigger recoupment — they can expose physician groups directly to False Claims Act liability, according to Health Law Alliance.

Documentation specificity isn't a coding team problem. It's a revenue protection problem — and in 2026, it's a legal exposure problem too.

The Pre-Audit Checklist Every Practice Administrator Needs Now

On February 2, 2026, OIG issued its first Medicare Advantage compliance guidance update in 27 years — and it explicitly extended audit obligations to contracted physician practices, not just MA plans. Your billing team is now on the hook. Here is what needs to be verified before a RADV notice arrives.

1. HCC Code Validation Against the Prior 12 Months of Encounter Documentation

   Pull every submitted HCC and confirm it traces back to a face-to-face encounter with documented MEAT criteria. According to VBC Risk Analytics, 15–30% of eligible HCCs go uncaptured annually — but unsupported codes that were submitted are the ones that trigger recoupment. Skip this step and you are flying blind into a mandatory quarterly audit cycle.

2. Physician Attestation and Signature Audit Trail

   Every submitted diagnosis needs a completed, signed note from the treating provider. Unsigned or incomplete attestations are an automatic flag. If your EHR does not generate a signature completion report, build that query now — not after a sample request lands in your inbox.

3. Diagnosis Specificity Review

   Are chronic conditions coded to the highest specificity the documentation supports? "Diabetes with complications" is not the same as "Type 2 diabetes with diabetic CKD Stage 3." The HCC values — and the audit exposure — are different. Every 0.1 drop in a member's RAF score from under-specificity costs approximately $1,040 in annual revenue, per VBC Risk Analytics.

4. Coding Team Capacity Assessment

   CMS RADV samples range from 35 to 200 enrollees per contract, per the January 27, 2026 CMS HPMS memo. If your team cannot pull and organize that volume of retrospective documentation within a response window while managing daily claims, you have a staffing gap — not a compliance gap. Identify it now so you can address it before the notice, not during it.

5. Audit Response Protocol

   Does your practice have a designated point of contact for CMS correspondence? A documented SOP for record retrieval? If the answer is "whoever answers the phone that day," that is your most urgent fix. Doctors Management notes that the new OIG guidance makes MA compliance an operational function — not a reactive event.

Skipping any one of these is not a compliance risk in the abstract — it is a dollar amount waiting to be recouped.

Where Coding Teams Break Down Under Audit Pressure — And How to Fix It Before It Happens

Most physician-owned Internal Medicine practices do not have a dedicated risk-adjustment coder. When a RADV audit notice lands, that burden drops directly on the billing team already processing daily claims — and the wheels come off fast.

According to Fierce Healthcare, reporting on MGMA's 2026 Regulatory Burden Report, 40% of medical group practices already carry three or more full-time administrative staff per physician just to manage regulatory requirements. That is not slack capacity. That is a team already at its ceiling.

Three failure points appear consistently when audit pressure hits:

• Retrospective chart pull volume — CMS can request 35 to 200 enrollee records per contract. Manual retrieval under a response deadline overwhelms staff managing live claims simultaneously.
• No physician query workflow — When documentation is incomplete, there is no structured process to get clarification from the attending physician before the response window closes.
• No HCC capture dashboard — Without visibility into capture rates by provider, administrators cannot identify which physicians are generating the most audit risk until it is too late.

ForeSee ESP addresses all three without adding headcount. Its real-time HCC gap identification flags unsupported or missing diagnoses at the point of claim submission — not six months later during an audit response. The InstaVu feature lets any coder click a diagnosis and see the exact source documentation in the chart, eliminating the retrospective hunting that consumes staff hours under audit pressure.

Audit readiness built into daily workflow beats a crisis response every time.

What Getting This Right Is Actually Worth: The Revenue Math

According to VBC Risk Analytics, every 0.1 drop in a member's RAF score from a coding error represents approximately $1,040 in lost annual revenue. Across 400 Medicare Advantage lives with even modest documentation gaps, that arithmetic becomes uncomfortable fast.

The exposure runs in both directions. Health Law Alliance confirms that unsupported HCC codes expose physician groups — not just MA plans — to RADV recoupment and False Claims Act liability directly.

• Lost revenue risk: 15–30% of eligible HCCs go uncaptured annually due to documentation gaps
• Recoupment risk: CMS's completed PY 2011–2013 audits found 5–8% overpayment rates — recoverable on every sampled chart
• Legal risk: Complete Health Partners paid $14.1 million to DOJ for unsupported HCC submissions

ForeSee ESP's HITRUST-certified platform closes documentation gaps before submission — making it revenue protection infrastructure, not a compliance line item.

The 2026 RADV expansion is not a warning shot. It is an operational shift that is already running — quarterly audits, 2,000 CMS coders, and V28 mapping that removed over 2,000 previously valid diagnosis codes from risk-adjusted payment eligibility. The practices that survive this era without a coding team meltdown will be the ones that made documentation accuracy a daily workflow standard before an audit notice arrived.

Three decisions belong on your desk this quarter:

• Complete an internal HCC documentation audit against your last 12 months of Medicare Advantage encounters — specifically validating that every submitted diagnosis has current-year, face-to-face MEAT evidence
• Stress-test your coding team's audit response capacity — can they pull and organize a 200-chart sample within CMS response timelines without stopping daily claims operations?
• Evaluate whether your current technology infrastructure supports continuous risk-adjustment accuracy or only flags problems after submission

ForeSee Medical's HITRUST-certified ESP platform is built specifically for the third item — embedding HCC gap identification, Delete Suspects flagging, and V28-compliant documentation review into your daily encounter workflow, not as a fire drill tool you activate when CMS knocks.

Audit readiness is revenue protection. Treat it accordingly.

• Schedule a revenue risk assessment with Perfect Rhythm to identify HCC documentation gaps before CMS does
• Download the Perfect Rhythm RADV Readiness Checklist — a one-page audit prep tool built for Internal Medicine billing teams
• Request a live demo of Perfect Rhythm's revenue optimization platform and see how HCC capture gets embedded into your daily encounter workflow

Frequently Asked Questions

What are RADV audits and why are they increasing in 2026?

RADV (Risk Adjustment Data Validation) audits are CMS reviews that verify whether diagnosis codes submitted for Medicare Advantage risk-adjusted payments are supported by actual medical records. According to CMS (March 2026), the agency is expanding from auditing approximately 60 MA plans annually to all ~550 eligible contracts — making RADV exposure a near-universal risk for practices with MA patients.

How does the V28 risk adjustment model affect Internal Medicine practices?

CMS-HCC Model V28, fully operative as of January 1, 2026, eliminates over 2,000 previously valid ICD-10-CM codes from risk-adjusted payment eligibility and lowers average MA risk scores by a projected 3.12%. Internal Medicine practices still coding on V24 logic are now generating active audit flags — and losing reimbursement on chronic conditions they are legitimately managing.

Can a physician practice — not just an MA plan — face RADV liability?

Yes. The OIG's February 2026 Industry Segment-Specific Compliance Program Guidance explicitly extended compliance obligations to contracted physician practices, not just MA plans. The DOJ's $14.1 million False Claims Act settlement with Complete Health Partners Holdings in August 2026 confirmed that unsupported HCC codes submitted at the practice level carry direct legal exposure.

What is the most common RADV coding error CMS is finding?

According to RAAPID Inc., the single most common error pattern identified in 2026 OIG audits is a history-of condition coded as an active diagnosis — meaning a chronic condition documented in a prior year but not addressed or evidenced in a current-year face-to-face encounter. This is precisely what the Delete Suspects workflow is designed to catch before submission.

How much revenue is at risk from HCC coding gaps or unsupported diagnoses?

According to VBC Risk Analytics, every 0.1 decrease in a member's RAF score from a coding error represents approximately $1,040 in lost annual revenue — and industry analysis estimates 15–30% of eligible HCCs go uncaptured annually. For a practice managing several hundred Medicare Advantage lives, that math compounds quickly in both directions: missed revenue and recoupment exposure.