Congress Questions New York’s Medicaid Provider Screening: What Patients and Providers Should Know

New York’s Medicaid provider-screening practices are facing congressional scrutiny, raising questions about how the state verifies the healthcare organizations receiving public funds.

For patients and families, the issue goes beyond government paperwork. Oversight should help ensure that healthcare dollars support legitimate services and that people receive the care billed in their names. At the same time, enforcement and administrative changes should be implemented carefully so that patients can continue receiving essential care.

The discussion requires a clear distinction between congressional findings, existing screening requirements, and changes that New York has already announced.

What did the congressional committee announce?

On September 29, 2026, the House Energy and Commerce Committee released a majority staff report examining Medicare and Medicaid fraud prevention and oversight.

According to the committee, its investigation involved 12 letters, three hearings, and a review of more than 100,000 pages of documents. The report includes 13 investigative findings and 37 recommendations.

Among its concerns, the committee said some states fail to consider fraud trends when assigning Medicaid provider risk levels or updating those classifications. It also questioned whether states adequately use their auditing and investigative authority. These are findings and recommendations from the committee’s majority staff report; publication does not itself enact a new law.

What is the concern about New York?

Reporting on the committee’s findings states that New York did not assign categorical risk levels to all Medicaid-only provider types. The report also describes New York beginning to elevate certain categories to higher screening levels.

That criticism concerns the state’s screening system. It should not be read as proof that every provider in an affected category committed fraud, or as a court judgment establishing wrongdoing by a particular organization.

A responsible discussion should ask two separate questions: Were the required safeguards applied properly? And what evidence exists about the conduct of any particular provider?

Those questions require different evidence. An administrative weakness can create an opportunity for abuse, but an opportunity for abuse is not proof that each organization exploited it.

How does Medicaid provider screening work?

Federal Medicaid screening uses three categorical risk levels: limited, moderate, and high. These classifications determine the screening activities required during enrollment and revalidation.

Screening level| General screening requirements Limited| Verification of applicable licenses and required database checks. Moderate| Limited-level screening plus required site visits. High| Limited- and moderate-level screening plus fingerprint-based criminal background checks for applicable providers and owners.

CMS guidance also addresses ownership disclosures and enrollment requirements for both fee-for-service and managed-care network providers. Providers should review the requirements applicable to their own enrollment category rather than assuming a health-plan contract replaces state enrollment obligations.

The practical purpose is to verify who is participating, where services are provided, whether required credentials are valid, and whether additional checks are necessary.

What New York has already announced

New York’s current guidance describes these changes:

• Revalidation through the Provider Services Portal.
• Recurring cycles of three years for high-risk providers, four for moderate-risk providers, and five for limited-risk providers.
• Enhanced screening for high-risk categories.
• A temporary enrollment moratorium covering laboratories; durable medical equipment, prosthetics, orthotics and supplies; applied behavior analysis; LHCSAs; pharmacies; and MLTC plans, including partial-capitation MLTC, MAP, and PACE.

The state says the moratorium covers new enrollments, reinstatements, and changes of ownership. Existing enrolled providers remain subject to revalidation.

Its schedule places newly designated high-risk LHCSAs, applied behavior analysis providers, and certain 1915(c) waiver providers in a phase beginning in winter 2026.

Providers have 123 calendar days from their initial revalidation notification. Failure to comply can result in enrollment termination. New York expressly says revalidation and high-risk classification do not establish suspicion of wrongdoing by an individual provider.

Separately, eMedNY confirms that New York is revalidating all providers by June 2028 and requires submissions through the portal.

Why these distinctions matter for patients

A headline about Medicaid fraud can make families worry that their provider is under investigation or that their services will disappear.

Families should seek a specific explanation before drawing that conclusion. A provider-screening classification, an enrollment restriction, a billing investigation, and a change to an individual patient’s authorization are different events.

If an agency or health plan says care may be interrupted, useful questions include:

• Is this an issue with the provider’s enrollment, my eligibility, or my service authorization?
• Which services are affected, and on what date?
• Who will arrange replacement care if the current provider cannot continue?
• Can I receive the explanation and any proposed changes in writing?
• Who is responsible for following up with me?

These questions help turn a vague warning into information that a family can act on.

Patients should also keep copies of authorizations, schedules, notices, and communications about service changes. If an explanation remains unclear, ask the health plan or agency to identify the person responsible for resolving it.

Why providers should pay attention now

For healthcare organizations, the practical lesson is to treat enrollment records as part of day-to-day operations.

An organization may have qualified staff and deliver good care while still encountering serious problems if its enrollment information is incomplete or its notices go unanswered.

Providers should consider reviewing:

Responsibility for notices. Identify who monitors enrollment communications and who covers that responsibility during absences.

Ownership and organizational records. Make sure the information submitted to enrollment authorities accurately reflects the organization.

Locations and credentials. Check that operating locations, licenses, and identifying information are consistent across records.

Documentation of submissions. Preserve confirmation numbers, correspondence, and copies of materials submitted.

Patient continuity planning. Establish who will communicate with patients and health plans if an administrative issue threatens service delivery.

These are practical preparation steps. Each organization should follow its actual notices and applicable requirements when determining what to submit and when.

Oversight should protect care as well as public funds

Strong oversight and dependable patient access should reinforce each other.

Patients benefit when dishonest billing is identified, unqualified operators are prevented from participating, and legitimate providers can demonstrate that their records and services meet requirements.

But implementation also matters. Unclear instructions, unresolved enrollment questions, or poorly coordinated transitions can create uncertainty for patients who depend on daily assistance, treatment, or other essential services.

The policy questions worth asking are therefore broader than how many applications were stopped or how many reviews were opened:

Are screening decisions supported by evidence? Are providers receiving clear instructions? Are patients informed when their care could change? Is someone accountable for maintaining continuity?

Those questions provide a useful framework for judging what happens next.

What readers should watch next

The committee’s report adds pressure for stronger oversight. The next developments to follow are formal federal or state actions, updated enrollment guidance, changes to existing restrictions, and instructions sent directly to providers.

Readers should distinguish a recommendation from an implemented requirement, and a general policy announcement from a notice affecting a specific organization.

For patients, the immediate focus should remain on receiving authorized care and obtaining clear answers about any proposed interruption. For providers, it should be on accurate records, timely responses, and preparation for applicable screening.

Medicaid oversight succeeds when public funds support legitimate services and the people who need those services can reliably receive them.

Sources and further reading

House Energy and Commerce Committee — September 29, 2026 report announcement: https://energycommerce.house.gov/posts/e-and-c-releases-staff-report-exposing-how-fraudsters-are-ripping-off-medicare-and-medicaid-and-how-more-must-be-done-to-protect-these-programs

New York State Department of Health — provider revalidation and enrollment moratorium guidance: https://healthweb-back.health.ny.gov/health_care/medicaid/integrity/provider_revalidation.htm

eMedNY — current provider revalidation information: https://www.emedny.org/info/providerenrollment/revalidation/index.aspx

CMS — Medicaid Provider Enrollment Compendium: https://www.medicaid.gov/medicaid/program-integrity/downloads/mpec.pdf

New York Post — reporting on the committee’s New York findings: https://nypost.com/2026/09/29/us-news/house-panel-accuses-ny-of-flouting-law-by-ignoring-fraud-risk-to-medicaid-providers/