5 Grant Audit Risks in NEMT Billing

Most NEMT audit problems come from missing records, duplicate claims, bad trip proof, wrong cost coding, late filing, and gaps in rider or driver files. In the article, I point to one hard number that sets the tone: a 2022 OIG audit found $196 million in improper payments, and 72% of sampled claims were non-compliant. I also show that paperwork gaps drive most paybacks, not theft.

If I had to boil the article down, it says this:

• Duplicate claims can trigger denials, recoupments, and even False Claims Act risk
• Weak proof of service can kill a claim even if the ride happened
• Wrong or unsupported costs can make billed amounts ineligible
• Late or mismatched billing can lead to permanent denials
• Rider, driver, and vehicle file gaps can sink paid claims after the fact

A few stats stand out fast:

• 94% of recoupments tied back to documentation gaps
• 55% of audit samples had missing patient signatures
• 48% had incomplete trip logs
• 68% of initial NEMT audits were triggered by overlapping claims data

Here’s the short version of what I tell readers to do:

• Match authorization, completed trip, and claim
• Use GPS/EVV data instead of handwritten estimates
• Check eligibility and prior auth on the date of service
• File claims within 24–48 hours
• Keep one digital audit file for trip, rider, driver, and vehicle records

Risk	What auditors look for	Fast fix
Duplicate billing	Same rider/date/time billed more than once	Claim scrubbing and dispatch locks
Weak trip proof	Missing signatures, no GPS, bad logs	EVV, GPS timestamps, digital signatures
Unsupported costs	Wrong service level, expired PCS, excluded worker	Service-level checks, PCS tracking, exclusion screening
Late or inaccurate billing	Missed filing window, bad dates or mileage	Faster billing cycle, GPS miles, claim review
File and credential gaps	Missing PA, expired credentials, stale eligibility	Date-of-service checks, alerts, monthly screening

The bottom line: if the file does not prove the trip, the rider, the rate, and the timing, the payment is at risk.

How Billing Habits Turn Into Grant Audit Findings

Grant auditors rebuild each trip from the ground up. They compare trip logs, GPS tracks, timestamps, claims, and operating records to see whether the story lines up. The standard check is a triple-match review: authorization, trip completion, and the final claim must all agree.

Auditors usually test five areas:

• Allowability: was the trip for a covered medical purpose?
• Allocability: was the cost charged to the right program?
• Documentation: are trip logs complete, with actual times and signatures?
• Timeliness: was the claim filed within your state's deadline?
• Proof of service: can you show the trip took place with GPS data or EVV records?

These five tests sit behind the risks below.

Missing documentation is treated as noncompliance. That means an unsupported trip can be recouped even if the ride happened. And if the same mistake keeps showing up, auditors may project that error across the full billing file. A small sample can turn into a much larger repayment.

Two problems show up again and again in audit work. Missing patient signatures appear in 55% of audit samples, and incomplete trip logs show up in 48% of reviews. Once those controls break down, auditors usually flag one of the five risks below.

sbb-itb-cef70f4

1. Duplicate Trip Billing and Double Claims

Auditors compare authorizations, trip logs, and claims side by side. That’s why duplicate billing is often one of the first problems they spot. It happens when the same trip is billed more than once for the same patient, on the same date, during the same trip window.

Audit Exposure Trigger

Overlapping trip claims are a primary data-driven trigger in 68% of initial NEMT audits. Agencies also use automated claim edits to flag these patterns in real time.

Typical Grant Rule Violated

Duplicate claims break program-integrity and allowability rules. Under the False Claims Act (31 U.S.C. §§ 3729–3733), penalties can reach $29,000 per claim, plus triple damages.

Operational Warning Signs

This problem usually starts with simple workflow issues:

• Manual re-entry
• Round trips split into two one-way claims
• Blank time-of-day fields that make separate records look like the same trip

It also helps to watch ERA 835 for CO-18 duplicate-claim denials.

Practical Prevention Fix

The first move is simple: cut out manual re-entry. Use GPS-linked billing software that builds claims straight from verified trip data, then scrub each claim for matching patient IDs, dates, and timestamps before submission.

On the dispatch side, use hard-lock features that stop one driver or vehicle from being assigned to two overlapping trips at the same time. And check ERA denials daily, so duplicate claims get fixed before the same mistake shows up again.

Once duplicate claims are under control, the next audit question is whether each trip has proof of service.

2. Weak Trip Verification and Incomplete Proof of Service

A claim can line up on paper and still get denied. If the file doesn't prove the ride happened, auditors can disallow payment.

Audit Exposure Trigger

Auditors compare the authorization, GPS or trip log, and billing record to confirm that the trip took place and that the claim matches the service.

Typical Grant Rule Violated

EVV requires proof of service: rider, date, time, location, and driver.

Operational Warning Signs

• Missing signatures
• Incomplete trip logs
• Expired PCS forms
• Mileage that does not match GPS

Practical Prevention Fix

Train drivers to get a passenger signature at drop-off before dispatch closes the trip. That small step can make the difference between a paid claim and a denied one.

If a patient refuses to sign, document the refusal in writing and get a witness signature from facility staff or a caregiver. You need a clear paper trail. No guesswork, no loose ends.

Set dispatch software to auto-calculate loaded miles from GPS instead of letting drivers estimate by hand. Manual mileage entries create problems fast, especially when the billed trip doesn't line up with the route data.

Keep PCS forms, manifests, and driver credentials in a digital audit file that can be sent on request. That helps close the gap between a completed ride and a claim that can stand up in an audit.

3. Unsupported and Ineligible NEMT Costs Charged to Grants

Once a trip is documented, auditors still look at one more thing: was every dollar charged to the grant allowed and backed up? That’s where many denials happen. Costs often get thrown out because support is missing, the charge wasn’t allowed, or the file doesn’t line up with grant rules.

Put simply, the file has to support both the ride itself and the amount billed to the grant.

Audit Exposure Trigger

Auditors compare the charge against the authorization, service record, and claim. If the billed amount doesn’t match the approved service or the right funding source, they can disallow the cost.

Typical Grant Rule Violated

Grant funds can only be charged for NEMT costs that are necessary, approved, and properly allocated. If a provider bills for a higher service level than what was actually delivered, that’s a direct rule break.

For example, charging a wheelchair transport rate for an ambulatory patient is a common reason a cost gets rejected.

Operational Warning Signs

Some red flags show up again and again:

• Trips billed under the wrong service level
• Trips billed without a valid PCS on file at the time of service
• Trips performed by drivers with expired credentials or OIG exclusions

Practical Prevention Fix

A current PCS is required for reimbursement. If the PCS is not current, or if it does not include ICD-10 codes and a physician's signature, the cost is ineligible even if the ride took place. Screen all employees monthly against OIG/LEIE and SAM.gov, and stop billing tied to any excluded worker. Any claim linked to an excluded worker can turn into an overpayment.

4. Late and Inaccurate Grant Billing and Reporting

A missed filing deadline can wipe out an otherwise valid NEMT claim. When billing goes in late or reports don’t line up, it points to weak internal controls. That’s the kind of thing that can lead straight to a denial.

Audit Exposure Trigger

Each state has its own timely filing window. Miss that deadline, and the claim can get a PR-149 denial code - a permanent denial and full write-off.

Reporting errors can create the same kind of trouble. If service dates, mileage, or trip counts don’t match, auditors may flag the claim right away and deny it. The same denial can apply when mileage, trip counts, or service dates don’t line up with the dispatch record.

Typical Grant Rule Violated

Grant agreements and Medicaid provider contracts require claims to be filed within a set window from the date of service. File outside that window, and the provider agreement is breached. Timely filing windows differ by state, but late claims are usually denied for good.

Operational Warning Signs

A few patterns show up again and again in audits:

• Waiting until month-end to batch and submit claims
• Manually estimating mileage that doesn’t match GPS data
• Using claim dates that don’t match the trip log

Month-end batching can push older trips past the filing deadline. It can also create claim spikes that attract audit review.

Practical Prevention Fix

Submit claims within 24–48 hours of service. Use GPS-based mileage, alert staff before authorization expires, and require trip data to be captured in real time. Then match the trip record to the claim before filing. Keep records for the full audit window.

5. Rider File and Credential Gaps in Audit Records

The last audit risk isn't the ride. It's the paperwork sitting behind it.

An incomplete rider file is one of the most expensive billing risks in NEMT. When auditors review a batch of claims, they don't just look at whether the trip happened. They check whether every rider, vehicle, and approval tied to that trip was properly documented and in compliance on the date of service.

Audit Exposure Trigger

A small gap in the file can turn into a denied claim fast. If a rider's eligibility changes between booking and the service date, an out-of-date file can lead to a denial that can't be appealed. If prior authorization is missing or expired, that can trigger CO-197 denials.

The same thing applies to staff and vehicle records. Missing driver documents or vehicle IDs can lead to fraud reviews or clawbacks on money that was already paid. That's the part that stings. The trip may have been done, but if the file can't back it up, the payment is at risk.

Typical Grant Rule Violated

Two federal rules show up again and again in these audit findings: 42 CFR § 431.53 and 42 CFR Part 455. In plain English, providers need complete, current, and easy-to-retrieve records for every trip.

Operational Warning Signs

A few warning signs tend to show up before this becomes a bigger problem:

• CO-16 and CO-197 denials
• Expired credentials
• Eligibility checked only at booking

Practical Prevention Fix

Four controls close most rider-file gaps:

• Block dispatch when authorization is not valid
• Verify eligibility on the date of service
• Set 30-day alerts for expiring credentials
• Run monthly LEIE/SAM checks

That last step matters more than many teams think. Billing for trips handled by an excluded worker can trigger federal penalties.

Keep these records in one audit file. That makes it much easier to prove eligibility, medical need, and service delivery on the same claim.

Document Category	Key Items Required	Retention Standard
Rider Eligibility	Medicaid ID, eligibility verification (270/271), prior authorization (PA)	7 Years
Medical Necessity	Physician Certification Statement (PCS), ICD-10 diagnosis codes, functional limitations, physician NPI, physician signature	7 Years
Driver Credentials	Valid license, background check, drug screen, required safety/training certifications, HIPAA training, wheelchair securement, OIG/SAM checks	Duration of Employment + 7 Years
Vehicle Records	Registration, Certificate of Insurance (COI), ADA accessibility certification, daily vehicle inspection reports	7 Years
Trip Verification	GPS breadcrumbs, actual pickup/drop-off times, odometer, patient/driver signatures	7 Years

Grant Audit Risk Summary Table

Not all grant audit risks hit the same way. Some are more likely to set off an audit. Others can cost more money when they surface. The table below helps you stack-rank the five main trouble spots - duplicate claims, weak trip proof, unsupported costs, late billing, and rider-file gaps - so you can fix the weakest controls first.

Risk Area	Severity	Likelihood	Common Red Flags	Recommended Controls
1. Duplicate Billing	High	High	Overlapping trip times for one driver; same patient/date/time claims; rounding mileage to whole numbers	Automated claim scrubbing; mandatory claim status check before resubmission
2. Weak Trip Verification	High	Critical	Missing patient signatures; no GPS breadcrumbs; pickup and drop-off times exactly match scheduled times	EVV integration; GPS-verified timestamps; digital signature capture at pickup and drop-off
3. Unsupported Costs	Critical	Medium	Expired PCS forms; billing wheelchair rates for ambulatory riders; CO-50 denials	Date-of-service eligibility verification; PCS expiration tracking with 30-day alerts
4. Late/Inaccurate Billing	Medium	High	Monthly claim batching; late filing denials; missed state filing windows	Weekly billing cycles; automated prior-authorization alerts; timely filing tracking dashboard
5. Credential Gaps	Critical	Medium	Expired CPR cards; missing monthly OIG checks; drivers over your MVR violation threshold	Monthly OIG/LEIE automated checks; hard-lock dispatch for non-compliant drivers

These are the day-to-day process shifts that close the gaps behind those five risks.

Practice Area	Current State (High Risk)	Desired State (Audit-Ready)
Mileage Tracking	Manual odometer entries or driver estimates	GPS-verified loaded miles with breadcrumb route data
Trip Verification	Paper manifests with ink signatures (often missing or illegible)	Electronic Visit Verification (EVV) with GPS/timestamp metadata and tamper-proof digital signatures
Rider Files	Missing or expired PCS; incomplete eligibility records	Complete authorization packets with auto-tracked expiration dates
Eligibility Checks	Verified only at the time of booking	Verified 24 hours before the trip and again on the actual date of service
Credentialing	Annual manual review of driver and vehicle files	Monthly automated OIG/LEIE and license status monitoring
Billing Cycle	Monthly batching of paper CMS-1500 forms	Daily or weekly electronic EDI 837P submissions via integrated software
Record Retention	Disorganized paper files or unsecured cloud storage	HIPAA-compliant digital archive with a BAA and retention policies that meet federal rules

The aim is simple: swap manual work for controls that create audit-ready proof on their own.

Use these controls to shape the process changes that come next.

How to Build a Grant-Ready NEMT Billing Process

These five risks point to one fix: one billing process with clear ownership. The goal is simple. Turn those risks into a single workflow: verify, bill, reconcile, and review.

Start with one billing policy for each funding source. Spell out the approved HCPCS codes, the required modifiers, and the trip proof needed to support each claim. Then apply the strictest rule across federal, state, and broker requirements. That way, staff aren't guessing which standard matters most. Keep one claim rule in place: the authorization, the service, and the bill must match.

Once those rules are in place, pre-billing checks help stop errors before they hit the claim file. Each trip record should tie back to the actual pickup and drop-off times, rider and driver signatures, odometer readings, and GPS coordinates. That kind of check does two things at once: it supports the claim and weeds out problems early. Pre-billing reviews should catch duplicate claims, missing proof, and late-file risk before submission.

On the finance side, separate revenue by service tier and by broker. Also keep a dedicated account for denials and recoupments. If someone looks at the books, they should be able to trace every trip, every time.

Clear ownership matters just as much as clean records. If no one owns a control, gaps can slip between teams. Billing staff should own HCPCS accuracy, prior authorization tracking, and timely filing deadlines. Supervisors should lock trip records after completion so any later edit goes through a documented workflow. One owner should also manage records, credentials, and exclusions so audit files stay complete.

A few controls are worth putting on a set schedule:

• Assign weekly record samples to one owner
• Assign monthly exclusion checks to one owner
• Set one retention policy for trip records, claims, driver files, and vehicle logs based on the longest required period

Then put the review cycle on the calendar and stick to it. Review monthly and audit quarterly. Run quarterly internal audits to catch credential and EVV gaps before they turn into findings. A steady review cadence keeps all five controls active and the billing file audit-ready before anyone calls.

Conclusion

Most grant audit findings don’t come from fraud. They come from process gaps.

These five failures - duplicate billing, weak trip proof, unsupported costs, late reporting, and incomplete rider files - usually trace back to weak controls and missing records. The answer isn’t more cleanup at the end of the year. It’s tighter controls during day-to-day work.

Providers with proactive compliance programs report 70% fewer major audit findings than those that only react after problems show up. That kind of drop can mean the gap between manageable findings and an extrapolated recoupment that runs past six figures.

If it isn’t documented, auditors treat it as unproven. That’s the hard truth. The best way to protect funding is to make compliance part of daily billing, not a last-minute scramble.

For operators who want help tightening those controls, visit NEMT Entrepreneur for NEMT billing and compliance guidance.

FAQs

What records should I keep for each trip?

Keep a complete trip record for every ride. That record should include the patient’s full name and Medicaid ID, the date of service, pickup and drop-off addresses, the actual pickup and drop-off times, and mileage logs.

You should also record:

• The driver’s name and signature
• The patient’s signature, or a witness signature
• The vehicle license plate or fleet ID
• The authorization or trip ID
• The HCPCS billing code
• The mode of transport

Store these records securely for at least 6 years. In some states, the rule is up to 10 years.

How can I prevent duplicate NEMT claims?

Build a strong billing process around trip IDs that stay with each ride from dispatch through invoicing. Assign the ID when the trip is dispatched, then keep that same ID attached all the way through the billing workflow.

It also helps to use billing software that flags possible duplicate claims before submission. On top of that, reconcile trip logs against submitted invoices on a regular basis. That makes it easier to catch data-entry mistakes or system problems early, before they turn into payment issues.

What triggers a grant audit in NEMT billing?

Grant audits in NEMT billing often start with routine data checks. Those checks look for patterns that suggest billing may be off or that a service may not have happened the way it was billed.

Common triggers include:

• Sudden spikes in mileage or trip volume
• Trip times that don’t match the distance traveled
• Consistent mileage rounding
• Duplicate claims or mismatched service codes
• Complaints, ownership changes, or random government sampling

Related Blog Posts

• NEMT Billing Guide: Common Mistakes and Solutions
• Medicaid Billing Audits: What to Know
• Ultimate Guide to NEMT Billing Documentation
• Surviving a Medicaid Audit: The Documentation Every NEMT Provider Needs