Accounts Receivable Audit Risk in Skilled Nursing Facilities

Skilled nursing facilities are drowning in accounts receivable that looks fine on paper and behaves like a liability in practice. AR is genuinely hard to collect, though the harder problem is valuing it. It's that AR in a SNF is genuinely hard to value, because what it's worth depends on clinical documentation, payer rules that shift by plan and by state, and government settlement processes that no facility controls. That combination appears in no other line of the balance sheet, and it's why an AR audit in this sector has to work in layers instead of totals.

The operating backdrop makes the stakes concrete. Nursing homes have been operating under severe margin pressure, even as other post-acute care segments are projected to grow over the same stretch. Facilities are absorbing higher labor costs, higher supply costs, and a rising Medicare census all at once, which means the old posture toward AR (collect it eventually, write off what doesn't come in) doesn't work anymore. At a 2025 national median of $361 a day for a private room and $314 for semi-private, Richter HC's figures show every claim that ages another 30 days without resolution is real revenue sitting outside the operation's reach. When collections slow, the facility is losing the cash that funds staffing, supplies, and care delivery in the next billing cycle, not just a bit of margin. It's losing the cash that funds staffing, supplies, and care delivery in the next billing cycle. That's the frame for everything that follows: AR here isn't an accounting exercise, it's closer to a survival metric, and an audit that treats it as a single number misses almost everything that matters.

Why a Blended AR Days Figure Misleads

Industry figures cite 45 days as an average AR cycle, with the strongest-performing facilities landing at 60 days or under. Fine as a benchmark. But a single blended number can hide a facility that's actually in trouble behind one that looks disciplined.

Consider the example MCA Skilled laid out in June 2026: a facility running a tidy 35 days overall. Sounds healthy. But if 60% of that AR is Medicare Advantage paying out in 30 to 45 days when authorizations are current, and the other 40% splits between Medicaid averaging 90 days and private pay averaging 120 days, the blended number is doing real work to flatter a mess. The math still produces something that looks like 35 days on a dashboard. It just doesn't tell anyone which checks are actually coming.

Why does this happen? Because SNF AR isn't one receivable pool, it's five or six separate populations, each aging on its own clock, each needing a different kind of follow-up, and each carrying a distinct cash-flow consequence if it goes stale. MCA Skilled's June breakdown puts the targets like this:

Medicare fee-for-service claims should clear in 14 to 17 days; clean claims pay fast, so anything aging past that window is a documentation or coding delay, not a payer problem. Medicare Advantage runs 30 to 45 days overall, with some plans that have streamlined authorization workflows paying in 20 to 30 days; aging past 30 days almost always traces back to an authorization gap or a missed concurrent review response. Overall Medicaid AR runs 45 to 60 days, though Managed Medicaid and Medicaid HMO plans can run longer and need to be tracked separately at the plan level rather than folded into a generic "Medicaid" bucket. Medicaid fee-for-service claims, per 42 CFR § 447.45, should process in about 30 days for clean electronic submissions in most states, though actual turnaround often runs 30 to 45-plus days, and aging beyond that typically points to an eligibility or pending-status issue rather than the payer sitting on the claim. Private pay carries a 30-to-45-day target, tied to monthly statements with payment expected within 30 days of the bill going out.

An auditor who reviews only the total AR days figure has no way to assess what's actually recoverable. Payer-level segmentation isn't a nice-to-have here, it's the floor. Without it, there's no way to judge whether the allowance for doubtful accounts is even in the right neighborhood. And once that payer lens is in place, the next question follows naturally: what's actually causing each bucket to age past its benchmark? For a huge share of Medicare and Medicare Advantage AR, the answer starts with documentation, specifically PDPM documentation.

PDPM Documentation Failures and Uncollectable AR

PDPM reimbursement runs on MDS coding. A resident's primary diagnosis assigns a clinical category, and that category sets the reimbursement rate across five payment components: PT, OT, SLP, Nursing, and Non-Therapy Ancillary (NTA). Get the coding wrong, and the facility isn't just leaving money on the table, it's building a receivable that may never convert to cash.

The FY 2026 proposed rate update of 2.8%, which nets out a 3.0% market basket increase, a positive 0.6% forecast error adjustment, and a negative 0.8% productivity adjustment, only reaches facilities that bill accurately. Coding errors mean that gain simply doesn't register. Layered on top of that, CMS is updating PDPM ICD-10 code mappings for FY 2026: removing outdated codes, reclassifying others into different clinical categories, and introducing new codes that touch the SLP and NTA components. Any billing system not updated before the fiscal year starts will generate miscategorized claims automatically, without anyone noticing until a denial comes back.

The documentation failures that turn into uncollectable AR tend to cluster around a handful of recurring points: the five-day PPS assessment not completed inside the required reference window (days 1 through 8); skilled care needs not documented daily, since admission and recertification paperwork alone doesn't sustain a covered stay; physician certification or recertification that's missing, unsigned, or filed outside the required window; therapy notes that describe what was done but skip the clinical rationale and the patient's objective response; and Interim Payment Assessments that should have been triggered by a significant change in clinical status but weren't.

The scale of what this can produce isn't theoretical. The OIG's audit of Pinnacle Multicare, one of the first in a wave of PDPM-era reviews, found that 99 out of 100 sampled claims failed to meet Medicare requirements. That sample extrapolated to an estimated $31.2 million across the full claim population, with OIG recommending a refund of $31,227,884. That's a nine-figure exposure, not a rounding error in a cost report, traced back to documentation gaps that, individually, look almost administrative. That's a nine-figure exposure traced back to documentation gaps that, individually, look almost administrative.

So what does this mean for an auditor looking at AR on the books today? Any AR tied to PDPM-era claims carries recoverability risk that has to show up in the allowance, and that risk can't be assessed from claims data alone. It requires pulling the clinical record and checking it against what was billed, because CMS is doing exactly that with increasing frequency. The SNF Validation Program, beginning FY 2026 and run by Healthcare Management Solutions (HMS), formalizes this comparison between MDS data and clinical documentation as a standing audit function rather than an occasional spot check.

The Medicaid pending problem and why it inflates AR without signaling a collection failure

Not every aging dollar in AR reflects a collection failure. Some of it reflects a timing gap, and Medicaid pending is the clearest example. When a resident is admitted before Medicaid eligibility has been determined, that claim is in AR as a private pay balance, even though it will eventually convert to a Medicaid claim. Nothing about that is a billing error. It's a structural feature of how Medicaid eligibility works.

The trouble starts when pending accounts aren't actively tracked from the day of admission. Facilities that don't monitor eligibility determination timelines and convert billing the moment eligibility clears end up with pending accounts that simply accumulate as aged private pay AR. That aging distorts two buckets simultaneously: it inflates the private pay balance with claims that were never genuinely private pay risk, and it understates Medicaid receivables that are just waiting on a billing trigger. Since Medicaid fee-for-service benchmarks run around 30 to 45 days for clean electronic claims in most states, a pending account that's been sitting for 90 or 120 days looks problematic next to that number, even though the delay has nothing to do with Medicaid's processing speed.

That distortion buries a specific audit risk: a pending account that will ultimately be Medicaid-covered gets tracked and reserved as if it were ordinary private pay AR. A pending account that will ultimately be Medicaid-covered shouldn't carry the same reserve rate as a private pay account that's genuinely gone bad. But without active tracking of pending status, an aged AR ledger can't tell the two apart. They look identical: old, unpaid, sitting in the private pay bucket. One might argue this is a minor classification issue, easily fixed with better software. Maybe. But the exposure compounds at facilities with a long-stay Medicaid census, where a large share of residents can be in pending status at any given moment, systematically overstating private pay risk while understating what's actually collectable through Medicaid.

The practical audit test here is straightforward, if labor-intensive: pull a sample of aged private pay accounts and trace each one back to determine whether it's genuinely unresolved or sitting in Medicaid pending status. That test only works with coordination between billing and the social work or admissions function, since pending status usually lives in the admissions record before it ever touches the ledger. Medicaid pending, unresolved as it might look on paper, is at least a problem the facility can manage internally. Retroactive government settlements are a different animal entirely, because those sit almost entirely outside the facility's control.

Retroactive government settlements and the contingent liabilities that live alongside AR

New York's long-term care sector offers a detailed look at what this exposure looks like in practice. Bonadio's March analysis found that providers in New York's long-term care sector are navigating regulatory changes, delayed reconciliations, and active audits all at once, and that third-party liabilities and receivables can move year-end financial statements enough to create material misstatement risk if they're overlooked.

Bonadio flagged six high-risk areas heading into the 2025 year-end close, and each one needs its own reserve or receivable position rather than a blanket estimate. The Cash Receipts Assessment requires nursing homes to pay a monthly fee at 6.8%, but only 6% of that is reimbursable; the 2023 reconciliation wasn't finalized by the Department of Health until late summer 2025, and the 2024 and 2025 reconciliations are still open, meaning facilities have to reserve against fee-for-service Medicaid days for every year that hasn't settled. The Nursing Home Quality Pool, an annual budget-neutral pool worth $50 million with a built-in 2% penalty tied to poor performance over the last two years, had 2024 quintile rankings released in December, but the financial impact of those rankings hadn't been published yet, leaving bottom-quintile facilities to anticipate a liability and top-tier facilities to potentially carry a receivable, unless a facility qualifies for the financial distress exemption.

Retroactive Medicaid rate increases add another layer of timing uncertainty: the federal share of the SFY 2024-2025 lump-sum adjustment was paid out in November 2025, but the state and federal share for SFY 2025-2026 was still owed as of Bonadio's analysis, which raises deferred revenue recognition questions that need resolving before statements close. OMIG audits, covering property, claims, MDS, payment integrity, and dropped services, are active and producing results large enough to matter: Bonadio's own healthcare consulting work overturned $1.3 million in disallowances across just the first 28% of final OMIG Dropped Services audit reports issued in 2025. Residual equity litigation adds a contingent liability of its own; a federal preliminary injunction is currently blocking the state from recouping payments dating back to April 2020, and facilities that benefited from those payments need to hold that liability on the books until the case resolves one way or the other. Public Health Law compliance, covering New York's minimum staffing rules and direct resident care spending requirements, rounds out the list with penalty exposure that touches disclosures as much as reserves.

None of these six items is AR in the conventional sense of a billed claim awaiting payment. But they sit right alongside AR, functioning as contingent receivables and contingent liabilities that have to be estimated and disclosed, and skipping them produces a materially misstated balance sheet even when the billing AR itself is clean. Bonadio's analysis is specific to New York, but the underlying mechanism (retroactive rate reconciliation creating timing mismatches and contingent positions) exists anywhere a state runs an active Medicaid rate reconciliation program. The names and percentages change state to state. The structural risk doesn't.

The federal audit escalation ladder and what it means for AR recoverability

Beyond state-level settlement risk sits a separate, federal layer: the audit apparatus that can reach back into a claim years after it's been paid and recorded as collected. AIHC reports that OIG currently maintains 13 active workplans targeted at nursing homes, active across multiple compliance areas, and that OIG released its Nursing Facility Industry Segment Specific Program Guidance (ICPG) in late 2024 to formalize expectations across that workplan set.

The escalation hierarchy runs from lowest to highest intensity: Targeted Probe and Educate (TPE), which can scale from a small initial sample up to 100% prepay review if problems surface; multiple federal audit programs targeting claims accuracy, payment integrity, and compliance; and HHS OIG itself at the top of the ladder. A claim can move through several rungs of that ladder over its life, and each step carries its own documentation demands and its own recoupment risk.

OIG's financial focus areas with the most direct bearing on AR include billing accuracy, cost reporting, and related-party transactions. That last category deserves a closer look, because it's where the exposure gets concrete fast. Related-party cost reporting requires that amounts reflected in cost reports correspond to actual costs rather than amounts billed between affiliated entities. Walters Accounting's illustrative case shows a 120-bed Georgia facility whose affiliated management company billed $600,000 a year but could only document $450,000 in actual expenses. CMS required a $150,000 downward cost report adjustment, a gap that traces directly back to a related-party arrangement nobody had reconciled to actual cost.

Timeliness compounds all of this. CMS is comparing MDS data against clinical records more aggressively than it used to, and a facility that responds late or incompletely to an additional documentation request faces an automatic denial, full stop, no matter how strong the underlying clinical case might have been. The SNF Validation Program starting in FY 2026, run by Healthcare Management Solutions (HMS), adds yet another audit vector: a random selection of facilities will have their MDS-based quality measures checked for accuracy, with implications for VBP performance scores and, indirectly, for payment adjustments that ripple back into AR. A receivable booked today at face value can face a retroactive recoupment demand from any rung on this ladder. That means the allowance for doubtful accounts has to account for audit-adjustment exposure, not just the odds that a payer sends a check.

Building the Allowance for Doubtful Accounts, and Its Common Shortfalls

Every layer covered so far converges here. Payer-specific aging, PDPM documentation gaps, Medicaid pending misclassification, retroactive settlement uncertainty, federal audit recoupment risk: all of it feeds into whether recorded AR is actually realizable, and the allowance is the one number that's supposed to capture that judgment in full. A reserve built purely off historical write-off rates, applied to a blended AR balance, misses most of what actually drives risk in this environment.

That approach breaks down in a handful of predictable ways. Payer mix can shift toward higher-risk categories, say a growing Medicare Advantage census with tighter authorization requirements, without the reserve rate moving to match it. A meaningful volume of Medicaid pending accounts can sit inside the private pay bucket with no separate reserve treatment, as covered above. PDPM coding changes, like the FY 2026 ICD-10 remapping, can create claims that carry elevated audit risk well before a single denial has actually landed, because the historical write-off rate hasn't caught up to the new risk yet. Open government audit notices or OMIG findings can sit un-reflected in the reserve simply because no one connected the notice to the AR balance it touches. And retroactive settlement receivables, like CRA reconciliations or state budget rate increases, often get carried at face value with no adjustment for the very real chance the timing or amount shifts before it's finally resolved.

Denial rate data offers a useful gut check. Richter HC puts the industry average claim denial rate at 6% to 13%, with a benchmark goal for skilled nursing organizations of 3% to 5%. A facility running near the top of that range isn't just losing revenue to denials, it's telling an auditor, in real time, that its allowance is probably too thin. The denial rate and the allowance adequacy are two views of the same underlying risk. When one looks bad, the other almost certainly is too, even if the balance sheet has not yet caught up to reflect it.