Medicare Advantage Compliance in 2026: What the New OIG Guidance Means for Your Practice

Introduction: Medicare Advantage at the Center of Federal Enforcement

Medicare Advantage (MA) has become the dominant delivery model for Medicare beneficiaries in the United States. As of 2025, more than 50% of all Medicare beneficiaries are enrolled in MA plans, representing over 30 million individuals and hundreds of billions of dollars in annual federal spending. This rapid enrollment growth, combined with the program’s risk-adjusted payment methodology, has made Medicare Advantage one of the highest-priority enforcement targets for the Office of Inspector General (OIG), the Department of Justice (DOJ), and the Centers for Medicare and Medicaid Services (CMS).

On February 2, 2026, the OIG issued its Industry Segment-Specific Compliance Program Guidance (ICPG) for Medicare Advantage, the first MA-specific compliance guidance since 1999. This landmark document represents the new HHS Inspector General Thomas March Bell’s first major guidance publication and reflects over a quarter century of evolution in the MA program, enforcement experience, and compliance expectations. While the ICPG is directed primarily at Medicare Advantage Organizations (MAOs) and their First Tier, Downstream, and Related Entities (FDRs), its implications extend directly to the physician practices that provide care to MA enrollees and submit the documentation that drives risk adjustment payments.

For medical practices, Medicare Advantage compliance is no longer a niche concern. As MA enrollment exceeds half of all Medicare beneficiaries, virtually every physician practice that accepts Medicare patients interacts with the MA program. The documentation practices provide, the diagnosis codes they report, and the care they deliver all feed into the risk adjustment system that determines CMS payments to MA plans. Inaccurate or improperly supported coding, even when unintentional, can contribute to inflated risk scores that generate excess federal payments, creating exposure for both the MA plan and the physician practice.

This guide explains what the new OIG Medicare Advantage guidance means at the practice level, how risk adjustment and HCC coding create compliance obligations for physicians, what the V28 model transition changes, and how practices can build a compliance framework that protects them in this high-scrutiny environment.

Understanding Medicare Advantage: How the Program Works

Medicare Advantage is the private-plan alternative to Original Medicare (Parts A and B). Under the MA program, CMS contracts with private insurance companies (Medicare Advantage Organizations, or MAOs) to provide Medicare benefits to enrolled beneficiaries. Rather than paying providers directly for each service rendered (as in Original Medicare’s fee-for-service model), CMS pays MAOs a capitated monthly payment for each enrolled beneficiary, adjusted based on the beneficiary’s health status.

Risk-Adjusted Payments

The capitated payments CMS makes to MA plans are risk-adjusted, meaning they vary based on the expected healthcare costs of each enrollee. Beneficiaries with more complex or chronic health conditions generate higher capitated payments because they are expected to require more costly care. The risk adjustment system relies on Hierarchical Condition Categories (HCCs), which are groupings of ICD-10 diagnosis codes that map to specific clinical conditions known to predict higher healthcare costs.

The risk adjustment process works as follows:

1. Physician practices document patient encounters and assign ICD-10 diagnosis codes based on the clinical conditions assessed during the visit
2. MA plans collect diagnosis data from all sources of care for each enrollee and submit this data to CMS
3. CMS maps the submitted diagnosis codes to HCC categories using its risk adjustment model
4. CMS calculates a risk score for each beneficiary based on the HCC categories, demographic factors, and other variables
5. CMS adjusts the capitated payment to the MA plan based on the risk score

This payment methodology creates inherent financial incentives for diagnosis codes that map to HCCs, because more HCC-mapped codes result in higher risk scores and larger payments from CMS. This is precisely what makes risk adjustment a high-priority enforcement area.

The Role of Physician Practices in Risk Adjustment

While MA plans are responsible for submitting risk adjustment data to CMS, the underlying diagnosis coding originates with the physician practices that treat MA beneficiaries. Every diagnosis code a physician documents and reports for an MA patient potentially feeds into the risk adjustment system. This means the accuracy and integrity of a practice’s documentation and coding directly affects the MA plan’s risk adjustment submissions.

Many MA plans actively engage practices through annual wellness visits, health risk assessments, chart reviews, coding education programs, and financial incentives for accurate and complete coding. While these programs can serve legitimate purposes (ensuring that all active, clinically relevant conditions are documented during each encounter), they also create compliance risks when they pressure physicians to code conditions not supported by the clinical encounter or to recapture diagnoses that are no longer clinically active.

What the February 2026 OIG ICPG Means for Physician Practices

Although the OIG’s MA ICPG is directed primarily at MAOs and their FDRs, physician practices that serve MA patients should pay close attention to several key themes:

Accurate Claims Submission

The ICPG emphasizes that the False Claims Act applies broadly to MA-related conduct. The OIG expects all entities participating in the MA program, including physician practices that generate the underlying clinical documentation and coding, to ensure that claims and risk adjustment data are accurate and supported by the medical record.

Oversight of Third Parties

The ICPG advises MAOs to implement robust oversight of FDRs and other third parties, considering the types of tasks delegated, compliance risks associated with those tasks, the third party’s compliance infrastructure, and current enforcement trends. For physician practices, this means MA plans may increase their compliance demands on downstream providers, requiring enhanced documentation standards, coding accuracy targets, and participation in compliance training and auditing programs.

Quality of Care

The ICPG addresses the integrity of Star Ratings data and the importance of quality metrics. Practices should ensure that the quality data they report to MA plans is accurate and reflects actual clinical performance rather than artificial metric optimization.

Training and Communication

The OIG recommends robust training and communication programs to help leadership and staff understand and mitigate MA-specific compliance risks. Practices should anticipate that MA plans will increasingly require provider participation in compliance training as a condition of network participation.

Risk Adjustment and HCC Coding: The Compliance Imperative

For physician practices, the single most important Medicare Advantage compliance issue is the accuracy and integrity of diagnosis coding that feeds into the risk adjustment system. The OIG, DOJ, and CMS have all identified inaccurate risk adjustment data as a top enforcement priority, and several recent enforcement actions have targeted physician practices directly.

What Constitutes Proper HCC Coding

Proper HCC coding requires that every diagnosis code submitted for risk adjustment purposes be:

• Clinically documented: The condition must be reflected in the medical record based on a face-to-face encounter between the patient and an acceptable provider type
• Assessed or treated during the encounter: The diagnosis must have been evaluated, assessed, monitored, or treated during the specific encounter that generates the code. Carrying forward diagnoses from prior encounters without current clinical assessment is improper
• Supported by the clinical evidence: The documentation must contain sufficient clinical detail to support the reported diagnosis, including relevant history, physical examination findings, diagnostic results, and treatment plans
• Coded to the highest level of specificity: ICD-10 codes must be assigned to the most specific level supported by the clinical documentation

Common HCC Coding Errors

• Diagnosis recapture without clinical reassessment: Re-reporting a chronic condition diagnosis from a prior year without documenting that the condition was evaluated or managed during the current encounter
• Unsupported diagnoses: Reporting diagnosis codes that are not supported by clinical findings documented in the encounter note
• Upcoding severity: Assigning a more severe or specific diagnosis code than the documentation supports (for example, coding diabetes with complications when only uncomplicated diabetes is documented)
• Retrospective chart amendments: Adding diagnoses to encounter notes after the visit, particularly when prompted by MA plan chart review programs, without a legitimate clinical basis
• Overreliance on MA plan coding prompts: Accepting coding suggestions from MA plan representatives or software systems without independently verifying that the diagnoses are clinically supported by the current encounter

The V28 Risk Adjustment Model Transition

In 2024, CMS began transitioning from the V24 (2020 model) risk adjustment model to the V28 model. This transition, which is being phased in over several years, has significant implications for physician practices serving MA patients.

Key Changes in V28

• Fewer diagnosis codes map to HCCs: The V28 model significantly reduced the number of ICD-10 diagnosis codes that map to HCC categories. Many conditions that previously generated risk adjustment payments no longer do so under V28
• More HCC categories: V28 increased the number of HCC categories CMS uses to adjust payments, creating a more granular risk adjustment model
• Reduced payments: CMS estimated that the V28 transition would save over $7.6 billion in payments in 2024 alone, reflecting the model’s narrower coding capture

Compliance Implications of V28

The transition to V28 creates both opportunities and risks for physician practices:

• Practices must update their coding practices to align with the V28 model’s revised code-to-HCC mappings
• Training for coders and physicians should address the specific changes in which diagnoses now map (or no longer map) to HCCs
• Practices should be cautious about pressure from MA plans to increase coding capture in response to reduced risk adjustment revenue. While accurate and complete coding is always appropriate, any coding intensification must be driven by clinical documentation, not by financial targets
• The OIG’s January 2026 Work Plan addition specifically targeting trends and patterns in V24 versus V28 risk adjustment data signals heightened scrutiny of coding changes during the transition period

Documentation Requirements for Medicare Advantage Patients

Documentation standards for MA patients follow the same fundamental principles as for Original Medicare, but with additional considerations driven by the risk adjustment system:

Every Reported Diagnosis Must Be Encounter-Based

Risk adjustment diagnosis codes must originate from a face-to-face encounter between the patient and an eligible provider. Diagnoses cannot be reported based solely on problem lists, historical records, or patient self-reports without a current clinical assessment.

Document the Clinical Basis for Each Diagnosis

For each diagnosis reported, the encounter note should include the clinical evidence supporting the diagnosis: relevant history, examination findings, diagnostic test results, and the provider’s assessment. This documentation must be sufficient for an independent reviewer to verify that the reported diagnosis is clinically supported.

Address Chronic Conditions Actively

Chronic conditions must be assessed, evaluated, or managed during each encounter in which they are reported. Simply listing a chronic condition on the problem list without addressing it in the encounter note does not support risk adjustment reporting.

Use Specific ICD-10 Codes

Assign the most specific ICD-10 code supported by the clinical documentation. Avoid using unspecified codes when more specific codes are clinically appropriate and documented.

Avoid Retrospective Documentation Changes

Adding or modifying diagnoses after the encounter, particularly in response to MA plan chart review programs or coding audits, creates significant compliance risk. Any legitimate amendments to medical records should follow established amendment procedures and clearly indicate the reason for the change, the date of the amendment, and the identity of the amending provider.

Common Compliance Pitfalls for Practices Serving MA Patients

Participating in Health Risk Assessments Without Proper Oversight

Many MA plans conduct or sponsor health risk assessments (HRAs) for their enrollees, often administered by third-party vendors in provider offices. Practices should exercise caution regarding HRAs that generate diagnosis codes attributed to the practice’s providers without the provider’s direct clinical assessment and concurrence. Any diagnosis reported under a provider’s name must reflect the provider’s independent clinical judgment.

Accepting MA Plan Coding Suggestions Uncritically

MA plans may provide coding prompts, suspecting lists, or pre-populated diagnosis forms based on historical claims data. While reviewing prior diagnoses during a patient encounter is acceptable clinical practice, physicians must independently verify that each suggested diagnosis is currently active, clinically relevant, and documented during the encounter. Blindly accepting pre-populated diagnoses without clinical validation is a significant compliance risk.

Financial Incentives Tied to Coding Volume

Some MA plans offer financial incentives to physicians for coding accuracy or completeness. While incentives for accurate coding can be appropriate, arrangements that reward physicians for increasing the number of HCC-mapped diagnoses reported create Anti-Kickback Statute and False Claims Act exposure. Compensation arrangements with MA plans should be evaluated for compliance with AKS safe harbors and should never tie physician compensation to the volume of risk-adjusting diagnosis codes.

Inadequate Training on MA-Specific Requirements

Many practices train their physicians and coders on Medicare fee-for-service coding requirements but do not specifically address the additional compliance considerations unique to Medicare Advantage risk adjustment. Dedicated training on HCC coding requirements, documentation standards, and the compliance risks associated with inaccurate risk adjustment data is essential.

The False Claims Act and Medicare Advantage

Medicare Advantage fraud enforcement increasingly relies on the False Claims Act. DOJ has pursued FCA cases against MAOs and, in some instances, the physician practices and provider organizations that generated inaccurate risk adjustment data. Key FCA theories in the MA context include:

• Submission of unsupported diagnosis codes: When practices report diagnosis codes for risk adjustment that are not supported by the clinical documentation, the resulting risk adjustment payments may constitute false claims
• Failure to delete inaccurate diagnoses: When practices become aware that previously submitted diagnosis codes are inaccurate or unsupported, failure to correct the submissions may create reverse false claims liability under the 60-day rule
• AKS violations in MA arrangements: Financial incentives or compensation arrangements between MA plans and physician practices that violate the Anti-Kickback Statute can render all associated claims false under the FCA

The DOJ’s FCA Working Group has explicitly identified MA fraud as a priority enforcement area. Record FCA recoveries of $6.8 billion in fiscal year 2025 were driven substantially by MA-related cases. Physician practices that serve MA patients should treat risk adjustment compliance with the same level of seriousness they apply to Original Medicare billing compliance.

OIG Work Plan Items Targeting Medicare Advantage

The OIG Work Plan for 2026 includes several items with direct relevance to physician practices serving MA patients:

• V24/V28 Risk Adjustment Trends: A new January 2026 Work Plan item specifically examining trends, patterns, and key comparisons between the V24 and V28 risk adjustment models. This item signals OIG attention to how coding patterns are changing during the model transition
• MA Risk Adjustment Data Validation: Ongoing Work Plan items focused on validating the accuracy of risk adjustment data submitted by MA plans and their provider networks
• MA Encounter Data: Reviews of the accuracy and completeness of encounter data submitted by MA plans, which is increasingly used for risk adjustment and quality measurement

MA Marketing and Enrollment: While primarily an MAO compliance issue, practices that participate in MA plan marketing activities should ensure their activities comply with CMS marketing guidelines

Third-Party Vendor and FDR Compliance Considerations

Many physician practices interact with third-party vendors in the Medicare Advantage context, including:

• Chart review companies that conduct retrospective coding audits on behalf of MA plans
• Health risk assessment (HRA) vendors that administer patient assessments in practice settings
• Coding education companies that provide training programs funded by MA plans
• Technology vendors that provide coding prompts or suspecting lists

The OIG’s ICPG emphasizes the importance of MAO oversight of these third parties and, by extension, the physician practices’ responsibility to understand and manage the compliance risks associated with their interactions with these vendors.

Practices should exercise particular caution when:

• A third-party vendor reports diagnosis codes under the practice’s provider NPI without the provider’s direct review and concurrence
• Vendor-facilitated chart reviews result in retrospective additions of diagnosis codes without a corresponding clinical encounter
• Vendor activities are funded by MA plans in ways that could create Anti-Kickback Statute concerns
• Vendor staff operate in the practice but are not subject to the practice’s compliance policies and oversight

Building a Medicare Advantage Compliance Framework for Your Practice

Physician practices can protect themselves in the MA compliance environment by implementing the following strategies:

Conduct MA-Specific Coding Audits

Supplement standard coding audits with MA-specific reviews that evaluate the accuracy and documentation support for risk-adjusting diagnosis codes. These audits should assess whether reported HCC-mapped diagnoses are clinically documented, encounter-based, and coded to the appropriate level of specificity.

Train Physicians and Coders on HCC Requirements

Provide targeted education on risk adjustment coding requirements, including the clinical documentation standards for HCC-mapped diagnoses, the prohibition on diagnosis recapture without current clinical assessment, and the compliance risks associated with inaccurate risk adjustment submissions.

Establish Documentation Standards for MA Encounters

Develop practice-specific documentation templates or guidelines that ensure every MA patient encounter includes adequate clinical documentation for each reported diagnosis. These standards should address the assessment of chronic conditions, the clinical basis for each diagnosis, and the specificity of ICD-10 coding.

Review MA Plan Participation Agreements

Carefully review all contracts and participation agreements with MA plans for compliance implications, including financial incentive provisions, coding requirements, and FDR compliance obligations. Ensure that any compensation arrangements comply with AKS safe harbors.

Monitor V28 Transition Impacts

Track how the V28 model transition affects your practice’s coding patterns and risk adjustment submissions. Significant changes in coding volume or HCC capture rates during the transition period may attract scrutiny and should be explainable based on legitimate clinical documentation changes.

Implement Overpayment Identification Processes

Develop procedures for identifying and returning overpayments related to inaccurate risk adjustment data within the 60-day window. This includes processes for responding to MA plan chart review findings that identify unsupported diagnoses.

How DoctorsManagement Supports Medicare Advantage Compliance

DoctorsManagement brings decades of compliance consulting experience to help physician practices navigate the complexities of Medicare Advantage participation. Our team understands both the regulatory requirements and the practical realities of managing MA compliance at the practice level.

Our MA compliance services include:

• MA-Specific Coding and Documentation Audits: Focused reviews of risk adjustment coding accuracy, documentation support, and HCC-mapped diagnosis integrity
• Compliance Program Development: Assistance in building or enhancing compliance programs that address MA-specific requirements, including risk assessment, training, monitoring, and overpayment identification
• Coding and Billing Training: Targeted education for physicians and coders on HCC coding requirements, V28 model changes, and documentation standards for MA patients
• Healthcare Compliance Audits: Comprehensive reviews of your practice’s overall compliance posture, including MA-specific risk areas
• Contract Review: Evaluation of MA plan participation agreements and financial incentive arrangements for compliance implications

Contact DoctorsManagement at www.doctorsmanagement.com or call (800) 635-4040 to discuss how we can help your practice achieve Medicare Advantage compliance confidence.

Frequently Asked Questions

External Resources and References

• OIG Medicare Advantage ICPG (February 2026)
• OIG General Compliance Program Guidance (2023)
• CMS Risk Adjustment Overview
• OIG Work Plan
• OIG Fraud and Abuse Laws
• AAPC HCC Coding Resources
• AHIMA Coding and Documentation Resources
• DoctorsManagement Compliance Services
• DoctorsManagement Coding and Documentation Review

This article is provided for informational and educational purposes only and does not constitute legal advice. Healthcare compliance requirements vary based on specific circumstances, and practices should consult with qualified legal and compliance professionals when evaluating Medicare Advantage compliance obligations.

Contact Us