Guide
OIG Exclusion Screening for Medicaid Managed Care
By Keelstar Team · Updated July 11, 2026
The short answer
Medicaid managed care organizations sit at the intersection of federal funding and state program rules — exclusion screening obligations apply to the MCO, its network providers, downstream subcontractors, and vendors touching member care or claims. Screen all employees and contractors against the OIG LEIE and every state Medicaid exclusion list where the MCO operates or enrolls members. Provider network credentialing must include initial and recurring exclusion checks, not just license verification. Downstream entities — TPAs, care management vendors, transportation brokers — require the same screening rigor as direct employees. Document every check and export evidence for state contract compliance reviews and CMS audit requests. MCO-specific contracts often specify screening frequency — align your program with the strictest applicable requirement.
MCO exclusion screening obligations
Medicaid managed care organizations administer billions in federal-state funding. State Medicaid agencies and CMS expect MCOs to maintain exclusion screening programs covering employees, network providers, vendors, and downstream entities. Contractual terms often exceed generic healthcare provider expectations — read each state agreement carefully.
Who MCOs must screen
Screen broadly across the managed care operation.
- MCO employees and contractors
- Network physicians, hospitals, and ancillary providers
- Care management and utilization review vendors
- Pharmacy benefit managers and specialty pharmacies
- Transportation, home health, and DME network partners
- Downstream administrative and IT subcontractors
Federal LEIE plus state Medicaid lists
OIG LEIE screening is necessary but not sufficient for MCOs. State Medicaid programs maintain separate exclusion lists that do not automatically sync with OIG. A provider excluded in one state may not yet appear on the LEIE. Multi-state MCOs need a matrix mapping each party to applicable state lists based on service location and member enrollment.
Integrating screening into credentialing
Provider network credentialing and re-credentialing are natural checkpoints for exclusion screening. Initial credentialing should block enrollment until LEIE and state list checks complete. Re-credentialing cycles — typically every 24 to 36 months — must include fresh exclusion searches, not just license renewal verification.
Audit and state contract compliance
State Medicaid agencies audit MCO exclusion programs regularly. Prepare exports covering network providers, employees, and vendors for each contract period. Document screening frequency, overdue exceptions, and confirmed match resolutions. Gaps in downstream subcontractor screening are a frequent finding — extend your program to the full chain.
Frequently asked questions
- Do MCOs screen network providers or rely on credentialing?
- MCOs must screen network providers as part of credentialing and re-credentialing. Relying on attestation without your own dated LEIE search creates contract and audit exposure.
- Which state lists must an MCO check?
- At minimum, every state where the MCO holds a Medicaid contract. Multi-state MCOs often screen 40 or more state lists in addition to the federal LEIE.
- Are downstream subcontractors the MCO's responsibility?
- Yes. MCOs are accountable for exclusion screening across their subcontractor chain when those parties perform services connected to the Medicaid contract.
- How often do state MCO contracts require re-screening?
- Varies by state — monthly, quarterly, or at re-credentialing cycles. Review each state contract and apply the most frequent requirement across your footprint.
Related guides
Put this into a monitored workflow
Exclusion Monitor handles this continuously — with reminders and an audit trail.