New York PBM Pharmacy Audits: What the Audit Found and Where the Money Went

New York PBM audit recoupment rules depend on the plan covering the prescription, the contract in force and the reason for the adjustment. Premature refills and misreported days’ supply can turn healthcare billing into a whistleblower case, as the government alleged against CVS Pharmacy. For someone inside a pharmacy or pharmacy benefit manager, the useful evidence connects what the pharmacy dispensed, what the audit challenged and what happened to the payment. An insider may also know who saw the discrepancy and what the business told the payer afterward. That is where an audit file can become more than a dispute over a chargeback.

Which New York PBM Rules Apply?

New York’s adopted PBM audit provisions exclude Medicare prescription-drug-plan services and services for plans governed by New York’s workers’ compensation law. The Medicare exclusion also covers the contract provision restricting later payment reductions, so the plan paying the claim matters.

The contract standards in the Department of Financial Services’ adopted November 2024 rules cover contracts signed, issued, assigned, renewed, extended, amended or otherwise modified from July 1, 2025. Under that adopted text, conflicting terms in all contracts become unenforceable from January 1, 2027.

Under those contract standards, a PBM cannot deny or reduce reimbursement after returning a paid claim response unless the pharmacy submitted the claim fraudulently, the adjustment corrects pharmacy errors identified in an audit, or the pharmacy agreed to the adjustment before the denial or reduction. We connect the reason a PBM gives for taking money back to the prescription, payment and contract it concerns.

The DFS audit requirements add to New York’s pharmacy-audit statute. That statute has its own exclusions: audits of federally funded claims, investigations supported by evidence of suspected fraud or intentional misrepresentation, and certain desk reviews within three business days of a claim with no chargeback or recoupment demanded. Those exclusions must be read separately from the DFS framework’s program exclusions.

What Can a PBM Recover From an Audit?

The adopted DFS audit rules cap recoupment at the actual overpayment or overbilled amount. Dispensing fees stay out of the calculation unless the prescription was never dispensed or was dispensed in error. A PBM cannot impose a chargeback just because the covered individual requested mail or delivery service. It also cannot project audit findings onto other claims to calculate recoveries unless state or federal law requires that extrapolation.

Clerical and record-keeping errors, including typing and computer errors, have a separate protection. The adopted rule permits recoupment for those errors only when a pattern exists, fraudulent billing is alleged, or the error caused an overpayment, with recovery limited to that overpayment. The rule also requires a direct connection between an error and a measurable loss before the PBM can claim financial harm to the plan or covered individual. A missing entry and a payment for medicine never dispensed call for different evidence.

How Do Audit Reports and Appeals Affect Collection?

The audit report and appeal stages control when a PBM can collect. Under the pharmacy-audit statute, the preliminary report is due within forty-five days after the audit concludes. The pharmacy has forty-five days after that report was provided to supply documents addressing discrepancies, and the PBM must consider a reasonable extension request. The final report is due within sixty days after the initial report was provided.

DFS requires the preliminary report to include the documentation supporting the findings. The final report must disclose the final chargeback and how the PBM will recover it. If the pharmacy receives an extension to respond, DFS permits an equivalent extension for the final report. The pharmacy contract must contain the written process for finalizing reports and appealing preliminary findings.

Collection of recoupments, chargebacks and penalties generally waits until the audit and all appeals are final. The exception requires the auditor to have a reasonable basis to believe the pharmacy engaged in fraud or other intentional or willful misrepresentation. Before taking an overpayment back by deducting it from money owed to the pharmacy, the PBM must allow at least 30 business days to review its findings and appeal. If the pharmacy appeals, that deduction generally waits until all appeals are exhausted.

A separate withholding exception applies before the final report: when the identified discrepancy across disputed claims in one preliminary audit report exceeds $25,000, the PBM may withhold future payments, but no more than 10% of each monthly payment until the final report is issued. The preliminary discrepancy, final chargeback and amount already withheld are separate figures. We compare them with the appeal record and remittances to see what the PBM actually collected and when.

The Contract and the Claim Answer Different Questions

A pharmacy’s license, its enrollment with a public payer and its PBM network agreement establish different things. The network agreement addresses participation, reimbursement, adjustments and service terms. The transaction records show what happened to a particular prescription and its payment.

For a pharmacy employee, that can mean connecting the dispensing record to the claim response and the later remittance. For a PBM reconciliation employee, it can mean connecting the pharmacy adjustment to the sponsor’s invoice or final accounting. We work across those records with you because each captures a different part of the money’s movement.

Purchasing records show the stock coming in, while pickup or delivery records show receipt. The original claim, reversal and rebill track changes to billing, and the final remittance shows the pharmacy’s payment after adjustments.

The comparison becomes useful when it follows the same prescription through those events. A return to stock changes inventory. A reversal changes billing. A recoupment changes money. We want to know how those events connect, including whether the report sent to the payer reflects the correction.

NYRx Has Its Own Dispensing Records

NYRx is New York’s Medicaid pharmacy program, with its own policy and transaction documents. New York moved pharmacy benefits for mainstream Medicaid managed-care, HARP and HIV-SNP members to NYRx on April 1, 2023. For health care paid through NYRx, the dispensing and billing records have to tell the same story.

The September 2026 NYRx policy manual says it plainly: submitting a claim does not establish that the prescription was furnished. Its delivery requirements address proof of receipt. A waiver signature is not acceptable delivery proof.

New York’s billing and transaction documents also distinguish the product, quantity, days’ supply, prescription reference and dispensing information. Billing, reversal and rebill are separate transactions. Those distinctions let us examine what the pharmacy supplied, what it reported and what it later changed.

What Repeated Audit Findings Can Reveal

Repeated chargebacks can show that management had already heard about a billing problem. The government’s insulin-pen case against CVS Pharmacy provides a concrete example of that allegation.

In December 2025, the Justice Department announced a $37.76 million civil settlement with CVS. The government alleged that CVS dispensed more insulin than prescriptions specified, refilled prescriptions prematurely and underreported how long the dispensed insulin should last. The government alleged that the inaccurate days-of-supply information often kept PBMs from catching the early refills.

The government’s complaint described PBM audits finding invalid days-of-supply data, premature refills and quantities beyond those authorized. According to the complaint, PBMs issued chargebacks. The complaint connects those repeated findings to what CVS management knew:

We see the absurdity in that allegation: the audits kept finding the problem, and CVS management still failed to fix it. Chargebacks, then more of the same. The audit history connects the repeated findings to what management knew.

Annual Reporting and Money Actually Returned

New York requires an annual PBM statement, with an attestation under the DFS instructions for calendar 2025. That gives us another representation to compare with the underlying accounts.

The DFS reporting FAQ distinguishes individual pharmacy locations audited from the total number of audits conducted. Its pending recoupment category covers amounts from audits performed during the 2025 reporting period that the PBM or its third party has not yet collected. That distinction matters when a report describes money still outstanding while the remittance records show a deduction already taken.

For an insider examining money taken back, we follow the adjustment into the accounts: the pharmacy remittance, the PBM’s accounting and the amount credited to the payer. When a PBM keeps money it owes a government health plan, taxpayers lose. We compare the amount challenged with the amount actually credited to the payer.

A separate federal benefits audit shows why that precision matters. In its November 2024 Compass Rose audit involving Express Scripts, the Office of Personnel Management’s inspector general questioned $18,443,118, including investment income. The report separately identified $9,524,945 in rebate principal as returned and recommended further confirmation. The carrier disputed parts of the audit, and Cigna’s response disputed several findings and how the contract should be read.

For a New York pharmacy adjustment, we ask the same practical question about the accounting: where did the money actually go? The claim, remittance and payer report let us follow that answer beyond the audit’s stated amount.

When the Audit File Points to a Whistleblower Case

An audit file becomes especially useful when it connects an inaccurate claim or report, the government’s payment and the people who knew about the discrepancy. We examine what the business represented, which payer relied on it, what the governing contract required and how the representation affected payment.

The prescription itself can be real while a later report used to determine government payment is false. That is why our work continues past the dispensing record to adjustments, sponsor reports and final reconciliations. Pharmacy, audit and PBM finance employees may each see a different part of that chain. A whistleblower case under the False Claims Act can pay 15% to 30% of what the government recovers.

You Know What Happened After the Audit

If you work in a New York pharmacy or PBM and know how an audit finding connects to inaccurate billing or reporting, speak with our whistleblower experts about what you see inside the business. We work beside you to build your strongest case from the claims, adjustments and management decisions, and bring in PBM fraud whistleblower lawyers who understand pharmacy payment records. We stay with you as that inside knowledge becomes the foundation of your case.