Electronic Visit Verification (EVV): The Home Health Compliance Guide for 2026

If your agency provides Medicaid-funded home health services, EVV is not optional. It has not been optional since January 1, 2023, when the 21st Century Cures Act's home health deadline passed and enforcement began. Agencies that are still running manual processes, patching together paper timesheets, or hoping the state hasn't noticed — are now operating with real financial and regulatory exposure.

A November 2024 audit by the New York State Comptroller found that New York paid $14.5 billion for Medicaid-funded personal care services without the required electronic visit verification during a 26-month period. The audit found billions in claims lacking matching verification records — visits billed for patients who were hospitalized, visits too short to be billable, and records that providers could manually adjust without state visibility. That audit was a preview. CMS has signaled it is evaluating how states use EVV data for program integrity, with a federal report expected in 2026.

This guide covers what EVV requires, where agencies fail, what non-compliance actually costs, and how to build a compliant process that doesn't require a standalone $800/month software contract.

What Is EVV and Why Is It Federally Mandated?

Electronic Visit Verification is a system that electronically confirms a home health visit actually occurred — capturing who was there, what service was delivered, when it started and ended, and where it took place. The mandate comes from Section 12006(a) of the 21st Century Cures Act, signed into law in December 2016.

The law set two hard deadlines for states:

• January 1, 2020 — EVV required for all Medicaid-funded personal care services (PCS)
• January 1, 2023 — EVV required for all Medicaid-funded home health care services (HHCS)

The federal motivation was fraud reduction. Manual timesheets were trivially easy to falsify — a caregiver could bill for a visit that never happened, or log four hours for a two-hour visit, with no electronic record to contradict it. The Medicaid Fraud Control Units (MFCUs) recovered $26.4 million from personal care services agencies in 2023 alone. EVV creates an auditable digital record that ties every billed visit to a verified, timestamped, location-confirmed event.

States are required to implement EVV to maintain full federal Medicaid matching funds. States that don't comply face reductions in their Federal Medical Assistance Percentage (FMAP) — up to 1% in persistent cases. That cost gets passed downstream: agencies in non-compliant states face claim denials, payment delays, and increasingly aggressive audits.

The 6 Required EVV Data Points

The 21st Century Cures Act specifies exactly what an EVV system must capture for every Medicaid-funded home health visit. There are six required elements — no exceptions, no partial credit:

1. Type of service performed — e.g., skilled nursing visit, home health aide, physical therapy
2. Individual receiving the service — the patient/client identity
3. Individual providing the service — the caregiver identity
4. Date of service — the calendar date the visit occurred
5. Time the service begins and ends — both clock-in and clock-out, not just duration
6. Location of service delivery — typically the patient's home address, verified electronically

These six data points must be captured electronically at or near the time of service — not reconstructed in the office afterward. A caregiver calling in the visit from the parking lot on the way home is not EVV-compliant. The verification happens at the point of care: GPS check-in through a mobile app, interactive voice response from the patient's landline, or a fixed-device interaction at the patient's home.

Some states require additional data elements beyond the federal baseline — specific task codes, caregiver qualifications, or service authorization numbers tied to prior approvals. Check your state Medicaid EVV guidance for requirements beyond the six federal data points.

How States Implement EVV (And Why It Matters for Your Agency)

The federal law sets the floor. Each state decides how to implement it, which means the specific system your agency must use depends on which state you operate in. There are five primary models:

• Provider Choice Model — Your agency selects and pays for its own EVV system, which must transmit data to the state's aggregator.
• State-Mandated External Vendor — The state selects a single vendor; all agencies must use it.
• State-Operated In-House System — The state builds and runs its own EVV platform.
• MCO/Managed Care Plan Choice — Your managed care organization selects the EVV system used by its network providers.
• Open Vendor (Aggregator) Model — State offers a preferred system, but providers can use alternative systems that integrate with the state's aggregator.

Why this matters: in closed-model states, you may not have a choice of vendor. In open-model states, you can integrate EVV into your existing scheduling and billing platform rather than running a separate system. Before purchasing any EVV solution, verify your state's model and confirm the vendor integrates with your state's aggregator.

Common EVV Compliance Failures (And How Agencies Get Caught)

EVV audits don't catch dramatic fraud — they catch operational sloppiness. The most common compliance failures agencies face are predictable and preventable:

1. Late or manual clock-ins

A caregiver finishes a visit and logs the time in the office system at the end of the day instead of clocking in and out at the patient's home. The timestamp doesn't match the scheduled visit window. The location data is the office address, not the patient address. The claim gets flagged as potentially unverified — and in states that have moved to "hard edit" enforcement, it gets denied automatically.

2. GPS location mismatches

Caregivers clock in from their car in the street, from a neighboring address, or while still en route. The GPS coordinates don't match the verified service location. Even a minor mismatch can trigger a claim exception, requiring a manual override and documentation that explains the discrepancy. Overrides require justification — repeated overrides without documentation are a red flag pattern that auditors look for.

3. Missing or incomplete data fields

An EVV record that captures five of the six required data points is not EVV-compliant. Missing a service type code, logging a clock-in without a clock-out, or submitting a visit without the correct patient identifier creates an incomplete record. Incomplete records don't just fail compliance — they can result in the claim being denied entirely.

4. Caregiver training gaps

EVV compliance lives or dies with the caregiver in the field. If caregivers don't understand how to use the system correctly — when to clock in, what to do if the app fails, how to handle a patient who refuses device interaction — compliance rates drop. States like Minnesota and Pennsylvania are now publishing agency-level compliance percentages. Being below the threshold (50–85%, depending on state) triggers corrective action notices, not just individual claim denials.

5. No exception management process

Technical failures happen. An app crashes at clock-in. A patient's address doesn't geocode correctly. A caregiver's phone dies mid-visit. Every EVV system has an exception management workflow for documenting and justifying these situations. Agencies without a clear exception process accumulate unresolved EVV exceptions that show up as non-compliant visits on state reports — even when the care was delivered exactly as scheduled.

These are operational failures, not fraud. But from a state auditor's perspective, an unverified visit looks identical to a billed-but-not-delivered visit. The burden is on the agency to prove the visit happened — and EVV is the mechanism for that proof.

What Non-Compliance Actually Costs

The penalties for EVV non-compliance escalate in tiers, and they compound quickly:

• Claim denials — Visits without valid EVV records get denied at billing. States with "hard edit" enforcement deny them automatically, with no manual review.
• Payment delays and holds — Agencies below state compliance thresholds can have payments withheld until compliance is restored.
• Clawbacks and repayments — If post-payment audits find EVV gaps in historical claims, agencies can be required to return payments already received.
• Fines — State Medicaid programs may impose direct financial penalties on non-compliant agencies.
• FMAP reductions — Persistent state-level non-compliance reduces federal matching funds — pressure that states pass directly to agencies through tighter claim requirements.
• False Claims Act exposure — Agencies that submit claims representing EVV-verified visits when those visits weren't properly verified face potential FCA liability, including treble damages and civil penalties.
• Loss of Medicaid certification — In extreme or sustained non-compliance cases, agencies can lose their authorization to bill Medicaid entirely.

For context: Minnesota requires 50% EVV compliance by January 1, 2026, rising to 80% by July 1, 2026. Agencies below those thresholds receive corrective-action notices and face payment stops. Pennsylvania required 85% compliance starting January 1, 2025. Florida requires Medicaid health plans to verify at least 85% of paid visits. These aren't theoretical targets — they're enforced quarterly.

The full cost of an EVV deficiency goes beyond the financial penalties. A corrective action plan requires staff time, documentation, and remediation. Referral partners — hospital discharge planners, case managers, physician practices — check agency compliance histories before making referrals. An agency with a documented EVV compliance problem is a liability to the patient who needs reliable care coordination. That's business you don't recover.

How to Implement EVV Without a Standalone System

The most common misconception about EVV implementation is that it requires a separate, purpose-built EVV platform on top of your existing scheduling and billing software. It doesn't — and adding a siloed EVV system is often what creates compliance gaps, because visit data lives in one system while scheduling and billing live in another.

The operationally correct approach is to integrate EVV into the workflow your caregivers and coordinators already use. Here's what that looks like in practice:

Step 1: Confirm your state model and aggregator

Before selecting any system, identify your state's EVV model and the aggregator your data must transmit to. In open-model states, you can use any EVV-compliant platform that integrates with the aggregator. In closed-model states, your options may be limited to state-approved vendors. Your state Medicaid office maintains a current EVV vendor list — verify integration before committing.

Step 2: Use integrated scheduling and EVV

The most reliable EVV implementations are built into shift scheduling platforms that automatically link each visit to an EVV record. When the caregiver is scheduled, the EVV record is pre-populated with the service type, patient, and caregiver. The caregiver confirms and completes it at the point of care. There's no separate login, no parallel system, no reconciliation step. The visit and the verification are the same event.

Platforms like CareQueue combine scheduling, credential compliance, and visit documentation in a single view — so coordinators see EVV status alongside scheduling coverage gaps, rather than monitoring two separate dashboards.

Step 3: Train caregivers on the exact workflow

EVV training is not a one-time onboarding item. States require initial EVV training before caregivers use the system, followed by annual refreshers. More importantly, caregivers need scenario-specific training: what to do when the app won't load, what to do when GPS won't confirm the address, what to do when a patient refuses device interaction. These edge cases are where compliance breaks down — and they happen in the field, not in a training video.

Step 4: Monitor compliance rates in real time

Your state reports EVV compliance by agency. You should know your number before they report it. Build a weekly review of EVV exception rates, unresolved overrides, and compliance percentage into your coordinator workflow. Agencies that are surprised by their state compliance report didn't have visibility into their own data — the fix is a dashboard, not a corrective action plan.

Step 5: Audit EVV records as part of your compliance review

EVV records should be part of any internal compliance audit. Sample 10–15 visits per caregiver per quarter and verify that all six data points are present, that location data is consistent with the patient's address, and that clock-in and clock-out times align with the scheduled visit window. The same credentialing mistakes that agencies discover during audit cycles apply to EVV — the gaps are in the records that nobody reviewed between visits.

EVV Compliance Checklist

Every agency operating Medicaid-funded home health services should be able to confirm all of these at any point:

• ☐ All six federally required data points are captured for every Medicaid visit
• ☐ EVV clock-in and clock-out happen at the patient's location, not retroactively
• ☐ Your EVV system integrates with your state's designated aggregator
• ☐ All caregivers have completed initial EVV training and annual refreshers
• ☐ A documented exception management process exists for app failures and edge cases
• ☐ Agency-level EVV compliance percentage is monitored weekly (not just at state reporting)
• ☐ EVV records are reconciled with billing submissions before claims are submitted
• ☐ EVV data is included in quarterly internal compliance audits

If any box is unchecked, you have a gap — and it's likely showing up in your state's compliance data already.

EVV Is the New Baseline — What Comes After Compliance

Agencies that treat EVV as a compliance checkbox are missing what it actually provides: a real-time operational record of every visit your agency delivers. EVV data tells you which caregivers are consistently late to clock in, which patients are receiving shorter visits than authorized, which service types have the highest exception rates, and where your billing exposure is before you submit claims.

The agencies that will perform best in the enforcement environment of 2026 and beyond are not the ones with the most sophisticated EVV platform — they're the ones that built a process where compliance is the byproduct of good operations. Caregivers clock in because it's how the shift works. Coordinators monitor exceptions because it surfaces scheduling problems before they become billing problems. Audits happen before state surveys because that's how the calendar is set up.

That's not an EVV problem. That's an operational discipline that EVV happens to measure.

Managing EVV, credentialing, and scheduling in separate systems creates the compliance gaps you're trying to close. CareQueue brings visit verification, caregiver credentials, and shift scheduling into a single dashboard — so your coordinators see the full compliance picture without switching between platforms. See how it works →