What proper mold remediation looks like (so you can tell good work from a hack job)

If you’ve hired a remediation company, or you’re about to, or you’re walking through a house someone else “remediated” and trying to decide whether to believe them — this is the article. It is the field guide a homeowner can hold up against the work in progress and tell whether the people in the Tyvek suits are doing the job, or doing a version of the job that ends with the mold back in your walls in eight months.

We have nothing to sell. No remediation truck, no protocol, no fogging service, no proprietary spray. What we have is the published standard the industry is supposed to be following, the EPA guidance that backs it up, and the patience to translate both into plain English. The expensive part of mold work is trusting the wrong person; the cheap part is knowing what good looks like.

Proper mold remediation rests on three legs. Pull any one of them and the whole thing tips over:

Contain the contamination. Remove it physically. Fix the moisture so it doesn’t come back.

Sprays, fogs, antimicrobials, “kill claims,” encapsulants — none of those replace any of the three. They have at best a small supplemental role at the end. A job built around them instead of removal is theater, and we’ll call it that throughout this article because the industry standard does.

The principle: what “proper” actually means

The professional standard of care for mold remediation in the United States is ANSI/IICRC S520, Professional Mold Remediation. It’s the document insurers, expert witnesses, and courts use as the benchmark for competent work. The current edition is 2024 — the fourth — and it is what reputable companies follow. Ask any contractor bidding your job whether they work to S520. If the answer is “what’s that,” or vague reassurance, the rest of this article is going to save you a lot of money.

S520 has two principles that matter most to a watching homeowner.

You remediate the contamination, not just the visible patch. Mold you can see is the part of the problem above the waterline. Spores have settled on nearby surfaces, fragments are in the dust, growth often extends into the wall cavity beyond what shows. A scope that’s sized purely by visible square footage is undersized by definition.

“Killing” mold is not removing it. This is the single most common bad-faith shortcut in the industry. Spraying a biocide, fogging a room, painting over growth with “mold-killing primer” — none of that is remediation. Dead spores are still allergenic. Dead hyphae left in drywall are still allergenic and inflammatory. And killing organisms doesn’t fix the leak.

EPA’s Mold Remediation in Schools and Commercial Buildings, EPA’s homeowner Brief Guide to Mold, Moisture and Your Home, the NYC Department of Health Guidelines on Assessment and Remediation of Fungi in Indoor Environments, and OSHA’s worker-protection guidance all converge on the same model: find and fix the moisture, contain the work, physically remove the contaminated material, protect the people, verify the result. The World Health Organization’s Guidelines for Indoor Air Quality: Dampness and Mould arrives at the same place from a public-health direction. The consensus is not ambiguous.

The protocol comes from the assessor, not the remediator

Before we walk through a job site, the prerequisite: there should be a written remediation protocol, and it should be written by someone other than the company that’s about to be paid to execute it.

We make the full case for the assessor/remediator split in our companion article on how to hire a mold inspector or remediator without getting scammed. The short version: the assessor diagnoses the problem and writes the prescription; the remediator fills it; the assessor comes back to verify it worked. Letting one company own all three steps puts the same party in charge of saying how bad the problem is, how big the job needs to be, and whether it’s finished. The incentive structure is obvious.

In Texas, Florida, and New York, this separation is legally required for the same project. In most of the country it isn’t required, and you should impose it yourself anyway. The protocol is the document that makes everything downstream possible — common scope for competing bids, a defined target for the work, defined criteria for “done.” A remediator who balks at working from an independent protocol is telling you something useful.

What the protocol contains: the identified moisture source and who’s addressing it; the extent and location of contamination (areas, materials); what gets removed versus cleaned; the containment plan; the PPE level; the drying targets; and crucially the clearance criteria — how success will be measured, and by whom.

A remediator’s job is to execute that document. Not to write it. Not to amend it midstream without your written approval. Not to “verify” it themselves at the end.

S520 Conditions 1, 2, 3 — the language a good scope uses

S520 classifies an indoor environment into three conditions of fungal contamination. You’ll see these in a competent protocol. They drive the scope.

Condition 1 — Normal fungal ecology. What you’d expect for a similar normal building: trace settled spores and fragments consistent with the outdoors or with an unaffected part of the same building. This is the target. “Done” means returned to Condition 1, benchmarked against an outdoor reference or an unaffected indoor reference. Not “looks clean.”
Condition 2 — Settled spores, cross-contamination. No active growth in this area, but elevated settled spores on surfaces or in the air, usually because they migrated from a Condition 3 source elsewhere. The Condition 2 zone needs cleaning even though there’s no visible growth — this is why proper remediation reaches past the visible patch.
Condition 3 — Actual mold growth. Active or former visible or hidden growth. The source. Porous contaminated material gets removed; semi-porous and non-porous gets cleaned.

A good scope identifies the Condition 3 source, recognizes the surrounding Condition 2 zone, and defines success as Condition 1 verified. A bad scope sees only the visible Condition 3 patch and “treats” it. If your protocol doesn’t talk about the surrounding area at all, that’s a tell.

Containment — what good looks like

Containment is the physical barrier between the work and the rest of your house. Without it, demolition aerosolizes spores from the affected area and seeds them through every room the air can reach. The “remediation” then becomes the moment your one-room mold problem becomes a five-room mold problem. We have seen this. So has every honest remediator.

EPA’s size-tiered framework is the homeowner-facing rule of thumb. It’s a guideline, not a law (except where states have codified it), and visible area always understates hidden extent — but it tells you what level of rigor to expect.

Source containment (small jobs, roughly 10–100 sq ft)

A single layer of 6-mil polyethylene sheeting sealing off the work area. A slit or zipper-flap entry. Floor protected. Vents and registers in the work area sealed. The next room outside the poly is the clean area. PPE staged just outside.

Not a bedsheet. Not a strip of plastic taped over a doorway. Sealed seams, proper edges, an actual barrier.

Full containment (larger jobs, roughly over 100 sq ft)

Two layers of 6-mil poly. A zippered door. A decontamination chamber — an airlocked entryway with multiple flaps so people can enter and exit without breaking containment. A critical-barrier layer of poly over openings that must stay isolated from the work zone. The work area held under negative pressure. This is what the standard contemplates for any substantial job, and especially for HVAC involvement, occupied homes, or multi-room contamination.

Negative air

Inside the containment, a negative air machine (NAM) — a HEPA-filtered unit, ducted to exhaust outside the containment (out a window, or to a separately filtered area). Sized to achieve at least four air changes per hour in the work zone. When run as a NAM (ducted out), it makes the work area lower-pressure than the rest of the house — so air flows into the containment through any gaps, and contaminated air can’t escape outward.

You can see this work. The poly walls will visibly suck inward. That’s correct. It means the engineering is working.

The same machine, recirculating within the work area without external ducting, is called an air scrubber and serves a related job: continuously cleaning the work-area air during and after demolition, pulling it through true HEPA (99.97% at 0.3 micron) to drop the spore and dust load. Good crews run scrubbing during work and continue running them after for some hours.

Things that are not negative air machines: a box fan in the window (blows contamination around, filters nothing), a household air purifier sitting on the floor, a shop vac with a “HEPA-type” filter. A real HEPA unit has a sealed body and a true HEPA element. Demand the spec.

The negative air machine should be running before any disturbance starts — before the first piece of moldy drywall is cut. Not switched on for your walk-through and switched off after.

Air locks and decon chambers

On a full-containment job, you should see a small antechamber outside the zipper door, separated by another sheet of poly, where workers gear up and remove suits. Tools and bagged debris move through this chamber, not straight from the work area into your hallway. It looks unglamorous. It is the difference between a contained job and a contaminated house.

HVAC shut down or isolated

The HVAC system serving the work area should be shut off for the duration of demolition, and its supply and return registers in the work zone sealed with poly. A running HVAC system with open returns in a demolition zone is a distribution system for spores — straight into every other room on that zone. After the job, the filter on that system may need replacement.

A remediator who lets your HVAC run during demolition is doing you a kind of harm that won’t show up until later. This is non-negotiable.

PPE — what the crew should be wearing

Real PPE is one of the fastest visual tells of a serious crew. EPA and OSHA tie PPE level to job size. What you should see:

Half-face or full-face respirator with P100 filters. P100 is 99.97% filtration. NIOSH-approved. Not a paper dust mask. Not a surgical mask. Full-face respirators add eye protection and are common on bigger jobs.
Tyvek-style coveralls with a hood and booties. Disposable, fitted enough not to flap. Keeps spores off skin, hair, and street clothes, and keeps them from being tracked through the house.
Long, forearm-length gloves — nitrile or similar.
Sealed (non-vented) safety goggles if not wearing a full-face respirator. Vented goggles don’t keep particles out.

If the crew is working in t-shirts and dust masks, that’s not just a PPE problem. It’s a signal that they don’t think the work is dangerous enough to gear up for — which means they probably aren’t taking the containment, the air control, or your house seriously either. The crew’s gear is downstream of how the company actually thinks about the work.

The actual removal

This is the heart of the job, and the clearest place to tell good work from a hack job. The rule comes straight from S520 and from EPA’s remediation guidance:

Porous contaminated materials get removed. Drywall. Fibrous insulation. Carpet and carpet pad. Ceiling tile. Cardboard. Most contaminated soft goods. You cannot reliably clean mold out of porous materials, because the hyphae grow into them. They come out, get bagged, and get hauled away.

Semi-porous materials can sometimes be cleaned in place. Wood framing, OSB or plywood sheathing, plywood subfloor. If the contamination is shallow and the material is structurally sound, these can be HEPA-vacuumed, damp-wiped, sometimes sanded or media-blasted on larger jobs, and saved. Removed only if structurally compromised.

Non-porous materials get damp-wiped clean. Metal, glass, sealed concrete, tile, hard plastic. Cleaned in place with HEPA vacuuming followed by detergent wiping.

Specifics worth recognizing on site:

Cutting is wet or HEPA-controlled. Material is misted to suppress dust, or cut with a tool tied to a HEPA vacuum. Dry-sawing moldy drywall with a Sawzall and no dust control is one of the loudest red flags on this list — it aerosolizes everything you’re trying to remove and pumps it through whatever containment is or isn’t in place.
Drywall comes off well past the damage line. Most protocols call for removal something like one to two feet beyond visible growth, because growth almost always extends past what shows. A patch cut tight to the visible stain is undersized.
Carpet pad comes out with the carpet. The pad holds water and spores; “cleaning” carpet in place over a wet pad is not remediation.
Debris is bagged inside the containment. Heavy 3- to 6-mil contractor bags, sealed inside the work area, the bag exteriors HEPA-vacuumed or wiped, then double-bagged on exit through the decon chamber. Not dragged unbagged through your hallway. Not piled in the driveway.

Things that are not removal: spraying moldy drywall with a “mold killer” and leaving it. Priming over moldy drywall. Painting over staining. Coating moldy framing with an encapsulant before it’s been cleaned. Encapsulants have a legitimate role — at the very end, on cleaned, dried, verified surfaces that couldn’t be removed. They are not a substitute for any earlier step.

Cleaning — the HEPA sandwich

After removal, every surface in the containment and every item staying in it gets cleaned. The industry technique is called the HEPA sandwich:

HEPA-vacuum → damp-wipe → HEPA-vacuum again.

A true HEPA vacuum has a sealed body. Spores and fine dust pass through the HEPA element and nowhere else. A shop vac with a HEPA cartridge installed is not a HEPA vacuum — fine particulate leaks around the filter and out the housing seams. For mold, the distinction is non-negotiable. Pro abatement vacuums are sealed; reputable consumer/prosumer ones say so explicitly in the spec.

Damp-wiping uses rags kept wet — usually with an unscented detergent solution — so spores are picked up rather than aerosolized. EPA’s primary recommendation for cleanable surfaces is detergent and water, scrubbed, dried. Not bleach. Not “mold killer.” Bleach on porous surfaces is largely water with a little chlorine on top; the chlorine evaporates, the water soaks in, and the result is wetter porous material with the hyphae still in it. EPA explicitly does not recommend it as a routine mold-cleanup step.

Where antimicrobials are used at all in a competent job, they are a finish, not the substance. An EPA-registered product wiped or applied after cleaning, after drying, to leave a residual film. Not the centerpiece of the work. The signature scam — fog the room, declare victory, leave — gets debunked by S520 explicitly, and is what we mean when we say theater.

A homeowner watching should see a methodical vacuum-wipe-vacuum rhythm, not a person with a sprayer.

Drying — the step most often skipped or rushed

After cleaning, affected materials and remaining structure must be dried thoroughly before anything is closed back up. This sounds obvious. It is also the step most often shortcut.

What it looks like done right:

The moisture source is fixed. The leak repaired, the grading corrected, the bath fan rerouted, the condensate line cleared, the flashing replaced. By the remediator if it’s in their scope, or by a separate trade (plumber, roofer, basement specialist) — but somebody owns it, and the protocol names that person.
Air movers and dehumidifiers running. Air movers push high-velocity air across damp surfaces to drive evaporation; dehumidifiers pull the resulting humid air down. Both, together. An air mover without a dehumidifier just relocates wet air.
Moisture content measured before close-up. With a meter, on the remaining wood and framing. The standard target most protocols use is below about 16% moisture content before reassembly, and reading at or near the surrounding dry-standard for the building. Numbers in the daily log.

“It looks dry” is not a measurement. A crew that doesn’t put a moisture meter on the framing before sealing up the wall is a crew creating your next mold problem.

EPA’s “dry within 24 to 48 hours” applies to fresh water events more than to a multi-day remediation, but the principle holds: wet materials sealed inside a wall start the cycle over.

Post-remediation verification — the step the scams skip

When the work is “done,” who decides it’s done?

In a properly run job: an independent indoor environmental professional. The same assessor who wrote the original protocol, or another independent IEP — not the company that did the work.

This step is called post-remediation verification (PRV) or clearance. It happens after remediation is complete but before any reassembly or reconstruction. You want the walls open and the framing visible when the verification happens, because the point is to confirm the work — not to agree the painted-over surface looks fine.

What PRV looks like:

Visual inspection. No visible mold, no staining, no dust, no debris in the work area. Containment still intact. Contaminated materials confirmed removed.
Moisture verification. Moisture-meter readings on retained materials in the dry-standard range. Confirmation that the moisture source has been fixed.
Sometimes air or surface sampling. Spore-trap air samples comparing the work area against an outdoor baseline and against an unaffected indoor area. Surface samples where appropriate. The comparative logic — indoor should be similar to or lower than outdoor, with no abnormal presence of water-damage-indicator types — is the defensible framing. Specific numeric cutoffs sometimes cited by labs (“under 2,000 spores/m³”) are vendor-stated, not universal; AIHA and ACGIH caution against rigid pass/fail numbers. (We get into the details and caveats in our post-remediation verification deep dive.)

A passing PRV is documented in a written clearance report from the IEP, signed, dated, listing what was inspected and what criteria were met. You want this on paper. You will want this years from now if you sell the house, and you’ll want it tomorrow if anything goes wrong.

A failed clearance is not a disaster. It means the check worked. Your contract should specify that the remediator re-cleans the deficiency at no additional cost and the area is re-checked until it passes. A remediator who resists independent clearance, or whose contract makes you pay for re-work after a fail, is telling you which side they’re on.

The reason this step is so often skipped is the same reason “free inspections” exist: when the company doing the work also grades its own work, the answer is always “passing.” It is not a coincidence that the companies that resist independent PRV are often the same ones whose jobs fail in six months.

Reassembly — what has to be true before walls close up

The sequence matters. It is:

Identify and fix the moisture source.
Contain. Set up negative air. Shut down HVAC.
Remove contaminated porous material. Clean semi- and non-porous.
HEPA-vacuum, damp-wipe, HEPA-vacuum again.
Dry. Measure dry.
Encapsulate, if applicable, on cleaned and dried surfaces.
Post-remediation verification by an independent IEP.
Teardown of containment.
Reassembly — drywall back up, insulation back in, finishes restored.
Final finish work.

Step 7 happens before step 9. If walls close up before PRV, the verification becomes meaningless — you can’t inspect what’s behind drywall. A remediator who proposes to button everything up and then do the clearance is either inexperienced or counting on you not to notice. Politely refuse. The containment stays up, the framing stays exposed, until the independent IEP signs off.

Reassembly is often a separate scope from remediation — sometimes the same contractor does both, sometimes a general carpenter handles the rebuild. Either way, the boundary should be clear in the paperwork, and the verification falls between them.

Documentation you should receive

A properly run job generates a paper trail. Ask for these up front; expect them at the end.

The written scope of work / remediation protocol. Ideally authored by the independent assessor before bidding.
The contract. Scope, price, who’s responsible for the moisture fix, what happens if PRV fails, warranty terms.
Daily logs. What was done, by whom, with what equipment. On larger jobs, containment monitoring readings (negative-pressure measurements), moisture readings, temperature and RH.
Before/during/after photographs. Containment going up. Demolition in progress. Cleaned cavities before close-up. Equipment in place.
Materials list. What was removed, in roughly what quantity.
Disposal documentation. Where the bagged debris went. Mold debris is generally not regulated as hazardous waste — but the bagging and handling matter, and a record of disposal is normal.
The PRV / clearance report from the independent IEP. Visual findings, moisture readings, any lab results and their interpretation, an explicit pass statement against the protocol’s criteria.
Any lab reports with chain-of-custody and accredited-lab results.
A written warranty. What’s covered, for how long. A credible warranty is typically contingent on the moisture source remaining fixed — that’s reasonable, not a dodge.
Itemized invoices.

If a company works without a written scope, gives you no clearance report, “tests” their own work, won’t put the warranty in writing, or wants cash without paperwork — those are the same signals named in the hiring guide, and they apply just as much during the job as before it.

Red flags while the job is happening

Pulling the patterns together. Any one of these is reason to stop work and have a conversation. Several together is reason to stop work, full stop, and call the assessor.

No containment, or “containment” that went up after demolition started. Containment is preventive; setting it up after the spores are already in the air is closing the barn door.
Crew working without respirators. Or in dust masks. Or in street clothes.
Dry-cutting moldy drywall with a Sawzall and no HEPA dust control. Loud, visible, and one of the more destructive shortcuts.
The negative air machine isn’t running. Or there isn’t one. Or it’s a box fan.
Fogging or spraying promoted as a substitute for removal. “We don’t need to take that drywall out — we’ll just treat it.” Walk to the protocol. If removal is on it, removal happens.
HVAC running during demolition. Registers in the work area not sealed. This is non-negotiable.
The crew tracks through the house from the work zone in their suits and boots. No decon chamber. No walk-off path.
The remediator proposes to do their own post-remediation verification. Or hand you a decorative “Certificate of Mold Remediation” in lieu of an independent clearance report.
Walls closed up before PRV. Or before a moisture meter went on the framing.
The moisture source is hand-waved. “We’ll keep an eye on it.” “We don’t really do leaks.” If nobody on site can tell you what caused the water and what’s being done about it, the work won’t last.
Change orders without written approval. “We found more once we opened the wall” can be legitimate; “and we already did the extra work” while you weren’t on site is not.
“We’ll just spray it and seal it.” The defining pitch of the bad-faith middle of the industry.

A homeowner’s walkthrough checklist

If you can be present during the job — and you should be, at least for the key transitions — here’s what to look at in order.

Before work starts

Have you been given a written protocol authored by the independent assessor?
Are at least three bids in front of you, all priced against the same scope?
Have you verified the remediator’s license (where required), IICRC certifications (WRT, AMRT), general liability insurance (does it exclude mold?), and workers comp?
Does the contract name who does PRV and what happens if it fails?
Have you walked the work area with the crew so you both know what’s in scope and what isn’t?

Setup day

Is 6-mil poly going up around the work area, with proper seams and a zipper door (or full containment with decon chamber for larger jobs)?
Are vents, registers, and doorways in the work area sealed?
Is a HEPA-filtered negative air machine on site, set up to exhaust outside, and running?
Is the HVAC off and registers in the work zone sealed?
Is PPE staged for the crew?

Demolition

Are workers in respirators, suits, gloves, eye protection?
Are cuts being wet-misted or HEPA-controlled, not dry-sawed?
Is porous contaminated material being removed and bagged, not treated in place?
Is debris bagged inside the containment and double-bagged out?
Is the negative air machine still running (poly sucking inward)?

Cleaning and drying

Are you seeing the HEPA-vacuum / damp-wipe / HEPA-vacuum rhythm?
Are air movers and dehumidifiers running?
Has the crew put a moisture meter on the framing and recorded numbers in the log?

Before close-up

Has the moisture source been fixed and documented?
Is the independent assessor scheduled to do PRV with the containment still up and the framing still exposed?
Do you have the clearance report in writing — visual findings, moisture readings, any sampling results, an explicit pass — before walls close?

After

Do you have photos, daily logs, materials list, lab reports, and the PRV report?
Do you have the warranty in writing?
Has the HVAC filter been replaced if applicable?

A homeowner who walks this checklist will catch nearly every common failure mode in this industry. Most bad jobs don’t fail by being subtly incompetent. They fail by skipping a step a homeowner could see if they knew to look.

What to do today

If you’re standing in front of a remediation job, or about to hire one, or trying to evaluate one someone else did:

Get the written protocol from an independent assessor if you don’t already have one. The rest of this article depends on that document existing. If you skipped that step, see the hiring guide and back up to it.
Ask the remediator, directly, whether they work to IICRC S520. Note the answer. Note how comfortable they are with the question.
Confirm in writing who does post-remediation verification — and that it’s someone other than the company doing the work.
Walk the work site at the transitions — setup, after demo, after cleaning, before close-up. Use the checklist above.
Don’t let walls close before independent PRV. If you remember only one operational rule from this article, that’s the one.
Collect the documentation as you go, not at the end. Photos. Daily logs. Moisture readings. The clearance report. These are what protect you years from now.

Good remediation is unglamorous and methodical. It doesn’t sparkle, it doesn’t deploy proprietary mist, it doesn’t promise “complete sanitization.” It contains, it removes, it dries, and it gets verified by someone who isn’t being paid by the company that did the work. If that’s what’s happening in your house, you are in good hands. If it isn’t, now you know.