A Unified Program Integrity Contractor (UPIC) runs the audit, but it does not run Medicare. Providers who receive a UPIC document request often read the contractor's letterhead as the final word, when CMS's own Medicare Program Integrity Manual draws a narrower line. The UPIC develops the case, requesting records and performing the medical review, and decides whether the facts support a finding. Payment suspension and revocation of Medicare billing privileges sit on the other side of that line. The UPIC can recommend them. Only the Centers for Medicare & Medicaid Services (CMS) can approve them.
What the UPIC Does Itself
The UPIC screens leads, requests medical records (providers will sometimes include a signature log in the documentation they submit), and assigns a nurse reviewer or contractor medical director to the clinical review. CMS's manual states the UPIC investigates and determines the factual basis of fraud allegations from beneficiaries, providers, CMS, and the HHS Office of Inspector General. If it finds an overpayment, the UPIC calculates the amount and documents the finding, and it may decide that education is more appropriate than administrative action. It also makes referrals: to the MAC for routine handling, to a state licensing board, or to law enforcement when the facts support it. CMS is still involved in several of these steps. The manual has the UPIC vet a lead with CMS for approval before it opens an investigation. A proposed law enforcement referral goes to a case coordination meeting with CMS for final approval. So does an extrapolated overpayment.
What the UPIC Can Only Recommend to CMS
Payment suspension and revocation are different. CMS's manual is explicit: “For any investigative activities that require approval by CMS (i.e., Payment Suspension or revocation/deactivation requests), the UPIC shall submit those requests through its current processes [...] and coordinate subsequent actions with the appropriate points of contact within CMS.” The UPIC prepares the recommendation and the case file; CMS's Center for Program Integrity decides. On suspension, the manual states that whether or not the UPIC recommends one, the final determination is CMS's, made case by case. On revocation, CMS's own regulation at 42 CFR Section 424.535 vests the authority in CMS, and the manual describes the UPIC's role as recommending revocation of non-compliant providers, not deciding it. A related, rarer action, the consent settlement, follows the same pattern: the UPIC must route it through CMS for approval before offering it to a provider.
What the MAC Issues After CMS Signs Off
Once CMS approves an action, the Medicare Administrative Contractor (MAC) typically carries it out. CMS's manual states plainly that the UPIC refers every identified overpayment to the MAC, and the MAC sends the demand letter and collects the recoupment. On an approved suspension, the manual likewise directs that the MAC effectuates it. On revocation, the manual's provider enrollment chapter says that CMS's Provider Enrollment & Oversight Group reviews the UPIC's case file and, if it approves, instructs the applicable contractor to revoke the provider. That contractor sends the revocation letter. Confirm the issuing office and any deadline directly against the letter and with counsel, rather than assume it matches the suspension pattern.
Who Can Review the Contractor's Conduct
A provider who disagrees with a specific finding has the ordinary Medicare appeals path, starting with a redetermination request; CMS's manual notes that when an appeal concerns a claim the UPIC reviewed, the UPIC forwards its case record so the appeals entity can decide it. CMS's own approval requirement is itself a check on the UPIC's higher-consequence recommendations, since suspension and revocation do not take effect on the UPIC's say alone. Beyond that structural check and the claims-appeal path, the sections reviewed here do not describe a separate, provider-facing channel for raising a complaint about a UPIC's conduct, as distinct from appealing a specific finding.
“For any investigative activities that require approval by CMS [...], the UPIC shall submit those requests through its current processes [...] and coordinate subsequent actions with the appropriate points of contact within CMS.”
Why Early Legal Counsel Is Critical
It is critical that healthcare providers promptly retain experienced healthcare defense counsel upon receiving a UPIC document request, a payment suspension notice, or a revocation letter. Early legal intervention can protect the provider's rights, ensure an appropriate response to the UPIC's requests, avoid inadvertent admissions during medical review, preserve relevant defenses, and allow counsel to communicate with the contractor and CMS on the provider's behalf. A provider who waits to see whether a UPIC recommendation becomes a CMS-approved action loses time it cannot recover once approval is granted. Matters referred for potential fraud can lead to a target letter from the Department of Justice; counsel engaged at the UPIC stage is already positioned if the matter escalates that far. The record a provider builds during prepayment review or medical review shapes how CMS and the MAC treat the matter afterward.
How Health Law Alliance Can Help
Health Law Alliance represents healthcare providers through every stage of a UPIC matter, from the initial document request through a CMS-approved payment suspension or revocation recommendation. Our UPIC audit defense practice includes a former healthcare fraud investigator for Qlarant, CMS's largest Unified Program Integrity Contractor. Contact us today for a free, confidential consultation.
