A Recovery Audit Contractor (RAC) review begins with a letter the provider did not request and cannot ignore. RACs are contractors paid by the Centers for Medicare & Medicaid Services (CMS) to find improper payments in claims Medicare has already paid, and a single request for records can reopen a claim a provider considered closed. Knowing which review generated the letter, what a RAC can and cannot demand compared to a Medicare Administrative Contractor (MAC) or Unified Program Integrity Contractor (UPIC), and where the appeal clock starts changes how a provider responds early.
Automated Review and Complex Review
RACs conduct two kinds of review, and the letter tells a provider which one applies. An automated review relies on claims data alone. The RAC compares the billed claim against a coverage rule, such as a local coverage determination, or a coding edit, and denies the claim without requesting a medical record if it fails that rule. A complex review starts with an Additional Documentation Request (ADR) because confirming medical necessity or coding accuracy requires the medical record, not just the claims data. CMS requires the RAC to have qualified clinical reviewers examine the submitted records before reaching a finding.
A provider who receives an ADR is in a complex review; the request states which claims and date range the RAC is reviewing. CMS caps how many records a RAC can request from a single provider within a given cycle, but the figure depends on provider type and claim volume. Confirm the current limit against CMS's published tables, not a prior audit's figure.
How a RAC Request Differs From a MAC or UPIC Request
A documentation request can look the same, but the contractor that sent it carries different authority. A MAC's request is part of routine claims administration: the same contractor may run a prepayment review or, under CMS's Targeted Probe and Educate program, an educational review tied to a specific error pattern, not a recovery mandate. A UPIC's request carries broader authority. UPICs investigate potential fraud, can place a provider on prepayment review or suspend payments during an investigation, and can refer findings to law enforcement.
A RAC's mandate is narrower than a UPIC's: its contract authorizes it to identify and recoup overpayments and identify underpayments on claims already paid. If it finds credible indications of fraud, it must refer them to CMS and the HHS Office of Inspector General, rather than investigating the fraud, suspending payments, or referring the case to law enforcement itself. Its only outcome is a finding that a paid claim was an overpayment, an underpayment, or correctly paid. When a complex review uses a sample of claims to project a finding across a wider claim universe, the resulting extrapolation can turn a documentation gap on a handful of claims into a demand reaching far beyond the sample reviewed.
The Review Results Letter, the Demand, and Where the Appeal Begins
After a complex review, the RAC sends a review results letter stating what it found: that the claim was paid correctly, that it was underpaid, or that it was an overpayment subject to recoupment. A provider who disagrees can request a discussion with the RAC before the finding becomes final, a step outside the formal appeal process that does not extend any appeal deadline. If the finding is not resolved in discussion, the RAC refers it to the Medicare Administrative Contractor, which issues the formal demand letter stating the amount owed and starting the appeal and recoupment clock.
The formal appeal process has five levels and starts the same place no matter which contractor generated the finding: redetermination by the Medicare Administrative Contractor, then reconsideration before a Qualified Independent Contractor, a hearing before the Office of Medicare Hearings and Appeals, review by the Medicare Appeals Council, and judicial review in federal district court. The filing deadlines are governed by 42 CFR Part 405, Subpart I, and the specific day count for each one is printed on the determination or demand letter; confirm that date rather than assume it.
A RAC's review results letter is not the final word. It is the first deadline in a five-level appeal process that starts with redetermination, not with recoupment.
Why Early Legal Counsel Is Critical
It is critical that healthcare providers promptly retain experienced healthcare defense counsel upon receiving a RAC documentation request, review results letter, or demand for repayment. Early legal intervention can protect the provider's rights, shape the documentation response before a sample-based finding hardens into an extrapolated demand, avoid inadvertent admissions, and allow counsel to communicate with the RAC and the Medicare Administrative Contractor on the provider's behalf. Delaying representation can narrow the provider's options once the appeal clock has already started.
How Health Law Alliance Can Help
Health Law Alliance's attorneys have overseen 2,000+ audits and handled 5,000+ matters, with 25+ years of experience.
If your practice has received a RAC documentation request, a review results letter, or a demand for repayment, contact Health Law Alliance's Medicare audit defense attorneys for a free, confidential consultation before the response deadline passes.
