SafeGuard Services UPIC Audits: What Providers Should Know

A physician, group practice, or home health agency that receives a letter from SafeGuard Services LLC is dealing with a Unified Program Integrity Contractor, the Medicare and Medicaid contractor CMS assigns to detect fraud rather than ordinary billing errors. That distinction matters from the first page: a UPIC letter rarely opens an ordinary documentation review. It can be the visible start of a records request that leads to a site visit, a prepayment review placement, or a payment suspension tied to a fraud referral already under investigation by federal law enforcement.

SafeGuard Services Covers the Northeast and Southeast UPIC Jurisdictions

CMS divides Medicare and Medicaid program integrity oversight into five geographic UPIC jurisdictions, each staffed by a single contractor. SafeGuard Services LLC holds two of them: the Northeastern jurisdiction, covering Maine, Vermont, New Hampshire, Massachusetts, Rhode Island, Connecticut, New York, Pennsylvania, New Jersey, Delaware, Maryland, and the District of Columbia, and the Southeastern jurisdiction, covering Alabama, Florida, Georgia, North Carolina, South Carolina, Tennessee, Virginia, West Virginia, Puerto Rico, and the U.S. Virgin Islands. A provider billing Medicare or Medicaid from any of these states or territories can be reviewed by SafeGuard Services rather than the contractors that cover the rest of the country. The scope of a SafeGuard Services review follows the same framework CMS applies to every UPIC audit, regardless of which contractor issues the letter.

SafeGuard Services Opens Most Reviews With a Records Request

The review typically begins with an Additional Documentation Request, often called an ADR, asking for the medical records, billing documentation, and supporting materials behind a specific set of claims. A UPIC's response window is shorter than what other Medicare contractors allow: providers generally have 30 calendar days to submit the requested records, not the 45 days given for a standard Medicare Administrative Contractor review. Missing that deadline typically results in an automatic denial of the claims at issue, and SafeGuard Services can then extrapolate that denial across a larger sample if the review expands into a post-payment audit. Providers who receive a records request from SafeGuard Services should treat it as the first substantive step in the audit and respond within the deadline with complete, organized documentation.

Site Visits and Prepayment Review Can Follow the Records Request

SafeGuard Services investigators may also conduct an announced or unannounced site visit to confirm that a practice operates at the address on file, that staffing matches what was billed, and that equipment or services billed to Medicare or Medicaid were actually delivered. A site visit that raises concerns can lead CMS to place the provider on prepayment review, meaning every claim submitted after the review begins must be manually approved before payment issues. Prepayment review can stop a practice's cash flow before any final determination on the underlying claims. Providers who understand what a site visit involves are better positioned to avoid the missteps that turn a routine verification into a prepayment review placement.

Fraud Referral Can Lead to Payment Suspension Under 42 CFR 405.371

When a SafeGuard Services review develops what CMS calls a credible allegation of fraud, the contractor can refer the matter to the HHS Office of Inspector General or the Department of Justice and recommend that CMS suspend Medicare or Medicaid payments under 42 CFR 405.371. A suspension can take effect before any criminal charge is filed. Under 42 CFR 405.374, the provider has at least 15 days from the suspension notice to submit a rebuttal statement, and under 42 CFR 405.375 the contractor then has 15 days to consider that statement and issue a determination. CMS must revisit the suspension roughly every 180 days, and a suspension that runs past 18 months generally requires a formal referral to the OIG or a written request from the Department of Justice to continue.

A payment suspension under 42 CFR 405.371 can freeze a provider's Medicare revenue for months before any fraud allegation is proven.

Why Early Legal Counsel Is Critical

It is critical that physicians and other providers promptly retain healthcare defense counsel upon receiving a SafeGuard Services letter, audit notice, records request, or other government inquiry. Early legal intervention can protect the provider's rights, ensure appropriate responses to government requests, avoid inadvertent admissions, preserve relevant defenses, and allow counsel to communicate with investigators on the provider's behalf. Delaying legal representation can significantly affect the outcome of a matter and expose the provider to unnecessary risk.

How Health Law Alliance Can Help

Health Law Alliance provides UPIC audit defense for physicians and other providers under review by SafeGuard Services and other CMS contractors nationwide, covering records requests, site visits, prepayment review, and payment suspension proceedings. If your practice has received a SafeGuard Services letter, contact us for a free, confidential consultation.