The Medicare Program Integrity Manual: Chapters That Govern an Audit

The Medicare Program Integrity Manual (Pub. 100-08) is the instruction set the Centers for Medicare & Medicaid Services (CMS) issues to its own contractors, not a statute or a regulation a court enforces directly. Medicare Administrative Contractors (MACs), Recovery Audit Contractors (RACs), the Supplemental Medical Review Contractor (SMRC) and Unified Program Integrity Contractors (UPICs) all work from this manual when they request records, conduct medical review, open a benefit integrity investigation or apply statistical sampling to project an overpayment. A provider who receives a records request, a UPIC audit notice or an extrapolated demand is reading the output of a chapter in this manual, whether the letter says so or not. Health Law Alliance represents providers at every stage of that process, from the first document request through appeal.

What the Manual Is and Is Not

CMS publishes the manual as internet-only guidance to its own contractors, not as a rule for the public, and it does not go through the notice-and-comment rulemaking that produces a federal regulation. Under 42 CFR 405.1062, an administrative law judge hearing a Medicare appeal is not bound by CMS program guidance such as program memoranda and manual instructions, but gives that guidance substantial deference where it applies, and must explain the reasons for declining to follow it. The regulation describes the manual's weight; it does not predict the outcome of any specific appeal.

The Chapters a Provider Under Audit Actually Reads

The current manual holds more than a dozen chapters on the CMS Internet-Only Manuals page, written mostly for contractor staff. Four matter most to a provider under audit. Chapter 1, "Overview of Medical Review (MR) and Program Integrity (PI) Programs," frames how a contractor's medical review and program integrity functions relate; a separate article covers who actually performs that review. Chapter 4, "Program Integrity," defines the Unified Program Integrity Contractor structure and a UPIC's benefit integrity work, including coordination with a MAC and the HHS Office of Inspector General; a separate article covers which of those actions need CMS's own sign-off. A referral that escalates further may bring a target letter, signaling a federal prosecutor is now involved, outside this manual entirely.

Chapter 8, "Administrative Actions and Sanctions and Statistical Sampling for Overpayment Estimation," holds the instructions a contractor follows when it draws a statistical sample and extrapolates an overpayment across a claims universe; where that methodology breaks down is addressed separately. Chapter 10, "Medicare Enrollment," governs enrollment actions, including revocation, that can follow or accompany an audit (enrollment instructions moved out of Chapter 15 in 2021, now "Reserved for Future Use"). The same documentation standard underlies a provider's signature requirements and the signature log a reviewer asks for.

Finding the Version in Force Through CMS Transmittals

The manual is not static. CMS revises individual chapters by transmittal, each with its own revision number and issue date. On the date this article was checked against the CMS Internet-Only Manuals page, Chapter 4 was on Revision 13879 (issued July 23, 2026), Chapter 8 on Revision 13762 (issued May 27, 2026), and Chapter 10 on Revision 13717 (issued July 8, 2026). A provider challenging a contractor's action needs the version in force on that date, not today's. Each chapter lists its own transmittal history, archived by CMS.

Using Manual Departures in a Response or Appeal

A contractor's own departure from the manual is a real argument, not an automatic win. Chapter 8 says so about its own sampling rules.

Failure by a contractor to follow one or more of the requirements contained herein does not necessarily affect the validity of the statistical sampling that was conducted or the projection of the overpayment.

An appeal that wants to use a manual departure has to connect it to something concrete: an actual error in the sampling methodology that changed the overpayment amount, a UPIC referral that skipped a required coordination step, or an enrollment revocation taken without the required notice. A recoupment built on a flawed sample is worth challenging on the sample itself, not on the manual citation alone.

It is critical that providers promptly retain experienced healthcare defense counsel upon receiving a UPIC audit notice, a Chapter 8 records request, or any other Medicare program integrity action. Early legal intervention can identify which chapter and which transmittal actually governed the contractor's conduct, preserve the arguments available from a manual departure, and allow counsel to communicate with the contractor or CMS on the provider's behalf.

Health Law Alliance's attorneys have overseen 2,000+ audits and handled 5,000+ matters, with 25+ years of experience.

Health Law Alliance represents providers against UPIC benefit integrity investigations, Chapter 8 statistical sampling and extrapolation, and the enrollment actions that can follow a program integrity referral. If a contractor's audit, sample or referral looks like it departed from its own manual, contact us for a free, confidential consultation to review the specific chapter and transmittal involved.