A Unified Program Integrity Contractor (UPIC) investigator arrives at the front desk without notice, shows identification, and asks for the practice manager. What a physician's staff does in the first few minutes can determine whether the matter stays a routine civil review or moves toward a recoupment demand, a payment suspension, or a referral to law enforcement. Handling an unannounced visit well starts with knowing exactly what the investigator can and cannot do.
Who May Conduct the Visit, and Under What Authority
UPIC site visits are conducted by contractor personnel acting under CMS's civil program integrity authority, not by law enforcement. Investigators carry no arrest power and cannot force entry over a provider's objection. Their access rests on the practice's own enrollment agreement: Medicare and Medicaid providers agree, as a condition of program participation, to permit CMS and its designated contractors to conduct unannounced onsite inspections under 42 CFR 424.517 (Medicare) and 42 CFR 455.432 (Medicaid). What compels compliance with a UPIC visit is administrative pressure, not physical force. A provider who turns an investigator away risks denial of an enrollment application or revocation of billing privileges, consequences that reach well beyond the visit itself. For background on how a UPIC investigation differs from a routine Medicare audit, see our overview of UPIC audits.
A UPIC investigator's authority to remain on the premises comes from the practice's enrollment agreement, not from the badge at the door.
Verifying Credentials Before Anything Else
Before granting access beyond the reception area, staff should ask to see photo identification and the written authorization the investigator carries, identifying the contractor, typically Qlarant, CoventBridge Global Solutions, or SafeGuard Services depending on jurisdiction, and the CMS program under which the visit is conducted. One designated staff member, ideally a practice manager or compliance officer, should serve as the single point of contact for the entire visit rather than letting the investigator move freely among clinical staff. That point of contact should call the practice's healthcare attorney immediately and keep counsel reachable for the remainder of the visit.
What to Provide on the Spot, and What Can Wait
Certain items are reasonable to produce immediately: proof that the practice operates at the address on file, current business hours, and confirmation of which providers see patients there. Broader requests, complete medical record productions, billing files, or a signature log spanning multiple years, should be logged in writing and routed through counsel rather than handed over on the spot. Staff are not obligated to sit for an unscheduled interview or answer substantive questions about billing practices without counsel present. A request to schedule the interview once counsel is retained is a lawful and common response, and no employee should offer an opinion about why a claim was billed a certain way or speculate about another employee's conduct.
Preserving a Contemporaneous Record
Immediately after the investigator leaves, the point of contact should write down the investigator's name, contractor affiliation, badge or identification number, the time of arrival and departure, every document reviewed or copied, and the substance of any statements staff made. If the investigator photographed the facility, note what was photographed and when. This contemporaneous record often becomes the most reliable account of the visit weeks later, when the practice is deciding how to respond to a follow-up document request or a target letter. Practices that want to prepare in advance of a visit, rather than react to one already underway, should also review our companion piece on what inspectors review during a UPIC site visit.
Why Early Legal Counsel Is Critical
It is critical that physicians promptly retain experienced healthcare defense counsel upon learning of a UPIC site visit, whether counsel is called in while the investigator is still on premises or immediately afterward. Early legal intervention can protect the practice's rights, ensure that only appropriate information is provided to investigators, avoid inadvertent admissions, and preserve defenses that might otherwise be lost. Delaying representation until after the investigator has left can significantly affect the outcome of the underlying investigation.
How Health Law Alliance Can Help
Health Law Alliance defends physicians and practices through the full course of a UPIC investigation, from the moment an investigator appears unannounced through any resulting audit findings or fraud referral. Our bench includes a former federal prosecutor and a former senior healthcare compliance executive, background that shapes how we advise clients on what to provide during a site visit and what to withhold pending counsel review. If a UPIC investigator has already visited your practice, or you want a plan in place before one does, contact us for a free, confidential consultation.
