A Unified Program Integrity Contractor (UPIC) audit runs on several clocks: a 30-day window to produce records, a review period with no fixed outer limit, a demand letter that starts a recoupment countdown, and a five-level Medicare appeal that can take years to reach a hearing. A provider who tracks only the first deadline misses the ones that decide the outcome.
The Records Request and the Review Period
The audit typically opens with an additional documentation request. A provider has 30 calendar days from the date on the letter to produce records, 15 days shorter than the 45-day window a Medicare Administrative Contractor, Recovery Audit Contractor, or Supplemental Medical Review Contractor allows for the same request. Missing that date, absent a contractor-accepted good-cause reason, results in the claims being denied outright. A UPIC may also conduct an unannounced site visit, with no fixed statutory timing. A missing signature log entry found here often becomes the anchor exhibit for everything that follows. Once records are in, the review itself has no universal deadline; CMS guidance sets a marker only when a payment suspension applies, requiring the UPIC to complete review and calculate any overpayment within 180 days of the suspension, extendable once by another 180 days.
The Overpayment Determination and the Recoupment Clock
Current CMS guidance routes the finding to the Medicare Administrative Contractor, not the UPIC itself, for the demand letter. Once that letter issues, two clocks start. Interest accrues in 30-day increments if the balance is unpaid by day 30. Recoupment, a direct withholding against future claim payments, begins on the 41st day unless the provider has paid in full, secured a repayment schedule, or filed a valid redetermination request by day 30. Documentation gaps found during review can also prompt a referral toward a target letter ahead of the demand letter.
The 30-day mark, not the 120-day appeal deadline, is the decision point that actually controls the money. File a redetermination request by day 30 and recoupment does not start. File on day 45 and the appeal survives, but the withholding runs anyway.
The Medicare Appeal: Levels 1 Through 3
Level 1 redetermination is filed with the Medicare Administrative Contractor within 120 days of the demand letter; the contractor decides within 60 calendar days of a timely request, extendable up to 14 days per additional evidence submission. An unfavorable redetermination moves to Level 2 reconsideration before a Qualified Independent Contractor, filed within 180 days, decided within another 60 calendar days. Filing the reconsideration within 60 days of the redetermination stops recoupment again while the QIC works. Level 3 is a hearing before an Administrative Law Judge at the Office of Medicare Hearings and Appeals (OMHA), available once the amount in controversy meets the CMS-adjusted 2026 threshold of $200, a bar an extrapolated UPIC demand clears easily. The regulation targets a 90-day decision, and OMHA generally meets it on the priority docket reserved for beneficiary appeals under a federal settlement. Provider and supplier appeals sit on a separate, non-priority track, where OMHA's own workload reporting has repeatedly shown average waits stretching past three years.
Levels 4 and 5, and the Law Enforcement Exit
A disputed ALJ decision moves to Level 4 review by the Medicare Appeals Council, then to Level 5 judicial review in federal district court, available at a 2026 threshold of $1,960. Not every UPIC audit reaches these levels administratively. UPICs are contractually obligated to refer suspected fraud to HHS-OIG, which may refer the matter on to the Department of Justice or the FBI, and that referral can happen the moment a fraud indicator surfaces, not only after a final overpayment determination. When it does, the matter leaves the administrative track for a civil or criminal investigation on its own schedule. A sustained clean-claims record can also earn an earlier exit from prepayment review.
Why Early Legal Counsel Is Critical
It is critical that providers promptly retain experienced healthcare defense counsel upon receiving a UPIC records request, site visit notice, or overpayment determination. Early legal intervention can protect appeal rights, ensure the redetermination request is filed within the 30-day window that stops recoupment, and preserve challenges to the sampling and extrapolation methodology. Delaying representation past the 30-day or 120-day deadlines can significantly affect the outcome and expose the provider to recoupment a timely filing would have prevented.
How Health Law Alliance Can Help
Health Law Alliance defends providers at every stage of a UPIC audit: the records request, the review period, the overpayment determination, and, where warranted, the Medicare appeal itself. Our bench includes a former federal prosecutor and a former senior PBM executive, backgrounds that shape how a defense is built against a UPIC's own timeline. If your practice has received a UPIC audit notice at any stage, contact us today for a free consultation.
