Medicare payments for remote patient monitoring (RPM) rose more than 20-fold between 2019 and 2022, from $15 million to more than $300 million, as RPM enrollment grew more than tenfold in the same period, per a September 2024 Office of Inspector General (OIG) report. The same report found 43 percent of RPM enrollees did not receive all three billed components and recommended CMS monitor the companies that bill for RPM. That growth is why Unified Program Integrity Contractors (UPICs) now audit RPM billing, opening with a records request whose response decides whether the matter closes or grows into a recoupment demand reaching beyond the claims reviewed.
How a UPIC Selects RPM Claims
UPIC leads include its own data analysis as well as reactive referrals. CMS's Program Integrity Manual directs UPICs to mine claims data for inexplicable aberrancies, providers whose RPM volume, data-day counts, or billed minutes depart sharply from their peers. Other leads arrive reactively, through a Medicare Administrative Contractor referral, a beneficiary complaint, or an OIG hotline tip. Several contractors hold the UPIC umbrella contracts, including Qlarant and SafeGuard Services. RPM is now one more claim type inside UPIC audit defense, alongside the durable medical equipment and home health claims these contractors have long reviewed.
What an Additional Documentation Request Covers
Once a UPIC opens a file, it sends an additional documentation request (ADR) naming the claims and date range, with its own response deadline, not one assumed from a prior audit. For RPM, the ADR typically reaches every billed component: device setup (CPT 99453), device supply (CPT 99454 for 16 to 30 days of transmitted data in 30 days, or the lighter-tier CPT 99445, added for CY2026, for 2 to 15 days), and treatment management (CPT 99457 for the first 20 minutes of practitioner time monthly, CPT 99458 for each additional 20 minutes). CMS also requires electronic rather than self-reported data, consent, an established patient relationship, and a monitored acute or chronic condition. Auxiliary staff may provide remote monitoring services, including treatment management, under the general supervision of the billing practitioner, but only one physician or non-physician practitioner eligible to bill evaluation and management services may bill for a patient's monitoring in a 30-day period. HLA's guide to responding to a UPIC additional documentation request covers assembling that record.
Vendor-Driven Billing Draws Separate Scrutiny
OIG's finding on incomplete billed components targets the monitoring companies that supply devices and billing support, not only the ordering practice. A UPIC looks for the same signal: a vendor billing identical setup and supply charges across a whole patient panel regardless of whether treatment management followed. A signature log naming the ordering practitioner is what distinguishes that pattern from an audit finding.
Extrapolation Turns a Sample Into a Larger Demand
When a sample of RPM claims shows an overpayment, CMS's Program Integrity Manual permits the contractor to calculate the error rate through statistical sampling for overpayment estimation and apply it to the full universe of claims under review, not only the claims examined. A UPIC may reopen a claim within one year without cause, or within four years for good cause, so an RPM records request covering several past years is not unusual. The projected overpayment, not the sample's actual overpayment, becomes the demand.
An additional documentation request for remote patient monitoring claims can be the first step toward an extrapolated demand, and the record a practice produces in that first response shapes everything that follows.
The Appeal Path After a UPIC Finding
A UPIC refers its overpayment finding to the Medicare Administrative Contractor, which sends the formal demand and starts the appeal clock: redetermination, reconsideration before a Qualified Independent Contractor, an ALJ hearing, Medicare Appeals Council review, and judicial review, each governed by 42 CFR Part 405, Subpart I, with its own deadline on the determination letter. A UPIC can also refer a case to law enforcement; a practice that receives a target letter after an RPM audit is in a different posture than one working the appeal alone.
Why Early Legal Counsel Is Critical
It is critical that practices ordering or billing remote patient monitoring retain experienced healthcare defense counsel promptly upon receiving a UPIC document request, payment suspension notice, or demand letter. Early legal intervention can shape the documentation response before a sample finding hardens into an extrapolated demand and preserve the practice's appeal rights at each level. Delaying representation can narrow a practice's options once the appeal clock has started.
How Health Law Alliance Can Help
Health Law Alliance's attorneys have overseen 2,000+ audits and handled 5,000+ matters, with 25+ years of experience. The firm represents physician practices and monitoring companies in defending RPM billing, including UPIC document requests, payment suspensions, and the appeals that follow an overpayment determination. If your practice has received a records request or a demand letter tied to RPM billing, contact Health Law Alliance's remote patient monitoring audit defense attorneys for a free, confidential consultation.
