When a UPIC Audit Becomes a Law Enforcement Referral

A Unified Program Integrity Contractor audit does not stay on its own schedule. When a UPIC reviewer decides the billing pattern under review looks like more than an honest mistake, the matter can cross into what CMS calls a credible allegation of fraud, and CMS's own rules then require the contractor to notify HHS-OIG. For a physician, that shift changes everything. The same records produced for an extrapolated overpayment demand can become evidence in a parallel criminal or civil False Claims Act investigation, and the response the practice gives during the audit is read with that referral in mind.

The Credible Allegation Threshold

UPICs conduct data-driven claims analysis under CMS's Medicare Program Integrity Manual and are required to refer every case of suspected fraud to HHS-OIG, regardless of dollar amount or subject matter. The trigger is what CMS regulations call a credible allegation of fraud, the point at which a UPIC's suspicion becomes formal. Once CMS or its contractor consults with HHS-OIG and, where appropriate, DOJ, and determines that threshold is met, Medicare payments to the physician can be suspended under 42 CFR 405.371, in whole or in part, without the notice period an ordinary recoupment gets. The suspension can remain in place while the investigation proceeds, subject to review every 180 days, and generally may not continue past 18 months without a resolution or a CMS extension.

How Referrals Reach OIG and DOJ

A UPIC's referral obligation does not end with HHS-OIG. A memorandum of understanding between HHS-OIG and the FBI permits a UPIC to refer the same case to both agencies at once, with HHS-OIG given the opportunity to accept or decline the matter before the FBI proceeds independently. Referrals commonly extend further, to state Medicaid Fraud Control Units, the DEA when controlled substances are billed, and multi-agency task forces when fraud may span more than one program. The pattern that most often produces a referral compounds across two points in the audit: how a physician responds to the UPIC's records request and what UPIC investigators find during a site visit; an unexplained non-response, or a response that leaves the documentation gap open, reads as concealment rather than error.

Parallel Proceedings Multiply the Exposure

Once a UPIC audit produces a credible allegation of fraud, the civil and criminal tracks can run at the same time. The extrapolated overpayment demand from the audit remains a civil recoupment matter, but the same claims data can support a civil False Claims Act case under 31 U.S.C. § 3729, or a criminal referral under the federal healthcare fraud statute, 18 U.S.C. § 1347. A physician who receives a target letter after a UPIC audit is being told, formally, that DOJ considers the physician a target of a federal criminal investigation built on the same claims the UPIC reviewed. Statements, certifications, and records the practice produced in the audit response do not disappear once the audit closes. They travel into whichever proceeding follows.

Every UPIC audit response should be drafted as though a federal prosecutor, not just an auditor, will read it.

Draft the Response With a Prosecutor in Mind

Because a UPIC's file can become the referral package HHS-OIG and DOJ rely on to open an investigation, the response should be built for that possibility from the first records request, not after a referral is made. That means documenting the clinical basis for every claim under review, avoiding characterizations of a billing error as broader than the specific claim at issue, and controlling who at the practice speaks directly with UPIC investigators during a site visit. A physician's informal explanation, given without counsel present, can become the evidence the government uses to argue the physician knew the billing was improper, the element that turns a civil audit into a criminal referral.

Why Early Legal Counsel Is Critical

It is critical that physicians promptly retain experienced healthcare defense counsel upon receiving a UPIC audit notice, records request, or site visit. Early legal intervention can protect the physician's rights, ensure appropriate responses to the UPIC's requests, avoid inadvertent admissions that could support a fraud referral, preserve relevant defenses, and allow counsel to communicate with the UPIC and, if the matter is referred, with HHS-OIG or DOJ on the physician's behalf. Delaying legal representation can significantly affect the outcome of a matter and expose the physician to unnecessary risk.

How Health Law Alliance Can Help

Health Law Alliance represents physicians from the moment a UPIC audit notice arrives through any resulting referral to HHS-OIG or DOJ, building the audit response, managing the site visit, and, where a credible allegation of fraud has already been made, coordinating the civil and criminal defense together. If your practice has received a UPIC audit notice, a records request, or a payment suspension, contact us for a free, confidential consultation.