Two Medicare contractors can send a physician practice a records request that looks nearly identical on the page, and the resemblance ends there. The Supplemental Medical Review Contractor (SMRC), currently Noridian Healthcare Solutions, runs nationwide, topic-driven medical reviews on claims CMS has flagged for coverage or coding vulnerabilities. The Unified Program Integrity Contractor (UPIC), by contrast, exists to find fraud, and its file can move from a documentation request to a payment suspension and a law enforcement referral without warning. A practice that treats both notices the same way misjudges the exposure on at least one of them.
What SMRC Review Actually Targets
SMRC review is a nationwide, project-based audit. CMS assigns the contractor specific topics drawn from its own data analysis, CMS's error-rate testing program (CERT), professional organizations, and federal oversight agencies such as the OIG and GAO. Every claim pulled into an active SMRC project shares the same coding or coverage vulnerability, regardless of which practice billed it. The review is post-payment: Noridian requests records through an additional documentation request (ADR), typically giving the provider 45 days to respond, then evaluates whether the claims complied with coverage, coding, payment, and billing requirements. If Noridian finds an improper payment, it reports the finding to CMS, and the Medicare Administrative Contractor carries out the standard overpayment recovery process.
What a UPIC Review Is Built to Find
A UPIC operates on a different mandate. It is the only Medicare contractor that also monitors Medicaid, including the Medicare-Medicaid data match program, and its job is to detect, develop, and stop fraud, waste, and abuse rather than to check a claim sample against a coding rule. A UPIC can run pre-payment medical review alongside post-payment audits, place a practice on prepayment review, conduct provider interviews and unannounced site visits, and impose a payment suspension while the investigation continues. Where a review finds a pattern consistent with intentional misconduct, the UPIC can refer the matter to the Department of Justice, HHS-OIG, or a state Medicaid Fraud Control Unit for civil or criminal prosecution. Explained in detail here.
SMRC review checks whether a claim followed the rule. UPIC review checks whether the billing pattern was honest, and it carries a law enforcement referral pathway that SMRC review does not.
The Recoupment Path Both Share
Both contractors can turn a documentation request into a large repayment demand through the same mechanism: statistical sampling. When either contractor bases a finding on a sample of claims, it can extrapolate the error rate across the full claims universe the sample was drawn from, converting a handful of flagged claims into a six- or seven-figure recoupment. Both SMRC and UPIC overpayment findings proceed through the same five-level Medicare appeal process, beginning with redetermination by the MAC and reconsideration by a Qualified Independent Contractor. The extrapolation methodology itself, not just the underlying claims, is a frequent and often successful point of challenge at those first two levels.
Why the UPIC Track Carries the Higher Stakes
The practical difference between the two contractors is what happens alongside the paperwork. An SMRC finding stays on the administrative track: overpayment, appeal, resolution. A UPIC finding can run on two tracks at once, with the administrative recoupment moving forward while the fraud investigation develops in parallel, potentially involving a target letter or a grand jury subpoena. A physician who responds to a UPIC ADR the way counsel would respond to an SMRC ADR, treating it purely as a documentation exercise, can hand an investigator admissions that a fraud case is built around. The site-visit component alone changes the calculus; how UPIC field visits actually run is worth understanding before the inspector arrives.
Why Early Legal Counsel Is Critical
It is critical that physicians and practice owners promptly retain experienced healthcare defense counsel upon receiving an SMRC additional documentation request, a UPIC audit notice, or any other government inquiry. Early legal intervention can protect the practice's rights, ensure appropriate responses to the contractor's requests, avoid inadvertent admissions, preserve every available defense, and let counsel communicate with the contractor on the practice's behalf. Delaying representation can significantly affect the outcome and expose the practice to unnecessary risk, particularly when the contractor's mandate includes a fraud referral pathway.
How Health Law Alliance Can Help
Health Law Alliance defends physicians and healthcare practices against both SMRC medical review and UPIC audits, from the initial documentation request through appeal and, where a UPIC review escalates, the parallel fraud investigation. Our bench includes a former federal prosecutor and a former senior healthcare-industry executive, a background that shapes how each contractor's file is built and where it can be challenged. If your practice has received an SMRC or UPIC notice, contact us for a free, confidential consultation.
