UPIC Audits Explained: The Fraud-Focused Medicare Contractor

A UPIC audit is a fraud investigation, not a payment review, and a physician who receives one is already being screened for potential referral to law enforcement. A Unified Program Integrity Contractor, or UPIC, is a CMS program integrity contractor assigned to detect, investigate, and refer suspected fraud, waste, and abuse in Medicare and Medicaid. That mandate sets a UPIC audit apart from the routine claims processing a physician's Medicare Administrative Contractor performs, or the payment-accuracy sampling a Recovery Audit Contractor conducts. A UPIC letter arrives because a billing pattern, complaint, or referral has already flagged the practice for investigation, not because a single claim needs a second look.

UPIC Mandate vs RAC and MAC Audits

Medicare's audit contractors are not interchangeable. A Medicare Administrative Contractor (MAC) processes claims and performs routine prepayment and post-payment review as part of ordinary claims administration. A Recovery Audit Contractor (RAC) looks backward at paid claims for coding errors and other improper payments, and is paid on a contingency tied to the amounts it recovers. A UPIC operates under a different mandate: CMS assigns it to detect, deter, and investigate fraud, waste, and abuse, not to test payment accuracy. A UPIC can also request that CMS impose a payment suspension while its investigation is open, unlike the MAC and RAC tracks. A MAC or RAC finding typically ends in a repayment demand and an appeal. A UPIC finding can end there, or it can end somewhere far more serious.

The Fraud-Screening Orientation

UPICs consolidated a function CMS previously split across several contractor types, including the Zone Program Integrity Contractor (ZPIC), the Program Safeguard Contractor, and the Medicaid Integrity Contractor programs. That consolidation reflects a shift toward centralized fraud screening across Medicare Parts A and B, durable medical equipment, home health and hospice, and Medicaid, carried out across five regional UPIC jurisdictions. A UPIC's tools include data analytics run against a practice's billing pattern, unannounced site visits, beneficiary interviews, and coordination with the Medicare-Medicaid data match program. Qlarant UPIC Audits: Jurisdiction and Process covers how one jurisdiction runs this process in practice. This infrastructure exists to build a fraud case, not to catch an isolated coding mistake, and an investigator's file is built with that outcome in mind from the first records request.

A UPIC letter means the matter is already being evaluated for referral to law enforcement, not simply reviewed for a billing error.

What a UPIC Letter Signals

A records request, an unannounced site visit, or a payment suspension notice from a UPIC signals that CMS or its contractor has already moved past the question of whether an error occurred and is evaluating intent and pattern. Physicians commonly treat a UPIC letter the way they would treat a routine documentation request from their MAC. That response overlooks the fact that a UPIC's file may already be shared with the Department of Justice, the Department of Health and Human Services Office of Inspector General (HHS-OIG), or a state Medicaid Fraud Control Unit before the physician ever receives the letter. What a physician says in an interview, and how a practice characterizes its own billing pattern in a written response, becomes part of that file. Responding to a UPIC Records Request sets out the documentation and deadline requirements a UPIC letter typically imposes.

Possible Outcomes of a UPIC Referral

A UPIC investigation can conclude in more than one way, and more than one outcome can apply to the same matter. The contractor can recommend a standard recoupment of overpaid amounts, request a payment suspension while the investigation continues, recommend revocation of Medicare billing privileges, or refer the matter for civil or criminal prosecution. A civil referral typically proceeds under the False Claims Act; a criminal referral proceeds through the Department of Justice. Because these outcomes are not mutually exclusive, a physician can face a payment suspension, a recoupment demand, and a parallel criminal referral arising from the same claims.

Why Early Legal Counsel Is Critical

It is critical that physicians promptly retain experienced healthcare defense counsel upon receiving a UPIC records request, site visit notice, or payment suspension notice. Early legal intervention can protect the physician's rights, ensure appropriate responses to government requests, avoid inadvertent admissions, preserve relevant defenses, and allow counsel to communicate with investigators on the physician's behalf. Delaying legal representation can significantly affect the outcome of a matter and expose the physician to unnecessary risk.

How Health Law Alliance Can Help

Health Law Alliance represents physicians and practices through every stage of UPIC audit defense, from the first records request through payment suspension appeals and any referral to the Office of Inspector General or Department of Justice. If a practice has received a UPIC letter, site visit notice, or payment suspension notice, contact Health Law Alliance for a free, confidential consultation.