The defense begins with your document request response.
Medicare audits arrive from five primary CMS contractor types: UPICs (Unified Program Integrity Contractors), RACs (Recovery Audit Contractors), MACs (Medicare Administrative Contractors), SMRCs (Supplemental Medical Review Contractors), and CERT (Comprehensive Error Rate Testing). Medicaid audits add a parallel state-level track: Medicaid Fraud Control Units (MFCUs), state Medicaid agencies, and Medicaid managed care organization (MCO) audits.
The contractor identity shapes the procedural framework, the statistical methodology, and the realistic exposure. The audit type (prepayment review, postpayment review, focused medical review) determines whether cash flow stops, whether extrapolation produces a multi-million dollar recoupment demand, and whether the matter is heading toward a False Claims Act referral.
Health Law Alliance defends Medicare and Medicaid audits across pharmacies, physicians, hospitals, home health, hospice, DME, and wound care providers nationwide. Our defense framework runs from the document request response through the full 5-level Medicare appeal track ending in federal district court, plus state-level Medicaid administrative appeals.
.png)
Prepayment review can stop cash flow on every new claim within days. Postpayment review with statistical extrapolation turns a 30-claim sample into a multi-million dollar recoupment demand across the full claim population. The contractor's referral authority to HHS-OIG, the DOJ Civil Division, and the local U.S. Attorney converts what looks like a billing audit into a False Claims Act or criminal healthcare fraud matter. The defense posture has to address all three from the document request response forward.
Medicare prepayment review means CMS pauses payment on every new claim from the provider until the contractor reviews and approves it. Reviews can take 60 to 180 days per claim. Multi-year prepayment review under recent CMS frameworks can extend that posture for 18 to 36 months. Most pharmacies and practices cannot operate through extended prepayment review without external financing or a substantial cash reserve. The defense focuses on getting off prepayment review as quickly as the substantive defense allows, often through a sustained low error rate showing or a corrective action plan that the contractor accepts as resolution.
Medicare postpayment review uses statistical extrapolation. The contractor reviews a sample (often 30 to 50 claims), calculates an error rate, and extrapolates the error rate across the full claim population for the audit window. A $50,000 sample finding can produce a $5M to $20M recoupment demand after extrapolation. CMS withholds payment on incoming claims to recoup the demand, which compounds the cash flow exposure. The largest dollar defense in most postpayment matters is the statistical methodology challenge: sample frame defects, sample size deficiencies, RAT-STATS application errors, or Cochran formula objections.
Medicare contractors refer matters to HHS-OIG, the DOJ Civil Division, and the local U.S. Attorney when the audit findings produce evidence of intent rather than billing errors. The civil FCA referral runs through DOJ Civil Division and may surface as a Civil Investigative Demand. The criminal referral runs through the local U.S. Attorney or DOJ Fraud Section and may surface as a federal grand jury subpoena or a target letter. The audit is rarely the end of the matter when the findings cross the referral threshold. Coordinating Medicare audit defense with parallel FCA and criminal defense from day one is essential because evidence in one track is admissible in the others.
Medicare audits operate under the CMS Program Integrity Manual and the Medicare Claims Processing Manual, with their own statistical methodology, their own appeal track, and their own referral authority to HHS-OIG and DOJ. Defense counsel that treats a Medicare audit as a routine billing dispute misses the procedural posture and the realistic exposure.
Our bench includes a former Assistant U.S. Attorney with DOJ Director's Award recognition and senior healthcare-company counsel. We have defended Medicare audits across UPIC, RAC, MAC, SMRC, and CERT review, produced statistical extrapolation reductions in postpayment matters, and coordinated Medicare audit defense with parallel False Claims Act and criminal exposure. This is the protocol.
From the day the contractor's notice arrives: identify the contractor type (UPIC, RAC, MAC, SMRC, CERT), evaluate the audit type (prepayment review, postpayment review, focused medical review, automated review), the claim window covered, and the document request as written. Most document requests can be narrowed through written response on scope and timing. We conduct a privileged pre-production review of every document before it leaves the practice, which preserves defenses for the appeal track and avoids producing material that becomes evidence in any subsequent FCA or criminal matter.
When the contractor issues findings: respond on the substantive defense for each flagged claim and challenge the statistical methodology where postpayment extrapolation is used. The methodology challenge focuses on sample frame defects, sample size deficiencies, RAT-STATS application errors, and Cochran formula objections. A successful methodology challenge at this stage often reduces the recoupment demand by a meaningful percentage before the matter reaches the formal appeal track.
The Medicare appeal track requires the right record at every level. We draft and file the redetermination request to the MAC within the 120-day window, prepare the QIC reconsideration with the substantive and statistical record, and present to the Administrative Law Judge with witness preparation, expert testimony where applicable, and a procedural record built to support the ALJ's decision. The record built at the redetermination and QIC stages is the record the ALJ reviews; defense counsel that skips ahead loses the procedural foundation.
When Medicare audit findings produce a referral to HHS-OIG, the DOJ Civil Division, or the local U.S. Attorney's office: civil FCA defense (CID response, intervention or declination engagement, Rule 9(b) motion practice) and criminal defense (target letter response, attorney proffer, grand jury subpoena management) run in parallel with the Medicare appeal. Our former-federal-prosecutor bench coordinates the Medicare appeal, the civil FCA matter, and the criminal track as one matter to avoid locking in admissions in one forum that hurt the defense in another.
CMS contractors use data analytics, qui tam referrals, and inter-contractor cross-referrals to identify providers for review. The following triggers are the most common predicates for a Medicare audit document request, prepayment review notice, or focused medical review.
Outcomes are summarized for confidentiality. Client names, precise geography, and identifying facts are redacted.
Recoupment Reversed
Provider received a postpayment review finding with statistical extrapolation across a multi-year claim window. Health Law Alliance challenged the contractor's sample frame, sample size methodology, and RAT-STATS application errors at the redetermination and QIC reconsideration stages. The extrapolated recoupment demand was reduced to the actual sample-claim amount, a small fraction of the original number. The procedural record built at the redetermination level supported the QIC's reduction without requiring an ALJ hearing.
DOJ Declination
Healthcare company received a Medicare contractor referral that produced a Civil Investigative Demand from the DOJ Civil Division covering alleged $6M in false claims. Health Law Alliance produced documents under a negotiated rolling schedule, presented the factual rebuttal of the government's theory in a meeting with the line attorneys, and prepared a written submission addressing the materiality and falsity defects. DOJ declined both civil intervention and criminal referral. Pre-unsealing engagement, when the matter surfaces through other channels, is the highest-leverage window in any FCA matter.
Indictment Dismissed
Solo physician faced a multi-count federal indictment that included healthcare fraud counts following an upstream Medicare contractor referral to the local U.S. Attorney. Health Law Alliance filed responsive motions, built the procedural record, and challenged the government's theory through pre-trial motion practice; the indictment collapsed before trial. The Medicare-audit-to-criminal escalation risk is real in matters where the contractor's findings include intent evidence; a unified defense across the appeal track and the parallel criminal track is the most efficient way to avoid the criminal exposure.
Attorney advertising. Prior results do not guarantee a similar outcome. Case summaries are generalized for confidentiality and are not a substitute for legal advice on your specific matter.
Anthony's background as a former federal prosecutor and executive for major healthcare companies provided a level of expertise and insight that made all the difference. His deep understanding of healthcare law, particularly in litigation and compliance matters, helped navigate complex legal issues with ease.
Seven questions that come up on almost every first call. The answers below are general; specific situations require privileged consultation.
Before you produce documents to the contractor, before the sample is drawn for extrapolation, before the matter escalates to a DOJ Civil Division referral, have a privileged conversation with attorneys who defend Medicare audits across UPIC, RAC, MAC, SMRC, and CERT review. Free, confidential, no retainer.
