UPICs are private companies contracted by CMS to detect, investigate, and deter fraud, waste, and abuse across both Medicare and Medicaid programs. Unlike your Medicare Administrative Contractor (MAC), which processes your claims, UPICs operate under the CMS Center for Program Integrity and have significantly broader investigative authority. They can conduct unannounced site visits, interview staff and beneficiaries, demand medical records, apply statistical extrapolation to project overpayments across your entire claims history, suspend payments during an active investigation, and refer cases directly to the Office of Inspector General (OIG) or Department of Justice (DOJ) for civil or criminal action. A UPIC audit is not a routine billing review — it is a formal federal investigation with serious potential consequences.
UPICs use advanced data analytics and proprietary algorithms to identify billing patterns that deviate from peer group norms — including outlier utilization rates, unusual code distributions, rapid billing increases, or geographic anomalies. Audits can also be triggered by tips, beneficiary complaints, or referrals from MACs, RACs, or state agencies.
If the UPIC finds a high error rate in the sample of claims reviewed, it can extrapolate that rate across all claims in the lookback period — converting a small sample error into a potentially enormous overpayment demand. Challenging extrapolation methodology is a critical component of the defense strategy.
UPICs can recommend immediate payment suspension, revocation of Medicare billing privileges, exclusion from the Medicare program, and referral to law enforcement. Unlike MAC post-pay audits, UPIC findings carry the weight of a federal fraud investigation and must be treated with corresponding urgency.
⚠️ A UPIC Audit Is Not the Same as a RAC or MAC Audit. Routine post-payment reviews by MACs and RACs focus on billing accuracy. UPIC investigations are fraud-focused, carry the authority of federal law enforcement referral, and can result in payment suspension, revocation, exclusion, civil monetary penalties, and criminal prosecution. The stakes are categorically higher — your response must reflect that.
The United States is divided into five geographic UPIC jurisdictions, each managed by a single contracted organization. Your jurisdiction is determined by your practice location. Knowing which UPIC covers your area is essential — all correspondence, documentation submissions, and communications must go directly to your UPIC, not to your MAC.
✅ Critical Submission Rule: When responding to a UPIC ADR, send your documentation directly back to the UPIC — not through your MAC’s portal (e.g., do not use SPOT). Submitting to the wrong contractor will delay your review and may result in automatic claim denial.
Your 30-day response clock begins on the date you receive the ADR. Read every line of the request to understand exactly which claims, dates of service, and document types are being requested. Note the specific return address — it must be the UPIC, not your MAC. Contact Engage Health Solutions the same day if possible.
For every claim and every document category listed in the request, your response package must either include the requested documentation or explicitly state that the item is not applicable to the claim in question — with a brief explanation. Silence or omission on any requested item is treated as a deficiency. A complete, organized response is your most critical obligation.
For each claim, compile all documentation that demonstrates the service met Medicare coverage criteria: physician orders, face-to-face evaluations, progress notes, treatment plans, prior authorizations, clinical assessments, qualifying diagnoses, and any other records that establish medical necessity. This documentation establishes the clinical foundation of your defense.
This is a critical and frequently overlooked step. If a lab result, imaging study, specialist consultation, or prior diagnosis was performed or established before the dates requested in the audit — but directly supports the medical necessity of the treatment provided during the audit period — include it. Coverage criteria often require establishing a clinical baseline that predates the treatment period. Do not limit your documentation only to records within the UPIC’s specified date range.
Present your response in a logical, clearly labeled format — typically organized by claim number or date of service, with each document category clearly separated and indexed. Reviewers process high volumes of records; a well-organized submission is reviewed more accurately and efficiently than one that is disorganized. Label each section and include a cover document or index.
Follow the UPIC’s specified submission instructions exactly — whether by secure fax, encrypted upload portal, or physical mail to the address on the ADR. Retain proof of submission with a timestamp. Engage Health Solutions manages the secure submission process on your behalf as your Authorized Representative of Record (AOR).
If the UPIC issues adverse findings — including claim denials or an extrapolated overpayment determination — you have the right to appeal through the standard Medicare administrative appeals process. Engage Health Solutions represents providers at all four levels with deep expertise in the timelines, standards, and strategies at each stage.
| Level | Deadline | Forum & Reviewer | What Engage Does at This Level |
|---|---|---|---|
| Level 1 — Redetermination | 120 days from denial notice |
Medicare Administrative Contractor (MAC) | Drafts comprehensive redetermination brief; supplements the original record with any additional documentation that strengthens coverage criteria arguments; rebuts UPIC methodology where applicable. |
| Level 2 — Reconsideration | 180 days from redetermination |
Qualified Independent Contractor (QIC) | Prepares detailed QIC reconsideration submission; escalates legal and clinical arguments; introduces policy authorities (LCDs, NCDs, MBPM) not fully developed at Level 1; addresses extrapolation methodology defects if present. |
| Level 3 — ALJ Hearing | 60 days from QIC decision |
Office of Medicare Hearings & Appeals (OMHA) — Administrative Law Judge | Drafts ALJ hearing brief; appears or submits written argument; challenges improper application of MPIM Chapter 13 vs. Chapter 3 §3.6.2.2; challenges extrapolation statistical validity; introduces peer-reviewed clinical literature and expert clinical arguments. |
| Level 4 — MAC Review | 60 days from ALJ decision |
Medicare Appeals Council (DAB/MAC) | Drafts Appeals Council brief identifying ALJ legal and factual errors; applies regulatory and statutory framework arguments; preserves the record for potential Federal District Court review if necessary. |
✅ Recoupment Is Suspended at Levels 1 & 2: Under §1893(f)(2)(A) of the Social Security Act, your MAC cannot recoup the overpayment while a valid Level 1 (Redetermination) or Level 2 (QIC Reconsideration) appeal is pending. Filing promptly at each level is critical to maintaining this protection and preserving cash flow while the appeal proceeds.
Engage Health Solutions provides comprehensive, fully managed UPIC audit defense — from the moment you receive the initial ADR through final appeal resolution. We serve as your Authorized Representative of Record (AOR), meaning we communicate directly with the UPIC and all appeal bodies on your behalf. You never have to navigate CMS processes, submission portals, or appeal timelines alone.
Time is your most critical resource. Contact Engage Health Solutions today — our team will begin organizing your defense immediately and ensure your response meets every deadline and addresses every requirement.