UPIC Audit Defense for Providers: 5 Steps to Protect Your Practice from Recoupment.

You face heightened scrutiny when billing skin substitutes and other high-cost biologics. The Centers for Medicare & Medicaid Services created Unified Program Integrity Contractor audits to detect fraud, waste, and abuse in Medicare and Medicaid by combining data analysis, medical review, investigations, and site visits (Compliancy Group). A disciplined UPIC audit defense depends on clear documentation, proactive compliance reviews, a structured response plan, and timely legal guidance. Follow these five steps to reduce recoupment risk and defend your practice.

Assess audit scope

UPIC audits are not random. They follow an initial error-identification stage led by Medicare Administrative Contractors and use statistical sampling to estimate error rates without reviewing every claim (BDO Insights). Focus your assessment on:

• High-cost biologics such as amniotic tissue and skin substitutes, which CMS has flagged for administrative review (JD Supra)
• Geographic jurisdictions where UPICs operate, covering Parts A, B, DME, home health, and hospice
• Historical billing patterns, claim denials, and provider enrollment issues
• Any Warning Letters or FDA citations related to misbranding or unapproved marketing claims (Nationwide Healthcare Lawyers)

Strengthen clinical documentation

Accurate, detailed records are your primary defense. UPIC auditors will request:

• Records of conservative wound care prior to applying skin substitutes
• Beneficiary-specific documentation for product selection, amount used, and any wastage
• Justification for non-homologous use under FDA regulation of human cell and tissue products
• Evidence of physician orders and RN care-coordinator reconciliation
• Audit trails for contractor-performed visits and credential files
  Maintaining these documents in alignment with Local Coverage Determinations and Medicare manuals reduces findings of non-medical necessity.

Conduct internal reviews

A robust compliance program mitigates risk before UPIC arrives. You should:

• Schedule quarterly internal audits of billing and coding for wound care products
• Use statistical sampling to mirror UPIC methods and identify error trends
• Verify provider enrollment data and NPI accuracy
• Train staff on coding updates, documentation standards, and audit protocols
• Document each review with findings, corrective actions, and sign-off dates
  Regular self-assessment fosters an organizational culture of integrity and prepares you for formal examinations.

Establish audit response plan

When you receive a UPIC record request, prompt and structured action is critical. Your plan should:

• Designate a single point of contact for all correspondence
• Log dates of notifications, deadlines, and record submissions
• Maintain a secure, indexed repository for electronic and paper records
• Prepare standard cover letters citing request authority and including provider enrollment details
• Build template responses for common data requests, adjusted to case specifics
  Failure to respond by the due date can result in claim denials, penalties, and even revocation of Medicare billing privileges (BDO Insights).

Engage legal counsel early

Legal counsel experienced in UPIC and False Claims Act matters can guide you through complex referral and appeal processes. Early involvement helps you:

• Evaluate findings of overpayment and consider voluntary refunds under the 60-day rule
• Prepare for potential OIG, FBI, or U.S. Attorney referrals when fraud is suspected (Federal Lawyer)
• Manage the five-level appeal stages mirroring Recovery Audit Contractor procedures (Hendershot Cowart P.C.)

Appeal stage overview

Early counsel ensures deadlines are met at each stage and defenses are tailored to your clinical and billing context.

Frequently asked questions

What triggers a UPIC audit?

UPICs follow referrals from Medicare Administrative Contractors and analyze cost trends, unusual billing patterns, and high-risk product categories. Targeted reviews of skin substitutes reflect significant spending growth and potential misclassification.

How long should I retain records?

Medicare requires retention of medical records for at least five years from the date of service, or longer if state law dictates. Include supporting documentation for skin substitute use, conservative treatment, and physician orders.

What happens if I miss the response deadline?

Failure to submit records by the due date can lead to automatic claim denials, financial penalties, and revocation of billing privileges. Document each attempt to comply and seek a deadline extension if necessary.

What are the appeals stages?

You may challenge UPIC findings through five levels: redetermination, reconsideration, administrative law judge hearing, Medicare Appeals Council review, and federal district court. Each stage has strict filing deadlines and procedural rules.

Can voluntary refunds avoid recoupment?

Yes. Under the 60-day rule, returning identified overpayments within 60 days of discovery can limit liability and mitigate False Claims Act penalties. Coordinate repayments through counsel and document the process.