ZPICs and UPICs: Medicare’s High-Risk Program Integrity Investigations
Not every Medicare audit presents the same level of risk. While many providers are familiar with Recovery Audit Contractors (RACs) and routine claims reviews, investigations conducted by Zone Program Integrity Contractors (ZPICs) and their successors, Unified Program Integrity Contractors (UPICs), are fundamentally different. These audits are not primarily designed to recover overpayments. Instead, they focus on detecting fraud, waste, and abuse within federal healthcare programs and frequently serve as the gateway to civil enforcement actions and criminal referrals.
For California healthcare providers, receiving a notice from a UPIC—or, in older cases, encountering issues involving a ZPIC investigation—should be treated as a serious legal matter. These investigations often involve extensive record reviews, data analysis, provider interviews, and coordination with federal law enforcement agencies.
At the Law Offices of Art Kalantar, we represent healthcare providers throughout California facing Medicare and Medi-Cal audits, program integrity investigations, False Claims Act allegations, and criminal healthcare fraud cases. Understanding how ZPICs and UPICs operate is essential to protecting your practice, your professional license, and your future.
From ZPICs to UPICs
The Centers for Medicare & Medicaid Services (CMS) originally relied on Zone Program Integrity Contractors to identify suspected Medicare fraud and refer significant cases to law enforcement. In 2016, CMS replaced the ZPIC program with the Unified Program Integrity Contractor program.
UPICs assumed the responsibilities previously performed by ZPICs while expanding their mission. Rather than focusing solely on Medicare, UPICs investigate suspected fraud, waste, and abuse involving both Medicare and Medicaid. This unified approach allows investigators to examine billing activity across multiple federal healthcare programs, making it easier to identify broader patterns of suspected misconduct.
Although ZPICs no longer conduct new investigations, healthcare providers and legal professionals still frequently use the term “ZPIC audit” because many enforcement practices originated under that program.
The Mission of UPICs
Unlike contractors that primarily identify payment errors, UPICs are charged with protecting the integrity of federal healthcare programs. Their responsibilities include identifying suspected fraud, conducting investigations, preventing improper payments, educating providers regarding compliance, referring appropriate cases to law enforcement, and coordinating with other government agencies involved in healthcare fraud enforcement. Because fraud detection—not simply payment accuracy—is the primary objective, UPIC investigations often involve a much broader examination of a provider’s operations than traditional Medicare audits.
How Providers Become UPIC Targets
UPIC investigations may begin for a variety of reasons. Advanced data analytics frequently identify providers whose billing patterns differ significantly from similarly situated providers. Whistleblower complaints from employees or competitors may also trigger investigations. Previous audit findings, referrals from Medicare Administrative Contractors or Recovery Audit Contractors, patient complaints, and information developed during unrelated investigations can all lead to UPIC involvement.
In many cases, providers are unaware they have attracted government attention until they receive a request for records or another formal inquiry. Importantly, being selected for investigation does not necessarily mean fraud occurred. However, it does mean investigators believe the available information warrants closer examination.
Investigative Tools Used by UPICs
UPICs possess broad authority to investigate suspected fraud and abuse. Their investigations commonly involve medical record reviews, claims analysis, provider enrollment verification, site visits, interviews with employees and beneficiaries, and examinations of financial relationships. Investigators may compare billing practices against peer providers, evaluate documentation supporting medical necessity, and analyze referral patterns over extended periods.
UPICs also coordinate extensively with other government entities. Information developed during an investigation may be shared with the Office of Inspector General (OIG), the Department of Justice (DOJ), the Federal Bureau of Investigation (FBI), the Centers for Medicare & Medicaid Services, and state Medicaid agencies. Because multiple agencies may become involved, providers should view every communication during a UPIC investigation as potentially significant.
Common Areas of Focus
UPIC investigations often concentrate on services and billing practices that historically have generated significant enforcement activity. Common areas of scrutiny include durable medical equipment claims, home health services, hospice care, laboratory testing, behavioral health services, telehealth, physician services, physical therapy, ambulance transportation, and high-cost outpatient procedures.
Investigators also examine issues such as medically unnecessary services, billing for services not rendered, upcoding, duplicate claims, improper modifier usage, kickback arrangements, identity theft, and documentation that does not support reimbursement. Rather than focusing on isolated claims, UPICs frequently evaluate whether billing practices reflect a broader pattern of conduct.
Why UPIC Investigations Are Different
Providers often underestimate the significance of receiving a UPIC audit notice because it resembles other Medicare correspondence. The critical difference is that UPIC investigations are designed to identify suspected fraud rather than simply recover overpayments. Investigators may already be evaluating whether evidence supports referral for civil enforcement or criminal prosecution. As a result, routine communications with investigators, document production decisions, and explanations regarding billing practices may later become important evidence in enforcement proceedings. The earlier a provider recognizes the seriousness of the investigation, the more opportunities exist to protect legal rights and develop an effective defense strategy.
Potential Consequences of a UPIC Investigation
UPIC investigations can lead to a wide range of administrative, civil, and criminal consequences. Administrative outcomes may include prepayment review, payment suspension, provider revocation, or substantial overpayment determinations. Civil consequences may involve False Claims Act litigation, exclusion from Medicare and Medicaid, civil monetary penalties, and negotiated settlements. In more serious cases, investigators may refer matters to federal prosecutors for criminal charges involving healthcare fraud, conspiracy, false statements, wire fraud, money laundering, or violations of the Anti-Kickback Statute. Not every investigation results in prosecution, but providers should assume that significant findings may receive review by multiple enforcement agencies.
Responding to a UPIC Investigation
A prompt and strategic response to a UPIC investigation is essential. Providers should carefully review every request for records, preserve potentially relevant documents, and avoid altering or discarding information after learning of an investigation. Internal assessments can help identify documentation issues or compliance concerns before records are produced. Communications with investigators should be accurate, deliberate, and coordinated. Providers should avoid speculation or attempting to explain issues without first understanding the scope of the investigation and the applicable legal issues. Equally important is recognizing that what appears to be a routine records request may actually be part of a broader fraud investigation already underway.
The Value of Early Legal Representation
Because UPIC investigations frequently precede civil or criminal enforcement, involving experienced legal counsel at the earliest possible stage can be critical. An attorney can evaluate the scope of the investigation, coordinate document production, protect privileged communications, prepare providers for interactions with investigators, and develop strategies aimed at reducing the likelihood of escalation.
The Law Offices of Art Kalantar represents California healthcare providers throughout every phase of Medicare program integrity investigations. Whether responding to a UPIC records request, defending against False Claims Act allegations, or representing clients in criminal healthcare fraud prosecutions, our firm works to protect providers from the significant consequences these investigations can bring.
Frequently Asked Questions
What is a UPIC?
A Unified Program Integrity Contractor is a CMS contractor responsible for investigating suspected fraud, waste, and abuse involving Medicare and Medicaid.
What happened to ZPICs?
Zone Program Integrity Contractors were replaced by UPICs in 2016. UPICs perform many of the same investigative functions while covering both Medicare and Medicaid programs.
Can a UPIC investigation lead to criminal charges?
Yes. UPIC investigations may result in referrals to the Department of Justice or other law enforcement agencies if investigators believe evidence supports criminal prosecution.
How is a UPIC audit different from a RAC audit?
RACs primarily identify improper payments, while UPICs focus on investigating suspected fraud, waste, and abuse that may result in civil or criminal enforcement.
Should I contact an attorney after receiving a UPIC records request?
Yes. Because UPIC investigations often involve potential fraud allegations, obtaining legal guidance early can help protect your rights and reduce the risk of costly mistakes.
Protect Your Practice During a Program Integrity Investigation
A UPIC investigation is far more than a routine Medicare audit. It may represent the beginning of a complex fraud investigation with potentially significant administrative, civil, and criminal consequences. Responding strategically from the outset can help protect your practice, your professional reputation, and your future.
If you have received a UPIC records request, are responding to a Medicare fraud investigation, or believe your practice has become the subject of a program integrity review, the Law Offices of Art Kalantar can help. Our firm represents healthcare providers throughout California and beyond in Medicare audits, program integrity investigations, False Claims Act litigation, criminal healthcare fraud cases, and more. Contact us today to discuss your situation and develop a comprehensive legal strategy.
