Skip to Main Content

Healthcare audit defense starts with knowing who sent the letter. A RAC or MAC review is usually about billing accuracy, while a UPIC or Qlarant request can be the first step of a fraud inquiry. Read the deadline, preserve every record, and do not send documents until counsel has reviewed what is being asked.

Which Audit Is This? UPIC, RAC, TPE, Qlarant and Commercial Payer Audits Compared

Texas providers receive audit letters from several kinds of reviewers, and the name at the top of the page tells you a lot about the risk. The table below is the quickest way to place your letter.

Who sent it What they look for What it can lead to
Medicare Administrative Contractor (MAC), including Targeted Probe and Educate (TPE) Billing and documentation errors in a sample of claims Denials, education, and after repeated TPE rounds, referral to other contractors
Recovery Audit Contractor (RAC) Improper payments on paid claims, looking back up to three years Overpayment demands and recoupment
Unified Program Integrity Contractor (UPIC) Patterns that suggest fraud, waste or abuse Payment suspension, extrapolated overpayments, revocation, or referral to the HHS Office of Inspector General
Qlarant Program integrity reviews on behalf of CMS; Texas providers often see the name on UPIC records requests The same outcomes as a UPIC review
Texas HHSC Office of Inspector General Texas Medicaid claims, provider eligibility, and fraud indicators Recoupment, payment holds, exclusion, or referral to the Texas Attorney General
Commercial payer or its audit vendor Coding and medical necessity under the payer contract Offsets against future payments and contract termination

If your letter names Qlarant, a Texas Qlarant audit lawyer can confirm which contract the review falls under and what powers come with it. If the letter comes from a UPIC or mentions a site visit, interviews, or a payment suspension, treat it as a potential investigation rather than a routine audit. That difference shapes every step that follows, and our Texas Medicare audit defense guide walks through the Medicare side in more depth.

What to Do in the First 10 Days After the Letter Arrives

Most audit damage happens early, through missed deadlines or rushed record productions. A calm first ten days protects the practice.

  1. Log the date the letter arrived and calendar the response deadline. A typical additional documentation request gives 45 days, but confirm the date on your letter.
  2. Identify the reviewer and the claims, patients and dates of service being requested.
  3. Issue a hold so no one edits, deletes or “completes” records for those encounters. Late entries made after an audit request are a serious problem.
  4. Pull the full record for each claim, including orders, signatures, time statements and supporting test results.
  5. Call counsel before you produce anything if the reviewer is a UPIC, Qlarant, HHSC-OIG or a law enforcement agency. A Texas UPIC audit attorney or Medicare audit defense lawyer should see the request before any records leave the practice.
  6. Run a privileged internal review of the sampled claims so you know what the records show before the auditor does.

If the request is a ZPIC or UPIC letter, our article on responding in the first 48 hours sets out the immediate steps.

Texas Medicaid Audits: HHSC Office of Inspector General and Contractor Reviews

Texas Medicaid audits run on a separate track from Medicare. The HHSC Office of Inspector General reviews claims, can recoup overpayments, and can place a payment hold when it finds a credible allegation of fraud. Providers usually have the chance to present their position at an informal resolution meeting, and many disputes can then be taken to a contested case hearing at the State Office of Administrative Hearings.

Texas also has its own fraud statute, the Texas Medicaid Fraud Prevention Act, which the Texas Attorney General can use alongside federal law. A Medicaid audit that turns up a pattern can therefore lead to state and federal exposure at the same time. Keep your Medicaid enrollment details current as well, because enrollment problems often surface during an audit. Our guide to Texas Medicaid provider enrollment covers the basics.

How Extrapolation Turns a Small Sample Into a Large Overpayment Demand

Many audits review a statistical sample of claims and then apply the error rate to the whole universe of similar claims. A sample of 30 or 50 claims can produce a demand for hundreds of thousands of dollars.

Medicare contractors may extrapolate only when there is a sustained or high level of payment error, or when education has failed to fix the problem. That limit, and the statistical method itself, are where defenses usually start:

  • Was the universe of claims defined correctly?
  • Was the sample truly random, and large enough for the stated confidence level?
  • Were claims denied for reasons that do not apply to the rest of the universe?
  • Can individual denials be reversed, which changes the error rate for everything else?

An independent statistician’s review is often worth the cost when the extrapolated figure is large.

When an Audit Turns Into a Fraud Investigation

Some signs mean the matter has moved beyond billing accuracy:

  • A payment suspension or payment hold
  • Requests to interview staff, or agents arriving at the practice
  • A subpoena or civil investigative demand from the Department of Justice or the Texas Attorney General
  • Questions about referral sources, marketing companies, or payments to other providers

At that point the questions are no longer only about documentation. The Anti-Kickback Statute, the Stark Law and the False Claims Act may all be in play, and statements made to an auditor can be used later. Stop informal conversations and route every contact through counsel.

Appeals, Corrective Action Plans and Repayment Options

Medicare overpayment appeals move through five levels, and the early deadlines matter most:

  1. Redetermination by the MAC: file within 120 days, and within 30 days if you want to stop recoupment while it is decided.
  2. Reconsideration by a Qualified Independent Contractor: file within 180 days, and within 60 days to keep recoupment on hold.
  3. Hearing before an Administrative Law Judge
  4. Review by the Medicare Appeals Council
  5. Federal district court

RAC demands follow the same appeal path, and working with a Texas RAC recovery audit attorney early keeps the 30-day window open. Alongside an appeal, a written corrective action plan shows the reviewer that the practice has fixed the cause: updated templates, coding education, and a schedule of internal audits. Where an overpayment is owed, extended repayment plans are available, and the federal 60-day rule requires providers to report and return overpayments they identify themselves. A compliance program built around these steps is the best protection against the next letter, as our article on compliance plan essentials explains.

Quick Reference

  1. Who sent the letter? Name the reviewer before you do anything else.
  2. What is the deadline? Calendar it the day the letter arrives.
  3. Are records locked? No late entries to requested encounters.
  4. Is this an investigation? UPIC, Qlarant, OIG, subpoenas and site visits mean yes.
  5. Is there extrapolation? Challenge the sample and the method.
  6. Do you need to appeal? File inside 30 or 60 days to protect cash flow.

Frequently Asked Questions

Is a UPIC audit the same as a RAC audit?

No. A RAC looks for improper payments on paid claims. A UPIC investigates potential fraud, waste and abuse and can suspend payments or refer a provider to law enforcement, so a UPIC request carries more risk.

How long do I have to respond to a Medicare records request?

Additional documentation requests commonly allow 45 days, but the deadline on your letter controls. Missing it usually means the claims are denied for lack of documentation.

Can I add notes to a record after I receive an audit letter?

No. Adding or changing entries for requested encounters after an audit request can look like falsification. Produce the record as it existed and explain gaps separately through counsel.

Can a Texas Medicaid audit stop my payments?

Yes. The HHSC Office of Inspector General can place a payment hold when it finds a credible allegation of fraud. Providers can contest the hold, but the response window is short.

Do I need a healthcare audit defense lawyer for a routine audit?

Not always. A routine MAC or commercial payer review can often be handled by your billing team. Bring in a healthcare audit defense lawyer when the reviewer is a UPIC or OIG, when extrapolation is used, or when the demand is large.

This article is general information about Texas healthcare law and is not legal advice. Reading it does not create an attorney-client relationship with Dike Law Group PLLC.

author avatar
Doris Dike Founder & Healtcare Attorney
Doris Dike, Esq., founder of Dike Law Group. Dike Law Group specializes in legal services for the healthcare industry, with a focus on MedSpa compliance, MSO structures, and regulatory matters for medical practices. Key search terms highlight their expertise in telehealth, IV hydration clinics, and medical contract review for entrepreneurs.