UPIC Audits Targeting Wound Care: Your Defense Plan

If your wound care practice bills Medicare, the Unified Program Integrity Contractor (UPIC) for your jurisdiction can open an investigation without warning. Unlike a Targeted Probe and Educate review or a Recovery Audit Contractor claim, a UPIC audit is enforcement-first. Understanding how UPIC audits work, what triggers them, and how to respond can be the difference between a documentation correction and a federal referral.

Why Wound Care Is a Top UPIC Audit Target

CMS wound care spending has been a consistent priority for program integrity contractors since wound care ranks among the highest-dollar specialties in the Medicare fee-for-service system. The combination of high-cost skin substitutes, complex debridement hierarchies, and medical necessity documentation requirements creates billing patterns that algorithmic screening tools flag as statistical outliers.

CMS contracts with five regional UPICs covering all Medicare jurisdictions. Each contractor analyzes claims data across their region using statistical modeling that identifies providers billing significantly outside peer norms. A wound care practice with high skin substitute utilization per beneficiary, or debridement frequency that exceeds regional averages, can surface in this data without any complaint or referral having been filed.

Wound care billing patterns that have drawn sustained UPIC attention include:

Skin substitute claims — especially amid ongoing policy scrutiny under the 2026 flat-rate changes
Home-based and mobile wound care with limited supporting documentation
High-volume NPWT billing
Debridement billed at the excisional level without individualized wound bed descriptions
Claims with documentation that appears templated rather than patient-specific

If your practice operates in any of these categories, UPIC awareness is not optional.

How a UPIC Investigation Differs from Other Medicare Audits

Most wound care providers are familiar with TPE (Targeted Probe and Educate) reviews, which are educational in design — the MAC reviews a sample of claims, identifies errors, and provides the provider an opportunity to correct before escalating. CERT audits measure systemwide error rates. Neither of these is an enforcement action.

What Sets UPIC Apart from RAC and TPE

UPICs are investigative, not educational. There is no corrective action plan before a UPIC opens. The key distinctions:

Authority. UPICs can suspend Medicare payments to a provider — without advance notice — if they determine a credible allegation of fraud exists. Payment suspension can remain in effect throughout an active investigation.

Scope. UPICs coordinate with the Office of Inspector General, the Department of Justice, and state Medicaid fraud units. A UPIC investigation can become a False Claims Act case, with civil penalties of up to three times the amount billed fraudulently per claim.

Methods. UPICs can conduct unannounced site visits, interview staff and patients, and — in some circumstances — issue subpoenas for records.

No contingency. Unlike RACs, UPICs are not paid on a contingency basis. They have no financial incentive tied to denial volume. Their mandate is fraud and abuse identification, which means they pursue cases they believe are substantiated rather than chasing claim count.

Understanding this distinction is critical: if you receive a UPIC records request, treat it with the seriousness of a legal notice, not an ordinary audit.

Common UPIC Triggers for Wound Care Practices

UPIC investigations can originate from several sources:

Data analysis. Statistical models compare your billing to peers in your specialty, region, and patient population. A practice billing skin substitutes at multiples of the regional mean for wound care providers will likely surface in this screening.

Hotline complaints. CMS maintains a fraud reporting hotline. Disgruntled employees, competitors, patients, or referral sources can file a complaint. UPICs are required to evaluate credible complaints.

MAC and CMS referrals. If your TPE review shows persistent high error rates, your MAC can refer the case to the UPIC. A pattern of failed appeals can also generate a referral.

Supply chain investigations. If a skin substitute distributor, DME supplier, or billing company associated with your practice is under investigation, your claims can be identified through that investigation even if your records are clean.

For wound care specifically, the highest-risk billing patterns include:

Skin substitute applications on patients without documented vascular workup, wound size progression, or prior standard-of-care failure
Debridement billed on dates with no corresponding wound measurement or wound bed description
Multiple wounds billed per visit without individual documentation for each wound
NPWT billing without evidence of weekly reassessment or dressing change documentation
Route or scheduling anomalies — distances between provider address and patient address that are inconsistent with a viable daily schedule

Maintaining LCD-compliant documentation for every encounter is the foundational defense against both routine audits and UPIC investigations. The local coverage determinations define medical necessity; documentation that mirrors LCD criteria demonstrates your clinical rationale in the language auditors use to evaluate your records.

What to Expect If UPIC Contacts Your Practice

A UPIC investigation typically begins with a written records request. This request will specify:

A list of beneficiaries and dates of service
The records required — progress notes, physician orders, referrals, photographs, supply logs
A response deadline, typically 30 to 45 days

Do not ignore this request. Non-response accelerates the investigation and removes any opportunity to clarify documentation before findings are finalized.

Steps to take immediately:

Engage a healthcare attorney. A UPIC contact is not the time for an unassisted response. Legal counsel can ensure your submission is structured correctly and that you do not inadvertently produce documents beyond the scope of the request.
Audit the requested records internally before submission. Understand what the record shows — and what it does not show — before it leaves your practice.
Do not alter records. Any modification to records after receiving a UPIC request — even an intended clarification — can be characterized as obstruction. Addenda must be clearly dated, identified as addenda, and authored by the clinician who originally documented the visit.
Respond completely and on time. Partial responses and missed deadlines are treated as adverse indicators.
Prepare staff for a site visit. UPICs may conduct unannounced visits during an active investigation. Staff should know to contact you and your attorney before providing any information to investigators.

If a payment suspension is issued, you have the right to request dismissal of the fraud allegation. This process is time-sensitive — legal representation is essential from the moment a suspension notice arrives.

Building a UPIC-Resistant Documentation Practice

The most durable UPIC defense is a documentation system that produces individualized, clinically coherent records for every patient encounter.

Wound measurements must be consistent. Length, width, and depth at every visit. Photographs that correspond to your measurements. Wound bed description — tissue type, exudate volume, periwound condition — that supports the debridement level billed.

Medical necessity must be patient-specific. Template language that appears identical across multiple patient records is a UPIC red flag. Each note should reflect the individual patient's wound status, treatment response, and the clinical reasoning behind your plan.

Skin substitute selection requires explicit justification. Why this product for this patient on this date? The LCD criteria, wound type, wound dimensions, and prior standard-of-care failure should all be explicit in the record — not assumed.

Supply and product logs must match claims. If you bill for a skin substitute, your inventory records should reflect that specific product was applied to that specific patient on that date. Discrepancies between billing and supply logs are a primary fraud indicator in UPIC investigations involving skin substitutes.

A TPE-proofed documentation workflow designed to withstand MAC scrutiny will also hold up under most UPIC records reviews, since UPIC findings frequently center on the same documentation deficiencies that MACs flag during TPE.

Key Takeaways

UPICs are enforcement contractors with authority to suspend payments, coordinate with DOJ and OIG, and conduct site visits — a UPIC contact is fundamentally different from a routine MAC audit.
Wound care practices are frequent UPIC targets due to high-dollar skin substitute billing, debridement complexity, and home-based service delivery.
Data analysis, hotline complaints, MAC referrals, and supply chain investigations can all trigger a UPIC investigation without any billing error on your part.
If you receive a UPIC records request, engage a healthcare attorney immediately and respond completely within the deadline.
Patient-specific, LCD-compliant documentation for every encounter is your most durable protection against UPIC scrutiny — long before any investigation begins.