There’s been a noticeable uptick in Medicare audit activity involving RACs, UPICs, MACs/TPE, and related contractors over the last several months. The biggest themes are:
- heavier use of data analytics/outlier detection,
- expanded medical necessity reviews,
- more aggressive documentation scrutiny,
- and growing focus on high-cost or high-utilization specialties.
There has been increased CMS audit pressure in 2026 enforcement activity in 2026, especially around:
- wound care / skin substitutes,
- pain management,
- orthopedics,
- hospice,
- chronic care management,
- diagnostic imaging,
- rehab/post-acute care,
- and repetitive outpatient procedures.
RAC vs UPIC: Know Which Monster Is Under the Bed
RAC = “We Think You Were Paid Wrong”
RACs are mostly focused on:
- overpayments,
- underpayments,
- documentation gaps,
- and billing accuracy.
Think of RACs as: “Show us the chart.”
UPIC = “We Think Something Weird Is Happening”
UPICs are a different level entirely.
They focus on:
- fraud,
- waste,
- abuse,
- payment suspensions,
- extrapolation,
- and referrals to law enforcement.
Think of UPICs as: “Why are you billing like this… and why are you sweating?”
A lot of providers apparently still treat all audits the same, but CMS contractors are increasingly separating:
- educational reviews (TPE/MAC),
- payment recovery reviews (RAC),
- and integrity/fraud investigations (UPIC).
Wound care / skin substitute audits are exploding. This is probably the hottest audit area right now.
Multiple recent sources describe:
- intensified UPIC and RAC audits of skin substitutes
- focus on LCD compliance
- scrutiny of medical necessity,
- invoice/purchasing reconciliation,
- and tracking of wound measurements/progress documentation.
Common triggers being discussed:
- high-cost graft utilization,
- excessive application frequency,
- documentation not matching LCD criteria, (but remember the Supreme Court has said that you cannot be penalized for violating an LCD)
- poor progress documentation,
- and mismatches between inventory and billing.
MAC/TPE activity still active.
MAC-led Targeted Probe and Educate (TPE) reviews continue to expand for providers showing:
- high denial rates,
- unusual utilization patterns,
- or documentation deficiencies.
CMS is leaning more heavily on:
- AI,
- predictive analytics,
- benchmarking against peers,
- and utilization trend analysis before audits are initiated.
The operational trend is “documentation alignment.” A repeated phrase across recent compliance discussions is that auditors are now looking for alignment amongst diagnosis, treatment plan, frequency, conservative treatment history, patient response, and LCD criteria. (But, remember, the Supreme Court holds that a provider cannot be penalized for not adhering to an LCD alone).
In other words, even clinically appropriate care is getting denied if the chart doesn’t clearly connect all the dots. But passing a RAC or CERT audit does not protect a provider from later UPIC scrutiny, because UPICs operate under a different fraud/waste/abuse framework.
CMS and HHS announced a broader anti-fraud initiative in early 2026 that included:
- expanded AI/data analytics,
- aggressive provider screening,
- DMEPOS enrollment freezes,
- increased payment suspensions,
- and more public disclosure of revoked billing privileges.
Reported enforcement metrics included:
- 5,586 provider revocations,
- billions in suspended payments,
- and hundreds of fraud referrals
One of the more notable recent operational actions:
UPIC contractor Qlarant reportedly suspended payments to approximately 447 California hospices and multiple home health agencies based largely on discharge/utilization analytics. I’ve been asked to present a germane webinar for Riverside County Medical Association and the San Bernardino County Medical Society at the end of May.
CMS contractors are increasingly using statistical outlier analysis first, then demanding records later. That is very similar to how extrapolation cases often begin. There is expanded retroactive revocation authority
CMS finalized/enforced broader retroactive revocation powers affecting providers who fail to report adverse actions timely, submit inaccurate enrollment information, or lose prescribing authority/DEA status.
The concern from compliance attorneys is that retroactive revocation can create overpayment exposure, reopening risk, and extrapolated repayment demands over long claim periods.
The extrapolation trend is AI and analytics-driven overpayment estimation.
Recent compliance reporting indicates UPICs and RACs are increasingly relying on:
statistical sampling, utilization outlier comparisons, peer benchmarking, and predictive analytics to justify large, extrapolated overpayment calculations.
A recurring issue in 2026:
Providers clearing one audit layer (like MAC pre-claim review or RCD) are still getting hit later by: UPIC, CERT, or payment integrity reviews. Be prepared!