A letter from a Medicare program integrity contractor can land when your team is already underwater on intake and billing. The header may say UPIC, ZPIC, or the name of a CMS contractor such as SafeGuard or Qlarant. The substance is the same: Medicare is questioning whether specific claims were supported by documentation and medical necessity. For home health agency owners and compliance leads, the goal is not to win an argument in the first reply. It is to meet the deadline, send a tight packet that maps to the request, and avoid giving reviewers a reason to expand the review.
UPIC, ZPIC, MAC, and state survey: what is different
UPIC (Unified Program Integrity Contractor) is CMS’s current regional model for fraud, waste, and abuse reviews on Medicare fee-for-service, including home health. ZPIC (Zone Program Integrity Contractor) is the older name; you may still hear it in conversation or on legacy templates. Your MAC processes claims and routine edits; a MAC denial on timely filing or coding is not the same as a UPIC ADR, though both hurt cash flow. State survey enforces licensure and Conditions of Participation on site; citations use a plan of correction, not an ADR cover letter. Keep three folders in your head: billing edits (MAC), integrity reviews (UPIC), and survey (state/CMS). Mixing the response types is how agencies send the wrong documents to the wrong deadline.
What triggers a home health integrity review
UPICs use data analysis and complaints, not random luck. Patterns that show up repeatedly in home health include:
- Face-to-face gaps: missing F2F, F2F outside the window, or F2F that does not support skilled need (see face-to-face requirements).
- Order and chart mismatch: diagnosis or disciplines on the order do not match F2F or OASIS (see order-to-note matching).
- Certification and POC issues: unsigned, late, or inconsistent physician certification (see plan of care requirements).
- OASIS and PDGM: wrong primary diagnosis, admission source, or M0090 date driving incorrect payment (see OASIS QA before lock and PDGM explained).
- Visit notes: skilled need or homebound status not supported in the clinical record (see visit note QA).
- Volume outliers: sudden spikes in episodes, certain diagnoses, or referral sources compared with peers in your region.
Owners who track ADR reason codes monthly often find that two causes account for most letters. Fixing those at intake or pre-lock beats hiring consultants after extrapolation is on the table.
Letter types you should recognize
Additional Documentation Request (ADR): You have a fixed number of days (often 30 to 45) to submit specific documents for named claim(s). Missing the date usually means denial without full appeal rights on the merits. Probe or targeted review: A sample of claims is reviewed; high error rates can lead to extrapolated overpayment demands across hundreds of episodes. Post-payment review: Payment already made is questioned; response quality affects whether the contractor expands the period. Referral for further action: Rare for routine documentation fixes; involves administrator and legal counsel immediately.
First 72 hours after the letter arrives
Assign one response owner the day the letter is opened. Log receipt date, deadline, claim identifiers, and the exact document list quoted in the letter. Pull only those items from the chart. Build an exhibit index (A = F2F, B = order, and so on) before anyone drafts narrative. Run an internal consistency check: SOC date, F2F window, order diagnoses, OASIS primary, and visit notes must tell one timeline. If something is missing, say so in the cover letter and describe the process fix. Do not send the entire medical record unless the letter asks for it. Do not alter, backdate, or create documents.
Clinical staff should not “explain away” problems in a casual email to the contractor. All communication goes through the assigned owner, on letterhead or secure upload, with a copy retained.
Building a defensible response packet
Reviewers are looking for a fast yes/no on each element of eligibility and payment. Your cover letter should be one page and point to page numbers:
- Face-to-face encounter (date and that it is within the applicable window).
- Physician order for home health (date, disciplines, diagnoses).
- Certification and plan of care aligned with the episode.
- OASIS for the relevant assessment (SOC or recert).
- Visit note(s) for the date(s) cited, showing skilled service and homebound status where at issue.
Medicare policy looks at the whole episode record, not the F2F paragraph in isolation. If the contractor denied because “homebound status is not documented in the F2F,” your response should include visit notes and assessment data that substantiate homebound and skilled need, with the cover letter tying each exhibit to the regulation-based element. That is different from arguing in prose without exhibits.
Extrapolation and when to escalate
When a letter mentions statistical sampling, extrapolation, or a large overpayment figure across a date range, stop treating it as a single-claim ADR. Involve your administrator, billing leadership, and qualified counsel or specialist before you submit anything. Preserve all letters and internal emails. Do not discuss the case on unsecured text threads with patient identifiers. Extrapolation can turn a handful of chart errors into a seven-figure demand; the response strategy is not the same as mailing three PDFs.
Prevention beats response
Integrity reviews are a lagging indicator. Leading indicators are your pre-SOC Medicare integrity gate, mandatory pre-bill documentation review, and an ADR log that codes root cause (F2F, order, OASIS, cert, auth). Pair those with the general audit defense playbook for survey plans of correction.
We built a UPIC/ADR response packet builder you can download: letter triage, 48-hour actions, exhibit index, cover letter template, extrapolation red flags, and an ADR log. Use the button below to get it.