The Four “Audit” Worlds — Compared Clearly

Welcome back everybody after the holidays. As a CPA, I have always been uncomfortable when the word “Audit” is used to describe activity since the term audit comes with specific requirements as CPA. 

That being said, let’s talk about the four audit worlds in healthcare and how it may impact you.

1. Unified Program Integrity Contractors (UPICs)

Purpose: Detect and investigate fraud, waste, and abuse in Medicare & Medicaid

Who they work for: The Centers for Medicare & Medicaid Services (CMS)

Who they target: Providers, suppliers, billing companies

What they do:

  • Advanced data mining (peer comparisons, utilization spikes)
  • Deep claim reviews (often 5–10 years back)
  • Medical record requests
  • Extrapolation of overpayments
  • Referrals to OIG / DOJ

Key powers:

  • Recommend payment suspension
  • Recommend revocation or exclusion
  • Build cases for civil or criminal action

Tone: Investigative, adversarial

Translation: “We think something is wrong — prove us wrong.”

2. Office of Inspector General (OIG – HHS)

Purpose: Oversight, enforcement, and law enforcement support

Who they work for: Department of Health & Human Services

Who they target: Providers, vendors, states, CMS itself

What they do:

  • Criminal and civil investigations
  • National audit reports (e.g., Medicare Advantage risk adjustment)
  • Subpoenas and interviews
  • Corporate Integrity Agreements (CIAs)
  • Exclusions from federal programs

Key powers:

  • Can refer cases directly to DOJ
  • Can impose exclusions
  • Can negotiate settlements

Tone: Law enforcement

Translation: “This could end in handcuffs or headlines.”

🔥 Important: UPICs often build the case → OIG prosecutes or escalates it.

3. Government Accountability Office (GAO)

Purpose: Oversight of federal programs, not individual providers

Who they work for: Congress

Who they target: CMS, HHS, states, federal programs

What they do:

  • Policy and performance audits
  • Program effectiveness studies
  • Cost-benefit and efficiency reviews

What they do not do:

  • No provider-level recoupments
  • No payment suspensions
  • No fraud investigations

Tone: Analytical, policy-focused

Translation: “Is the system working the way Congress intended?”

GAO findings often change policy, not prosecute providers.

4. “DOGE Audits” (Let’s Be Precise)

There is no standing federal audit authority called DOGE that:

  • Replaced UPICs
  • Conducted Medicare fraud audits
  • Had statutory program integrity authority

What people call “DOGE audits” were:

  • Informal efficiency reviews
  • Internal data pulls
  • Contract and spending reviews
  • Not audits under GAGAS or CMS rules

Key point: DOGE could not ignore UPICs — and UPICs never answered to DOGE.

Side-by-Side Reality Check:

EntityTargets Providers?Recoups Money?Refers to DOJ?Changes Policy?
UPIC✅ Yes✅ Yes✅ Yes❌ No
OIG✅ Yes✅ Yes✅ Yes⚠️ Sometimes
GAO❌ No❌ No❌ No✅ Yes
“DOGE”❌ No❌ No❌ No❌ No
Why This Confusion Keeps Happening
  • Providers use “audit” as a catch-all word
  • UPICs replaced ZPICs but kept the same fear factor
  • Policy audits (GAO) get mistaken for enforcement
  • Political rhetoric blurred lines between oversight and investigation
Bottom Line
  • UPICs = the hunters
  • OIG = the prosecutors
  • GAO = the architects
  • DOGE = not in the enforcement chain
If a provider receives the following:
  • A UPIC letter → this is serious
  • An OIG subpoena → call counsel immediately
  • A GAO report mention → policy risk, not repayment risk
Facebook
Twitter
LinkedIn

Timothy Powell, CPA, CHCP

Timothy Powell is a nationally recognized expert on regulatory matters, including the False Claims Act, Zone Program Integrity Contractor (ZPIC) audits, and U.S. Department of Health and Human Services (HHS) Office of Inspector General (OIG) compliance. He is a member of the RACmonitor editorial board and a national correspondent for Monitor Mondays.

Related Stories

Leave a Reply

Please log in to your account to comment on this article.

Featured Webcasts

I022426_SQUARE

Fracture Care Coding: Reduce Denials Through Accurate Coding, Sequencing, and Modifier Use

Expert presenters Kathy Pride, RHIT, CPC, CCS-P, CPMA, and Brandi Russell, RHIA, CCS, COC, CPMA, break down complex fracture care coding rules, walk through correct modifier application (-25, -57, 54, 55), and clarify sequencing for initial and subsequent encounters. Attendees will gain the practical knowledge needed to submit clean claims, ensure compliance, and stay one step ahead of payer audits in 2026.

February 24, 2026
Mastering Principal Diagnosis: Coding Precision, Medical Necessity, and Quality Impact

Mastering Principal Diagnosis: Coding Precision, Medical Necessity, and Quality Impact

Accurately determining the principal diagnosis is critical for compliant billing, appropriate reimbursement, and valid quality reporting — yet it remains one of the most subjective and error-prone areas in inpatient coding. In this expert-led session, Cheryl Ericson, RN, MS, CCDS, CDIP, demystifies the complexities of principal diagnosis assignment, bridging the gap between coding rules and clinical reality. Learn how to strengthen your organization’s coding accuracy, reduce denials, and ensure your documentation supports true medical necessity.

December 3, 2025

Proactive Denial Management: Data-Driven Strategies to Prevent Revenue Loss

Denials continue to delay reimbursement, increase administrative burden, and threaten financial stability across healthcare organizations. This essential webcast tackles the root causes—rising payer scrutiny, fragmented workflows, inconsistent documentation, and underused analytics—and offers proven, data-driven strategies to prevent and overturn denials. Attendees will gain practical tools to strengthen documentation and coding accuracy, engage clinicians effectively, and leverage predictive analytics and AI to identify risks before they impact revenue. Through real-world case examples and actionable guidance, this session empowers coding, CDI, and revenue cycle professionals to shift from reactive appeals to proactive denial prevention and revenue protection.

November 25, 2025
Sepsis: Bridging the Clinical Documentation and Coding Gap to Reduce Denials

Sepsis: Bridging the Clinical Documentation and Coding Gap to Reduce Denials

Sepsis remains one of the most frequently denied and contested diagnoses, creating costly revenue loss and compliance risks. In this webcast, Angela Comfort, DBA, MBA, RHIA, CDIP, CCS, CCS-P, provides practical, real-world strategies to align documentation with coding guidelines, reconcile Sepsis-2 and Sepsis-3 definitions, and apply compliant queries. You’ll learn how to identify and address documentation gaps, strengthen provider engagement, and defend diagnoses against payer scrutiny—equipping you to protect reimbursement, improve SOI/ROM capture, and reduce audit vulnerability in this high-risk area.

September 24, 2025

Trending News

Featured Webcasts

Top 10 Audit Targets for 2026-2027 for Hospitals & Physicians: Protect Your Revenue

Stay ahead of the 2026-2027 audit surge with “Top 10 Audit Targets for 2026-2027 for Hospitals & Physicians: Protect Your Revenue,” a high-impact webcast led by Michael Calahan, PA, MBA. This concise session gives hospitals and physicians clear insight into the most likely federal audit targets, such as E/M services, split/shared and critical care, observation and admissions, device credits, and Two-Midnight Rule changes, and shows how to tighten documentation, coding, and internal processes to reduce denials, recoupments, and penalties. Attendees walk away with practical best practices to protect revenue, strengthen compliance, and better prepare their teams for inevitable audits.

January 29, 2026

AI in Claims Auditing: Turning Compliance Risks into Defensible Systems

As AI reshapes healthcare compliance, the risk of biased outputs and opaque decision-making grows. This webcast, led by Frank Cohen, delivers a practical Four-Pillar Governance Framework—Transparency, Accountability, Fairness, and Explainability—to help you govern AI-driven claim auditing with confidence. Learn how to identify and mitigate bias, implement robust human oversight, and document defensible AI review processes that regulators and auditors will accept. Discover concrete remedies, from rotation protocols to uncertainty scoring, and actionable steps to evaluate vendors before contracts are signed. In a regulatory landscape that moves faster than ever, gain the tools to stay compliant, defend your processes, and reduce liability while maintaining operational effectiveness.

January 13, 2026
Surviving Federal Audits for Inpatient Rehab Facility Services

Surviving Federal Audits for Inpatient Rehab Facility Services

Federal auditors are zeroing in on Inpatient Rehabilitation Facility (IRF) and hospital rehab unit services, with OIG and CERT audits leading to millions in penalties—often due to documentation and administrative errors, not quality of care. Join compliance expert Michael Calahan, PA, MBA, to learn the five clinical “pillars” of IRF-PPS admissions, key documentation requirements, and real-life case lessons to help protect your revenue.

November 13, 2025

Trending News

Happy National Doctor’s Day! Learn how to get a complimentary webcast on ‘Decoding Social Admissions’ as a token of our heartfelt appreciation! Click here to learn more →

CYBER WEEK IS HERE! Don’t miss your chance to get 20% off now until Dec. 1 with code CYBER25

CYBER WEEK IS HERE! Don’t miss your chance to get 20% off now until Dec. 2 with code CYBER24