The counsel threshold: fraud language, extrapolation, SIU, UPIC

The short answer

Not every audit rises to the level of needing counsel, and treating each one as a crisis wastes money a solo practice does not have. The honest test is the nature of the review, not its mere existence. A routine, error-focused audit is often handled with clean documentation and a calm reply; a fraud-flavored one is not. The triggers below mark the line, and any single one of them is enough to weigh counsel seriously.

The routine tier you can usually handle

Some reviews are built to be worked without a lawyer. Targeted Probe and Educate is explicitly educational — 20 to 40 claims per round, teaching between rounds, escalation only after three failed rounds 1Ref 1Centers for Medicare & Medicaid Services (2026).Targeted Probe and Educate (TPE).That Targeted Probe and Educate is an educational review (20-40 claims per round, education between rounds, escalation only after three failed rounds) — the routine tier a clinician can often handle without counsel.. A Recovery Audit Contractor's demand is error-focused and comes with a full five-level Medicare appeals process you can pursue on documentation 2Ref 2Centers for Medicare & Medicaid Services (2026).Medicare Fee for Service Recovery Audit Program.That a Recovery Audit Contractor's demand is error-focused and carries a five-level Medicare appeals process a provider can pursue on documentation — part of the routine tier below the counsel threshold.. Even a missing signature can often be cured by a formal attestation in review 3Ref 3Centers for Medicare & Medicaid Services (2023).Complying with Medicare Signature Requirements.That Medicare requires services to be authenticated by signature and that a missing signature can be cured by attestation in review — an example of a routine documentation issue resolvable without counsel.. A small commercial takeback letter demanding a refund on a handful of overpayments usually sits here too. Clean records and calendared deadlines carry most of these.

The triggers that move an audit to counsel

A short list of features moves an audit out of the routine tier and toward the counsel threshold. You do not need all of them present; one is enough to stop and reconsider how you respond. Read every letter and request against this list before you send a single record, because the strategy changes the moment one appears:

• Fraud language. The words fraud, abuse, false claims, knowing, or credible allegation of fraud in any letter.
• Extrapolation. The payer projects a sample's error rate across the whole universe of claims, turning a handful of errors into a demand spanning years.
• SIU or UPIC involvement. A Special Investigations Unit or a Unified Program Integrity Contractor — not a RAC or a claims examiner — is the entity contacting you.
• Payment suspension. A suspension of payments is threatened or already imposed while the review proceeds.
• A subpoena, CID, or law-enforcement contact. A subpoena, a civil investigative demand, or contact from the OIG, the Department of Justice, or a state Medicaid Fraud Control Unit.
• An under-oath or recorded interview. A request to interview you under oath or on the record.
• A demand you cannot absorb. A repayment figure large enough to threaten the practice's survival.
• Records questioned. Any suggestion that the records themselves were altered or fabricated.

Fraud language: read the letter for the words that matter

The single fastest tell is the vocabulary of the letter. Routine audits speak of overpayment, medical necessity, and documentation; a fraud inquiry uses fraud, abuse, false claims, knowing, and credible allegation of fraud. Those words are not decoration — they signal a different legal track with different stakes, including potential exclusion and law-enforcement referral. Highlight them on the first read, and let their presence rather than your optimism set the response. A letter that reads like a billing correction and a letter that reads like an accusation call for different opening moves.

Extrapolation: when a small sample becomes a big number

Extrapolation is the trigger most likely to catch a solo practice off guard. Instead of demanding repayment on the specific claims it reviewed, the payer applies the error rate from a sample to the entire population of similar claims, and a dozen flagged notes become a demand across years of billing. The math can turn a modest documentation problem into an existential one, which is exactly why an extrapolated demand warrants counsel who can challenge the sampling method and the statistics behind it, not just the individual claims.

SIU and UPIC are not a RAC

Who is asking matters as much as what they ask. A Recovery Audit Contractor and a claims examiner sit in the error-focused tier you can often work with documentation. A Special Investigations Unit or a program-integrity contractor does not — the SIU call and the question of how serious a UPIC investigation is both land in fraud territory, where cooperation and self-protection have to be balanced deliberately. If the entity contacting you is one of those, treat it as a strong signal to get advice before you respond rather than after.

What the right counsel actually does

Engaging counsel is not about hiding; it is about matching the payer's specialization with your own. A healthcare-regulatory or fraud-defense attorney does specific work a solo clinician cannot easily do alone: challenge the statistical validity of an extrapolated sample, manage communications so an offhand remark does not become an admission, negotiate the scope of records produced, and advise whether a self-disclosure is wiser than waiting to be pursued.

Counsel also reads the letter for what it does not say — whether a civil demand carries criminal exposure, whether a payment suspension is coming, whether the matter has already been referred onward. Those are judgment calls with a license and a livelihood attached. Understanding what counsel actually contributes is how a solo practice decides whether a given audit clears the threshold, instead of defaulting to either panic or false confidence.

What to do first — and how to engage counsel

Regardless of whether a trigger is present, the same first moves apply: preserve every record for the named claims exactly as it stands, calendar the deadline, and never edit or backdate a note. If a trigger is present, add counsel to that sequence — specifically a healthcare-regulatory or fraud-defense attorney rather than a general practitioner, because the terrain is specialized and the stakes are steep.

Those stakes are why the specialized help earns its cost. A fraud finding can end in exclusion from federal health programs, after which no federal program may pay for a service you furnish 4Ref 4HHS Office of Inspector General (2026).Exclusions Program.That OIG can exclude an individual from federal health programs, after which no federal program payment may be made for services they furnish — the exclusion stake that justifies specialized counsel when a trigger appears.. And if your own review surfaces conduct that implicates federal fraud laws, OIG's self-disclosure protocol is a defined path — one counsel can help you weigh against a simple refund 5Ref 5HHS Office of Inspector General (2026).Health Care Fraud Self-Disclosure Protocol.That OIG maintains a self-disclosure protocol for conduct implicating federal health-program fraud laws — a defined path counsel can help weigh against a simple refund when a review surfaces a real problem.. Move in order: preserve and freeze the records, get the scope and deadline in writing, engage the right counsel if a trigger is present, then produce only what was requested, logged, keeping your own duplicate of everything you send.