The Four “Audit” Worlds — Compared Clearly

Welcome back everybody after the holidays. As a CPA, I have always been uncomfortable when the word “Audit” is used to describe activity since the term audit comes with specific requirements as CPA. 

That being said, let’s talk about the four audit worlds in healthcare and how it may impact you.

1. Unified Program Integrity Contractors (UPICs)

Purpose: Detect and investigate fraud, waste, and abuse in Medicare & Medicaid

Who they work for: The Centers for Medicare & Medicaid Services (CMS)

Who they target: Providers, suppliers, billing companies

What they do:

  • Advanced data mining (peer comparisons, utilization spikes)
  • Deep claim reviews (often 5–10 years back)
  • Medical record requests
  • Extrapolation of overpayments
  • Referrals to OIG / DOJ

Key powers:

  • Recommend payment suspension
  • Recommend revocation or exclusion
  • Build cases for civil or criminal action

Tone: Investigative, adversarial

Translation: “We think something is wrong — prove us wrong.”

2. Office of Inspector General (OIG – HHS)

Purpose: Oversight, enforcement, and law enforcement support

Who they work for: Department of Health & Human Services

Who they target: Providers, vendors, states, CMS itself

What they do:

  • Criminal and civil investigations
  • National audit reports (e.g., Medicare Advantage risk adjustment)
  • Subpoenas and interviews
  • Corporate Integrity Agreements (CIAs)
  • Exclusions from federal programs

Key powers:

  • Can refer cases directly to DOJ
  • Can impose exclusions
  • Can negotiate settlements

Tone: Law enforcement

Translation: “This could end in handcuffs or headlines.”

🔥 Important: UPICs often build the case → OIG prosecutes or escalates it.

3. Government Accountability Office (GAO)

Purpose: Oversight of federal programs, not individual providers

Who they work for: Congress

Who they target: CMS, HHS, states, federal programs

What they do:

  • Policy and performance audits
  • Program effectiveness studies
  • Cost-benefit and efficiency reviews

What they do not do:

  • No provider-level recoupments
  • No payment suspensions
  • No fraud investigations

Tone: Analytical, policy-focused

Translation: “Is the system working the way Congress intended?”

GAO findings often change policy, not prosecute providers.

4. “DOGE Audits” (Let’s Be Precise)

There is no standing federal audit authority called DOGE that:

  • Replaced UPICs
  • Conducted Medicare fraud audits
  • Had statutory program integrity authority

What people call “DOGE audits” were:

  • Informal efficiency reviews
  • Internal data pulls
  • Contract and spending reviews
  • Not audits under GAGAS or CMS rules

Key point: DOGE could not ignore UPICs — and UPICs never answered to DOGE.

Side-by-Side Reality Check:

EntityTargets Providers?Recoups Money?Refers to DOJ?Changes Policy?
UPIC✅ Yes✅ Yes✅ Yes❌ No
OIG✅ Yes✅ Yes✅ Yes⚠️ Sometimes
GAO❌ No❌ No❌ No✅ Yes
“DOGE”❌ No❌ No❌ No❌ No
Why This Confusion Keeps Happening
  • Providers use “audit” as a catch-all word
  • UPICs replaced ZPICs but kept the same fear factor
  • Policy audits (GAO) get mistaken for enforcement
  • Political rhetoric blurred lines between oversight and investigation
Bottom Line
  • UPICs = the hunters
  • OIG = the prosecutors
  • GAO = the architects
  • DOGE = not in the enforcement chain
If a provider receives the following:
  • A UPIC letter → this is serious
  • An OIG subpoena → call counsel immediately
  • A GAO report mention → policy risk, not repayment risk
Facebook
Twitter
LinkedIn

Timothy Powell, CPA, CHCP

Timothy Powell is a nationally recognized expert on regulatory matters, including the False Claims Act, Zone Program Integrity Contractor (ZPIC) audits, and U.S. Department of Health and Human Services (HHS) Office of Inspector General (OIG) compliance. He is a member of the RACmonitor editorial board and a national correspondent for Monitor Mondays.

Related Stories

Medical Necessity: The Next Frontier for CDI

Medical Necessity: The Next Frontier for CDI

EDITOR’S NOTE: The author of this article used AI-assisted tools in its composition, but all content, analysis, and conclusions were based on the author’s professional

Read More

Leave a Reply

Please log in to your account to comment on this article.

Featured Webcasts

Mastering OB GYN Coding Accuracy: Precision Coding for Compliance and Reimbursement

Gain clarity and confidence in OB‑GYN coding with this expert‑led webcast featuring Stacey Shillito, CDIP, CPMA, CCS, CCS‑P, CPEDC, COPC. You’ll learn how to apply global maternity package rules accurately, select the right CPT codes for procedures and visits, and identify documentation gaps that lead to denials. With practical guidance and real examples, this session helps you strengthen compliance, reduce audit risk, and ensure accurate reimbursement for women’s health services.

May 14, 2026

2026 ICD-10-CM/PCS Coding Clinic Update Webcast Series

Uncover essential coding insights with nationally recognized coding authority Kay Piper, RHIA, CDIP, CCS. Through ICD10monitor’s interactive, on‑demand webcast series, Kay walks you through the AHA’s 2026 ICD‑10‑CM/PCS Quarterly Coding Clinics, translating each update into practical, easy‑to‑apply guidance designed to sharpen precision, ensure compliance, and strengthen day‑to‑day decision‑making. Available shortly after each official release.

April 13, 2026

2026 ICD-10-CM/PCS Coding Clinic Update: Fourth Quarter

Uncover critical guidance on the ICD-10-CM/PCS code updates. Kay Piper reviews and explains ICD-10-CM/PCS coding guidelines in the AHA’s fourth quarter 2026 ICD-10-CM/PCS Coding Clinic in an easy to access on-demand webcast.

December 14, 2026

2026 ICD-10-CM/PCS Coding Clinic Update: Third Quarter

Uncover critical guidance on the ICD-10-CM/PCS code updates. Kay Piper reviews and explains ICD-10-CM/PCS coding guidelines in the AHA’s third quarter 2026 ICD-10-CM/PCS Coding Clinic in an easy to access on-demand webcast.

October 12, 2026

Trending News

Featured Webcasts

Compliance for the Inpatient Psychiatric Facility (IPF-PPS): Minimizing Federal Audit Findings by Strengthening Best Practices

Federal auditors are intensifying their focus on inpatient psychiatric facilities, using advanced data analytics to spotlight outliers and pursue high‑dollar repayments. In this high‑impact webcast, Michael Calahan, PA, MBA, Compliance Officer and V.P., Hospital & Physician Compliance, breaks down what regulators are really targeting in IPF-PPS admissions, documentation, treatment and discharge planning. Attendees will learn practical steps to tighten processes, avoid common audit triggers and protect reimbursement and reduce the risk of multimillion-dollar repayment demands.

April 9, 2026

Mastering MDM for Accurate Professional Fee Coding

In this timely session, Stacey Shillito, CDIP, CPMA, CCS, CCS-P, CPEDC, COPC, breaks down the complexities of Medical Decision Making (MDM) documentation so providers can confidently capture the true complexity of their care. Attendees will learn practical, efficient strategies to ensure documentation aligns with current E/M guidelines, supports accurate coding, and reduces audit risk, all without adding to charting time.

March 31, 2026

The PEPPER Returns – Risk and Opportunity at Your Fingertips

Join Ronald Hirsch, MD, FACP, CHCQM for The PEPPER Returns – Risk and Opportunity at Your Fingertips, a practical webcast that demystifies the PEPPER and shows you how to turn complex claims data into actionable insights. Dr. Hirsch will explain how to interpret key measures, identify compliance risks, uncover missed revenue opportunities, and understand new updates in the PEPPER, all to help your organization stay ahead of audits and use this powerful data proactively.

March 19, 2026

Top 10 Audit Targets for 2026-2027 for Hospitals & Physicians: Protect Your Revenue

Stay ahead of the 2026-2027 audit surge with “Top 10 Audit Targets for 2026-2027 for Hospitals & Physicians: Protect Your Revenue,” a high-impact webcast led by Michael Calahan, PA, MBA. This concise session gives hospitals and physicians clear insight into the most likely federal audit targets, such as E/M services, split/shared and critical care, observation and admissions, device credits, and Two-Midnight Rule changes, and shows how to tighten documentation, coding, and internal processes to reduce denials, recoupments, and penalties. Attendees walk away with practical best practices to protect revenue, strengthen compliance, and better prepare their teams for inevitable audits.

January 29, 2026

Trending News

Happy National Doctor’s Day! Learn how to get a complimentary webcast on ‘Decoding Social Admissions’ as a token of our heartfelt appreciation! Click here to learn more →

BLOOM INTO SAVINGS! Get 25% OFF during our spring sale through March 27. Use code SPRING26 at checkout to claim this offer.

CYBER WEEK IS HERE! Don’t miss your chance to get 20% off now until Dec. 1 with code CYBER25

CYBER WEEK IS HERE! Don’t miss your chance to get 20% off now until Dec. 2 with code CYBER24