Prepayment vs. Postpayment Review: Which Is More Dangerous and How to Respond to Each

Every Medicare medical review falls into one of two broad categories. In prepayment review, a contractor reviews a claim before Medicare pays it. In postpayment review, a contractor reviews a claim after it has already been paid. Both involve Additional Documentation Requests (ADRs), both can result in denials, and both can be appealed. But they create very different risks for providers.

Prepayment review hits cash flow immediately, because claims are held until documentation is reviewed. Postpayment review can reach back years, produce large overpayment demands, involve statistical extrapolation, and trigger recoupment. Which one is more dangerous depends on the provider's situation, the contractor, and how long the review lasts.

This article explains how prepayment and postpayment review work, who conducts them, the deadlines, the risks of each, how to recognize when a review signals a bigger problem, and how to respond effectively. It is educational and does not replace legal or professional advice.

The Basics

Prepayment Review

Medicare's regulations define prepayment medical review as a review that occurs before an initial determination for payment is made on the selected claim. Under 42 CFR 405.903, a contractor may select claims for prepayment review and may issue ADRs to the provider. The contractor's review results in an initial determination.

CMS's Program Integrity Manual explains that contractors use edits to select claims for prepayment review. These may include automated edits, routine review, and complex medical review requiring medical records. Provider-specific prepayment review may be used when data analysis or prior review shows a likelihood of improper payments.

Postpayment Review

Under 42 CFR 405.929, a contractor may conduct postpayment review of claims that have already been paid. In postpayment review, the contractor requests records, reviews the claims, and, if it finds errors, the claims are adjusted and an overpayment is assessed. The Medicare Administrative Contractor (MAC) then issues a demand letter and recovers the overpayment.

Who Conducts Each Type of Review

Prepayment Reviewers

• MACs, through targeted edits, service-specific reviews, and Targeted Probe and Educate (TPE).

• Unified Program Integrity Contractors (UPICs), which may place providers on prepayment review as part of fraud, waste, and abuse investigations.

• Programs such as prior authorization and the Review Choice Demonstration, which review documentation before or during the payment process for certain services.

Postpayment Reviewers

• MACs, including some TPE and service-specific reviews.

• Recovery Audit Contractors (RACs), which review approved topics after payment.

• The Supplemental Medical Review Contractor (SMRC), which conducts national review projects.

• The Comprehensive Error Rate Testing (CERT) program, which reviews a random sample of paid and denied claims to measure the improper payment rate.

• UPICs, which may conduct postpayment reviews with statistical sampling.

• The HHS Office of Inspector General, through audits.

Response Deadlines

CMS's ADR guidance sets the response timeframes:

• MAC prepayment review: 45 calendar days, under 42 CFR 405.903.

• UPIC prepayment review: 30 calendar days, under 42 CFR 405.903.

• MAC, SMRC, and RAC postpayment review: 45 calendar days, under 42 CFR 405.929.

• UPIC postpayment review: 30 calendar days, under 42 CFR 405.929.

Under 42 CFR 405.930, if a provider does not respond on time, the contractor may deny the claim. CMS allows contractors to accept late documentation for good cause, such as natural disasters or business interruptions.

The Risks of Prepayment Review

Immediate Cash-Flow Impact

The biggest risk of prepayment review is cash flow. Claims are not paid until the review is complete. If a large share of a provider's claims are selected, revenue can drop sharply while the provider continues to pay staff and expenses.

Ongoing Review

Prepayment review is often not a one-time event. Provider-specific prepayment review can continue for extended periods, with a percentage of claims, or in some cases most claims, selected for review. MAC guidance has explained that providers who remain on targeted review for several quarters without improvement may be referred to a UPIC.

UPIC Prepayment Review

UPIC prepayment review is particularly serious. UPICs focus on potential fraud, waste, and abuse, so placement on UPIC prepayment review may indicate an investigation. UPIC reviews also have a shorter 30-day response window. High denial rates on UPIC prepayment review can lead to further actions, such as payment suspension, postpayment review with extrapolation, or referral to law enforcement.

Denials Are Initial Determinations

A prepayment denial is an initial determination that can be appealed. But until the appeal is decided, the provider is not paid. There is no limitation on recoupment issue, because no payment was made, but there is also no money in hand while the appeal proceeds.

Administrative Burden

Responding to many ADRs at once requires significant staff time and can strain operations.

The Risks of Postpayment Review

Large Overpayments

Postpayment review can cover claims paid months or years earlier. Under Medicare's reopening rules at 42 CFR 405.980, contractors may generally reopen initial determinations within one year for any reason, within four years for good cause, and at any time in cases of fraud or similar fault. This lookback can produce large overpayment demands.

Statistical Extrapolation

Postpayment reviews by UPICs, RACs, the SMRC, and MACs may use statistical sampling and extrapolation when there is a sustained or high level of payment error or documented educational intervention has failed, under Section 1893(f)(3) of the Social Security Act. Extrapolation can turn a small sample of errors into a very large overpayment.

Recoupment and Interest

After a postpayment overpayment is assessed, the MAC issues a demand letter. CMS's Medicare Overpayments fact sheet explains that interest begins on Day 31 if the overpayment is not paid in full, and that standard recoupment generally begins on Day 41 for overpayments subject to the limitation on recoupment, unless the provider files a timely appeal or arranges an extended repayment schedule.

60-Day Overpayment Obligations

Postpayment findings may give a provider credible information that similar claims outside the review were also overpaid. Under 42 CFR 401.305, providers must report and return identified overpayments within the required timeframe, subject to a suspension of the deadline for a timely, good-faith investigation. Failing to address these obligations can create False Claims Act exposure.

Referral and Enforcement Risk

Postpayment findings, especially by UPICs or OIG, may lead to referrals to law enforcement, civil monetary penalties, or other actions.

Which Is More Dangerous?

Neither type of review is always more dangerous. The risk depends on several factors:

• Who is conducting the review. UPIC reviews, whether prepayment or postpayment, generally carry more risk than routine MAC or CERT reviews.

• How many claims are involved. A prepayment review of most claims can threaten operations quickly. A postpayment review with extrapolation can produce a demand far larger than the claims reviewed.

• How long the review lasts. Short prepayment probes are manageable. Prolonged provider-specific prepayment review can be financially devastating.

• Error rates. High error rates in either type of review increase the likelihood of extrapolation, referral, or other action.

• The provider's financial position. Providers with limited reserves may be more vulnerable to prepayment cash-flow disruption. Providers with large historical claim volumes may face larger postpayment exposure.

In general:

• Prepayment review is more dangerous to short-term cash flow and operations.

• Postpayment review is more dangerous to long-term financial exposure, especially with extrapolation and lookback periods.

• UPIC involvement in either type of review is a red flag that warrants immediate attention and often legal counsel.

How to Respond to Prepayment Review

1. Identify the Contractor and Reason

Determine whether the review is by a MAC, a UPIC, or a program such as TPE. Read the ADR and any notification letter carefully to understand why claims are being selected.

2. Respond to Every ADR Quickly and Completely

Because claims are not paid until reviewed, fast, complete responses help restore cash flow. Submit records well before the deadline, using electronic methods such as esMD or the MAC portal.

3. Focus on Error Rates

Prepayment review often continues until error rates improve. Each correct, well-documented response helps reduce the error rate and may shorten the review.

4. Learn From Denials

Review each denial, identify the root cause, and fix documentation and billing practices immediately. Attend any education sessions offered, such as in TPE.

5. Appeal Incorrect Denials

File redeterminations for denials you believe are wrong. Appeals do not stop the review, but successful appeals recover revenue and may help demonstrate compliance.

6. Manage Cash Flow

Forecast the impact of held claims, maintain reserves or access to credit, and prioritize submissions to minimize delays.

7. Consider Holding or Correcting Claims

If a review reveals a systemic issue, consider correcting the problem before submitting additional claims. Do not submit claims you know are unsupported.

8. Involve Counsel for UPIC Reviews

If a UPIC places you on prepayment review, involve experienced healthcare counsel. Understand the scope of the review and whether other actions may follow.

How to Respond to Postpayment Review

1. Calendar Every Deadline

Respond to ADRs within 45 days, or 30 days for UPICs. After a demand letter, calendar Day 15 for rebuttal, Day 30 to file a redetermination that prevents recoupment, and Day 41 when recoupment may begin.

2. Submit Complete Records

Every claim overturned during the review reduces the overpayment, especially when extrapolation is involved.

3. Evaluate Extrapolation

If the overpayment was extrapolated, request the sampling methodology and data, and consider engaging a statistician.

4. Appeal Strategically

File redeterminations within 30 days of the demand letter to prevent recoupment, and reconsiderations within 60 days of the redetermination decision to continue the limitation. Submit all evidence by the reconsideration level.

5. Address 60-Day Obligations

Evaluate whether findings suggest similar errors outside the review period, and conduct a timely, good-faith investigation if needed.

6. Consider Repayment Options

If recoupment would cause hardship, consider an extended repayment schedule.

7. Involve Counsel When Appropriate

For UPIC postpayment reviews, OIG audits, large extrapolated overpayments, or any indication of potential fraud, involve experienced healthcare counsel.

How Prepayment and Postpayment Appeals Differ

Both types of review produce appealable determinations, but the practical stakes of an appeal are different.

Appealing Prepayment Denials

A prepayment denial means Medicare never paid the claim. The provider files a redetermination with the MAC within 120 days of receiving the initial determination, then a reconsideration with the Qualified Independent Contractor within 180 days of the redetermination decision, and may continue to an Administrative Law Judge hearing, the Medicare Appeals Council, and federal court if the amount in controversy requirements are met. Because no money has been paid, there is no recoupment to stop. Every successful appeal brings in new revenue.

The challenge is volume and time. A provider on extended prepayment review may accumulate hundreds of denied claims. Appealing each one requires staff time, and revenue is delayed until decisions arrive. Providers should prioritize appeals by dollar value and by the strength of the documentation, and should look for patterns where one argument, such as a misapplied coverage criterion, applies to many claims.

Appealing Postpayment Overpayments

A postpayment finding means Medicare already paid and now wants the money back. The deadlines that matter most are not the general 120-day and 180-day appeal windows but the shorter windows that protect against recoupment. Under Section 1893(f)(2) of the Social Security Act and 42 CFR 405.379, recoupment is limited if a redetermination is filed within 30 days of the demand letter and a reconsideration is filed within 60 days of the redetermination decision. Missing these windows allows recoupment from current payments even while the appeal continues.

Postpayment appeals may also involve two separate challenges: the claim-level denials and, when extrapolation was used, the statistical methodology. Overturning sampled claims reduces the extrapolated amount, and a successful challenge to the methodology may limit the overpayment to the actual sampled claims.

Evidence at the Reconsideration Level

In both types of appeals, providers should submit all evidence by the reconsideration level. Under Medicare's appeal rules, evidence not submitted to the QIC may be excluded at the ALJ level unless the provider shows good cause for the late submission. This rule applies equally to prepayment and postpayment matters.

Financial Planning for Each Type of Review

Preparing for Prepayment Review

• Estimate the share of Medicare revenue that would be delayed if a high percentage of claims were held for 60 to 90 days or longer.

• Maintain reserves or a line of credit sized to that estimate.

• Track held claims, ADR submission dates, and decision dates so you can forecast when cash will arrive.

• Communicate with leadership and lenders early if the review is expected to last.

Preparing for Postpayment Review

• Estimate potential exposure based on claim volume for high-risk services over the reopening lookback period.

• Recognize that extrapolated overpayments can be much larger than the claims reviewed.

• Understand repayment options. Under 42 CFR 401.607, an extended repayment schedule may be available when repayment within 30 days would cause hardship, generally when the overpayment equals or exceeds 10 percent of the provider's Medicare payments in the prior year.

• Consider the cost of interest, which accrues on unpaid balances, when deciding whether to pay, appeal, or seek an extended repayment schedule.

Moving From Prepayment to Postpayment Review, and Back

The two types of review are often connected. A MAC may place a provider on prepayment review after a postpayment probe reveals high error rates. A UPIC may combine prepayment review of new claims with postpayment review of past claims. And prepayment review results may lead a contractor to look backward at similar claims already paid.

Because of these connections, providers should treat findings from either type of review as information about their overall risk. If prepayment review reveals a documentation problem, similar claims paid before the review may carry the same problem, and the 60-day overpayment rule may require a look-back investigation. If postpayment review reveals a problem, fixing it quickly helps avoid prepayment review of future claims.

Communicating With the Contractor

Clear, professional communication can make reviews run more smoothly.

• Confirm the correct contact and submission address for ADRs.

• Ask questions about the scope or reason for the review in writing, and keep records of responses.

• Participate in education sessions, such as those offered in TPE, and document what you learned and changed.

• For UPIC reviews, coordinate communication through counsel when appropriate.

• Keep a log of every submission, including dates, tracking numbers, and confirmation receipts.

A Response Checklist for Either Type of Review

• Identify the contractor, review type, and claims involved.

• Calendar the ADR deadline and any demand-letter deadlines.

• Assign a coordinator and gather complete records.

• Conduct a pre-submission review of each packet.

• Submit electronically and keep proof of submission.

• Track each determination and identify denial reasons.

• Decide which denials to appeal and file on time.

• Correct root causes and educate staff.

• Evaluate whether findings trigger 60-day overpayment obligations.

• Involve counsel when warning signs appear.

Recognizing When a Review Signals a Bigger Problem

Warning signs include:

• Placement on UPIC prepayment or postpayment review.

• Prepayment review that continues for many months or expands.

• High denial rates despite corrective action.

• Requests for large numbers of records or long review periods.

• Interviews of staff or beneficiaries, or unannounced site visits.

• Payment suspension notices.

• Requests from OIG or law enforcement.

If you see these signs, take the review seriously at the leadership level and involve counsel.

Building Readiness for Both Types of Review

• Maintain strong documentation practices for high-risk services.

• Conduct internal audits using approaches similar to contractors' reviews.

• Monitor data tools such as PEPPER and Comparative Billing Reports.

• Keep correspondence addresses current in PECOS so ADRs reach you.

• Designate an ADR coordinator and a backup.

• Use esMD or MAC portals for submissions.

• Maintain cash reserves or credit lines.

• Track error rates and denial trends.

• Train clinicians on documentation requirements.

A Hypothetical Comparison

Consider two providers.

A physical therapy clinic is placed on MAC prepayment review for therapy services. For three months, most of its Medicare claims are held for review. The clinic's Medicare cash flow drops by more than half. It responds quickly, appeals incorrect denials, and fixes documentation problems with plan of care certifications. Its error rate falls, and the MAC removes it from prepayment review. The clinic survives, but only because it had a line of credit.

A durable medical equipment supplier undergoes a UPIC postpayment review of three years of claims. The UPIC reviews a sample of 60 claims, finds a high error rate, and extrapolates an overpayment of more than $1 million. The supplier files timely appeals to prevent recoupment, engages a statistician, and challenges the sampling frame. It also involves counsel because of the UPIC's involvement. Even with partial success on appeal, the remaining overpayment requires an extended repayment schedule.

Both reviews were dangerous in different ways. The first threatened short-term operations. The second created large long-term financial exposure.

Frequently Asked Questions

What is the difference between prepayment and postpayment review?

Prepayment review occurs before Medicare pays a claim. Postpayment review occurs after the claim has been paid.

Which review has a shorter response deadline?

UPIC reviews, whether prepayment or postpayment, generally allow 30 days. MAC, SMRC, and RAC reviews generally allow 45 days.

Can prepayment denials be appealed?

Yes. Prepayment review results in an initial determination that can be appealed through the Medicare appeals process.

Can prepayment review lead to extrapolation?

Prepayment review itself denies specific claims. However, high error rates during prepayment review can lead to other actions, such as postpayment review with extrapolation or referral to a UPIC.

How long can prepayment review last?

It varies. Some reviews are short probes, while provider-specific prepayment review may continue until error rates improve.

Conclusion

Prepayment and postpayment reviews are both serious, but they threaten providers in different ways. Prepayment review strikes cash flow immediately and can continue until error rates improve. Postpayment review can reach back years, use extrapolation, and lead to large overpayments, recoupment, and 60-day obligations. Involvement by a UPIC in either type of review is a significant warning sign. By responding quickly and completely, learning from denials, appealing strategically, managing cash flow, and involving counsel when warning signs appear, providers can reduce the damage from either type of review.

How HealthBridge Can Help

HealthBridge is a healthcare management consulting firm that helps providers respond to prepayment and postpayment reviews by managing ADRs, improving documentation, tracking error rates, preparing appeals, evaluating extrapolation, and planning for cash flow. If your organization is under prepayment or postpayment review, please get in touch with us. We will be happy to help you with this topic.

References

• Centers for Medicare & Medicaid Services. Additional Documentation Request. https://www.cms.gov/data-research/monitoring-programs/medicare-fee-service-compliance-programs/medical-review-education/additional-documentation-request

• Centers for Medicare & Medicaid Services. Medicare Program Integrity Manual, Chapter 3, Verifying Potential Errors and Taking Corrective Actions. https://www.cms.gov/regulations-and-guidance/guidance/manuals/downloads/pim83c03.pdf

• Centers for Medicare & Medicaid Services. Medicare Program Integrity Manual, Chapter 8, Administrative Actions and Statistical Sampling for Overpayment Estimates. https://www.cms.gov/regulations-and-guidance/guidance/manuals/downloads/pim83c08.pdf

• Centers for Medicare & Medicaid Services. Medicare Overpayments (MLN006379). https://www.cms.gov/Outreach-and-Education/Medicare-Learning-Network-MLN/MLNProducts/downloads/overpaymentbrochure508-09.pdf

• Centers for Medicare & Medicaid Services. Medicare Claim Review Programs (MLN Booklet). https://www.cms.gov/outreach-and-education/medicare-learning-network-mln/mlnproducts/downloads/mcrp-booklet-text-only.pdf

• Electronic Code of Federal Regulations. 42 CFR 405.902, Definitions. https://www.ecfr.gov/current/title-42/section-405.902

• Electronic Code of Federal Regulations. 42 CFR 405.903, Prepayment Review. https://www.ecfr.gov/current/title-42/chapter-IV/subchapter-B/part-405/subpart-I/section-405.903

• Electronic Code of Federal Regulations. 42 CFR 405.929, Post-Payment Review. https://www.ecfr.gov/current/title-42/chapter-IV/subchapter-B/part-405/subpart-I/subject-group-ECFRba80b2c5e3f1227/section-405.929

• Electronic Code of Federal Regulations. 42 CFR 405.930, Failure to Respond to Additional Documentation Requests. https://www.ecfr.gov/current/title-42/chapter-IV/subchapter-B/part-405/subpart-I/subject-group-ECFRba80b2c5e3f1227/section-405.930

• Electronic Code of Federal Regulations. 42 CFR 405.980, Reopening of Initial Determinations, Redeterminations, Reconsiderations, Hearings, and Reviews. https://www.ecfr.gov/current/title-42/section-405.980

• Electronic Code of Federal Regulations. 42 CFR 405.379, Limitation on Recoupment of Provider and Supplier Overpayments. https://www.ecfr.gov/current/title-42/section-405.379

• Electronic Code of Federal Regulations. 42 CFR 401.305, Requirements for Reporting and Returning of Overpayments. https://www.ecfr.gov/current/title-42/chapter-IV/subchapter-A/part-401/subpart-D/section-401.305

• U.S. Social Security Administration. Social Security Act, Section 1893, Medicare Integrity Program. https://www.ssa.gov/OP_Home/ssact/title18/1893.htm