Medicare TPE Audit: The 45-Day Response Window
8 min read · Last reviewed May 23, 2026
A Medicare Targeted Probe and Educate (TPE) letter from your Medicare Administrative Contractor (MAC) carries a 45-calendar-day Additional Documentation Request (ADR) response window per claim. The MAC selected your practice based on statistical outlier billing patterns. In the first 14 days, triage the claim list, pull records under counsel direction, and start a tab-by-tab response keyed to each claim's medical-necessity citation.
What a TPE letter actually is
Targeted Probe and Educate is the Medicare medical-review program managed by the MACs under direction from the Centers for Medicare & Medicaid Services (CMS). The program structure is described in the Medicare Program Integrity Manual, Chapter 3 and the TPE process overview.
TPE is pre-payment in most cases — claims under review are paused or held while documentation is evaluated. The structure is three rounds:
- Round 1 — MAC requests 20 to 40 claims, reviews documentation against medical-necessity and coding rules, scores the error rate, and offers one-on-one education on identified deficiencies.
- Round 2 — If Round 1 error rate exceeds the MAC threshold, a fresh sample is pulled after a 45-day cooling-off period. Same structure.
- Round 3 — Same process. If the error rate fails across three rounds, the case is referred to CMS for further action under 42 CFR § 424.535.
Each round is independent. Passing Round 1 closes the matter on that service. Failing all three triggers escalation: UPIC referral, 100% pre-payment review, or revocation of Medicare billing privileges.
The first 14 days
In the audit work d3rx has supported, the practices that pass TPE Round 1 cleanly are the ones who treat the first 14 days as the most consequential — not the last 14. Use that time to triage and pull records, not to draft narrative.
- Log the ADR letter against the deadline. Each claim has its own 45-day clock running from the date on the ADR letter. Calendar every deadline.
- Assign an internal owner. Single named person, not a committee. Owner reports to the practice's compliance officer and works with billing and clinical leads.
- Identify counsel. TPE response is operational, but a high-volume probe or one paired with prior CMS contact warrants counsel from day one — particularly if the claim selection suggests a pattern.
- Pull the claim list and reconcile to the chart. Every claim in the ADR list maps to a date of service, a CPT code, a provider, and a diagnosis. Pull the chart for each one before drafting any response.
- Read the MAC's coverage policy. Every TPE probe targets a specific service, and the MAC's Local Coverage Determination (LCD) — or the National Coverage Determination (NCD) where one exists — is the rule the records will be measured against. Read it before you write a word.
- Identify the probe's likely error category — medical necessity, signature, time documentation, modifier use, units billed, or absent provider documentation. The MAC letter usually hints at the category in its rationale.
What the MAC is checking
TPE document review follows the Medicare Program Integrity Manual, Chapter 3, Section 3.3. The reviewer maps every claim to:
- Coverage — does the service meet the LCD or NCD criteria for the diagnosis billed
- Medical necessity — does the documentation in the chart support the service as reasonable and necessary under Social Security Act § 1862(a)(1)(A)
- Documentation — provider signature and credentials per Medicare Program Integrity Manual Chapter 3, Section 3.3.2.4, date of service, time entries where required (e.g., time-based E/M, anesthesia, infusion)
- Coding — CPT/HCPCS selection, modifier use, units billed, place of service
- Order — physician order on file for diagnostic services per 42 CFR § 410.32
- Beneficiary eligibility — Medicare coverage on the date of service
A claim missing any one of these elements can be denied on a single ground, regardless of the underlying clinical care quality.
Building the per-claim response
The response is per-claim, not aggregate. Each claim gets its own tab in the response package:
- ADR letter for the claim
- Chart documentation supporting the date of service
- The signed and dated provider order if applicable
- The signed and dated physician documentation for the encounter
- Time entries where the code is time-based
- Any cross-reference documentation (lab results, imaging, prior auth, ABN)
- A one-paragraph cover note tying the documentation to the specific LCD or NCD coverage criteria
- The HCPCS/CPT crosswalk if a coding decision is in question
Common drafting errors that turn a defensible claim into a denial:
- The narrative cover note contradicts the chart (do not narrate; let the chart speak)
- Missing co-signature on a resident or scribe note
- Provider signature on the encounter is illegible or missing credentials
- Time entries are inconsistent with the billed code's required threshold
- The medical-necessity rationale is implied but not documented in the chart
What not to do
- Do not back-date or amend records to fill a gap. Late entries are permitted if clearly labeled with date of entry and identity of the entrant per CMS signature guidance; fabrication is a False Claims Act exposure.
- Do not submit an aggregate narrative response. TPE reviewers score claim-by-claim.
- Do not over-respond. Documents not requested widen the audit surface.
- Do not delay refund of any overpayment identified during review. The 60-day refund clock at 42 USC § 1320a-7k(d) runs from identification.
- Do not skip the MAC's offered education session after Round 1. Declining the education is itself a flag and removes the practice's ability to claim it was uninformed in any later escalation.
The Round 1 education session
If Round 1 identifies an error rate above the MAC threshold (typically 15 to 30% depending on MAC and service), the MAC offers a one-on-one education session before Round 2 begins. Treat it as substantive, not a courtesy:
- Identify the lead provider and billing manager who will attend
- Read the MAC's summary of identified errors before the session
- Document the session date, attendees, topics covered, and identified corrective actions
- Implement the corrective actions before Round 2's 45-day cooling-off period ends
- Re-train staff on the specific deficiencies identified
The education record itself becomes part of the practice's compliance documentation and is a material asset if the matter ever escalates.
After Round 3: escalation pathways
Failure across three TPE rounds, or a sufficiently severe Round 1 finding, can route the matter to:
- Unified Program Integrity Contractor (UPIC) — broader fraud investigation under Medicare Program Integrity Manual Chapter 4
- 100% pre-payment review — every claim of the probed type is reviewed before payment, often for 12 months or longer
- Recovery Audit Contractor (RAC) referral — post-payment recovery on a wider claim set
- Medicare enrollment revocation under 42 CFR § 424.535, including the resulting one- to ten-year reapplication bar
- OIG referral — false claims, exclusion under 42 CFR § 1001.901, or criminal investigation in the most serious cases
Escalation is the reason to treat TPE Round 1 as the response that matters most, not the one to deprioritize.
State-law overlay
Federal Medicare rules above. State law may add layered obligations on the same underlying records:
- California: practices participating in Medi-Cal face parallel state program-integrity review with its own document-request structure.
- Texas: HHS-OIG (state) operates Medicaid program-integrity audits that can overlap with federal TPE-style review.
- New York: the Office of the Medicaid Inspector General (OMIG) runs an independent audit program.
- Massachusetts: MassHealth program-integrity audits overlap with Medicare reviews on dual-eligible patients.
If your practice bills any state Medicaid program, expect the underlying chart documentation to be requested by multiple reviewers in parallel.
Restraint about claims
No vendor or guide can promise a TPE outcome. The MAC's decision rests on the documentation in the chart at the time of service. The practice's job is to produce that documentation completely, on schedule, and against the right coverage policy. A well-organized, source-grounded response package materially outperforms a scrambled one.
How d3rx fits
The d3rx compliance binder holds the underlying program documentation a TPE response is built from — billing-compliance policies, provider signature standards, internal coding-review evidence, and the LCD/NCD tracker. The d3rx audit defense workflow walks the ADR triage steps, the per-claim tabbing structure, and the Round 1 education-session documentation. d3rx does not represent the practice in any MAC proceeding and does not replace counsel; it is a point-in-time administrative documentation aid that the practice and counsel work from.
Step 1 · Get the binder
Get the d3rx compliance binder for your practice
Pre-filled to address the gaps this guide covers — Medicare TPE Audit: The 45-Day Response Window. We will email you the section preview and your binder intake link.
No PHI required. We use your email to send the binder preview and intake link only.
Frequently asked
Why was my practice selected for TPE?
CMS data analytics flag billing patterns that deviate from peer norms — high utilization of a CPT code, unusual modifier use, billing frequency above specialty average, or claims paired with high-risk diagnoses. TPE selection criteria are described in [Medicare Program Integrity Manual Chapter 3, Section 3.2.5](https://www.cms.gov/regulations-and-guidance/guidance/manuals/downloads/pim83c03.pdf). It does not by itself indicate fraud — it indicates statistical outlier status.
How many claims will the MAC request in TPE Round 1?
The Probe sample is typically 20 to 40 claims per provider per service. The Medicare Program Integrity Manual sets the structure but the specific sample size is at MAC discretion. Each claim carries its own Additional Documentation Request (ADR) and its own 45-day response window. The full probe must be answered claim-by-claim, not in aggregate.
What happens if we fail Round 1 of TPE?
The MAC offers one-on-one education on the identified errors and then issues Round 2 with a fresh sample. Failure across three rounds escalates to referral to a Unified Program Integrity Contractor (UPIC), 100% pre-payment review, or revocation of Medicare billing privileges under [42 CFR § 424.535](https://www.ecfr.gov/current/title-42/chapter-IV/subchapter-B/part-424/subpart-D/section-424.535). The escalation pathway is described in the [TPE process overview at CMS](https://www.cms.gov/research-statistics-data-and-systems/monitoring-programs/medicare-ffs-compliance-programs/medical-review/targeted-probe-and-educate-tpe).
Can we request an extension on the 45-day TPE response?
Yes. MACs grant short extensions on written request, typically 14 to 30 days, when justified by record-retrieval complexity or counsel involvement. Send the extension request to the named MAC contact before the deadline. Do not let the 45-day clock expire without an extension on file — non-response is auto-denial of the claim.
If we identify our own coding error during TPE response, do we have to refund?
Yes. If review of the records identifies an overpayment, the 60-day refund clock at [42 USC § 1320a-7k(d)](https://www.law.cornell.edu/uscode/text/42/1320a-7k) and [42 CFR § 401.305](https://www.ecfr.gov/current/title-42/chapter-IV/subchapter-B/part-401/subpart-D/section-401.305) is triggered from the date of identification. The refund is separate from the TPE response and must be processed through the MAC's standard overpayment refund channel. Failure to refund within 60 days converts the overpayment to a False Claims Act exposure.
Does a TPE finding go on a public record?
TPE results themselves are not public. However, if TPE escalates to a UPIC investigation, a CMS exclusion under [42 CFR § 1001.901](https://www.ecfr.gov/current/title-42/chapter-V/subchapter-B/part-1001/subpart-B/section-1001.901), a revocation under [42 CFR § 424.535](https://www.ecfr.gov/current/title-42/chapter-IV/subchapter-B/part-424/subpart-D/section-424.535), or a False Claims Act settlement, those become public. The deeper the audit goes, the more public the record.
Turn this into a review-ready binder
The Security Risk Analysis is where this guide becomes documentation you can actually hand to a reviewer — assembled into one review-ready binder. Source-grounded, citation-linked, and explicit about what it does and does not do.
Editorial process. This guide was drafted by an LLM (Anthropic Claude) against primary HHS, OCR, CMS, eCFR, NIST, and state-regulator publications, and edited by the D3rx team for restraint and source fidelity. A named credentialed reviewer (CHC, CHPC, or healthcare attorney) is being engaged to verify citations — see the team page for status. Until that reviewer engagement is finalized, this page does not claim credentialed review.
This article is an administrative documentation aid. It does not certify compliance, provide legal advice, replace counsel, or guarantee an audit outcome. The practice remains responsible for reviewing, adopting, and maintaining its compliance program. References cited link to primary sources at HHS, OCR, CMS, the Code of Federal Regulations, NIST, and state regulators.
D3rx is a healthcare-billing and compliance research aid maintained by D3rx Inc. Articles are drafted by an LLM (Anthropic Claude) against primary HHS, OCR, CMS, eCFR, NIST, and state-regulator publications, and reviewed for restraint and source fidelity by the D3rx team.
Reviewer status: a named credentialed reviewer (CHC, CHPC, or healthcare attorney) is being engaged. Until that engagement is finalized, this page does not claim credentialed review.
- Medicare Program Integrity Manual, Chapter 3https://www.cms.gov/regulations-and-guidance/guidance/manuals/downloads/pim83c03.pdf
- TPE process overviewhttps://www.cms.gov/research-statistics-data-and-systems/monitoring-programs/medicare-ffs-compliance-programs/medical-review/targeted-probe-and-educate-tpe
- 42 CFR § 424.535https://www.ecfr.gov/current/title-42/chapter-IV/subchapter-B/part-424/subpart-D/section-424.535
- Local Coverage Determination (LCD)https://www.cms.gov/medicare-coverage-database/search.aspx
- Social Security Act § 1862(a)(1)(A)https://www.ssa.gov/OP_Home/ssact/title18/1862.htm
- 42 CFR § 410.32https://www.ecfr.gov/current/title-42/chapter-IV/subchapter-B/part-410/subpart-B/section-410.32
- CMS signature guidancehttps://www.cms.gov/regulations-and-guidance/guidance/transmittals/downloads/r327pi.pdf
- Medicare Program Integrity Manual Chapter 4https://www.cms.gov/regulations-and-guidance/guidance/manuals/downloads/pim83c04.pdf
- 42 CFR § 1001.901https://www.ecfr.gov/current/title-42/chapter-V/subchapter-B/part-1001/subpart-B/section-1001.901
Sources verified as of May 23, 2026
This guide is a plain-English summary maintained by D3rx for healthcare practice administrators. It is not legal advice, medical advice, or accounting advice. The authoritative source is the cited regulation or agency document. Always confirm with qualified counsel before acting on a specific compliance question affecting your practice.
Related Guides
Related across the archive
- ComplianceRAC Audit Response: First 14 Days After the LetterA Recovery Audit Contractor (RAC) letter starts a 45-day documentation clock and a 30-day discussion-request window (separate from the 120-day Redetermination appeal clock). Sequence the first 14 days correctly.
- ComplianceOCR Investigation Letter: Your 30-Day Response PlaybookReceived an OCR HIPAA investigation letter? The first 30 days set the trajectory. Confirm the docket, freeze logs, route through counsel, and produce a tabbed response.
- CompliancePayer Pre-Payment Review: 14-Day Response TemplateA commercial payer pre-payment review holds your claims and gives 14 days to respond. Pull every chart, map to payer policy, and protect appeal rights.
- SRAHIPAA Policies and Procedures: What a Small Practice Actually NeedsWhat 45 CFR 164.316 and 164.530(i) require for HIPAA policies and procedures, the minimum set a small practice should maintain, and how to keep them current without bloat.
- ComplianceCMS Provider Enrollment Revocation (855): How to Appeal a Form CMS-855 ActionA CMS revocation under 42 CFR 424.535 carries a 60-day reconsideration window and a re-enrollment bar. Here is the appeal track that protects billing rights.
- ComplianceZPIC / I-MEDIC Audit Response: What's Different from UPICZPIC is the legacy FFS program-integrity contractor (now UPIC); I-MEDIC is the Part C and Part D investigations contractor. Counsel before response. Here is what to do first.
- GlossaryMedical NecessityThe standard requiring that services be reasonable and necessary for the diagnosis or treatment of illness or injury or to improve the functioning of a malformed body member.
- ComplianceAdditional Documentation Request (ADR): How to Respond Inside the WindowMedicare ADR response windows are contractor-specific (45 days for MAC/SMRC/RAC, 30 days for UPIC). Miss the window and the claim auto-denies. Here is the procedure that actually works.