CMS is the authoritative source, and you should confirm against it. The assignments below were read directly from CMS’s Review Contractor Directory, Interactive Map, which requires selecting one state at a time and returns a mixed table of every contractor type. We consolidated all 56 jurisdictions into one table because the underlying data is hard to get out of that interface, not because we improve on it. Checked August 2026.
The five jurisdictions
Two consequences worth knowing. The contractor name is not the jurisdiction name — telling someone “SafeGuard has it” does not say whether you mean the Northeastern or Southeastern contract, and they operate from different offices. And the jurisdiction that covers you for Medicare program integrity is not the same as your MAC jurisdiction, which is a separate assignment with a separate map.
Every state and territory
What we corrected
Three things in CMS’s own directory did not survive checking. We flagged each in the table above. a. Indiana has no data at all. Indiana appears in the map’s state selector, but its content block is empty, no UPIC, no MAC, no RAC, nothing. A provider in Indiana following CMS’s own instructions to “find your UPIC” reaches a blank panel. We placed Indiana in the Midwestern jurisdiction on the strength of CoventBridge’s own published description of the UPIC MW contract, which names Iowa, Illinois, Indiana, Kansas, Kentucky, Michigan, Minnesota, Missouri, Nebraska, Ohio, and Wisconsin.2 A contractor’s statement of its own contract scope is good evidence, but it is not CMS — treat Indiana as the one row here to confirm before relying on it. b. Michigan is listed under a predecessor contractor. CMS’s Michigan entry names AdvanceMed, an NCI Company, which held program integrity work under the earlier contract structure. The phone number printed alongside it is the same number CMS lists for CoventBridge’s Midwestern UPIC, and CoventBridge’s own contract description includes Michigan. We list Michigan as Midwestern / CoventBridge. c. Minnesota and Montana are frequently transposed. Several widely-cited third-party summaries place Minnesota in the Western jurisdiction. CMS’s map puts Minnesota in the Midwestern jurisdiction and Montana in the Western one, and the geography agrees. The error looks like an MN/MT abbreviation slip that has been copied between sources. Both rows above follow CMS.What a UPIC is not
Providers routinely conflate these, and the response to each is different.
A UPIC contact is a fraud investigation, not an audit. That distinction should change how you respond and who you involve. See Respond to payer audits.
Verifying your own assignment
1
Open the CMS map and select your state
Review Contractor Directory, Interactive Map. The UPIC row is in the table that loads.
2
Use the state where the PC is enrolled
Not where the management company sits, and not where the clinician lives. Enrollment determines the contractor, which matters in a multi-state group. See Why multi-state groups have one PC per state.
3
Get your MAC separately
The MAC directory is a different lookup. Part A/B and DME are frequently different contractors for the same state, so if the fraudulent claims are for equipment you may need both.
4
Record what you found, and when
Contractor, jurisdiction, the date you checked, and the phone number you called. If you later have to show that you acted promptly, this is part of it.
Sources
- CMS, Review Contractor Directory, Interactive Map. Every assignment in the state table was read from this directory’s per-state entries, checked August 2026, except Indiana, see note (a). Contractor addresses, phone numbers, and esMD status are on that page and are deliberately not reproduced here, because they change.
- CoventBridge, Midwest UPIC, describing the states covered by the UPIC MW contract awarded by CMS in 2016. Used to resolve Indiana, which CMS’s directory leaves blank, and to corroborate Michigan.
- CMS, Victimized Provider Project, the CMS program for providers facing overpayment liability from a stolen identity, and the page that directs providers to the contractor directory above.
- CMS, MAC directory for Medicare Administrative Contractor assignments. HHS OIG, Medicaid Fraud Control Units for state MFCUs.