Medical Billing Audit: What Auditors Look For and Why

Most practices think about billing audits in one of two ways: either as something that happens to them — a payer audit, an OIG inquiry, a Medicare Administrative Contractor review or as an internal compliance exercise that confirms the billing team is doing things correctly. Both framings are incomplete.

A billing audit conducted correctly is both a compliance diagnostic and a revenue recovery tool. The compliance side confirms that billed codes are supported by documentation, that modifiers are used correctly, and that billing patterns don’t expose the practice to overpayment liability. The revenue side reveals the systematic coding, missing charges, and documentation specificity gaps that are silently reducing what the practice collects for the clinical work it delivers every day.

What makes a billing audit genuinely useful whether conducted internally or by an outside auditor is understanding what each element of the audit reveals and what each finding requires as a response. This blog covers the primary audit focus areas, what auditors examine in each, and what the findings indicate about both compliance risk and revenue recovery opportunity.

Medical Billing Audit: Key Standards and Benchmarks

Audit Parameter	Standard / Benchmark	Source
Chart sample per physician per audit	10 to 15 charts minimum	OIG compliance guidance
Recommended internal audit frequency	Quarterly minimum	OIG compliance program guidance
E/M visits billed below documented level	15% to 25% industry average	Coding audit benchmarks
Annual revenue lost to under coding per physician	$10,000 to $50,000+	Physician revenue analysis
Acceptable coding error rate target	Under 5% of audited charts	Billing compliance standards
OIG 60-day overpayment rule	Report and refund within 60 days of identification	CMS overpayment rule
Unspecified ICD-10 code rate target	Under 5% of coded diagnoses	Coding accuracy standards
Modifier 25 documentation requirement	Separately identifiable E/M documented in the note	AMA CPT guidelines
Qualigenix claim accuracy rate	99%	Qualigenix performance data
Qualigenix first-pass acceptance rate	95%	Qualigenix performance data
Qualigenix average collection cycle	36 days	Qualigenix performance data
Qualigenix client onboarding time	6 days	Qualigenix operations data

Audit Area 1: E/M Code Distribution Analysis

The E/M code distribution is the first element every billing auditor examines because it is the fastest way to identify whether a physician’s billing pattern is an outlier relative to their specialty peers. The distribution shows what percentage of established and new patient visits are billed at each E/M code level over a defined period. When compared against specialty benchmarks, an anomalous distribution — whether shifted significantly toward lower codes or higher codes than the peer group — is a signal that warrants chart review.

What the Distribution Reveals

A primary care physician billing 75% of established patient visits at 99213 when the specialty benchmark centers at 99214 is a candidate for undercoding investigation. The distribution doesn’t prove under coding. it signals a pattern that requires chart review to confirm. When chart review shows that the documentation consistently supports 99214 for encounters coded at 99213, the distribution finding has identified a systematic revenue loss. When chart review shows the documentation genuinely supports only 99213, the distribution is accurate and the practice’s patient mix may differ from the benchmark.

A specialist billing 40% of established patient visits at 99215 when the specialty benchmark shows only 15% at that level is a candidate for overcoding investigation. The high-code distribution doesn’t prove overcoding, it signals a pattern that requires chart review to confirm documentation support at the highest level. When chart review shows that the documentation doesn’t support 99215 for those encounters, the distribution has identified an overcoding compliance risk. When chart review shows the documentation genuinely supports 99215  for a subspecialist managing complex patients the distribution is accurate.

Audit Area 2: Documentation Support for Billed Code Levels

After identifying distribution anomalies, auditors pull charts to verify that each billed code level is supported by the clinical documentation. This is the core of the coding audit: reading the note and applying the applicable coding guidelines to determine what code the documentation supports, then comparing that determination against the code that was billed.

2021 AMA E/M Guidelines Application

For outpatient office visits, the 2021 AMA guidelines determine code level based on medical decision making complexity or total time on the date of service. An auditor reviewing a 99214 established patient encounter applies the MDM criteria: what problems are documented as being managed, what data is documented as being reviewed with interpretation, and what risk level is reflected in the documented treatment decisions. If the documentation establishes moderate MDM on at least two of the three elements, 99214 is supported. If it establishes only low MDM, 99213 was the appropriate code regardless of how complex the encounter actually was.

This is where documentation quality becomes a compliance and revenue issue simultaneously. A physician who managed complex patients but documented minimally may have billed correctly at 99213  the documentation doesn’t support 99214 even if the clinical work did. An auditor reviewing those charts may find undercoding (the work warranted a higher code and the documentation supports it) or appropriate coding (the work warranted a higher code but the documentation doesn’t support it). The finding is different in each case, and the corrective action is different: coding education for undercoding cases, documentation improvement for appropriate-but-poorly-documented cases.

Inpatient E/M Documentation Review

For inpatient hospital visit codes, auditors apply the key component framework — history, examination, and medical decision making — that still governs inpatient code selection. Initial hospital care codes (99221-99223) require all three key components. Subsequent care codes (99231-99233) require at least two of three. Auditors reviewing inpatient coding look specifically at whether daily subsequent care notes document sufficient detail on each required component to support the code billed, or whether minimal daily progress notes are consistently billed at the highest subsequent care code regardless of the clinical complexity documented.

Audit Area 3: Modifier Appropriateness and Consistency

Modifiers are among the most audited elements of medical billing because they are among the most frequently misused — both in the direction of overcoding (applying modifiers to claim separate payment for services that should be bundled) and undercoding (omitting modifiers that would allow separate billing for legitimately distinct services). Auditors review modifier use from both directions.

Modifier 25: Same-Day E/M and Procedure

Modifier 25 is appended to an E/M code when a significant, separately identifiable E/M was performed on the same day as a procedure. It allows the E/M to be paid separately from the procedure rather than being bundled into the procedure’s global fee. Auditors examine modifier 25 use in two ways.

From the compliance direction: does the documentation support a separately identifiable E/M that went beyond the pre- and post-service work included in the procedure? An E/M billed on the same day as a procedure with modifier 25 must reflect a distinct clinical evaluation that wasn’t the routine decision to perform the procedure. If the note shows only the procedure evaluation with no separate diagnostic assessment, modifier 25 may not be defensible.

From the revenue direction: are there same-day procedure and E/M encounters where modifier 25 was not applied, causing the E/M to be bundled when it should have been separately billed? In high-volume practices, missing modifier 25 across dozens of encounters per week is a systematic underpayment that only a billing audit surfaces.

Modifier 59 and X Modifiers: Distinct Procedural Services

Modifier 59 and its more specific variants (XE, XS, XP, XU) are used to bypass NCCI bundling edits when two procedures are genuinely distinct — performed at different anatomical sites, in different sessions, or by different providers. Auditors examine whether modifier 59 is applied to procedure pairs that are genuinely distinct as the modifier represents, or whether it is being used as a blanket unbundling tool to override edits without clinical justification for doing so.

Inappropriate modifier 59 use applying it to services that were performed together as components of the same service rather than as distinct services — is among the most common billing compliance findings in OIG and MAC audits. The clinical documentation must explicitly support the distinction the modifier claims. If the documentation describes a single procedure, modifier 59 cannot be applied to bill a component as a separate service.

Modifier 24: E/M During Surgical Global Period

Modifier 24 is used when an E/M service during a surgical global period is unrelated to the surgery. Without it, the E/M is bundled into the surgical global fee. Auditors examine both directions: are modifier 24 claims supported by documentation that clearly establishes the E/M was for a condition unrelated to the surgery, and are there global period E/M encounters for new conditions where modifier 24 was not applied, causing legitimate separate billing to be lost to bundling?

Audit Area 4: ICD-10 Diagnosis Code Specificity

ICD-10 code specificity is an audit element that affects both compliance and revenue cycle performance. From the compliance perspective, chronic use of unspecified codes when the documentation supports specific codes misrepresents the patient’s clinical situation in ways that affect risk adjustment, quality reporting, and medical necessity determination. From the revenue perspective, payers may deny claims or request additional documentation for services supported only by unspecified diagnosis codes when their coverage policy requires a specific code to confirm eligibility.

What Auditors Examine

Auditors review the ICD-10 codes assigned to each audited encounter and compare them against the clinical documentation for three specific questions. First: is the principal diagnosis the condition that was primarily responsible for the encounter, or was a secondary condition coded as primary? Incorrect principal diagnosis sequencing affects DRG assignment in facility coding and affects medical necessity determination for the primary service in professional billing.

Second: is the diagnosis code at the highest specificity level the documentation supports? A diagnosis of type 2 diabetes mellitus with diabetic chronic kidney disease, stage 3 has a specific ICD-10 code. Coding it as “diabetes mellitus, unspecified” when the documentation clearly states the type, the complication, and the stage is a specificity failure on three levels simultaneously. Auditors flag this type of pattern as a systematic coding quality gap that requires coder training on specificity requirements.

Third: are diagnosis codes used that the documentation doesn’t support? A code for a condition not documented in the note, or a code for a condition documented as historical or resolved when the coding guideline requires it to be documented as active and managed to be coded on the current encounter, is a potential over coding compliance finding.

Audit Area 5: Charge Capture Completeness

Charge capture completeness is an audit area that is entirely focused on revenue recovery rather than compliance. An auditor reviewing charge capture is asking: were all services delivered during the audit period billed, and were they billed correctly for every element of the service?

Missing Charges

Missing charges — services delivered but never entered into the billing system are identified in a billing audit by comparing services documented in the clinical record against charges in the billing system. If an encounter is documented in the EHR but no corresponding charge exists in the billing system, the audit has identified a missing charge. If a procedure is documented in the operative report but wasn’t billed or was billed without certain components, the audit has identified incomplete charge capture.

Missing charges in surgical practices are particularly consequential because surgical procedures have high per-encounter allowed amounts and complex charge structures where individual components can be missed. An assistant surgeon’s charge omitted from a major surgical case, a supply billed separately from the procedure but not captured, or a second procedure performed in the same session but missed in charge capture all represent meaningful revenue losses per incident that compound across a month’s operative cases.

Unbilled Services During a Series

For services delivered in a series — infusions, physical therapy visits, injection series auditors compare the number of treatments documented in the clinical record against the number of treatments billed. A patient documented as receiving 12 infusion sessions during the audit period with only 10 charges in the billing system has two missing charges. In high-volume infusion practices where dozens of patients receive regular infusions, a systematic charge capture gap can represent significant uncollected revenue that charge reconciliation would have caught.

Audit Area 6: Billing Pattern Anomalies

Beyond specific code and documentation review, auditors look for billing pattern anomalies statistical patterns in the billing data that suggest systematic errors, unusual service frequencies, or billing combinations that warrant further investigation.

100% Rate Billing

When a physician bills a specific code at 100% of encounters every patient on every date of service receives the same code the pattern is an anomaly. Clinical practice is inherently variable; patient needs vary, encounter complexity varies, and a billing pattern that shows zero variation across all encounters suggests habitual code selection rather than clinical code selection. Auditors flag 100% rate billing for a specific code as a distribution anomaly requiring chart review to confirm whether the uniformity reflects genuine clinical uniformity or coding habit.

High Frequency Services

Services billed at unusually high frequency relative to specialty peers attract audit attention from both internal auditors and external reviewers. A physician billing critical care codes at a rate significantly higher than other physicians in the same specialty and practice setting, or a practice billing specific diagnostic tests at a rate well above the national average for that specialty, is a frequency outlier that warrants review. The outlier may be entirely legitimate, a subspecialist seeing sicker patients, or a practice in a demographic with higher disease burden, but the pattern requires documentation that supports the clinical rationale for the frequency.

Unusual Code Combinations

Certain code combinations on the same claim are unusual or clinically inconsistent. A procedure that is typically performed unilaterally billed bilaterally without a modifier and without documentation supporting bilateral service. An add-on code billed without the primary code it accompanies. A follow-up visit code billed on the same date as a new patient code for the same patient. Auditors use code pair analysis to identify these combinations for review.

Audit Area 7: OIG Compliance Risk Focal Points

The Office of Inspector General publishes an annual Work Plan identifying the specific service types, CPT codes, provider categories, and billing patterns the OIG intends to audit in the coming year. The Work Plan is the most important publicly available guide to where government audit risk is concentrated, and it is a direct input to any compliance-focused billing audit.

Current and recurring OIG focal points in physician billing include high-level E/M coding, particularly 99215 billing rates relative to specialty peers; evaluation and management services billed on the same day as procedures with modifier 25; services billed incident-to under supervising physician NPIs; telehealth billing compliance with applicable place-of-service and supervision requirements; and drug administration billing, particularly in infusion practices where drug units, drug codes, and administration codes must all align with the documented clinical record.

A practice that has not reviewed the current OIG Work Plan and assessed its own billing against the identified focal points is operating without a compliance risk map. The OIG publishes this information not to surprise practices but to allow proactive compliance assessment before a formal audit becomes necessary. Internal audits aligned with OIG Work Plan priorities address the highest-risk areas first rather than spreading audit effort uniformly across all billing categories.

The 60-Day Rule: What Auditors Find That Practices Must Act On

When a billing audit identifies that a practice has been systematically overbilling billing codes that the documentation doesn’t support at a rate that suggests a systemic pattern rather than isolated errors the compliance response is not simply to correct future billing. The CMS 60-day rule requires that identified Medicare and Medicaid overpayments be reported to CMS and refunded within 60 days of when the overpayment is identified and quantified.

This rule creates a specific and significant consequence for billing audit findings that identify systematic over coding: the finding doesn’t just require prospective correction, it may trigger a legal obligation to calculate the overpayment amount, report it to the applicable Medicare or Medicaid program, and refund it within the statutory window. Failure to comply with the 60-day rule once an overpayment is identified converts what might have been an inadvertent billing error into a potential False Claims Act violation.

This is precisely why internal audits — conducted by the practice proactively, with results reviewed by legal counsel when significant overpayment patterns are found — are preferable to learning about systematic over coding from an external OIG or MAC audit. The internal audit allows the practice to manage the compliance response on its own timeline, with legal guidance, rather than responding to an external investigation under the government’s timeline and scrutiny.

What Auditors Don’t Find That They Should: The Revenue Side of the Audit

The audit elements discussed above — distribution anomalies, documentation support, modifier misuse, diagnosis specificity, charge capture — are equally relevant to revenue recovery as to compliance. The same audit that surfaces overcoding compliance risk in one area of the billing record frequently surfaces under coding revenue loss in another.

A physician who is over coding at 99215 for some encounter types may be under coding at 99213 for others where the documentation would support 99214. A practice with a modifier 59 compliance concern may also have a systematic modifier 25 omission problem that is causing same-day E/M and procedure services to bundle when they should have been separately billed. A coder who is assigning too-specific a code for one condition may be using unspecified codes for another condition category.

An audit that focuses exclusively on compliance without simultaneously reviewing the revenue side of the same billing record leaves revenue recovery findings on the table. The most valuable billing audits — for the practice’s financial health as well as its compliance posture — examine both directions simultaneously and report findings in both categories.

How Qualigenix Approaches Billing Audit Support

At Qualigenix, we run monthly E/M code distribution reports for every physician across every client practice as a standard component of our revenue cycle management. These reports flag distribution anomalies relative to specialty benchmarks and trigger quarterly chart audits on physicians with anomalous patterns. Our quarterly chart audits sample 10 to 15 encounters per physician, apply the current coding guidelines, and return findings categorized by type: under coding, over coding, modifier error, diagnosis specificity, or documentation gap.

We deliver findings to physicians with specific chart-level examples, not aggregate statistics and we track whether physician documentation changes in response to specific feedback over the following quarter. We align our audit calendar with OIG Work Plan priorities so that the highest-risk billing categories receive audit attention first. When audit findings suggest potential overpayment patterns, we flag them for the practice’s compliance officer and legal counsel to assess the 60-day rule applicability before any compliance action is taken.

Our 99% claim accuracy rate and 95% first-pass acceptance rate reflect a coding and billing operation that monitors its own quality continuously rather than waiting for an external audit to identify problems that have been compounding for months.

Medical Billing Audit Checklist

• E/M code distribution pulled per physician and compared to specialty benchmarks quarterly
• Chart audit sample of 10-15 per physician selected randomly — not cherry-picked
• Each audited chart reviewed against 2021 AMA MDM criteria for outpatient visits
• Inpatient charts reviewed against key component documentation requirements
• Modifier 25 on same-day E/M and procedure claims confirmed by documentation
• Modifier 59 use reviewed for clinical documentation support of distinct service
• Modifier 24 applied for global period E/M on unrelated conditions
• ICD-10 specificity reviewed — unspecified codes flagged where specific codes are documented
• Principal diagnosis sequencing confirmed per coding guidelines
• Charge capture completeness verified against encounter list or schedule
• OIG Work Plan reviewed annually — high-priority categories included in audit scope
• Physician feedback delivered with specific chart examples — not aggregate findings only
• Process changes implemented for each finding category — not just documentation of findings

Frequently Asked Questions: Medical Billing Audit

What is a medical billing audit?

What does a billing auditor look for in E/M coding?

What modifier patterns do billing auditors examine?

What is the OIG 60-day rule and when does it apply?

How many charts should a billing audit review per physician?

What should happen after a billing audit finds undercoding?

Related Resources from Qualigenix

• • What Is Healthcare Coding and How It Works
  • Outpatient Coding Accuracy at Scale
  • Inpatient Coding for Physicians
  • Medical Billing vs Coding: Key Differences
  • What Is RCM in Medical Billing
  • Provider Credentialing Services
  • OIG Compliance Guidance for Physician Practices (OIG.HHS.gov)

 

Precision. Progress. Qualigenix.