A medical billing audit examines the billing record from two simultaneous perspectives: compliance and revenue. From the compliance perspective, auditors are looking for coding that is unsupported by documentation, codes billed at higher levels than the clinical record justifies, modifiers applied to services that don’t meet the criteria for their use, and billing patterns that suggest intentional rather than inadvertent errors. From the revenue perspective, auditors are looking for the opposite problem, coding that is supported by documentation but billed at lower levels than the documentation warrants, services captured but not billed, and modifier omissions that result in bundling where separate billing was appropriate. Understanding both perspectives is what makes a billing audit more than a compliance exercise. It is a complete diagnostic of what the billing record is producing versus what it should be producing. Most practices think about billing audits in one of two ways: either as something that happens to them — a payer audit, an OIG inquiry, a Medicare Administrative Contractor review or as an internal compliance exercise that confirms the billing team is doing things correctly. Both framings are incomplete. A billing audit conducted correctly is both a compliance diagnostic and a revenue recovery tool. The compliance side confirms that billed codes are supported by documentation, that modifiers are used correctly, and that billing patterns don’t expose the practice to overpayment liability. The revenue side reveals the systematic coding, missing charges, and documentation specificity gaps that are silently reducing what the practice collects for the clinical work it delivers every day. What makes a billing audit genuinely useful whether conducted internally or by an outside auditor is understanding what each element of the audit reveals and what each finding requires as a response. This blog covers the primary audit focus areas, what auditors examine in each, and what the findings indicate about both compliance risk and revenue recovery opportunity. Medical billing auditors examine seven primary areas: E/M code distribution against specialty benchmarks, documentation support for billed code levels, modifier appropriateness and consistency, ICD-10 diagnosis code specificity, charge capture completeness, payer-specific billing rule compliance, and billing pattern anomalies that suggest systematic error. Each area reveals both compliance risk and revenue recovery opportunity, the same audit that identifies over coding liability also identifies coding revenue loss on different encounter types. Medical Billing Audit: Key Standards and Benchmarks Audit Area 1: E/M Code Distribution Analysis The E/M code distribution is the first element every billing auditor examines because it is the fastest way to identify whether a physician’s billing pattern is an outlier relative to their specialty peers. The distribution shows what percentage of established and new patient visits are billed at each E/M code level over a defined period. When compared against specialty benchmarks, an anomalous distribution — whether shifted significantly toward lower codes or higher codes than the peer group — is a signal that warrants chart review. What the Distribution Reveals A primary care physician billing 75% of established patient visits at 99213 when the specialty benchmark centers at 99214 is a candidate for undercoding investigation. The distribution doesn’t prove under coding. it signals a pattern that requires chart review to confirm. When chart review shows that the documentation consistently supports 99214 for encounters coded at 99213, the distribution finding has identified a systematic revenue loss. When chart review shows the documentation genuinely supports only 99213, the distribution is accurate and the practice’s patient mix may differ from the benchmark. A specialist billing 40% of established patient visits at 99215 when the specialty benchmark shows only 15% at that level is a candidate for overcoding investigation. The high-code distribution doesn’t prove overcoding, it signals a pattern that requires chart review to confirm documentation support at the highest level. When chart review shows that the documentation doesn’t support 99215 for those encounters, the distribution has identified an overcoding compliance risk. When chart review shows the documentation genuinely supports 99215 for a subspecialist managing complex patients the distribution is accurate. The E/M distribution is a screening tool, not a finding. An anomalous distribution triggers chart review. Chart review produces the finding. Auditors who cite a distribution anomaly as a billing violation without reviewing the underlying documentation are making a statistical inference rather than a clinical audit determination. A practice with a distribution that differs from the specialty benchmark should welcome chart review as the mechanism that confirms whether the distribution reflects appropriate coding or a systematic pattern that needs correction. Audit Area 2: Documentation Support for Billed Code Levels After identifying distribution anomalies, auditors pull charts to verify that each billed code level is supported by the clinical documentation. This is the core of the coding audit: reading the note and applying the applicable coding guidelines to determine what code the documentation supports, then comparing that determination against the code that was billed. 2021 AMA E/M Guidelines Application For outpatient office visits, the 2021 AMA guidelines determine code level based on medical decision making complexity or total time on the date of service. An auditor reviewing a 99214 established patient encounter applies the MDM criteria: what problems are documented as being managed, what data is documented as being reviewed with interpretation, and what risk level is reflected in the documented treatment decisions. If the documentation establishes moderate MDM on at least two of the three elements, 99214 is supported. If it establishes only low MDM, 99213 was the appropriate code regardless of how complex the encounter actually was. This is where documentation quality becomes a compliance and revenue issue simultaneously. A physician who managed complex patients but documented minimally may have billed correctly at 99213 the documentation doesn’t support 99214 even if the clinical work did. An auditor reviewing those charts may find undercoding (the work warranted a higher code and the documentation supports it) or appropriate coding (the work warranted a higher code but the documentation doesn’t support it). The finding is different in each case, and the corrective action is different: coding education for undercoding cases, documentation improvement for appropriate-but-poorly-documented cases. Inpatient E/M Documentation Review For inpatient hospital visit codes, auditors apply the key component framework — history, examination, and medical decision making — that still governs inpatient code selection. Initial hospital care codes (99221-99223) require all three key components. Subsequent care codes (99231-99233) require at least two of three. Auditors reviewing inpatient coding look specifically at whether daily subsequent care notes document sufficient detail on each required component to support the code billed, or whether minimal daily progress notes are consistently billed at the highest subsequent care code regardless of the clinical complexity documented. Audit Area 3: Modifier Appropriateness and Consistency Modifiers are among the most audited elements of medical billing because they are among the most frequently misused — both in the direction of overcoding (applying modifiers to claim separate payment for services that should be bundled) and undercoding (omitting modifiers that would allow separate billing for legitimately distinct services). Auditors review modifier use from both directions. Modifier 25: Same-Day E/M and Procedure Modifier 25 is appended to an E/M code when a significant, separately identifiable E/M was performed on the same day as a procedure. It allows the E/M to be paid separately from the procedure rather than being bundled into the procedure’s global fee. Auditors examine modifier 25 use in two ways. From the compliance direction: does the documentation support a separately identifiable E/M that went beyond the pre- and post-service work included in the procedure? An E/M billed on the same day as a procedure with modifier 25 must reflect a distinct clinical evaluation that wasn’t the routine decision to perform the procedure. If the note shows only the procedure evaluation with no separate diagnostic assessment, modifier 25 may not be defensible. From the revenue direction: are there same-day procedure and E/M encounters where modifier 25 was not applied, causing the E/M to be bundled when it should have been separately billed? In high-volume practices, missing modifier 25 across dozens of encounters per week is a systematic underpayment that only a billing audit surfaces. Modifier 59 and X Modifiers: Distinct Procedural Services Modifier 59 and its more specific variants (XE, XS, XP, XU) are used to bypass NCCI bundling edits when two procedures are genuinely distinct — performed at different anatomical sites, in different sessions, or by different providers. Auditors examine whether modifier 59 is applied to procedure pairs that are genuinely distinct as the modifier represents, or whether it is being used as a blanket unbundling tool to override edits without clinical justification for doing so. Inappropriate modifier 59 use applying it to services that were performed together as components of the same service rather than as distinct services — is among the most common billing compliance findings in OIG and MAC audits. The clinical documentation must explicitly support the distinction the modifier claims. If the documentation describes a single procedure, modifier 59 cannot be applied to bill a component as a separate service. Modifier 24: E/M During Surgical Global Period Modifier 24 is used when an E/M service during a surgical global period is unrelated to the surgery. Without it, the E/M is bundled into the surgical global fee. Auditors examine both directions: are modifier 24 claims supported by documentation that clearly establishes the E/M was for a condition unrelated to the surgery, and are there global period E/M encounters for new conditions where modifier 24 was not applied, causing legitimate separate billing to be lost to bundling? Audit Area 4: ICD-10 Diagnosis Code Specificity ICD-10 code specificity is an audit element that affects both compliance and revenue cycle performance. From the compliance perspective, chronic use of unspecified codes when the documentation supports specific codes misrepresents the patient’s clinical situation in ways that affect risk adjustment, quality reporting, and medical necessity determination. From the revenue perspective, payers may deny claims or request additional documentation for services supported only by unspecified diagnosis codes when their coverage policy requires a specific code to confirm eligibility. What Auditors Examine Auditors review the ICD-10 codes assigned to each audited encounter and compare them against the clinical documentation for three specific questions. First: is the principal diagnosis the condition that was primarily responsible for the encounter, or was a secondary condition coded as primary? Incorrect principal diagnosis sequencing affects DRG assignment in facility coding and affects medical necessity determination for the primary service in professional billing. Second: is the diagnosis code at the highest specificity level the documentation supports? A diagnosis of type 2 diabetes mellitus with diabetic chronic kidney disease, stage 3 has a specific ICD-10 code. Coding it as “diabetes mellitus, unspecified” when the documentation clearly states the type, the complication, and the stage is a specificity failure on three levels simultaneously. Auditors flag this type of pattern as a systematic coding quality gap that requires coder training on specificity requirements. Third: are diagnosis codes used that the documentation doesn’t support? A code for a condition not documented in the note, or a code for a condition documented as historical or resolved when the coding guideline requires it to be documented as active and managed to be coded on the current encounter, is a potential over coding compliance finding. Warning: ICD-10 coding guidelines require that conditions be coded to the highest specificity available based on the documentation. Using an unspecified code when the documentation supports a specific code is a coding inaccuracy that auditors flag. However, using a specific code that the documentation doesn’t support to avoid an unspecified code is a compliance error. The correct approach is to code to what is documented and query the physician when documentation is insufficient to support the most specific code. Auditors distinguish between these two scenarios; practices and coders should understand the distinction clearly. Audit Area 5: Charge Capture Completeness Charge capture completeness is an audit area that is entirely focused on revenue recovery rather than compliance. An auditor reviewing charge capture is asking: were all services delivered during the audit period billed, and were they billed correctly for every element of the service? Missing Charges Missing charges — services delivered but never entered into the billing system are identified in a billing audit by comparing services documented in the clinical record against charges in the billing system. If an encounter is documented in the EHR but no corresponding charge exists in the billing system, the audit has identified a missing charge. If a procedure is documented in the operative report but wasn’t billed or was billed without certain components, the audit has identified incomplete charge capture. Missing charges in surgical practices are particularly consequential because surgical procedures have high per-encounter allowed amounts and complex charge structures where individual components can be missed. An assistant surgeon’s charge omitted from a major surgical case, a supply billed separately from the procedure but not captured, or a second procedure performed in the same session but missed in charge capture all represent meaningful revenue losses per incident that compound across a month’s operative cases. Unbilled Services During a Series For services delivered in a series — infusions, physical therapy visits, injection series auditors compare the number of treatments documented in the clinical record against the number of treatments billed. A patient documented as receiving 12 infusion sessions during the audit period with only 10 charges in the billing system has two missing charges. In high-volume infusion practices where dozens of patients receive regular infusions, a systematic charge capture gap can represent significant uncollected revenue that charge reconciliation would have caught. Audit Area 6: Billing Pattern Anomalies Beyond specific code and documentation review, auditors look for billing pattern anomalies statistical patterns in the billing data that suggest systematic errors, unusual service frequencies, or billing combinations that warrant further investigation. 100% Rate Billing When a physician bills a specific code at 100% of encounters every patient on every date of service receives the same code the pattern is an anomaly. Clinical practice is inherently variable; patient needs vary, encounter complexity varies, and a billing pattern that shows zero variation across all encounters suggests habitual code selection rather than clinical code selection. Auditors flag 100% rate billing for a specific code as a distribution anomaly requiring chart review to confirm whether the uniformity reflects genuine clinical uniformity or coding habit. High Frequency Services Services billed at unusually high frequency relative to specialty peers attract audit attention from both internal auditors and external reviewers. A physician billing critical care codes at a rate significantly higher than other physicians in the same specialty and practice setting, or a practice billing specific diagnostic tests at a rate well above the national average for that specialty, is a frequency outlier that warrants review. The outlier may be entirely legitimate, a subspecialist seeing sicker patients, or a practice in a demographic with higher disease burden, but the pattern requires documentation that supports the clinical rationale for the frequency. Unusual Code Combinations Certain code combinations on the same claim are unusual or clinically inconsistent. A procedure that is typically performed unilaterally billed bilaterally without a modifier and without documentation supporting bilateral service. An add-on code billed without the primary code it accompanies. A follow-up visit code billed on the same date as a new patient code for the same patient. Auditors use code pair analysis to identify these combinations for review. Audit Area 7: OIG Compliance Risk Focal Points The Office of Inspector General publishes an annual Work Plan identifying the specific service types, CPT codes, provider categories, and billing patterns the OIG intends to audit in the coming year. The Work Plan is the most important publicly available guide to where government audit risk is concentrated, and it is a direct input to any compliance-focused billing audit. Current and recurring OIG focal points in physician billing include high-level E/M coding, particularly 99215 billing rates relative to specialty peers; evaluation and management services billed on the same day as procedures with modifier 25; services billed incident-to under supervising physician NPIs; telehealth billing compliance with applicable place-of-service and supervision requirements; and drug administration billing, particularly in infusion practices where drug units, drug codes, and administration codes must all align with the documented clinical record. A practice that has not reviewed the current OIG Work Plan and assessed its own billing against the identified focal points is operating without a compliance risk map. The OIG publishes this information not to surprise practices but to allow proactive compliance assessment before a formal audit becomes necessary. Internal audits aligned with OIG Work Plan priorities address the highest-risk areas first rather than spreading audit effort uniformly across all billing categories. The 60-Day Rule: What Auditors Find That Practices Must Act On When a billing audit identifies that a practice has been systematically overbilling billing codes that the documentation doesn’t support at a rate that suggests a systemic pattern rather than isolated errors the compliance response is not simply to correct future billing. The CMS 60-day rule requires that identified Medicare and Medicaid overpayments be reported to CMS and refunded within 60 days of when the overpayment is identified and quantified. This rule creates a specific and significant consequence for medical billing audit findings that identify systematic over coding: the finding doesn’t just require prospective correction, it may trigger a legal obligation to calculate the overpayment amount, report it to the applicable Medicare or Medicaid program, and refund it within the statutory window. Failure to comply with the 60-day rule once an overpayment is identified converts what might have been an inadvertent billing error into a potential False Claims Act violation. This is precisely why internal audits — conducted by the practice proactively, with results reviewed by legal counsel when significant overpayment patterns are found — are preferable to learning about systematic over coding from an external OIG or MAC audit. The internal audit allows the practice to manage the compliance response on its own timeline, with legal guidance, rather than responding to an external investigation under the government’s timeline and scrutiny. What Auditors Don’t Find That They Should: The Revenue Side of the Audit The audit elements discussed above — distribution anomalies, documentation support, modifier misuse, diagnosis specificity, charge capture — are equally relevant to revenue recovery as to compliance. The same audit that surfaces overcoding compliance risk in one area of the billing record frequently surfaces under coding revenue loss in another. A physician who is over coding at 99215 for some encounter types may be under coding at 99213 for others where the documentation would support 99214. A practice with a modifier 59 compliance concern may also have a systematic modifier 25 omission problem that is causing same-day E/M and procedure services to bundle when they should have been separately billed. A coder who is assigning too-specific a code for one condition may be using unspecified codes for another condition category. An audit that focuses exclusively on compliance without simultaneously reviewing the revenue side of the same billing record leaves revenue recovery findings on the table. The most valuable billing audits — for the practice’s financial health as well as its compliance posture — examine both directions simultaneously and report findings in both categories. How Qualigenix Approaches Billing Audit Support At Qualigenix, we run monthly E/M code distribution reports for every physician across every client practice as a standard component of our revenue cycle management. These reports flag distribution anomalies relative to specialty benchmarks and trigger quarterly chart audits on physicians with anomalous patterns. Our quarterly chart audits sample 10 to 15 encounters per physician, apply the current coding guidelines, and return findings categorized by type: under coding, over coding, modifier error, diagnosis specificity, or documentation gap. We deliver findings to physicians with specific chart-level examples, not aggregate statistics and we track whether physician documentation changes in response to specific feedback over the following quarter. We align our audit calendar with OIG Work Plan priorities so that the highest-risk billing categories receive audit attention first. When audit findings suggest potential overpayment patterns, we flag them for the practice’s compliance officer and legal counsel to assess the 60-day rule applicability before any compliance action is taken. Our 99% claim accuracy rate and 95% first-pass acceptance rate reflect a coding and billing operation that monitors its own quality continuously rather than waiting for an external audit to identify problems that have been compounding for months.