Prior Authorization in Medical Billing

Prior Authorization in Medical Billing: How It Prevents Claim Denials

A patient is scheduled for an MRI on Thursday. The scan happens. The report is clean. Six weeks later the claim comes back denied with code CO 197 and the practice writes off the entire amount.

Nobody made a clinical mistake. Nobody coded it wrong. The payer simply never approved the service before it was performed.

Prior authorization is the single largest preventable cause of denials in most practices. It is also the one denial category that is almost entirely fixable through process rather than through appeals. This guide explains how prior authorization works in medical billing what causes authorization related denials and how a disciplined authorization workflow protects your revenue.

What Is Prior Authorization in Medical Billing?

Prior authorization is a payer requirement to approve a service before it is provided. The payer reviews the clinical documentation confirms medical necessity against its own policy and issues an authorization number that must appear on the claim.

Without that approval on file the payer has no obligation to pay. The service was still delivered. The patient still received care. But the contract between provider and payer says approval comes first.

Payers use prior authorization to control utilisation of expensive or frequently overused services. For practices it functions as a gate. Clear the gate correctly and the claim pays. Miss it and you are usually looking at a write off rather than a recoverable balance.

Prior Authorization vs Precertification vs Referral vs Predetermination

These four terms get mixed up constantly and each one carries a different consequence when it is missing.

The important distinction is that predetermination is advisory while prior authorization is mandatory. Staff who treat a predetermination letter as an authorization are one of the more common sources of surprise denials.

How Authorization Failures Turn Into Denials

Authorization problems surface on remittance advice through a small set of codes. Knowing which one you received tells you whether the money is recoverable.

CO 15 is the useful one. It usually means the authorization exists but something on the claim does not match it. A wrong CPT code a different rendering provider or a date outside the approved window. These get fixed and resubmitted.

CO 197 is the expensive one. It means no authorization was obtained at all. Most payer contracts explicitly bar balance billing the patient in this situation which turns the denial into a straight write off.

The Prior Authorization Workflow Step by Step

1. Verify eligibility and benefits first

Before anything else confirm the plan is active and identify the exact product. A patient with an insurance card from a national carrier could be on a commercial PPO a Medicare Advantage plan or a Medicaid managed care product. Each has different authorization rules.

2. Check whether the service requires authorization

Every payer publishes a prior authorization list. These change quarterly. The single most common cause of missed authorizations is staff working from a list that is six months old.

3. Confirm the exact CPT and diagnosis codes

Authorization is granted for specific codes not for a general procedure description. If the surgeon plans one code and bills another the authorization does not cover it.

4. Gather clinical documentation

Payers want evidence that conservative treatment was tried and failed where the policy requires it. Chart notes imaging results therapy records and physician orders. Weak documentation is the leading cause of medical necessity denials at this stage.

5. Submit the request

Submission happens through the payer portal by fax or through an electronic transaction. Portals are faster and give you a trackable reference number. Always capture that reference number even before approval.

6. Track the request until a decision arrives

This is where most practices lose control. A submitted request is not an approved request. Requests sit pending. Payers ask for more information. Without a tracking log with owner and follow up date attached these fall through.

7. Record the authorization details

Log the authorization number the approved CPT codes the number of approved units or visits the effective date and the expiry date. All five matter. An authorization approved for six physical therapy visits does not cover the seventh.

8. Confirm the details match at billing

Before the claim goes out verify that the authorization number is on the claim and that the billed codes provider and dates all fall inside the approved parameters. This one check prevents most CO 15 denials.

Services That Commonly Require Prior Authorization

Requirements vary by payer but these categories almost always need approval:

• Advanced imaging including MRI CT and PET scans
• Inpatient admissions and elective surgical procedures
• Durable medical equipment
• Specialty and infusion drugs
• Behavioral health inpatient and intensive outpatient programmes
• Applied behaviour analysis services
• Physical occupational and speech therapy beyond an initial visit allowance
• Sleep studies
• Genetic and molecular testing
• Out of network referrals
• Home health and skilled nursing placement

Practices in mental and behavioral health ABA services radiology and durable medical equipment carry the heaviest authorization burden because nearly every service line in those specialties sits on a payer authorization list.

What Changed in 2026: The CMS Interoperability and Prior Authorization Rule

This is the part most practices have not caught up with yet.

CMS released the Interoperability and Prior Authorization final rule known as CMS 0057 F in January 2024. Its operational requirements took effect on 1 January 2026 and they change what payers owe you.

The rule applies to Medicare Advantage organisations state Medicaid and CHIP fee for service programmes Medicaid and CHIP managed care entities and Qualified Health Plan issuers on the federally facilitated exchanges. Note that commercial group plans and traditional employer coverage are not included.

What impacted payers must now do:

• Issue decisions on expedited requests within 72 hours
• Issue decisions on standard requests within seven calendar days
• Provide a specific reason for every denial rather than a generic refusal
• Publicly report annual prior authorization metrics on their website including approval and denial rates and average decision times

The metrics requirement is quietly powerful. Payers had to post calendar year 2025 numbers by 31 March 2026. That means you can now look up a payer’s published denial rate and average turnaround before you accept a contract or when you escalate a pattern of delays.

By 1 January 2027 these payers must also operate a FHIR based Prior Authorization API that supports electronic submission status checks and structured responses. Drugs are excluded from the API requirement. Full details sit in the CMS fact sheet and the Prior Authorization API FAQ.

What this means practically: if a Medicare Advantage or Medicaid managed care plan is sitting on your standard request past seven calendar days that is now a compliance issue and not just a service complaint. Document the submission timestamp. Escalate citing the rule.

Common Reasons Prior Authorization Requests Fail

• Working from an outdated payer authorization list
• Wrong plan identified at eligibility check
• CPT code submitted does not match the code eventually billed
• Missing evidence of conservative treatment where policy requires it
• Request submitted to the delegated vendor instead of the payer or the reverse
• Retroactive request filed after the service was already performed
• Authorization expired before the service date
• Units or visits exhausted without a renewal request
• Rendering provider on the claim differs from the provider on the authorization
• Place of service changed between approval and delivery
• No follow up on a pending request until it was too late

Notice how many of these are administrative rather than clinical. That is exactly why authorization denials respond so well to process fixes.

How Prior Authorization Prevents Claim Denials

Done properly the authorization step removes uncertainty before any money is at risk.

It confirms coverage before the service. The payer has reviewed the request against its own medical policy. You are no longer guessing whether a service is covered.

It locks the codes. An approved authorization tied to specific CPT codes means the billing team knows exactly what can be submitted.

It creates a defensible record. Reference numbers submission timestamps and portal screenshots give you evidence when a payer later claims nothing was received.

It catches eligibility problems early. A large share of authorization requests fail at the eligibility stage which surfaces terminated coverage or the wrong plan before the appointment rather than after.

It protects the patient relationship. Patients discovering a large unexpected balance after treatment is one of the fastest ways to lose them. Authorization gives you the conversation up front.

The practices with the lowest denial rates are not the ones with the best appeals teams. They are the ones whose authorization process rarely lets a claim reach that point.

Appealing a Prior Authorization Denial

When a request is denied rather than missed you still have options.

Peer to peer review. Request a conversation between your physician and the payer medical director. This is often the fastest path and it succeeds more often than written appeals because the clinical reasoning is delivered directly.

Formal appeal. Submit within the payer deadline with the specific policy criteria addressed point by point. Do not simply resend the original packet. Quote the payer’s own medical policy language and show how the patient meets it.

External review. For Medicare Advantage and many Medicaid plans an independent review entity is available once internal appeals are exhausted.

Under the 2026 rules impacted payers must give a specific denial reason. Use it. A specific reason tells you exactly which criterion the reviewer felt was unmet which makes the appeal far more targeted than it used to be.

Prior Authorization Metrics Worth Tracking

If you are not measuring these you cannot tell whether your process is improving.

Track them by payer as well as overall. One plan quietly driving half your authorization denials is a very different problem from a broad process failure and it needs a very different fix.

Best Practice Checklist

• Refresh payer authorization lists every quarter and date stamp the version in use
• Verify eligibility at scheduling and again 48 hours before the visit
• Assign every pending request a named owner and a follow up date
• Never let a request sit unchecked for more than three business days
• Log authorization number approved codes units effective date and expiry date in the practice management system
• Build a hard stop at check in that flags services scheduled without an active authorization
• Run a weekly report on authorizations expiring within 14 days
• Screenshot every portal submission
• Track the payer contact name and reference number for each escalation
• Review authorization denials monthly by payer and by service line

Prior Authorization in New Mexico

New Mexico practices feel this harder than most because of the payer mix. A large share of patients sit in Medicaid managed care through Centennial Care and Medicare Advantage penetration continues to grow. Both of those categories fall directly under the CMS 2026 turnaround requirements which is genuinely good news for local providers.

Behavioral health intensive outpatient and partial hospitalisation programmes across the state carry particularly heavy authorization requirements including concurrent review during an episode of care. Our IOP billing and PHP billing teams manage those concurrent reviews so treatment days do not go unauthorised mid episode.

Authorization work also sits alongside enrollment. A provider who is not yet enrolled with a plan cannot obtain a valid authorization under that plan. If you are onboarding new clinicians read our provider enrollment guide alongside this one.

Frequently Asked Questions

What is prior authorization in medical billing?

Prior authorization is a requirement from an insurance payer to approve a service before it is provided. The payer reviews clinical documentation against its medical policy confirms medical necessity and issues an authorization number that must appear on the claim. Without that approval the payer is generally not obligated to pay and the claim will deny.

Why do claims get denied for prior authorization?

The most common causes are that no authorization was obtained the authorization expired before the service date the billed CPT code differs from the approved code the rendering provider does not match the authorization or the approved units were already exhausted. Denial code CO 197 indicates authorization was absent while CO 15 indicates an authorization exists but does not match what was billed.

Can you get prior authorization after the service is performed?

Some payers allow retroactive authorization in limited circumstances such as emergency services or when eligibility was not verifiable at the time of care. Most do not. Retroactive requests generally must be filed within a short window and require documented justification. Treating retroactive authorization as a routine fallback is one of the fastest ways to accumulate write offs.

How long does prior authorization take?

Under the CMS Interoperability and Prior Authorization rule impacted payers must decide expedited requests within 72 hours and standard requests within seven calendar days from 1 January 2026. That covers Medicare Advantage state Medicaid and CHIP programmes Medicaid and CHIP managed care and Qualified Health Plans on the federally facilitated exchanges. Commercial group plans are not covered by the rule and their timelines still vary widely.

Which payers are covered by the 2026 CMS prior authorization rule?

Medicare Advantage organisations state Medicaid and CHIP fee for service programmes Medicaid managed care plans CHIP managed care entities and Qualified Health Plan issuers on the federally facilitated exchanges. Traditional employer sponsored commercial plans are outside the rule so their prior authorization timelines remain unregulated by it.

What is the difference between prior authorization and a referral?

A referral comes from a primary care physician directing a patient to a specialist and is usually an HMO plan requirement. Prior authorization comes from the payer approving a specific service before it is delivered. Some visits need both. A referral alone does not satisfy an authorization requirement and assuming it does is a frequent source of denials.

Does prior authorization guarantee payment?

No. Authorization confirms medical necessity and coverage for the approved service but payment still depends on active eligibility on the date of service correct coding timely filing and the patient’s remaining benefits. An authorization greatly improves the odds of payment. It is not a payment guarantee.

What is a peer to peer review?

A peer to peer review is a direct conversation between the treating physician and the payer’s medical director about a denied or pending authorization. It is usually available within a short window after a denial. Peer to peer reviews often resolve faster than written appeals because the clinical rationale is explained directly to a clinical reviewer.

How can a practice reduce prior authorization denials?

Refresh payer authorization lists quarterly verify eligibility at scheduling and again before the visit assign a named owner to every pending request confirm that billed codes match approved codes and run a weekly report on authorizations nearing expiry. Add a check in stop that flags any scheduled service without an active authorization. Most authorization denials are process failures rather than clinical ones.

Should prior authorization be outsourced?

It depends on volume and specialty. Practices in behavioral health imaging durable medical equipment and infusion therapy carry authorization volumes that quickly overwhelm front desk staff who also handle scheduling and check in. Outsourcing helps most where the failure point is follow up discipline rather than knowledge. If your requests are being submitted correctly but not tracked to a decision that is the clearest signal.

Stop Losing Revenue to Authorization Denials

Authorization write offs rarely announce themselves. They accumulate quietly across a few claims a week until someone runs the numbers.

EZE Medical Billing Services manages prior authorization end to end for practices across Albuquerque and New Mexico including submission tracking concurrent review and appeals. We also audit your current authorization denials to show you exactly where the leak is.

Call +1 505 903 2759 or request a free consultation and we will review your last 90 days of authorization denials at no cost.