Medical Billing Audit: What It Is, Why It Matters, and What to Check
Most practices do not lose revenue in one big dramatic event. They lose it slowly. A wrong modifier here. A missed charge there. A denial that nobody worked. By the end of the year the gap is real money and nobody can point to the moment it started.
A medical billing audit is how you find that gap. It is a structured review of your claims your codes your documentation and your payer responses. Done properly it tells you exactly where revenue is leaking and exactly where your compliance risk sits.
This guide explains what a billing audit actually involves why it matters more now than it did five years ago and the full checklist of what your auditor should be reviewing.
What Is a Medical Billing Audit?
A medical billing audit is a formal examination of the records and processes behind your claims. The auditor pulls a sample of encounters and traces each one end to end. From the clinical note to the code to the claim to the payment posting.
The goal is simple. Confirm that what you billed matches what you documented and that what you were paid matches what you were owed.
An audit is not the same as a claim scrub. A scrub is automated and happens before submission. An audit is human and looks backwards at patterns. A scrub catches a missing field. An audit catches the fact that one provider has been undercoding every established patient visit for eighteen months.
The Main Types of Medical Billing Audits
Not every audit answers the same question. Knowing the type you need saves time and money.
Internal audit. Your own staff or your billing partner reviews the records. Useful for routine monitoring and quick course correction.
External audit. An independent firm reviews the records. Stronger objectivity and better defence if a payer ever challenges your coding.
Prospective audit. Claims are reviewed before submission. Slower but it prevents denials instead of chasing them.
Retrospective audit. Paid and denied claims are reviewed after the fact. Best for spotting trends and recovering underpayments.
Random sample audit. A small set of charts chosen without bias. Good for a general health check.
Focused audit. A deep review of one provider one payer or one code range. Use this when a specific denial pattern is already showing up in your reports.
Most practices benefit from a mix. A focused retrospective audit once a year plus light internal reviews every quarter keeps problems small.
Why a Medical Billing Audit Matters
It recovers revenue you already earned
Underpayments are common and rarely obvious. Payers do not always reimburse at contracted rates. Secondary claims get forgotten. Denials get written off because nobody had time to appeal them. An audit puts a number on all of it.
It protects you from overpayment demands
Overcoding is the risk nobody wants to discuss. If a payer or a federal contractor later determines that services were billed at a higher level than the documentation supports you may be asked to return the money. Sometimes with penalties attached. The Office of Inspector General publishes compliance guidance for physician practices and self auditing sits at the centre of it.
It exposes documentation gaps
Many denials are not coding problems at all. They are documentation problems. The service was performed correctly but the note does not prove medical necessity. An audit surfaces this before a payer does.
It reveals process failures
Sometimes the finding has nothing to do with codes. Maybe eligibility is not being verified at check in. Maybe prior authorisations are being requested too late. Maybe charges from one location are entering the system three days behind everyone else. Audits catch these because they follow the whole path.
It gives you real benchmarks
After an audit you know your clean claim rate your denial rate your days in accounts receivable and your net collection rate. Without those numbers you are guessing about your own practice.
What to Check in a Medical Billing Audit
This is the checklist. Anything less than this is a spot check rather than an audit.
1. Clinical documentation and medical necessity
Does the note support the level of service billed? Is the diagnosis specific enough to justify the procedure? Are signatures dates and provider credentials present on every entry? Missing or generic documentation is the single most common root cause behind recoupments.
2. Coding accuracy
Review CPT HCPCS and ICD-10 selection against the record. Check for:
- Evaluation and management levels that do not match the documented complexity
- Unbundling of services that should be billed as one code
- Upcoding and undercoding patterns by individual provider
- Outdated codes still sitting in the charge master
- Diagnosis codes that lack the required specificity
3. Modifier usage
Modifiers cause a huge share of preventable denials. Look closely at 25 59 XU and the laterality modifiers. Confirm that each one is supported by the note rather than added out of habit.
4. Charge capture
Compare the appointment schedule against the billed encounters for the same period. Any patient seen but never billed is pure lost revenue. Check hospital rounds inpatient visits and procedures performed outside the main office because these slip most often.
5. Claim submission and scrubbing
How many claims pass on first submission? Which errors repeat? Are claims going out within an acceptable window after the date of service? Timely filing limits are unforgiving and a claim denied for late filing is usually gone for good.
6. Denial and rejection patterns
Sort denials by reason code by payer and by provider. Then answer three questions. What is the top denial reason? What percentage of denials are being appealed? What percentage of appeals succeed? A practice with a high denial rate and a low appeal rate is leaving money on the table every single week.
7. Payment posting and contract compliance
Compare actual payments against your contracted fee schedule. Underpayments hide easily inside normal looking remittance advice. Check that adjustments and write offs are being posted correctly and that nothing is being written off without approval.
8. Accounts receivable ageing
Break AR into buckets. Zero to thirty. Thirty one to sixty. Sixty one to ninety. Over ninety. A heavy tail past ninety days points to follow up failure rather than payer delay.
9. Patient billing and collections
Are copays being collected at the time of service? Are statements going out on a consistent cycle? Patient responsibility is a growing share of practice revenue and it needs the same discipline as payer billing.
10. Credentialing and enrolment status
Claims billed under a provider who is not yet active with a payer will deny no matter how perfect the coding is. Verify that every provider is enrolled with every payer you bill and that revalidation dates are tracked. The Centers for Medicare and Medicaid Services maintains enrolment and revalidation requirements that must be met on schedule.
11. Compliance and privacy safeguards
Confirm that access to protected health information is limited appropriately and that your policies match current HIPAA requirements published by the Department of Health and Human Services. Audit trails user access logs and business associate agreements all belong in scope.
12. Refunds and credit balances
Unresolved credit balances are a liability. Overpayments generally must be returned within a defined window. Leaving them parked on the books creates exposure.
How Often Should a Practice Audit?
There is no single correct answer but a practical rhythm looks like this.
- New provider: review a sample of charts within the first sixty days
- Established providers: a small internal review every quarter
- Full practice: a comprehensive external audit once a year
- After any major change: new EHR new payer contract new service line or new coding update
Frequency should rise if you have had a recent denial spike a payer inquiry or high staff turnover in the billing team.
The Audit Process Step by Step
- Define scope. Choose the date range the providers the payers and the sample size.
- Pull records. Gather notes claims remittance advice and payer correspondence for the sample.
- Review and score. Compare documentation to codes and codes to claims. Record every discrepancy.
- Quantify impact. Convert findings into dollars. Under billed. Over billed. Denied and never appealed.
- Identify root cause. Separate one off errors from systemic process failures.
- Report. Deliver findings with clear evidence and prioritised recommendations.
- Correct and educate. File corrected claims where appropriate. Train the staff involved.
- Re-audit. Check the same area again in ninety days to confirm the fix held.
Step eight is the one practices skip. It is also the one that proves whether the audit actually worked.
Common Findings We See Again and Again
- Evaluation and management levels clustered unnaturally around one code
- Modifier 25 applied to every visit with a minor procedure
- Prior authorisation obtained after the service was rendered
- Eligibility not rechecked for returning patients
- Denials older than ninety days sitting untouched in a work queue
- Providers still billing under an expired credentialing record
- Secondary insurance never billed after primary payment posted
None of these are exotic. All of them are expensive when they run unchecked for a year.
Turn Audit Findings Into Collected Revenue
An audit report is only useful if somebody acts on it. That means corrected claims filed appeals worked staff retrained and processes rebuilt so the same leak does not reopen next quarter.
EZE Medical Billing works with practices across Albuquerque and throughout New Mexico on exactly this. Billing audits denial management credentialing and full revenue cycle management handled by people who do this every day. If you want to know what your current setup is costing you a billing audit is the fastest way to find out.
Contact EZE Medical Billing to request a review of your claims and see where your revenue is going.
Frequently Asked Questions
How long does a medical billing audit take?
A focused audit on a small sample can be completed in one to two weeks. A comprehensive practice wide audit usually takes three to six weeks depending on record volume and how quickly documentation is made available.
Is a billing audit only for practices that suspect a problem?
No. The most valuable audits happen in practices that think everything is fine. Problems that are visible have usually already cost you money. Audits find the ones that are not visible yet.
What is the difference between a coding audit and a billing audit?
A coding audit reviews code selection against documentation. A billing audit includes that plus charge capture claim submission denial handling payment posting and accounts receivable. Coding is one part of billing.
Can we audit ourselves?
You can and you should do internal reviews regularly. An external audit adds independence and a wider benchmark. Most practices use both.
What happens if the audit finds we were overpaid?
Identified overpayments generally need to be refunded to the payer within the required timeframe. Finding it yourself and correcting it voluntarily is a far better position than having a payer find it first.