The purpose is not to find an employee to blame. It is to identify where a process, system setting, payer rule, or unclear responsibility produces repeat errors. A useful audit ends with assigned corrective actions and a follow-up review, not a report that sits unread.
What Is a Medical Billing Audit?
A medical billing audit is a structured comparison of clinical records, claims, remittance information, payer contracts, and billing reports. It tests whether services were documented, coded, submitted, paid, adjusted, and followed up correctly.
A revenue-focused audit looks for missed charges, avoidable denials, underpayments, old A/R, and incorrect write-offs. A compliance-focused audit tests whether billed codes, units, modifiers, medical necessity, signatures, and supporting documentation meet applicable requirements. Most practices need both perspectives because revenue accuracy and compliance are connected.
Internal staff can perform targeted reviews, while an independent auditor can provide a broader baseline or examine a high-risk area. The CMS self-audit guide describes how physicians can use self-audits to identify and correct improper payments. When an audit raises a possible legal disclosure or repayment issue, involve qualified compliance or legal counsel before acting.
What to Prepare Before Starting
Define the scope before pulling records. Identify the providers, locations, payers, dates of service, procedure families, and revenue cycle stages under review. A review of ten randomly selected primary care encounters answers a different question from a focused audit of modifier 25 claims or denied orthopedic procedures.
Collect the complete record for each selected account. That typically includes the encounter note, orders, superbill or charge ticket, claim history, clearinghouse responses, ERA or EOB, payment posting detail, adjustment history, denial notes, appeal documents, payer contract information, and patient statement history. Coding cannot be validated from a claim alone.
Create a worksheet with one row per claim and columns for the test performed, evidence reviewed, result, financial effect, compliance risk, root cause, responsible owner, due date, and re-audit status. Remove unnecessary patient identifiers from working reports and restrict access to people who need the data.
Medical Billing Audit Checklist
1. Patient registration and insurance eligibility
Compare the demographic and insurance data on the claim with the information available on the date of service. Confirm patient name, date of birth, address, subscriber relationship, member ID, group number, payer routing, coordination of benefits, and coverage dates.
Check whether eligibility was verified before the visit and whether the response was saved. Review copay, deductible, coinsurance, referral, network, and benefit limitations. A claim rejected for an invalid member ID is a registration problem even when the billing department later corrects it.
2. Provider credentialing and enrollment
Confirm that the rendering and billing providers were enrolled with the payer for the service location and effective date. Match provider names, NPIs, tax IDs, taxonomy codes, addresses, reassignment records, and electronic payment enrollment across payer files and billing systems.
Look for claims held or denied while a new provider was pending, services billed under another clinician without a supported arrangement, and outdated location information. Credentialing gaps often resemble claim errors until the same denial appears across otherwise correct submissions. Swift’s medical credentialing services can help reconcile payer records when enrollment issues affect reimbursement.
3. Documentation and medical necessity
Verify that the record identifies the patient, provider, date of service, relevant history, examination or assessment, plan, orders, results, and signature as required for the service. The note should support what was performed, why it was reasonable for the patient’s condition, and who performed it.
Do not audit by searching for code language pasted into a template. Compare the substance of the note with the billed service. Watch for cloned text, contradictory statements, incomplete time documentation, unsigned records, missing orders, and addenda created without a clear date and reason.
4. CPT, HCPCS, ICD-10 and modifier accuracy
Trace every billed line to the documentation. Confirm code selection, code year, diagnosis specificity, units, place of service, laterality, provider type, and applicable modifiers. Test whether diagnosis codes support the service and whether sequencing reflects the encounter.
Review high-use and high-risk modifiers separately. For example, modifier 25 requires a significant, separately identifiable E/M service on the same date as another procedure. A template that adds the modifier automatically is a system risk, not proof that the claim is correct. Check payer edits and authoritative coding guidance applicable to the date of service.
5. Charge capture and missed services
Reconcile appointment schedules, procedure logs, medication administration records, imaging or laboratory interfaces, and operative logs to posted charges. Identify completed encounters without charges, duplicate charges, incorrect units, and services posted to the wrong patient, provider, or date.
Measure the time from the encounter to charge entry. A practice can submit clean claims and still lose revenue when documented services never enter the billing system. Investigate patterns by provider, location, service line, and day of week rather than treating each missed charge as an isolated mistake.
6. Claim submission and timely filing
Confirm that claims contain the correct payer, provider identifiers, diagnosis pointers, claim frequency, place of service, authorization data, and required attachments. Review clearinghouse rejections separately from payer denials. A rejected claim may never reach the payer, so counting it only in the denial report understates the problem.
Compare submission and resubmission dates with each payer’s timely filing rules. Trace any timely filing write-off back to the first avoidable delay, such as late documentation, a registration error, an unworked rejection, or a queue with no assigned owner.
7. Denial management and appeals
Group denials by payer, reason code, provider, CPT or HCPCS code, location, and root cause. Verify that staff distinguish corrected claims, reconsiderations, and formal appeals. Each path has different evidence and deadlines.
Sample denied claims through final resolution. Confirm that notes state what happened, what was submitted, the next follow-up date, and the outcome. Repeated eligibility, authorization, coding, and documentation denials should generate upstream changes. Working the same denial every month is activity, not effective denial management.
8. Payment posting and underpayments
Reconcile deposits to ERA and EOB totals, then test line-level posting. Confirm payer payments, patient responsibility, contractual adjustments, sequestration or other reductions, reversals, takebacks, secondary balances, and unapplied cash.
Compare allowed amounts with payer contract terms where reliable fee schedules are available. Flag zero-pay lines, unexpected bundling, missing multiple-procedure payments, and recurring variances. An account can show a zero balance and still contain an underpayment if the difference was posted as an adjustment.
9. Contractual adjustments and write-offs
Review adjustment codes, supporting EOB or ERA data, approval levels, and account notes. Separate legitimate contractual reductions from timely filing losses, authorization failures, unappealed denials, administrative concessions, bad debt, and posting corrections.
Search for generic adjustments, round-dollar write-offs, unusual activity by user, rapid write-off and reversal patterns, and payer-specific concentrations. The article What Is a Write-Off in Medical Billing? explains why adjustment categories must preserve appeal rights and reporting accuracy.
10. A/R aging and patient balances
Review insurance and patient A/R by aging bucket, payer, provider, location, and balance size. Sample accounts from each bucket, especially balances older than 90 days. Confirm that follow-up occurs before payer appeal and filing limits expire.
Look for accounts repeatedly touched without resolution, small balances ignored by policy, credit balances, secondary claims not filed, and patient balances created before insurance completed adjudication. When collectible older claims exceed the team’s capacity, dedicated A/R recovery services may be more effective than allowing the backlog to compete with current claims.
11. Access, compliance and written procedures
Review user access to the EHR, practice management system, clearinghouse, payer portals, bank information, and reporting tools. Remove inactive users and confirm that privileges match job duties. Test whether changes to charges, payments, and adjustments leave a usable audit trail.
Verify that written procedures identify who owns registration corrections, charge entry, rejections, denials, refunds, credit balances, write-offs, payer correspondence, and record requests. Policies should match actual workflows. A document that describes a process nobody follows does not reduce risk.
Billing Metrics to Include in the Audit
Use metrics to locate patterns, then validate them at claim level. At minimum, calculate clean claim or first-pass acceptance rate, rejection rate, denial rate, days in A/R, A/R over 90 days, net collection rate, charge lag, denial overturn rate, and write-offs by reason.
Document every formula. One system may define a clean claim as accepted by the clearinghouse, while another counts only claims paid on first submission. Trends are useful only when the definition and data source remain consistent.
| Metric | Audit question | Follow-up view |
|---|---|---|
| Claim rejection rate | Are claims reaching the payer? | Reason, location, user, clearinghouse edit |
| Denial rate | Which adjudicated claims are not paying? | Payer, reason, code, provider |
| Days in A/R | How quickly do charges become cash? | Payer and aging bucket |
| Net collection rate | How much collectible revenue is received? | Provider, payer, service line |
| Write-off rate | Why are balances removed? | Adjustment reason and approving user |
How to Select a Claim Sample
A purely random sample provides a broad view but may miss high-risk activity. A practical approach combines random claims with targeted selections. Include major payers, new and established patient services, procedures, high-dollar claims, common modifiers, denied claims, adjusted claims, telehealth encounters, new providers, and services from multiple locations.
Do not treat an arbitrary sample size as statistically representative of every claim. Record how the sample was selected and what conclusions it can support. A small focused review can confirm a workflow defect, while an extrapolation or formal compliance investigation may require professional statistical and legal guidance.
How to Document Audit Findings
Each finding should state the requirement or expected process, the evidence reviewed, what occurred, affected claims, estimated financial effect when supportable, compliance significance, root cause, corrective owner, due date, and validation method.
Rank findings by risk rather than by how easy they are to fix. Unsupported billing, unresolved overpayments, patient data exposure, and filing deadlines need immediate attention. Reporting preferences and minor workflow inefficiencies can follow.
Internal vs External Medical Billing Audit
Internal reviews work well for recurring monitoring, new-provider feedback, monthly denial checks, and validation after a process change. Staff know the systems and payer history, which helps them investigate quickly. Familiarity can also create blind spots.
An external audit provides independence and skills the practice may not maintain internally. It is useful for establishing a baseline, reviewing specialty coding, assessing a vendor, investigating a sudden performance decline, or preparing a corrective program. Before sharing records, define the scope, confidentiality, secure access, deliverables, and who will receive the report.
What to Do After the Audit
- Address urgent compliance, privacy, repayment, and filing-deadline issues first.
- Group individual errors by root cause instead of correcting claims one at a time.
- Assign every action to one owner with a realistic completion date.
- Correct affected claims only through the appropriate payer and compliance process.
- Update workflows, system edits, templates, and role-specific training.
- Repeat the targeted test to confirm that the error rate actually declined.
Preserve the original findings and evidence. A closed-loop record showing the issue, correction, training, and re-audit is more useful than a revised worksheet that hides what was initially found.
When to Request a Professional Billing Audit
Outside help is appropriate when leaders cannot obtain reliable reports, the same denials continue, A/R is aging, write-offs rise without explanation, collections change unexpectedly, a key biller leaves, a new system is implemented, or the practice plans to change billing companies.
Swift’s medical billing audit services review claims, denials, payments, aging, coding patterns, and workflow ownership. The result should be an actionable remediation plan, not only a list of errors. Request a free medical billing audit if this medical billing audit checklist reveals gaps your team cannot quantify or correct.
Common Audit Mistakes to Avoid
Do not limit the review to paid claims. Paid does not always mean correct, and a payment can still include unsupported coding, an incorrect allowed amount, or patient responsibility posted to the wrong account. Include denials, zero-pay lines, adjusted balances, credits, and claims that never left the clearinghouse.
A second mistake is reviewing only the billing department. Registration, scheduling, clinical documentation, credentialing, system configuration, and payer contracts all affect the claim. When an auditor finds a recurring eligibility error, the corrective owner may sit at the front desk rather than in billing.
Avoid changing the sample after results appear unfavorable. Document the selection method before review and preserve exceptions. Finally, do not announce success based only on checklist completion. Recalculate the affected metric and re-sample claims after the correction has operated long enough to produce evidence.
Frequently Asked Questions
What is included in a medical billing audit checklist?
It should cover registration, eligibility, credentialing, documentation, coding, charge capture, claim submission, rejections, denials, payment posting, adjustments, write-offs, A/R, patient balances, access controls, reporting, and corrective actions.
How often should a medical practice conduct a billing audit?
The cadence should reflect risk, volume, specialty, staffing, and prior findings. Many practices use recurring targeted reviews plus a broader periodic audit. A denial spike, new provider, system conversion, staff turnover, or payer inquiry can justify an immediate focused review.
How do you verify coding accuracy during an audit?
Compare each billed code, unit, diagnosis pointer, place of service, and modifier with the complete record and applicable guidance for the date of service. The claim and clinical documentation must be reviewed together.
What is the difference between a billing audit and a compliance audit?
A billing audit often emphasizes revenue cycle accuracy and collections. A compliance audit emphasizes whether claims and operations follow applicable requirements. Their scopes overlap because unsupported coding can create both repayment risk and inaccurate revenue.
How long does a medical billing audit take?
Timing depends on scope, sample size, record access, number of providers, specialty complexity, and data quality. A focused denial review may take days, while a multi-provider review covering coding and the full revenue cycle can require substantially more time.
What should you do if an audit reveals significant problems?
Preserve the evidence, stop ongoing errors where appropriate, and involve qualified compliance or legal counsel when repayment or disclosure obligations may exist. Build a corrective plan with owners, deadlines, training, claim actions, and a follow-up audit.
