Medical practices across the United States lose billions of dollars every year — not because they provide poor care, but because of billing errors that no one caught in time.
A medical practice billing audit gives your practice a structured way to find those errors before they become denials, compliance violations, or lost revenue. In 2026, payer scrutiny is at an all-time high. CMS has increased its audit activity. Claim rejection rates are rising, and coding rules keep changing.
If your practice is not auditing its billing on a regular schedule, you are almost certainly leaving money on the table — and carrying more compliance risk than you realize.
Here is a complete billing audit checklist for medical practices you can use right now.
1. Patient Registration and Insurance Verification
Patient registration is where the revenue cycle begins and where many billing problems are born. Verify that demographic information is complete and accurate, and that insurance is verified before every appointment, not just at initial registration.
Run through these items for each patient record in your sample:
- Patient name, date of birth, and address match the insurance card exactly
- Primary and secondary insurance are both recorded where applicable
- Insurance eligibility is verified before every appointment
- Copay and deductible information is confirmed at the point of service
- Referring provider information is captured where required by the payer
2. Eligibility and Prior Authorization Checks
Authorization failures are expensive and preventable. Your team must obtain prior authorization before the patient is seen, not after. Requirements change frequently at the payer level, so a service that did not need authorization last year may require it now.
Check the following for each claim in your sample:
- A current and regularly updated list of services requiring prior authorization for each payer
- Authorization numbers are obtained before the date of service and documented in the patient record
- Authorization numbers are included on the claim form where required
- The authorized service matches the actual service performed — not just what was scheduled
- Expired authorizations are identified and renewed before the service date
3. CPT, ICD-10, and HCPCS Coding Accuracy
Coding accuracy is the foundation of a clean claim. Pull a random sample of claims and review each one against the clinical documentation. The code billed must match the service documented, not what was planned or ordered.
For each claim in your sample, verify:
- CPT codes match the services documented in the provider’s notes — not what was ordered or planned
- ICD-10 codes are coded to the highest level of specificity (unspecified codes are used only when clinically appropriate)
- The primary diagnosis code supports the medical necessity of the procedure billed
- Code combinations are checked against payer bundling edits before submission
- HCPCS codes for supplies and equipment meet payer-specific requirements
4. Modifier Usage Audit
Modifiers tell payers why a service was billed a certain way. Used correctly, they protect revenue. Used incorrectly, they trigger denials and payer audits. Focus on Modifier 25, Modifier 59, Modifier 51, and bilateral procedure modifiers, which are the most frequently misused.
Review the following for every claim with a modifier in your sample:
- Modifier 25 is supported by a separately documented E/M service in the provider’s notes — not just added to a procedure claim to allow both services to pay
- Modifier 59 is not used as a default workaround for payer bundling edits without genuine clinical justification
- Bilateral modifiers are applied when the same procedure is performed on both sides of the body
- Modifier usage is consistent across providers in the same specialty within your practice
- Modifier combinations are verified against CMS and payer-specific guidelines before submission
5. Evaluation and Management (E/M) Coding Review
E/M codes, particularly 99214 and 99215, are the most audited codes in medical billing. Under the 2023 AMA guidelines, code level is determined by medical decision-making complexity or total time, not element counting. Providers who have not updated their documentation habits carry daily compliance risk.
For each E/M claim in your sample, confirm:
- Code selection is based on MDM complexity or total time — not element counting
- Level 4 visits (99214) are supported by moderate-complexity MDM or 30–39 minutes of documented total time
- Level 5 visits (99215) are supported by high-complexity MDM or 40–54 minutes of total time
- New patient codes (99202–99205) are used only when the patient has not been seen by any provider of the same specialty in your practice within the past 3 years
- Documentation clearly and specifically supports the level billed — the code assigned matches what the note describes
6. Documentation Integrity Review
Your documentation is your evidence. Confirm that clinical notes are complete, timely, and specific enough to justify every code billed. Template-driven documentation that appears identical across multiple visits or patients is treated by payers and auditors as evidence of insufficient individualized documentation and creates significant compliance exposure.
Check the following for each note in your sample:
- Provider signatures are present and dated on every note
- Date and time of service match the claim
- Notes are specific to the individual patient and visit — not copied forward from a previous encounter without meaningful clinical modification
- Chief complaint, relevant history, examination findings, and plan are documented as applicable to the visit level billed
- Any addenda or corrections are separately dated and identified — not made retroactively without notation
7. Claim Submission Accuracy
A clean claim is a claim submitted correctly the first time — processed and paid without rejection or rework. Review your claim rejection and denial data to identify patterns in submission errors.
Common submission problems include incorrect place of service codes, missing or incorrect NPI numbers, wrong date formats, and missing required fields. Each of these is preventable — and each one delays payment and costs staff time to correct.
For each claim in your submission sample, verify:
- Claims are submitted with the correct billing NPI and the correct rendering provider NPI
- The place of service code matches the actual location where the service was delivered
- Date of service on the claim matches the documentation
- Referring provider NPI is included on claims that require it — particularly specialist and therapy claims
- Claims are submitted within the payer’s timely filing window
8. Denial Management Audit
Analyze your denial data by reason code, payer, provider, and procedure code. Identify the top five denial reasons by volume. Determine whether each denial is being actively appealed or written off without a challenge.
Review the following in your denial management audit:
- All denials are categorized by reason code and tracked systematically in your billing platform
- Denial trends are reviewed monthly — not only when collections drop
- Appeals are filed within each payer’s appeal deadline for every clinically and contractually appropriate denial
- Denial overturn rate is tracked by payer and by denial reason
- Recurring denial reasons are addressed at the process or documentation level — not just appealed individually each time they appear
9. Payment Posting and Underpayment Review
Compare payments received against your fee schedule for each payer. Identify claims where the payment falls below the contracted rate. Dispute those underpayments within the payer’s dispute window before the deadline passes.
For your payment posting review, verify:
- Payments are posted at the claim and line-item level — not as a single lump-sum entry
- Each payment is compared to the contracted rate for that specific payer and CPT code combination
- Contractual adjustments are applied only where a true contract write-off is required — not used to absorb underpayments that should be disputed
- Electronic remittance advice is reconciled against the actual deposit received
- Underpayments above a defined threshold are flagged, documented, and appealed
10. Accounts Receivable Audit
Your AR aging report tells you where your revenue is and how long it has been waiting. Focus on the 90+ day bucket, which is the highest risk of non-collection.
- AR days outstanding are calculated and tracked monthly
- Claims in the 90+ day bucket actively worked — not left to age further
- Payers with slow payment patterns were identified and escalated
- Self-pay AR is managed under a separate follow-up protocol from insurance AR
- Write-off policies documented, consistently applied, and management-approved
AR days below 35 are the target for a well-run practice. Best-in-class practices average 30 days or less. An AR days figure above 45 indicates a systemic follow-up problem. More than 20% of total AR in the 90+ day bucket is a collections risk that requires immediate attention.
11. Compliance and HIPAA Review
Confirm that your billing workflows comply with HIPAA privacy and security requirements. Review your compliance policies, staff training records, and any documented incidents or complaints from the audit period.
For your compliance review, check:
- Business associate agreements are signed, current, and on file for all third-party billing vendors and software providers
- Access to billing systems and patient data is restricted to staff whose role requires it
- All billing and coding staff have completed HIPAA training within the past 12 months
- A formal process exists for staff to report potential HIPAA or billing compliance concerns
- Your billing practices comply with the Anti-Kickback Statute and Stark Law as applicable to your specialty and payer mix
12. Fee Schedule and Contract Analysis
Your fee schedule is the baseline for every dollar you collect. If it is outdated, you are limiting collections on every claim, even when everything else in your billing process is working correctly.
- Fee schedule reviewed and updated within the past 12 months
- Contracted rates for each payer are documented and current
- Fees set at a level that does not artificially limit collection under favorable payer contracts
- CMS fee schedule updates are applied annually when the Medicare Physician Fee Schedule is revised
13. Clean Claim Rate Evaluation
Your clean claim rate tells you how many claims go out right the first time. Track it monthly by payer and by provider. Identify rejection reasons and correct them at the process level — not just on individual claims.
- First-pass acceptance rate calculated by the payer for the audit period
- Top five rejection reasons: identify and categorize
- Payer-specific requirements documented and accessible to the billing team
- Rejection patterns communicated to the staff responsible and corrected
A clean claim rate below 90% means preventable errors are consuming staff time and delaying collections across a significant portion of your claim volume.
14. Staff Workflow and Training Audit
Your billing team executes every process in this checklist. If they are not current on coding requirements and payer guidelines, every other area carries additional risk.
- Billing and coding staff hold current certifications (CPC, CCS, or equivalent)
- Certifications maintained with required continuing education
- Staff receive updates when CPT, ICD-10, or payer requirements change mid-year
- New billing staff complete orientation before handling live claims independently
- Productivity and quality metrics tracked per staff member
A coder without continuing education since 2021 may be applying outdated conventions across thousands of claims per year.
How Often Should a Practice Conduct Billing Audits?
Any healthcare practice can conduct its medical billing audits in three phases:
- Monthly: Review denial rates, clean claim rate, AR aging, and payment posting accuracy. These metrics change quickly and require regular attention to catch problems early.
- Quarterly: Conduct a structured coding audit on a representative sample of claims per provider. Review documentation integrity. Analyze modifier usage patterns. Check E/M code level distribution.
- Annually: Conduct a full RCM audit checklist review covering all areas in this guide. An external audit is strongly recommended. Update and verify the fee schedule. Review and verify staff certifications and training records.
Do not wait for the scheduled cycle; if you have the following signs, your practice needs an immediate audit:
- You receive a payer audit request or records request from CMS
- Your denial rate increases by more than 2% in a single month
- Collections drop more than 10% without a corresponding drop in patient volume
- A new billing or coding staff member joins
- A staff member raises a billing concern through your compliance process
Plan Healthcare Billing Audit 2026 for Your Medical Practice
If you have not completed a full billing audit in the past six months, the cost of inaction is already accumulating in the form of preventable denials, underpayments, and coding errors that will not resolve themselves.
RhinoMDs provides certified medical billing audit and RCM services for practices across the United States. Our team of certified billing and coding professionals conducts full revenue cycle audit reviews, identifies revenue leakage, corrects compliance gaps, and delivers a clear corrective action plan.
Get a billing audit consultation, so your practice knows exactly where it stands and what to do next.