Medical coding audits are crucial in ensuring accuracy in the billing and reimbursement process for healthcare providers. They involve a systematic review of medical documentation and coding practices to detect errors, ensure compliance with federal and state regulations, and maximize revenue. With healthcare regulations becoming increasingly stringent, coding audits have become an essential part of revenue cycle management. This guide covers the audits a practice runs on itself and the audits payers and the government run on the practice. Regular audits are essential not only for compliance but also for improving documentation.
Objectives of coding audits include:
Accuracy: Ensuring the coding accurately reflects the care provided.
Compliance: Adhering to guidelines set by the Centers for Medicare and Medicaid Services (CMS), private payers, and other regulatory bodies.
Revenue Optimization: Preventing revenue loss due to inaccurate coding or denials.
Regular audits are essential not only for compliance but also for continuous improvement in documentation practices. Different types of audits address specific needs within an organization, making it vital to understand each type and its unique benefits.
Types of medical coding audits at a glance
| Audit type | Who runs it | When | Main purpose |
| Internal | Practice staff | Any time | Routine accuracy checks |
| External | Independent auditor | Yearly or as needed | Objective review |
| Prospective | Practice or auditor | Before claims are sent | Stop errors before payment |
| Retrospective | Practice or auditor | After payment | Find patterns and overpayments |
| Focused / risk-based | Practice or auditor | When a risk appears | High-risk codes or providers |
| TPE | Medicare Administrative Contractor | After data analysis flags you | Review plus education |
| RAC | Recovery Audit Contractor | After payment | Recover improper payments |
| RADV | CMS for Medicare Advantage | After payment | Validate risk-adjustment diagnoses |
Internal vs. External Coding Audits
Internal Audits
These type of audits are performed by staff within the organization or consultants who work on behalf of the healthcare facility. These audits can be conducted regularly and can be highly customized to meet the organization’s specific requirements.
- Benefits: Cost-effective, since the audits are conducted by in-house staff. They can also be tailored to focus on areas with known issues or past challenges.
- Limitations: Potential for internal bias, as staff might be more lenient on their own organization. Additionally, limited resources and expertise may impact the thoroughness of the audit.
External Audits
External audits involve hiring an independent third-party organization to conduct the audit. These auditors are typically highly experienced, with expertise in coding standards, healthcare laws, and compliance requirements.
- Benefits: External auditors provide an objective and impartial review, which can uncover issues that internal audits may miss. Their specialized knowledge offers a more in-depth perspective on compliance issues.
- Limitations: External audits are generally more costly and may require longer time frames to schedule and complete. However, their objectivity and thoroughness can often justify the investment.
Prospective and Retrospective Audits
Prospective Audits
These audits take place before claims are submitted to payers. This proactive approach allows organizations to identify and correct coding errors in advance, reducing the likelihood of claim denials or adjustments.
- Advantages: By catching errors early, prospective audits help prevent revenue loss. This process fosters a culture of accuracy and careful documentation within the organization.
- Example: A hospital might conduct prospective audits on new or complex coding areas, such as ICD-10 codes for rare diagnoses or complex surgeries, to ensure accuracy.
Retrospective Audits
Retrospective audits are performed after claims have been submitted and processed. These audits allow for a detailed review of coding patterns and practices and help identify areas for future training and improvement.
- Advantages: Retrospective audits offer insight into long-term coding practices, revealing patterns and trends that may need attention. They are particularly valuable for ongoing staff training and organizational development.
- Example: Reviewing claims from the past quarter to identify coding errors related to Evaluation and Management (E/M) services.
- If a retrospective audit finds claims that were paid more than they should have been, treat them as overpayments. Medicare overpayments must be returned within 60 days of identification; see our refunds and recoupments guide.
Focused Audits
Focused audits target specific areas within coding and billing where there may be an elevated risk of error or non-compliance. This type of audit allows organizations to direct resources efficiently towards high-impact issues.
- Purpose: Typically, focused audits address high-risk services, procedures with frequent coding errors, or specific healthcare providers with higher denial rates.
- Common Focus Areas: High-risk services (e.g., surgeries, specialty procedures), E/M codes, modifiers, and specialty-specific codes (e.g., cardiology or oncology).
- Benefits: Focused audits allow for a targeted approach, enabling the organization to address critical areas promptly and efficiently. They are often a part of routine internal audits.
Comprehensive Audits
Comprehensive audits provide a wide-reaching review of the entire coding and billing process across the organization. These audits are often more complex and cover various services, providers, and departments.
- Purpose: To identify systemic issues that may affect multiple areas within the organization.
- Scope: Includes a large sample of claims across different types of services and healthcare providers, offering a holistic view of compliance and accuracy.
- Advantages: Comprehensive audits can reveal widespread issues that may not be detected through smaller or more focused audits, making them ideal for large organizations or facilities undergoing regulatory scrutiny.
- Limitations: These audits can be resource-intensive and may take longer to complete, but the insights they provide are often invaluable.
Random and Risk-Based Audits
Random Audits
These type of audits involve selecting claims or encounters at random for review. These audits provide a snapshot of the organization’s overall coding accuracy and are often used as a baseline.
- Benefits: Random audits reduce selection bias and provide an objective view of the organization’s coding practices.
- Example: A hospital might randomly select a set of claims every month to monitor general compliance trends.
Risk-Based Audits
Risk-based audits focus on areas of higher risk, often identified through historical data, payer feedback, or specific compliance concerns. These audits prioritize resources toward high-impact areas, which can lead to significant improvements.
- Benefits: Helps organizations concentrate resources on the most critical issues, reducing the chances of costly penalties or claim denials.
- Example: An audit focusing on high-cost procedures or common denial-prone codes within a practice.
Medicare and Government Payer Audits
Medicare compliance audits ensure that an organization adheres to the rules and regulations set by CMS for Medicare billing. Given the strict guidelines associated with Medicare, compliance audits are essential for avoiding penalties.
- Medicare uses several contractors to review claims. Knowing who is auditing you tells you what they want and how to respond.
- MAC medical review: pre-payment or post-payment review by your Medicare Administrative Contractor, often after data analysis shows unusual billing.
- RAC: Recovery Audit Contractors review paid claims and recover overpayments, including through extrapolation in some cases.
- UPIC: Unified Program Integrity Contractors investigate potential fraud, waste and abuse.
- CERT: the Comprehensive Error Rate Testing program reviews a random sample of claims nationwide to measure improper payments.
Targeted Probe and Educate (TPE) Audits
The Targeted Probe and Educate (TPE) program by CMS is designed to assist providers in improving billing and coding accuracy. TPE audits involve an initial review followed by educational sessions to improve future coding practices.
- Process: The MAC reviews a sample of claims, usually 20 to 40, then holds a one-on-one education session. This can repeat for up to three rounds. If errors continue after the third round, the MAC can refer the provider to CMS for further action, such as extended review or a RAC referral. See our TPE audit guide.
- Benefits: This approach is less punitive and focuses on improving long-term compliance through education, making it valuable for healthcare organizations looking to strengthen their billing practices.
- Example: A TPE audit might focus on specific codes that have high rates of denial in a practice, followed by training sessions for staff to address the identified issues.
Risk Adjustment Audits (including RADV)
Risk adjustment audits are especially relevant for Medicare Advantage and other risk-based contracts. They verify that coding accurately reflects the patient’s health status, which impacts reimbursement levels.
- Purpose: To ensure that high-risk patients are accurately coded, thus impacting reimbursement.
- Scope: Focuses on chronic conditions and high-risk populations, where accurate coding is critical for risk-adjusted payment models.
- Unique Aspects: These audits directly influence revenue as they determine risk-adjusted payments based on patient severity.
- Example: A risk adjustment audit would review codes for chronic conditions such as diabetes or heart disease.
For Medicare Advantage, CMS runs Risk Adjustment Data Validation (RADV) audits of plans, and plans in turn request records from providers. In 2025 CMS announced it would expand RADV audits to all eligible Medicare Advantage contracts each year, so providers should expect more record requests to support chronic-condition diagnoses.
Quality Improvement Audits
Quality improvement audits are tied to quality-based reimbursement programs, such as MIPS in the U.S. They ensure that coding reflects the quality of care provided, which can directly impact financial incentives.
- Overview: Often conducted for practices participating in value-based care or pay-for-performance programs.
- Purpose: To ensure coding aligns with quality reporting standards, thus impacting performance-based incentives or penalties.
- Relevance: Quality audits can affect both reputation and reimbursement, as they reflect a provider’s commitment to quality.
Hybrid Audits
Hybrid audits combine elements from multiple audit types, creating a tailored approach to meet the specific needs of the organization. For instance, a healthcare organization might use both internal and external audits or combine prospective and retrospective audits.
- Definition: A customized audit approach that addresses various organizational needs.
- Benefits: Allows for a flexible and comprehensive approach, addressing both specific issues and overall coding accuracy.
- Example: An organization might use an internal audit for routine monitoring and schedule an external audit for comprehensive review every year.
Best Practices for Conducting Medical Coding Audits
Define Objectives Clearly: Set clear goals, whether focused on compliance, revenue optimization, or quality improvement.
Select an Appropriate Sample Size: Use a sample that represents the organization’s volume and complexity.
Employ Certified Professionals: Use certified coders and auditors to ensure high-quality, accurate reviews.
Provide Feedback and Education: Use audit findings for staff training, fostering a culture of continuous improvement.
Monitor and Adjust: Regularly review and refine audit practices to keep pace with changes in regulations and coding standards.
How to Measure Coding Accuracy
Formula: Coding accuracy rate = codes found correct ÷ total codes reviewed × 100.
Worked example: An auditor reviews 10 charts per provider for 4 providers, 40 charts with 160 codes in total. 148 codes are correct. Accuracy = 148 ÷ 160 × 100 = 92.5%, below a 95% internal target. Look at results by provider and by code type, not just overall. A practice at 94% overall may have one provider at 80% on E/M levels, which is the finding that matters. A 95% target is a commonly used internal benchmark, not a rule. Tie audit findings to your compliance program.
The Role of Technology in Medical Coding Audits
Technology is transforming the way coding audits are conducted. Tools such as AI-driven error detection, automated code auditing software, and data analytics improve efficiency and accuracy.
- Benefits: Enhances the accuracy and speed of audits, identifies trends, and provides predictive insights.
- Example Technologies: Automated coding software, AI-driven data analysis, and machine learning for predictive audits.
Medical Coding Audits: Frequently Asked Questions
What is a medical coding audit?
A medical coding audit is a systematic review of medical coding practices to ensure accuracy, compliance, and proper documentation. These audits assess whether the codes used for patient diagnoses, treatments, and procedures accurately reflect the care provided, helping organizations prevent errors, reduce denials, and maintain regulatory compliance.
Why are medical coding audits necessary?
Medical coding audits are essential for verifying the accuracy of submitted claims, minimizing coding errors, and ensuring compliance with healthcare regulations. Regular audits prevent revenue loss, reduce the risk of payer audits and penalties, and ensure that coding aligns with federal and state regulations.
What is the difference between internal and external coding audits?
Internal coding audits are conducted by in-house staff or consultants within the organization, often on a routine basis. External coding audits are performed by independent third-party organizations. Internal audits are more cost-effective and customized, while external audits offer an unbiased and highly specialized perspective.
What are prospective and retrospective audits?
Prospective audits occur before claims are submitted to payers, helping to identify and correct errors in advance. Retrospective audits, on the other hand, take place after claims have been processed, allowing organizations to review and learn from past coding practices, patterns, and trends.
How often should medical coding audits be conducted?
Most practices run a baseline audit once a year and smaller focused audits quarterly. New providers, new services and codes with rising denials deserve earlier checks. Annual frequency follows OIG’s general guidance on ongoing auditing; the quarterly schedule is a common practice, not a rule.
What is a focused audit, and when is it used?
A focused audit targets specific coding areas that may have a high error rate, compliance concerns, or other issues. For example, it may focus on high-risk procedures, certain providers, or high-value services. Focused audits are used to efficiently address critical areas without the resources required for a comprehensive audit.
What are the consequences of failing a coding audit?
Failing a coding audit can lead to financial losses due to claim denials, payer penalties, or even federal penalties for non-compliance. Organizations may also face reputational damage and may need to implement corrective actions or re-train staff to prevent future errors.
What is a Targeted Probe and Educate (TPE) audit?
The Targeted Probe and Educate (TPE) audit is a CMS program that focuses on improving billing accuracy through targeted audits and education. TPE audits review claims related to specific high-risk codes and provide feedback and education to correct errors, minimizing future issues.
How does technology assist in medical coding audits?
Technology aids coding audits by using automation, AI, and data analytics to detect errors, streamline the audit process, and identify trends. AI-driven tools can help coders detect discrepancies faster, select samples for audits, and even predict coding risks, making audits more efficient and accurate.
What are some best practices for conducting medical coding audits?
Key best practices include setting clear objectives, using certified professionals, choosing an appropriate sample size, providing feedback and training based on findings, and continuously monitoring and adjusting audit practices to align with changes in coding standards and regulations.
How is coding accuracy measured in an audit?
Coding accuracy = codes found correct ÷ total codes reviewed × 100. Many practices aim for 95% or higher; that is a commonly used internal benchmark, not a regulatory requirement.
How many charts should a coding audit review?
It depends on the goal. OIG’s 2000 compliance guidance for physician practices suggested starting with about 5 to 10 records per provider, with larger samples for high-risk areas. Payer and government audits use their own sampling methods.
What is the difference between a RAC audit and a TPE audit?
A RAC (Recovery Audit Contractor) reviews paid Medicare claims to find and recover improper payments. The Medicare Administrative Contractor (MAC) reviews claims and provides one-on-one education to providers through up to three rounds of Targeted Probe and Educate (TPE).
What is a RADV audit?
A Risk Adjustment Data Validation (RADV) audit verifies that medical records support the diagnoses reported by Medicare Advantage plans. Auditors request medical records from providers to confirm the submitted diagnosis codes.
Final Thoughts
The right mix of audits depends on who is looking: internal and external audits help you find problems first, while TPE, RAC and RADV audits are the payer finding them for you. Run a yearly baseline, focus on high-risk codes, measure accuracy by provider, and repay any overpayments you find. For independent audit support, coding review and denial management, see Zmed Solutions’ revenue cycle management services. Results vary by practice.
Key Market Player
Ready to optimize your medical billing and boost your revenue? Look no further. Zmed Solutions LLC is your trusted partner in professional Medical Billing Services.
Join our growing network of healthcare providers who have already elevated their revenue with our expert services. Don't miss out on what could be your practice's most profitable decision.
Schedule a Consultation Today!
Contact Us Now, and experience the difference. Your financial success starts here!
