High-Risk Billing Audit Areas

What Are Audit Risk Areas?

OIG publishes an annual Work Plan identifying audit priorities. High-risk billing areas include: modifier 25 overuse (80%+ on procedure claims), E/M code inflation, unbundling, place of service errors, and missing documentation. RACs (Recovery Audit Contractors) focus audit resources on these areas. Practices matching audit criteria face selection rates 3-5 times higher than peer average. Early identification of audit risk enables corrective action before enforcement arrives.

Who Do Audit Risk Areas Affect?

Orthopedic, cardiac, and surgical specialists face the highest audit frequency. Modifier 25 overuse and E/M inflation are top triggers for specialties bundling procedures with E/M. Large practices with 500+ claims monthly trigger automated audit selection algorithms. Small practices exceeding peer benchmarks on any metric face focused RAC review. One audit cycle typically reviews 40-100 claims and averages $8,000-$50,000 in overpayment recoupment.

Key Requirements

  1. Modifier 25 usage should not exceed peer average. Practices using modifier 25 on 80%+ of procedure claims trigger immediate audit. Peer benchmarks average 25-40% modifier 25 usage depending on specialty.
  2. E/M code distribution should align with peer average. Practices billing 50%+ 99214-99215 when peer average is 30% face audit selection.
  3. Duplicate claims must be prevented. Billing the same claim twice within 90 days is automatically flagged. Edit checks should prevent duplicate submissions.
  4. Place of service must match where service was delivered. Billing office services as hospital outpatient, or vice versa, triggers audit.
  5. Documentation must support the service and code billed. Missing or inadequate documentation is cited in 30-40% of audit findings.

Timeline & Enforcement

OIG Work Plan published annually in September. High-risk areas are audited immediately. RAC selection often precedes notification. Audits typically open with demand letters requesting claim records for a sample period. Audit timeline: 4-8 weeks for initial document review, 6-12 weeks for contractor review, 30-day appeal window. Overpayment recovery demands include accrued interest and penalties.

How to Comply

  1. Benchmark your practice against peer metrics. Track modifier 25 %, E/M code mix, duplicate claim rate. Compare to CMS-published specialty benchmarks. If above average, implement internal controls.
  2. Review the annual OIG Work Plan (published September 1). Identify if your specialty is an audit priority. Implement additional controls on listed high-risk areas.
  3. Conduct monthly internal audits on high-risk areas. Audit 50+ claims for modifier 25 appropriateness, E/M documentation support, and duplicate prevention.
  4. Implement prepayment edits. Flag claims with modifier 25, high E/M codes, or place of service errors. Route flagged claims to compliance review before submission.
  5. Maintain audit-ready documentation. Ensure all claim-supporting documents (medical records, operative reports, E/M documentation) are retained and organized by claim.

Common Questions

What is the OIG Work Plan?

The OIG (Office of Inspector General) publishes an annual Work Plan identifying audit priorities for the coming fiscal year. The Work Plan lists high-risk providers, specialties, and billing patterns. Providers matching Work Plan criteria face higher audit probability.

What audit triggers do RACs focus on?

Recovery Audit Contractors (RACs) prioritize: modifier 25 overuse (80%+ on procedures), E/M code inflation (high 99214/99215 rates), duplicate claims, unbundling, place of service errors, and missing documentation. RACs recoup overpayments and assess penalties.

How are providers selected for audit?

Audit selection combines: automated prepayment edits, statistical anomaly detection (billing patterns differing from peer benchmarks), patient complaints, and OIG Work Plan priorities. High-volume providers and specialties face more frequent audits.

Related Resources

Altair checks compliance rules before you submit. See how pre-submit claim scoring works.

Learn about Altair

CMS regulations change. This reference is current as of 2026-03-30. Always verify against current CMS documentation.