
- 48% of practice leaders name denials and appeals as their biggest source of revenue leakage.
- The FY 2027 ICD-10-CM update added 190 codes and removed 30, effective October 1, 2026.
- Audits catch upcoding, unbundling, modifier misuse, missing documentation, and unspecified ICD-10.
- Quarterly audits track coding accuracy; review high-risk services and providers more often.
- Prospective audits review claims before billing; retrospective audits review them after.
- Knowingly retaining identified overpayments can create False Claims Act liability.
TL;DR
Audit your coding quarterly — with prospective checks before claims go out and retrospective reviews to catch recurring errors — because 48% of practice leaders name denials and appeals as their biggest source of revenue leakage. Pair those audits with automated claim scrubbing, like the tools in Tebra’s EHR+ platform, to fix upcoding, unbundling, and modifier misuse before they become compliance risks.
A single coding error might seem insignificant, but for an independent medical practice, the financial consequences can quickly add up. Consider a busy primary care practice that repeatedly submits claims with an incorrect evaluation and management code or missing modifier. Initially, the errors may result in a handful of denials. Over time, however, they can lead to mounting rework, delayed reimbursement, lost revenue, and disruptions to cash flow. If the errors persist, they could also attract payer scrutiny, trigger audits, and potentially result in repayment demands.
As payers intensify scrutiny of coding accuracy, medical necessity, and supporting documentation quality — and new ICD-10-CM codes, CPT codes, and Medicaid services eligibility requirements take effect in 2027 — private practices and healthcare organizations can’t afford to wait until denials pile up to identify problems. Regular medical coding audits are an essential part of a proactive denial prevention and compliance strategy. By systematically reviewing coded claims, identifying recurring errors, and addressing documentation gaps, practices can prevent avoidable denials, improve clean claim rates, protect reimbursement, and reduce compliance risks before they escalate.
What is a medical coding audit?
A medical coding compliance audit is a way to double-check that your practice is coding claims correctly and getting paid appropriately for the care you provide. It involves reviewing documentation and coding to spot mistakes that could lead to denials, payment delays, or compliance issues. These might include incorrect evaluation and management levels, missing modifiers, outdated codes, or documentation that doesn’t fully support the services billed.
Regular coding audits also help protect your practice from potential False Claims Act liability, which can arise when providers knowingly submit inaccurate claims or improperly retain identified overpayments. While an honest coding mistake doesn’t automatically violate the law, failing to address known problems can increase your legal and financial risks. By catching errors early and identifying recurring issues, coding audits help your practice prevent denials, protect revenue, and demonstrate a commitment to compliance.
Internal vs external coding audit
The main difference between internal and external medical coding audits is who performs them. Both help practices identify coding errors, prevent denials, and reduce compliance risk, but they serve slightly different purposes. Regular internal audits help your practice stay on top of everyday coding issues, while periodic external audit services provide an independent check on coding accuracy and compliance. Together, they can help prevent avoidable denials, protect reimbursement, and identify potential False Claims Act risks before they escalate.
Prospective vs retrospective audit
The biggest difference between prospective and retrospective medical coding audits is when they happen. Both help private practices improve coding accuracy, reduce denials, and strengthen compliance, but they address errors at different points in the revenue cycle. Prospective audits help your practice get claims right the first time, reducing denials, rework, and payment delays.
Retrospective audits help uncover recurring coding problems, identify opportunities for staff education, and address potential compliance issues—including overpayments that could create False Claims Act exposure if knowingly retained.
Why coding audits matter for compliance and revenue
Coding audits matter for compliance and revenue because they help your practice shift from reacting to denials and compliance problems to preventing them—saving staff time, improving cash flow, and protecting your bottom line.
The compliance side
Coding audits help demonstrate that your practice has processes in place to identify and address problems before they escalate. This, in turn, helps your practice:
- Catch upcoding, unbundling, incorrect modifier use, and other coding practices that could result in improper payments
- Detect potential overpayments that require further investigation, correction, and repayment within applicable deadlines
- Identify coding practices that no longer align with updated ICD-10-CM and CPT codes, Medicare billing rules, or payer policies
- Identify unsupported claims and potential overpayments before they become larger compliance problems
The revenue side
Coding audits help your practice identify and address billing errors that could lead to denials, delayed payments, and lost revenue. This, in turn, helps your practice:
- Identify undercoding, missed charges, and other issues that could cause your practice to leave money on the table.
- Improve cash flow.
- Prevent current and future revenue loss. Nearly half (48%) of practice leaders say denials and appeals are their biggest source of revenue cycle leakage.
- Reduce the cost of rework and appeals.
The most common coding errors an audit catches
For physician practices, coding audits most commonly catch upcoding/downcoding, unbundling, modifier misuse, missing documentation, and lack of ICD-10 specificity. These errors are particularly important for physician practices because they can lead to avoidable claim denials, delayed payments, lost revenue, and costly rework. Some errors may also result in overpayments that must be returned or raise compliance concerns, including potential False Claims Act exposure.
Nearly 70% of medical group executives recently reported denial rates exceeding 3%, and 39% reported rates above 5%. By identifying these issues through regular coding audits, practices can address the root causes, improve first-pass claim acceptance, protect appropriate reimbursement, and prevent the same mistakes from happening again.
| Coding error | Explanation | Risk it creates | Source for more information |
| Upcoding/downcoding | Reporting a higher or lower level of service than the documentation supports, such as billing an incorrect E/M visit level. | Overpayments, underpayments, claim denials, payer audits, and potential False Claims Act exposure. | OIG |
| Unbundling | Billing each CPT code separately for services that should be reported together under applicable coding rules. | Claim denials, improper payments, recoupments, and compliance violations. | Tebra: modifiers 25 and 59 |
| Modifier misuse | Omitting required modifiers or using them incorrectly, such as appending modifier 25 when a significant, separately identifiable E/M service wasn’t performed. | Claim denials, payment delays, incorrect reimbursement, and increased payer scrutiny. | Tebra: modifiers 25 and 59 |
| Missing documentation | Failing to document the clinical details necessary to support the diagnoses, procedural coding, or services billed. | Medical necessity denials, unsupported payments, recoupments, and audit findings. | Centers for Medicare & Medicaid Services E/M services |
| Lack of ICD-10-CM specificity* | Using an unspecified ICD-10 diagnosis code when the documentation supports a more specific code, such as one identifying laterality or disease severity. | Potential claim denials, inaccurate reimbursement, and incomplete reporting of patient conditions. | CMS ICD-10 |
*Note: Unspecified ICD-10-CM codes are not inherently incorrect, and coding mistakes do not automatically constitute False Claims Act violations. Audits help practices determine when coding errors require correction, further investigation, or repayment.
How to run a medical coding audit step by step
To run a medical coding audit step by step, practices must set goals, review claims and documentation, identify errors, and take corrective action to prevent denials and compliance risks.
Plan and scope the audit
Scoping a medical coding audit means deciding exactly what you’ll review and how much you’ll review. For example, your practice might focus auditing on E/M coding, claims denied for medical necessity, modifier use, or services billed by a specific provider. Scoping also means choosing the time period, number of claims, and issues to examine. The goal is to keep the audit focused, manageable, and aligned with your practice’s biggest revenue and compliance risks.
Establish audit frequency
Establish how often your practice will conduct coding audits based on claim volume, denial trends, coding complexity, and compliance risks. Consider quarterly audits to monitor coding accuracy, with more frequent reviews of high-risk services, providers, or recurring errors. Adjust your audit schedule as coding requirements change or new issues emerge.
Pull the sample
Pull a sample of claims that reflects your audit goals and scope. When choosing your sample size, be sure to include a mix of randomly selected claims and targeted claims involving high-risk services, frequent denials, or potential coding errors. Also ensure your sample includes the relevant medical records and supporting documentation so you can evaluate coding accuracy and compliance.
Review and score
Review each claim against the supporting medical documentation, current coding guidelines, and payer requirements. Check for accurate diagnosis and procedure codes, appropriate modifiers, and sufficient documentation. Score each claim using consistent criteria to measure coding accuracy, identify errors, and track performance over time.
Report and correct
Summarize your audit findings in a report that highlights coding accuracy rates, common errors, denial risks, and opportunities for improvement. Share the results with providers and billing staff, identify the root causes of errors, and develop a corrective action plan. Address any claims that require correction or repayment, provide targeted auditing and staff education, and track improvements to prevent recurring errors.
How practice systems make audits easier and prevent errors
The right electronic health record and practice management software can make coding audits easier by helping your practice catch errors, access documentation, and track billing performance without relying on time-consuming manual processes. For example, you can use automated claim scrubbing and coding edits to flag missing information, invalid codes, modifier issues, and other potential billing errors. Or you can leverage reporting and analytics to identify frequently denied codes, recurring errors, and patterns involving specific payers or services. The idea is to catch and correct coding errors before they lead to denials, identify the root causes of recurring issues, and make ongoing coding audits more efficient and effective.
Turning audit findings into fewer denials
To turn coding audits and compliance findings into fewer denials, your practice needs to do more than identify errors. You need to understand why they happen and take steps to prevent them from recurring. This means you must:
- Identify recurring patterns
- Address root causes
- Provide targeted education
- Improve coding and medical billing workflows
- Monitor results
- Run follow-up audits
With these critical actions, your practice can prevent repeated mistakes, reduce avoidable denials, and protect revenue over time.
Reduce denials with smarter claims and billing automation
Coding audits and compliance are just one piece of the denial prevention puzzle. The right automation tools can help your practice catch errors before claims go out, reduce manual work, and get paid faster.





