US healthcare · Back-end revenue cycle

Denials, Appeals and Payer Audits

More than one claim in ten is denied on first submission, most denials are eventually paid, and the ones that are not cost hospitals and practices more than any other single leak in the revenue cycle. This tutorial goes deep on the denial itself: how to read it, classify it, prevent it, prioritize it and appeal it, through every level of Medicare, Medicare Advantage, Medicaid, commercial and ERISA review. It then turns the lens around to payer audits, where the question is not "why did they refuse to pay" but "why are they asking for the money back," and covers RAC, TPE, UPIC, SMRC and commercial audits, extrapolation, recoupment, and the analytics that turn denial data into prevention.

Classify835 / letter

What kind of denial is this?

Group code, CARC and RARC name the payer's reason. The root cause is usually upstream.

Correctable, appealable, or correct: the classification decides the work and the owner.

RecoverAppeal

Is it worth appealing, and how?

Balance, overturn probability, cost and deadline set the priority; evidence and policy citations win the case.

Every payer has a defined path with clocks at each level. Miss one and the money is gone.

DefendAudit

Can we keep what we were paid?

ADRs, sampling and extrapolation, recoupment timelines and the same appeal levels in reverse.

Respond on time, dispute the sample, appeal every claim, and fix the documentation that invited the audit.

14 chapters4 interactive toolsFigures verified Oct 2026

Chapter 01

The big picture

A denial is an adjudicated claim, or a line on one, that the payer has refused to pay, with a coded reason. A payer audit is the payer coming back after payment to ask whether it should have paid at all. Both are governed by rules, both run on deadlines, and both are won or lost on documentation.

The two subjects belong together because they are the same argument in two directions. In a denial the provider says "you owe us" and must prove coverage, medical necessity and correct billing. In an audit the payer says "you owe us" and the provider must prove the same things, usually for claims paid months or years ago. The evidence is the same record. The appeal levels are the same levels. The difference is who is holding the money while the argument runs.

The Claims Lifecycle tutorial introduced denials as a stage in the cycle and listed Medicare's five appeal levels. The Prior Authorization tutorial covered the authorization-specific denial codes. This tutorial assumes that background and goes further: a full taxonomy, prevention by stage, queue prioritization by expected value, the craft of writing an appeal, every payer's appeal path with its 2026 clocks and thresholds, the audit contractors and how they choose targets, sampling and extrapolation, the recoupment timeline, and the analytics that close the loop.

Why it matters in numbers

Initial denials

11.8% of claims

Initial denial rate across Kodiak Solutions' hospital and health system clients in 2024, up from 10.2% in 2020. For commercial inpatient claims in 2025 the initial rate was 21%. Final denials, after rework and appeal, were 2.8% in 2024 and about 3% in 2025: most denials are paid in the end, which means most were avoidable.

Cost of the fight

$43.84 per claim

Average cost to appeal a denied claim in Premier's 2024 survey of hospitals and health systems, which put the national bill at $19.7 billion a year, of which $10.6 billion was spent arguing over claims that should have been paid on submission. Nearly 15% of claims to private payers were initially denied and 54% of those were ultimately paid.

Appeals that win

80.7% overturned

Share of appealed Medicare Advantage prior authorization denials that were fully or partially overturned in 2024, per KFF. Only 11.5% of the 4.1 million denials were appealed. In ACA marketplace plans, 19% of in-network claims were denied in 2024 and fewer than 1% of denials were appealed.

Improper payments

$28.8 billion

Medicare fee-for-service improper payments in FY 2025, a 6.55% rate, down from 7.66% in FY 2024. Insufficient documentation caused 53% of the dollars; medical necessity 15%; incorrect coding 11%. This is the number that funds the audit contractors.

Enforcement

$6.8 billion

False Claims Act recoveries in FY 2025, the highest annual total in the statute's history, with more than $5.7 billion from health care and a record 1,297 new whistleblower (qui tam) suits. The June 2025 national takedown charged 324 defendants over $14.6 billion in alleged intended loss.

OIG output

1,212 exclusions

Individuals and entities excluded from federal health programs in the six months to March 31, 2026, alongside 317 criminal and 287 civil actions and $5.56 billion in expected recoveries, per the OIG's Spring 2026 semiannual report. An excluded provider's claims are unpayable.

Who is involved

Denial management team: Billing specialists who read remittances, classify denials, send corrected claims and file administrative appeals. In larger organizations split by payer or by denial category.
Clinical appeals nurses and physician advisors: Write and argue medical-necessity appeals, run peer-to-peer calls, and judge whether a clinical denial is worth fighting. Physician advisors also lead utilization review and status (inpatient vs observation) decisions.
Coding and CDI: Own coding denials (bundling, modifiers, diagnosis support, DRG validation) and the documentation improvement that prevents them.
Patient access and authorization staff: Own the front-end causes: eligibility, registration, coordination of benefits, authorization. Most preventable denials start here.
Payer: claims, utilization management, special investigations: Claims adjudication produces the denial; UM produces clinical denials and handles appeals; the special investigations unit (SIU) and payment integrity vendors run post-payment audits and recoupments.
Medicare contractors: MACs (claims, redeterminations, TPE, demand letters), QICs (reconsiderations), OMHA (ALJ hearings), the Medicare Appeals Council, and the review contractors: RACs, UPICs, the SMRC and CERT.
Independent reviewers: The Part C IRE for Medicare Advantage, state external review organizations (IROs) for commercial and marketplace plans, state fair hearing offices for Medicaid.
Compliance and legal: Step in when an audit alleges a pattern, when extrapolation is proposed, when an overpayment must be reported under the 60-day rule, or when a UPIC or OIG inquiry arrives.
Patient: Holds appeal rights of their own in every program, can appoint the provider as representative (CMS-1696 for Medicare), and is protected from being billed for many denials that are the provider's fault.

What goes wrong

Denials worked, not prevented

Teams become expert at resubmitting the same eligibility and authorization denials every month because nobody feeds the root cause back to the front end. The denial rate stays flat while rework costs climb.

Deadlines missed

Appeal windows run from 60 to 180 days for commercial plans and 120 days for a Medicare redetermination. A denial that sits in an unworked queue past its deadline becomes a write-off no matter how strong the case.

Appeals without evidence

A letter that says "the service was medically necessary" without mapping the record to the payer's criteria loses. Reviewers approve what they can verify against the policy in front of them.

Everything appealed

Appealing correct denials (true duplicates, non-covered services, missed timely filing with no proof) wastes the $43.84 and trains payers to ignore the provider's appeals.

ADRs ignored

A records request with no response is an automatic denial that counts as an error in the audit's error rate. In TPE it moves the provider toward round two; in a RAC audit it becomes a demand letter.

Extrapolation unchallenged

A $40,000 sample finding becomes a $2 million demand. Providers who do not dispute the sampling and appeal each sampled claim pay the whole estimate.

Chapter 02

Denial taxonomy

Every denial arrives with three pieces of code: a group code that says who is responsible for the balance, a claim adjustment reason code (CARC) that says why, and often a remittance advice remark code (RARC) that narrows the why. Reading the three together is the first skill; mapping them to a root-cause category is the second.

The three layers of a denial code

Group code: CO contractual obligation (provider absorbs it), PR patient responsibility (billable to the patient), OA other adjustment (neither, often informational or coordination of benefits), PI payer-initiated reduction (payer reduced payment without a contractual basis; billable to the patient unless the contract says otherwise). A CARC under CO and the same CARC under PR mean very different things for who pays.
CARC: Claim adjustment reason code, maintained by the X12 code committee and updated three times a year. Several hundred codes, of which a few dozen produce almost all denials. Each has a defined meaning; payers may not invent their own.
RARC: Remittance advice remark code (M, MA and N codes) carried in the 835's LQ segment or at the claim level. Explains the CARC: N115 (LCD not met), N130 (benefit plan limits), M127 (missing patient record), N290 (missing rendering provider identifier). Generic CARCs such as 16 and 96 are almost meaningless without the RARC.
Claim status and the 277: Before adjudication, a 277CA rejection (not a denial) returns claim status category and status codes. A rejection was never received for timely filing purposes and is resubmitted as an original claim, never appealed.
Denial letters and portals: Clinical denials, audit findings and prior authorization denials come as letters with a narrative, the criteria used, the reviewer's credentials, and the appeal rights and deadline. The 835 may show only CO-50 or CO-197; the letter is where the real reason lives.

The codes that produce most denials

CARC	Text (abridged)	Typical RARC	Root-cause category	Usual fix
`CO-4`	Procedure code inconsistent with modifier, or required modifier missing	N519, M78	Coding	Corrected claim with the right modifier; appeal if the modifier was correct
`CO-11`	Diagnosis inconsistent with procedure	M76, N657	Coding / documentation	Verify the diagnosis pointer and specificity; corrected claim
`CO-16`	Claim lacks information or has a submission/billing error	Many: M51, N290, N382, MA130	Registration / billing data	Read the RARC; fix the field; resubmit or corrected claim
`CO-18`	Exact duplicate claim or service	N522	Billing process	Confirm against the original; if not a true duplicate, append the modifier (76, 77, 91) and appeal
`CO-22`	Care may be covered by another payer per coordination of benefits	MA04, N598	Eligibility / COB	Verify primary coverage; bill the right payer first; update COB with the plan
`CO-27 / CO-26`	Expenses incurred after coverage terminated / before coverage began	N30	Eligibility	Re-verify; bill the new plan or the patient; check retro-termination rules
`CO-29`	Time limit for filing has expired	N211	Billing process	Appeal with proof of timely receipt (277CA, payer acknowledgment); otherwise write off, never bill the patient
`CO-45`	Charge exceeds fee schedule or contracted rate	—	Not a denial	Expected contractual adjustment; check the allowed amount against the contract for underpayments
`CO-50`	Not deemed a medical necessity by the payer	N115, N386, M127	Clinical / documentation	Clinical appeal mapped to the LCD, NCD or medical policy; peer-to-peer where offered
`CO-96`	Non-covered charge	N130, N180, M49	Benefits / contract	Read the RARC; if a benefit exclusion, bill the patient only where a waiver or plan terms allow
`CO-97`	Benefit included in payment for another service (bundled)	M15, N525, M144	Coding / NCCI	Check NCCI PTP edits and global periods; modifier 25, 59, XS, 24, 79 if supported; appeal with the operative note
`CO-109`	Claim not covered by this payer or contractor	N418, N104	Billing / eligibility	Send to the correct payer (MA plan, carved-out vendor, workers' comp, hospice)
`CO-151`	Payment adjusted because the information does not support this many services or units	N362, M86	Coding / MUE	Check the medically unlikely edit; split units with the right modifier; appeal with documentation
`CO-197 / 198 / 15`	Precertification absent / exceeded / authorization number invalid	N54, N517	Authorization	Covered in the Prior Authorization tutorial: find the auth, correct the claim, retro-auth or appeal
`CO-204`	Service not covered under the patient's current benefit plan	N130	Benefits	Benefit exclusion; verify with the plan document; patient liability depends on the plan and any waiver
`CO-226 / 227`	Information requested from the provider / patient was not provided or was insufficient	N479, M127	Documentation process	The payer's records request went unanswered; send the records and request reprocessing before the deadline
`CO-252`	Attachment or other documentation is required to adjudicate	N706, N29	Documentation process	Send the specified documents (operative note, invoice, itemized bill); use the 275 attachment where supported
`CO-A1`	Claim or service denied; see RARC	Varies	Varies	Catch-all; the RARC is the real reason
`CO-B7 / 183 / 185`	Provider not certified or eligible on this date / referring or rendering provider not eligible	N570, N95	Credentialing / enrollment	Check enrollment effective dates and payer linkage; corrected claim or appeal with the enrollment approval
`PR-1 / 2 / 3`	Deductible / coinsurance / copay	—	Not a denial	Patient responsibility; bill the secondary or the patient
`PR-31 / 140`	Patient cannot be identified as our insured / patient-insured mismatch	MA61, N382	Registration	Correct the member ID, name, DOB from the card or 271; resubmit

Four ways to classify the same denial

By action

Correctable, appealable, correct

Correctable denials are fixed with data: a corrected claim (frequency code 7), a resubmission, or a records response. Appealable denials need an argument: medical necessity, level of care, timely filing with proof, bundling with a supported modifier. Correct denials are written off by reason code and sent to prevention. The first question on every denial is which of the three it is.

By type

Technical vs clinical

Technical (administrative) denials concern data and process: eligibility, authorization numbers, modifiers, timely filing, duplicates, provider enrollment. Clinical denials concern judgment: medical necessity, inpatient vs observation, length of stay, experimental or investigational, DRG validation. Different teams, different evidence, different appeal paths.

By stage

Where the cause lives

Scheduling and registration, eligibility and benefits, authorization, clinical documentation, charge capture, coding, claim build and submission, payer adjudication (payer error), payment posting. The stage names the owner. The same CARC can come from different stages; CO-16 with N382 is registration, CO-16 with N290 is enrollment.

By timing

Prepayment vs post-payment

A prepayment denial withholds money. A post-payment denial (an audit finding, a takeback, a recoupment) takes money back after it was paid, often by offsetting future remittances (PLB WO on the 835). Post-payment denials carry their own clocks, which chapter 09 covers.

Soft denials and request-for-information denials

Many payers "pend" or deny a claim for information (CO-226, CO-227, CO-252, or a records request letter) rather than deny it outright. Kodiak found request-for-information denials of 30.0% of commercial initial denials and 23.4% of Medicare Advantage initial denials in 2024, both rising. They are the cheapest denials to resolve and the most dangerous to ignore: the request has a deadline, after which the soft denial hardens into a final one.

Chapter 03

Root causes and prevention by stage

Experian Health's 2025 survey of 250 revenue cycle leaders put the top causes of denials at missing or inaccurate data (50%), authorizations (35%) and incomplete or inaccurate registration (32%). Those are all front-end causes. The denial surfaces in the billing office weeks later, which is why prevention has to be organized by stage rather than by who happens to work the queue.

Where denials come from, and what prevents them

1
Scheduling and registration Days before service
Wrong member ID, misspelled name, wrong DOB, wrong subscriber, dependent billed under the subscriber, wrong payer or plan product, stale address. Produces PR-31, CO-16 with N382 or MA61, CO-109. Prevention: card scanning, real-time eligibility at scheduling and again at check-in, registration QA sampling with an accuracy target, and a duplicate-patient process.
2
Eligibility, benefits and coordination of benefits Before service
Coverage terminated, not yet effective, other coverage primary, Medicare Secondary Payer situations, hospice election, Medicare Advantage instead of traditional Medicare. Produces CO-22, CO-26, CO-27, CO-109, CO-31. Prevention: 270/271 on every visit, MSP questionnaire, COB discovery tools, and reading the 271's plan and other-payer segments rather than only "active."
3
Authorization and referral Before service
No auth, auth for a different code, site or provider, units exhausted, auth expired, referral missing. Produces CO-197, CO-198, CO-15, CO-243, CO-4 after a procedure change. Prevention: auth status as a scheduling gate, an auth record the claim pulls from, unit counters, and procedure-change notification within the payer's window.
4
Clinical documentation and utilization review During care
Note does not support the level of service, the inpatient status, the length of stay or the diagnosis; signature or date missing; plan of care or certification absent; face-to-face encounter missing for home health or DME. Produces CO-50, CO-197 (concurrent denials), DRG downgrades, and almost every audit finding. Prevention: concurrent UR with a physician advisor, CDI queries, documentation templates built around payer criteria, and signature and timing compliance.
5
Charge capture and coding After service
Unbundling, missing or wrong modifiers, units above the MUE, diagnosis not supporting the procedure, unspecified codes where the LCD lists specific ones, wrong place of service, incorrect DRG. Produces CO-4, CO-11, CO-97, CO-151, CO-50. Prevention: NCCI edits in the scrubber, coder education fed by denial data, pre-bill coding audits, and LCD/NCD diagnosis lists built into order entry.
6
Claim build and submission Billing
Missing fields, wrong payer ID, wrong NPI or taxonomy, duplicates from rebilling, claims filed late. Produces CO-16, CO-18, CO-29, CO-B7. Prevention: clearinghouse and payer-specific edits, 277CA reconciliation daily, enrollment and credentialing effective-date tracking, and a timely filing report sorted by days remaining.
7
Payer adjudication Payer side
Payer error: wrong fee schedule loaded, contract terms misapplied, auth on file but not matched, eligibility file wrong, automated edits that deny correctly coded claims. Produces anything. Prevention: a payer error category in the taxonomy, a monthly payer scorecard, escalation through the provider representative, and the contract's dispute clause for patterns.
8
Follow-up and posting After remittance
Soft denials and records requests missed, corrected claims sent as originals (creating duplicates), appeals filed past the deadline, denials auto-written-off. Prevention: denial queues built from the 835 with deadlines, a corrected-claim standard, and a write-off policy that requires a reason code and a reviewer above a threshold.

Denial root-cause classifierPick the CARC from the 835 and refine it with the remark code and context. The tool returns the category, owner, action and who is liable if the denial stands.

CARC (group code and reason)

Remark code (RARC), if any

Context

Payer

A valid advance notice of non-coverage (ABN or plan waiver) was signed before the service

Prevention economics

The cheapest place to fix a denial is before it exists

A registration error costs seconds to fix at the desk, minutes to fix on a 277CA rejection, and, once it is a denial, the $43.84 average appeal cost plus 30 to 90 days of delayed cash. The denial prevention case is almost always made by multiplying monthly denial volume in one category by the rework cost and the share that is never recovered, then comparing it with the cost of the front-end control.

Prevention needs a feedback address

A root-cause category only prevents denials if someone owns it. Every category in the taxonomy should map to a department and a named manager who receives the monthly denial report for that category, with the volume, dollars and the top five specific errors. Chapter 10 shows what the report looks like.

Chapter 04

Denial work queues and prioritization

No team can work every denial the day it arrives. The question is which ones to work first, and the honest answer is: the ones with the most recoverable money per hour of effort, before their deadlines, with the correctable ones routed to the people who can correct them. That is a sorting problem, and it can be computed.

Building the inventory

Source: The 835 is the primary feed: every CAS segment with a group code other than PR and a CARC other than the expected contractual codes (45, 59, 253) is a candidate. Add denial letters (clinical denials, audit findings), portal pends, and 277CA rejections, which are worked separately but counted.
Unit of work: One claim, or one line, with one CARC/RARC pair. A claim with three denied lines for three reasons is three units routed to possibly three owners. Roll them up for reporting.
Attributes on every unit: Payer and plan, denial category and stage, balance, date of denial, appeal or correction deadline, days to deadline, status, owner, number of touches, expected overturn probability (from history), estimated cost to work.
Routing: Correctable denials go to billing or registration queues; coding denials to coders; clinical denials to the clinical appeals team; authorization denials to the authorization team; payer errors to the payer-relations contact. A denial never waits in a general queue for a specialist to find it.
Deadline: Computed per payer and per denial type from the contract or the regulation: corrected-claim windows (often 90 to 180 days from the remittance, shorter under some contracts), appeal windows (60 to 180 days commercial, 120 days Medicare redetermination, 65 days MA reconsideration, 60 days Medicaid MCO), records-request deadlines (often 30 to 45 days).

Prioritizing by expected value

A denial is worth appealing when the expected recovery exceeds the cost of pursuing it. Expected recovery is the balance multiplied by the probability of overturn, which you estimate from your own history by payer and denial category (the Medicare Advantage figure of 80.7% is a population average; your rate for CO-50 inpatient denials at one plan may be 35% or 90%). Cost is staff time plus any physician advisor or external review fees. Expected value is the difference. Dividing by cost gives a return on effort, and the deadline turns it into a sequence.

Three rules make the sort work in practice. First, correctable denials are not prioritized by expected value at all; they are worked in bulk by error type because the fix is cheap and the overturn rate is near 100%. Second, a denial with fewer than ten days to its deadline jumps the queue regardless of value, or is consciously written off. Third, very low balances with high probability are better handled with a payer project (one call about forty claims) than forty individual appeals.

Expected-value prioritizerEnter a denial and see its expected value, break-even overturn rate and where it ranks against three fictional denials already in the queue.

Denied balance $

Overturn probability % (your history for this payer and category)

Staff hours to appeal

Loaded hourly cost $

Other cost $ (physician advisor, external review)

Days to appeal deadline

Denial kind

Queue design that holds up

Daily

Deadline sweep

Every unit with fewer than 10 days to its deadline is listed first, with a decision required: appeal today, correct today, or write off with a reason. No denial is allowed to expire silently.

Daily

Bulk correction

Correctable denials grouped by error (same RARC, same payer) and fixed in batches. A rebill run, not a case-by-case review. Track the batch so duplicates are not created.

Weekly

Expected-value sort

Appealable denials sorted by expected value per staff hour, worked top down. Low-value, high-probability items go to payer projects; low-value, low-probability items go to the write-off review.

Weekly

Aging and touch limits

A unit touched more than three times without resolution is escalated. A payer that pends the same claims repeatedly gets a project, not more touches.

Monthly

Write-off review

Denial write-offs above a threshold are reviewed by a supervisor with the reason code. Patterns feed the prevention report.

Monthly

Probability refresh

Overturn rates by payer and category are recomputed from the last six months of outcomes and loaded back into the prioritizer.

The patient is not the fallback

A denial the provider caused (no authorization, late filing, wrong modifier, missing records) is generally not billable to the patient under in-network contracts, Medicare rules and most state laws. Writing a denied balance off to the patient because the appeal failed is a compliance problem and, under the No Surprises Act and Medicare's limitation-on-liability rules, often illegal. The exceptions are PR group codes and services the patient agreed in writing to pay for before they were rendered.

Chapter 05

Writing an appeal

An appeal is a short legal brief addressed to a reviewer who has fifteen minutes, the payer's policy, and your claim. It wins when the reviewer can verify, from what you sent, that the policy's conditions were met or that the denial applied the wrong rule. It loses when it asks the reviewer to take your word for it.

The structure that works

1
Header block Identification
Patient name, DOB, member ID; claim number and the payer's claim or ICN number; dates of service; billed codes and amounts; denial date and the CARC/RARC or denial letter reference; the appeal level (first-level internal appeal, reconsideration, external review) and the deadline you are meeting. Reviewers reject appeals they cannot match to a claim.
2
The request in one sentence Opening
"Riverside Medical Group requests reversal of the denial of claim 2026-11207 for inpatient admission on 03/14/2026 through 03/17/2026, denied as not medically necessary (CO-50, N115) on 04/22/2026." State what you want: payment in full, reprocessing at the correct level, a corrected DRG.
3
The rule Authority
Quote the exact criteria the denial should have been judged by: the payer's medical policy number and version, the LCD or NCD, the MCG or InterQual guideline, the contract clause, the regulation (for example 42 CFR 412.3 for the two-midnight benchmark). If the denial cited a different rule, say so and explain why yours governs.
4
The facts mapped to the rule Argument
One paragraph or bullet per criterion: the criterion, the finding in the record that meets it, and the page or timestamp. "Criterion: hypoxemia requiring supplemental oxygen. Record: SpO2 86% on room air at 14:10 on 03/14 (ED nursing flowsheet p. 4), 3 L nasal cannula started 14:20, weaned 03/16 (p. 11)." Chronology matters for level-of-care appeals; a timeline table is often the most persuasive page.
5
Rebut the denial's stated reason Rebuttal
Take the denial letter's sentences one at a time. If it says a test was not documented, cite where it is. If it says a lower level of care was appropriate, explain what the lower level could not provide. If the reviewer lacked the specialty, say so and cite the rule that requires it.
6
Procedural defects Where present
Late denial beyond the payer's own clock, missing criteria citation, no reviewer credentials, denial of a service that had a valid authorization, denial after the payer confirmed eligibility, recoupment without the notice the contract or state law requires. Procedural defects win appeals on their own and should be stated even when the clinical case is strong.
7
Close, sign, attach Packet
Restate the request, name the signer and their role (the treating physician for clinical appeals), list the attachments in the order cited, and include the appointment of representative or assignment of benefits where the payer requires it. Send by the channel the payer's appeal instructions name, and keep proof of delivery.

Evidence by denial type

Denial	Attach	Cite	Common mistake
Medical necessity (CO-50)	History and physical, progress notes, orders, results, consults, discharge summary; a criteria worksheet (MCG/InterQual) completed for the case	Payer medical policy or LCD/NCD by number; society guideline; the plan's own criteria	Sending the whole chart with no map; appealing on "the doctor said so"
Inpatient vs observation	ED record with times, admission order with time and signature, physician's documented expectation of a two-midnight stay or the risk justifying admission, UR notes	42 CFR 412.3; two-midnight benchmark (binding on MA plans since 2024); plan's inpatient criteria	Arguing the patient was sick without showing the physician's expectation at the time of admission
DRG downgrade / clinical validation	Documentation for each diagnosis challenged (sepsis, malnutrition, respiratory failure, encephalopathy): the clinical indicators, treatment and physician attestation	ICD-10-CM Official Guidelines; Coding Clinic; the payer's clinical validation policy and the contract's DRG terms	Treating a coding denial as a clinical one, or vice versa; the guidelines say the physician's documented diagnosis governs code assignment
Bundling (CO-97)	Operative or procedure note showing separate site, session, lesion or encounter; E/M note showing the separately identifiable work	NCCI Policy Manual chapter; the PTP edit's modifier indicator; CPT modifier definitions (25, 59, XE/XS/XP/XU, 24, 79)	Adding a modifier on the corrected claim with no documentation that supports it
Timely filing (CO-29)	277CA acceptance, payer acknowledgment, portal screenshot with date, certified mail receipt, proof the payer gave wrong information or eligibility was retroactive	The contract's timely filing clause and its exceptions; Medicare's 12-month rule and exceptions at 42 CFR 424.44	A clearinghouse "sent" report with no payer acknowledgment
No authorization (CO-197)	The authorization itself if one exists; the payer's PA list showing the service did not require it; eligibility response; emergency documentation; retro-auth request	Payer PA policy and retro-auth rules; state PA law; for MA, 42 CFR 422.138 and the continuity rules	Appealing on medical necessity when the only issue is a missing number
Payer error / underpayment	Contract rate sheet, fee schedule, the 835 showing the allowed amount, the calculation of the expected amount	The contract's payment terms and dispute clause; state prompt-pay law with its interest rate	Filing a member appeal for what the contract calls a provider dispute, and vice versa

A worked example (fictional)

Appeal letter excerpt · Riverside Medical Group to Northwind Health Plan

RE: First-level provider appeal · Claim 2026-11207 · Northwind ICN NW26-0931184 Member: Jordan Doe · DOB 04/12/1985 · ID NWH123456789 · Group GRP00451 Dates of service: 03/14/2026–03/17/2026 · Billing NPI 1234567893 · Attending: Ana Rivera, MD (NPI 1987654321) Denial: 04/22/2026 · CO-50 / N115 · "Inpatient level of care not supported; observation appropriate" Appeal deadline per denial notice: 180 days (10/19/2026) · This appeal filed 05/06/2026 REQUEST Riverside requests reversal of the level-of-care denial and payment of MS-DRG 193 as billed. GOVERNING STANDARD Northwind Medical Policy UM-104 v2026.1 (Inpatient Admission Criteria) adopts the CMS two-midnight benchmark (42 CFR 412.3(d)(1)) for Medicare Advantage members and MCG Inpatient & Surgical Care, Pneumonia (Community-Acquired), for commercial members. The member is a commercial PPO enrollee; MCG applies. The denial letter cites neither. CRITERIA MET (MCG CAP, admission indicators) 1. Hypoxemia: SpO2 86% on room air, 03/14 14:10 (ED flowsheet, p. 4); O2 3 L NC started 14:20; required through 03/16 06:00 (p. 11–14). 2. Failed outpatient therapy: amoxicillin-clavulanate from 03/10, documented worsening (Dr. Rivera H&P, p. 2). 3. Severity: CURB-65 = 2 (respiratory rate 32, BUN 24), lactate 2.6 (lab, p. 7). 4. Physician expectation: "Anticipate > 2 midnights for IV antibiotics and oxygen weaning" (admission order and H&P, 03/14 16:05, p. 3). REBUTTAL The denial states "no evidence of respiratory compromise." Pages 4 and 11–14 document oxygen requirement for 40 hours. The reviewer's letter does not identify the reviewer's specialty; Northwind Provider Manual §9.3 requires same-or-similar specialty review. ATTACHMENTS (18 pages): ED record; H&P; admission order; progress notes 03/15–03/17; nursing flowsheets; lab results; MCG worksheet; UM-104 excerpt. _______________________ Ana Rivera, MD, attending physician Date 05/06/2026

Names, identifiers, policy numbers and clinical details are fictional. Page references point to the attached packet.

Appeal writing checklist

Right path and right level Member appeal vs provider dispute; first-level vs reconsideration; expedited where ongoing care is affected
Deadline confirmed and documented From the denial notice date, not the remittance posting date; proof of submission kept
Payer's criteria obtained Policy number and version; LCD/NCD; MCG/InterQual guideline; contract clause
Every criterion mapped to a page in the record
The denial's stated reason answered line by line
Procedural defects stated Late decision, missing criteria, reviewer specialty, valid auth ignored
Signed by the right person Treating physician for clinical appeals; authorized representative form where required
Attachments labeled in the order cited; nothing irrelevant included
Outcome and reason code recorded for the overturn-rate database

Templates, with discipline

Build a template per payer and denial category with the citation slots pre-filled (policy number, regulation, guideline). Then require the writer to replace every bracket with a page reference from this patient's record. A template that goes out with generic language is worse than no template: reviewers recognize it and read no further.

New evidence has a last stop

In Medicare fee-for-service appeals, evidence not submitted by the reconsideration (QIC) level is generally excluded at the ALJ unless good cause is shown (42 CFR 405.1028). Commercial external review is de novo, but the IRO decides on the packet it receives. Send everything that matters at the first level.

Chapter 06

Clinical appeals, peer-to-peer and letters of medical necessity

Clinical denials carry the largest balances (inpatient stays, surgeries, infusions, post-acute care) and the highest overturn rates when the record supports the care. They also require clinicians' time, which is the scarcest resource in the revenue cycle. The job of the clinical appeals function is to spend that time only where the record can win.

The kinds of clinical denial

Medical necessity

Service not reasonable and necessary

The payer's criteria for the service were not met on the documentation submitted: imaging without failed conservative therapy, surgery without the required findings, a drug without the step-therapy history. Fix: map the record to the criteria; if the criteria genuinely were not met, the denial is correct and the prevention is upstream.

Level of care

Inpatient vs observation, ICU vs floor

The care was necessary but the setting was "too high." For Medicare and, since 2024, Medicare Advantage, the test is the physician's expectation of a two-midnight stay or the inpatient-only list. Commercial plans use MCG or InterQual. Fix: show the physician's expectation and risk at the time of the order, not the outcome.

Length of stay and concurrent denials

Days beyond the approved period

The payer approved some days and denied the rest during concurrent review. Fix: daily clinical updates with the specific reason discharge was not safe each day; document discharge barriers (no bed at the SNF, pending test results) because many contracts and state laws pay for administratively necessary days.

DRG and clinical validation

Diagnoses the payer says were not clinically present

The payer's reviewer removed sepsis, acute respiratory failure or malnutrition and re-grouped the DRG. Fix: show the clinical indicators and treatment for the diagnosis. Where the payer's contract allows clinical validation, the argument is clinical; where it does not, the argument is that coding follows the physician's documented diagnosis.

Experimental or investigational

Not proven, not covered

The plan's policy classifies the service as unproven. Fix: FDA status, society guideline, published evidence, and whether the plan's policy is current. These denials are eligible for external review under the ACA because they involve medical judgment.

Readmission and quality denials

Readmitted within 30 days; never events

Some contracts deny or reduce payment for a readmission the payer judges related and preventable. Fix: the contract's definition, the clinical distinction between the admissions, and whether the readmission was planned.

Peer-to-peer

1
Decide whether to take it Same day as the denial
Peer-to-peer is offered for prior authorization and concurrent denials, less often for retrospective claim denials. It is the fastest route to a reversal and does not usually consume an appeal level. Take it when the record is strong; if it is not, the conversation will only confirm the denial.
2
Schedule inside the window Often 1 to 3 business days
Payers set short windows, and a missed call is treated as a declined peer-to-peer. Note the window in the denial notice, book the attending or the physician advisor, and have the payer's criteria and the chart open.
3
Lead with the criteria The call
State the guideline the plan uses and the findings that meet it, in order, with dates and values. Ask the medical director what, specifically, would change the decision. If they cite a criterion the chart meets, point to it; if they cite one it does not, say what clinical fact substitutes.
4
Document the outcome Immediately
Date, time, the medical director's name and specialty, the decision, the reference number, and anything promised. If upheld, the written appeal follows and may cite the conversation. If overturned, confirm the approval in writing before the claim goes out.

Letters of medical necessity

When

Unusual cases and strong arguments

A letter of medical necessity (LMN) is a signed clinical narrative from the treating physician. It is required by some payers for DME, specialty drugs and out-of-network exceptions, and it is the most persuasive attachment in any appeal where the record is thin on explanation and rich on data.

Contents

Six paragraphs

Diagnosis and functional status; history and what has been tried, with dates and results; why alternatives are inappropriate for this patient; what the requested service will change and the expected outcome; the guideline or evidence that supports it; a statement that the physician has reviewed the payer's criteria and how they are met.

Physician advisor economics

A physician advisor program (employed or outsourced) pays for itself when it concentrates clinician time on status decisions at admission, peer-to-peer calls, and the top tier of clinical appeals by balance. Measure it by status accuracy, peer-to-peer overturn rate, appeal overturn rate and dollars recovered per advisor hour. Track the "did not appeal" decisions too; a good advisor also tells you when not to fight.

Payer automation and clinical denials

The 2024 Senate Permanent Subcommittee on Investigations report documented Medicare Advantage insurers' rising post-acute denial rates alongside automated and predictive tools in utilization review, and the OIG's 2022 sample found 13% of MA prior authorization denials and 18% of payment denials met Medicare coverage rules and should have been approved. Since 2024 MA plans must base medical-necessity denials on the individual patient's circumstances with physician review, and several states restrict AI-only adverse determinations. Ask for the reviewer's credentials and the criteria on every clinical denial; a denial without them is procedurally defective.

Chapter 07

Appeal paths by payer

Every program defines who may appeal, how many levels exist, how long you have to file at each, how long the decider has to answer, and what the minimum dollar amount is to go further. The paths look alike from a distance and differ in every detail that matters.

Traditional Medicare (Parts A and B): five levels

Level	Decider	File within	Decision due	Minimum amount (2026)	Form and notes
1. Redetermination	The MAC	120 days from the initial determination (the remittance or demand letter)	60 days	None	CMS-20027 or a written request with the required elements. For overpayments, filing by day 30 prevents recoupment from starting on day 41.
2. Reconsideration	Qualified Independent Contractor (QIC)	180 days from the redetermination notice	60 days	None	CMS-20033. Last chance to submit evidence without a good-cause showing. Filing within 60 days of the redetermination keeps recoupment stopped.
3. ALJ hearing	Office of Medicare Hearings and Appeals	60 days from the reconsideration notice	90 days by statute; OMHA's average was 74 days in FY 2025 and 69 in FY 2026 to date	$200 (requests filed on or after Jan 1, 2026)	OMHA-100. Claims may be aggregated to meet the threshold. Escalation to the ALJ is available if the QIC misses its 60 days. Recoupment is not stayed.
4. Medicare Appeals Council	Departmental Appeals Board	60 days from the ALJ decision	90 days	None	Review on the record; escalation from a late ALJ is available.
5. Judicial review	US District Court	60 days from the Council decision	Court schedule	$1,960 (2026)	Thresholds are indexed to the medical-care CPI each year.

Deadlines are measured from the date you receive the notice, which Medicare presumes to be five days after the notice date unless shown otherwise. Good cause for late filing exists but is narrowly granted. Part D drug appeals and Medicare Advantage follow their own first two levels and then join this path at the ALJ.

Medicare Advantage

1
Plan reconsideration File within 65 calendar days of the organization determination notice
Requested by the enrollee, their representative, or the treating physician; a non-contracted provider may appeal a payment denial with a signed waiver of liability. Decision due in 72 hours (expedited), 30 days (standard pre-service), 7 days (Part B drug) or 60 days (payment). Contracted providers' payment disputes usually run under the contract's dispute process instead.
2
Independent Review Entity Automatic if the plan upholds any part of the denial
The plan must forward the case file to the Part C IRE (C2C Innovative Solutions since May 1, 2026). IRE decision in 72 hours expedited, 30 days standard pre-service, 60 days payment. You may add information to the file through the plan.
3
ALJ, Council, federal court 60 days at each step
Same thresholds as traditional Medicare: $200 for the ALJ and $1,960 for court in 2026. For many provider payment denials the IRE is the practical end of the road because of the amounts involved.

2026 rules that help providers

Under the CY 2024 and CY 2026 MA rules, plans must follow traditional Medicare coverage criteria including the two-midnight benchmark, may not reopen an approved inpatient admission except for obvious error or fraud, must treat decisions made during care (concurrent review) as appealable organization determinations, and must notify the enrollee and the provider of adverse decisions. A denial that contradicts an approved authorization or applies plan-only criteria where Medicare policy exists is defective on its face.

Medicaid, commercial, ERISA and marketplace

Program	Internal appeal	Decision	Next step	Source
Medicaid managed care	Enrollee (or provider with written consent, where state law allows) files within 60 calendar days of the adverse benefit determination notice; one level	30 calendar days standard, 72 hours expedited, extendable 14 days	State fair hearing, requested within a state-set window of 90 to 120 days after the appeal resolution notice. Provider payment disputes follow the MCO contract and state rules.	42 CFR 438.402, 438.408
Medicaid fee-for-service	State agency's provider appeal or reconsideration process	State rule	Administrative hearing, then state court	State plan and administrative code
Commercial, fully insured	Member appeal (one or two levels) under the policy and state law; provider appeal or dispute under the contract and provider manual, typically 60 to 180 days from the denial	Commonly 30 to 60 days; state law sets maximums for fully insured plans	Member: external review by an IRO under state law or the federal process. Provider: contract dispute resolution, often arbitration; state prompt-pay complaints to the insurance department	State insurance code; ACA 45 CFR 147.136
Self-funded employer plans (ERISA)	At least 180 days to appeal; one or two levels under the plan document	72 hours urgent; 30 days pre-service and 60 days post-service with one level (15 and 30 days per level with two)	External review requested within 4 months; IRO decides in 45 days (72 hours expedited). Then federal court under ERISA §502(a). State PA and prompt-pay laws generally do not apply.	29 CFR 2560.503-1; 45 CFR 147.136
ACA marketplace (QHP)	Issuer's internal appeal; same ERISA-style clocks under the ACA	As above	External review by an IRO for denials involving medical judgment, rescissions and surprise-billing determinations; 4 months to request, 45 days to decide	45 CFR 147.136
TRICARE, workers' comp, auto	Contractor or carrier process; state workers' comp boards for disputed treatment	Program rule	Program-specific hearing	32 CFR 199.10; state statutes

Appeal deadline trackerChoose the program and the level you are at, enter the notice date and the amount, and the tool returns your filing deadline, the decider's deadline, the next level and the recoupment status for Medicare overpayments.

Program

Notice you just received

Date on the notice

Amount in controversy $

This is a Medicare overpayment demand (recoupment clock applies)

Who signs

Medicare: the provider that furnished the service is a party and appeals in its own name; a representative for the beneficiary uses CMS-1696. Medicare Advantage: the enrollee, their representative or the physician; non-contracted providers with a waiver of liability (CMS form). Commercial and ERISA: provider appeals under the contract, or a member appeal with an authorized representative designation; the member's external review rights cannot be waived by the provider contract.

Expedited appeals are for ongoing care

Expedited (72-hour) review exists where the standard timeframe could seriously jeopardize the patient's life, health or ability to regain maximum function. It applies to pre-service and concurrent denials, not to payment denials after the fact. A physician's statement that the case is urgent must be honored by MA plans and under ERISA.

Chapter 08

Payer audits

Audits are denials after payment. Medicare runs several review programs with different purposes, contractors, triggers and consequences; commercial payers and Medicaid run their own. Knowing which contractor is writing to you tells you what they are looking for, how much time you have, and how serious it is.

Medicare's review contractors

Program	Who and why	Scope and limits	Clocks	Consequences
MAC medical review and TPE	The MAC's own reviewers; Targeted Probe and Educate selects providers whose billing is an outlier on data analysis or on CERT and OIG findings	20 to 40 claims per round, prepayment or post-payment; up to three rounds with one-on-one education after each; a provider under 25% error may be released early	45 days to respond to each ADR; the next round starts 45 to 56 days after education	Non-response counts as an error. After three failed rounds: referral to CMS for 100% prepayment review, extrapolation, RAC referral or revocation
Recovery Audit Contractors (RAC)	Performant (Regions 1 and 2) and Cotiviti (Regions 3, 4 and 5 after the April 2025 award); paid a contingency fee on overpayments and underpayments they find	Automated (data-only) and complex (records) reviews on CMS-approved topics; look-back up to 3 years from the paid date; ADR limit 0.5% of the prior year's paid claims, divided across eight 45-day cycles, adjusted up to 10 times or down to zero by the provider's denial rate	45 days to respond; RAC has 30 days to review; 30 days to request a discussion after the review results letter	Demand letter from the MAC with standard appeal rights; RACs must return the fee on overturned findings
Unified Program Integrity Contractors (UPIC)	Fraud, waste and abuse investigators in five jurisdictions (Northeast, Midwest, Southeast, Southwest, West; contractors include SafeGuard Services and Qlarant); paid on cost, not contingency; triggered by data analytics, complaints, hotline tips and referrals	Medical review, interviews, unannounced site visits, data analysis across Medicare and Medicaid; no ADR limits	Response deadlines set in the letter; payment suspension can be imposed on "credible allegation of fraud" with little notice	Overpayment demands with extrapolation, prepayment edits, payment suspension, revocation, referral to OIG and DOJ
Supplemental Medical Review Contractor (SMRC)	Noridian Healthcare Solutions, on nationwide projects CMS assigns from OIG, GAO, CERT and data findings	Project-specific topic and sample of claims; results reported to CMS; the MAC issues any demand	45 days to respond to the ADR is the usual window; discussion and education period after the findings	Overpayment demand through the MAC with standard appeal rights; findings can inform TPE or RAC targeting
CERT	Comprehensive Error Rate Testing measures the national improper payment rate from a random sample (FY 2025: 6.55%, $28.8 billion)	Random; a CERT request is not an accusation	Documentation request with a stated deadline; non-response is counted as a "no documentation" error	Individual claim adjustment; the aggregate results steer every other program's targets
OIG audits and investigations	Office of Inspector General: audits of hospitals and provider types from the annual Work Plan; investigations with DOJ under the False Claims Act, Anti-Kickback Statute and Civil Monetary Penalties Law	Audits typically sample claims across a multi-year period with extrapolation; investigations use subpoenas and civil investigative demands	Set by the subpoena or audit letter; counsel should be involved from the first contact	Repayment demands, FCA liability (treble damages plus $14,308 to $28,619 per claim), exclusion, corporate integrity agreements
Medicare Advantage RADV	CMS risk adjustment data validation audits of MA plans' submitted diagnoses; expanded in May 2025 toward all roughly 550 contracts every year with up to 200 records each and extrapolation from payment year 2018	Plans pass the record requests to providers; the plan, not the provider, repays CMS, but contracts often shift risk	Plan-set deadlines, usually short	Plan recoupments under risk-sharing contracts; chart-chase burden; diagnosis documentation scrutiny (MEAT)

Commercial and Medicaid audits

Payment integrity vendors

Post-payment claim reviews and recoupment

Commercial payers outsource DRG validation, readmission review, itemized bill review, implant and drug pricing, and coordination of benefits recovery to vendors paid on contingency. The result is a takeback letter and, if unanswered, an offset against future remittances (PLB WO on the 835). The contract's audit clause sets the look-back (commonly 12 to 24 months, longer for fraud), the notice required, and the right to dispute.

Special investigations units

Fraud, waste and abuse

The payer's SIU investigates billing patterns, may place the provider on prepayment review, and refers cases to state insurance fraud bureaus and the National Health Care Anti-Fraud Association network. Respond through compliance and counsel.

Medicaid: MFCUs, RACs, PERM, state audits

State program integrity

Each state runs a Medicaid Fraud Control Unit (criminal fraud and abuse; $2 billion recovered with OIG support in FY 2025), a Medicaid RAC, PERM error-rate sampling, and MCO-level audits. Look-backs and procedures are set by state law and are often longer than Medicare's.

Prepayment review

Every claim held for records

A payer may place a provider on prepayment review after an audit or a pattern of denials: each claim pends for documentation before payment. It is reversible, usually after a defined period of clean claims, and the exit criteria should be in writing.

What draws an audit

Outlier billingHigh E/M levels, units, modifier 25/59 rates vs peers (PEPPER, CBR reports)
CERT and OIG topicsSNF, IRF, hospice, home health, skin substitutes, DME, lab, telehealth
Denial historyHigh error rate in a prior probe or TPE round
ComplaintsPatients, employees, competitors, whistleblowers
Data mismatchesDeceased patients, impossible days, excluded providers, duplicate NPIs
Rapid growthNew service lines or a billing spike with no enrollment change

Read your PEPPER

The Program for Evaluating Payment Patterns Electronic Report (PEPPER) shows a hospital, SNF, hospice, home health agency or other provider its own billing on the target areas CMS and the RACs watch, as a percentile against the nation and the state. A provider above the 80th percentile on a target area should assume it will be reviewed and audit itself first. Comparative Billing Reports (CBRs) do the same for physicians and suppliers.

Chapter 09

Responding to ADRs, extrapolation and recoupment

An additional documentation request (ADR) is a deadline, a demand letter is a clock, and a sampling methodology is an argument. Each has to be handled on time and on the record, because every one of them turns into a larger loss when it is ignored.

Responding to an ADR

1
Log it the day it arrives Day 0
Contractor, program (TPE, RAC, UPIC, SMRC, CERT, commercial), claims listed, date of the letter, response deadline (45 days for Medicare contractors, computed from the letter date, not receipt), submission method (esMD, portal, fax, mail) and the case or reference number. One owner per request.
2
Pull the complete record Days 1–10
Everything that supports the claim: orders with signatures and dates, H&P, progress notes, nursing notes, results, operative reports, discharge summary, plan of care, certifications and face-to-face documentation, the ABN if any, the itemized bill and the claim. For therapy, DME and home health, the specific elements the LCD lists. Include records from other providers (the referring physician's note for DME) if the coverage rule depends on them.
3
Review it before it goes Days 10–30
A coder or nurse auditor reads each record against the coverage and coding rules the contractor will apply, flags gaps, and obtains late entries only where permitted (an addendum dated and signed when written, never a backdated note). Write a short cover letter per claim that points the reviewer to the pages that meet each requirement. A legible, organized packet changes outcomes.
4
Submit with proof Before day 45
esMD or the contractor portal where available; keep the transmission receipt or the certified mail record. If an extension is needed, ask in writing before the deadline (RACs commonly allow 14 days). Missing the deadline is a denial coded as "no documentation" and an error in your rate.
5
Track the result and use the discussion period Results letter + 30 days
RACs issue review results letters; the provider has 30 days to request a discussion with the RAC's clinician and present additional explanation before the demand letter issues. TPE and SMRC offer education sessions. Use them: a discussion reversal costs nothing and consumes no appeal level.

Statistical sampling and extrapolation

When a contractor reviews a sample of claims and projects the error to the universe of claims it was drawn from, a modest sample finding becomes a demand many times its size. Under Medicare Program Integrity Manual chapter 8.4 (effective January 2, 2019), contractors may extrapolate when there is a sustained or high level of payment error (a sample error rate of 50% or more is one way to show it) or when documented education, such as TPE, has failed to correct the problem. The contractor must use a statistician-approved methodology, keep the universe, sample frame, random numbers and worksheets, and must be able to let the provider replicate the sample.

The provider's defenses are specific. The decision to extrapolate is not itself appealable, but the methodology is: whether the universe was defined correctly, whether the sample was random and representative, whether the sample size supports the precision claimed, whether the estimate used the lower limit of the confidence interval as the manual requires, and whether each sampled claim was correctly denied. Every sampled claim overturned on appeal lowers the extrapolated amount, so each one is appealed individually and the methodology challenge rides alongside. Retain a statistician early; the ALJ request must state the specific reasons for disputing the methodology.

ADR clock and extrapolation illustratorEnter the request and, for post-payment reviews, the sample results. The tool computes the response and discussion deadlines, the demand-letter recoupment timeline, and a point-estimate extrapolation to show the stakes.

Review type

Date on the ADR letter

Claims sampled

Claims found in error

Overpayment found in the sample $

Claims in the universe (same period and type)

Sampled error claims you expect to overturn on appeal

The Medicare recoupment timeline (section 935)

Day	What happens	What you can do
1	Demand letter issued by the MAC with the overpayment amount, the reason and appeal rights	Pay, request an extended repayment schedule, file a rebuttal (within 15 days; it does not stop recoupment), or prepare the redetermination
15	Rebuttal period ends	A rebuttal explains why recoupment should not proceed; only a timely appeal stops it
30	Last day to pay without interest; last day for a redetermination request to be received and validated so recoupment never starts	File the redetermination by day 30, even if the full packet follows, where the contractor allows
31	Interest begins to accrue (11.875% annual rate for the quarter beginning July 21, 2026; the rate resets quarterly, so check the current MAC notice) and continues while recoupment is stayed	Weigh paying under protest against interest at the ALJ's timeline
41	Recoupment begins by offset against new Medicare payments if no valid redetermination has been received	A redetermination filed after day 41 stops further recoupment but amounts already taken are not returned until the appeal is decided
120	Redetermination filing window closes	After this the overpayment is final unless good cause is shown
61 after redetermination	If the redetermination is unfavorable and no reconsideration request has been received within 60 days, recoupment begins or resumes	File the reconsideration within 60 days of the redetermination notice (the QIC deadline is 180 days, but only 60 keeps recoupment stopped)
After reconsideration	The limitation on recoupment ends; recoupment proceeds 30 days after an unfavorable QIC decision whether or not you go to the ALJ	If you win at the ALJ or above, Medicare refunds the recouped principal with interest

Self-identified overpayments: the 60-day rule

When a provider identifies an overpayment on its own (an internal audit, a credit balance, a coding error found in a pattern), the Affordable Care Act requires it to be reported and returned within 60 days of identification. Since January 1, 2025, an overpayment is "identified" when the provider knowingly receives or retains it under the False Claims Act's standard (actual knowledge, reckless disregard or deliberate ignorance), and the 60 days are suspended for up to 180 days while a good-faith investigation quantifies the amount. The look-back is six years. Retaining an identified overpayment past the deadline is itself a false claim. See 42 CFR 401.305.

When to involve counsel

A UPIC letter, a payment suspension, a subpoena or civil investigative demand, an OIG audit, an extrapolated demand, a whistleblower allegation, or an audit that suggests a pattern of the same error across years. These are no longer billing questions; they carry False Claims Act exposure (treble damages plus $14,308 to $28,619 per claim as of July 2025) and the possibility of exclusion. Compliance and counsel decide on self-disclosure through the OIG Self-Disclosure Protocol or the CMS Self-Referral Disclosure Protocol, which reduce penalties.

Chapter 10

Denial analytics and feedback loops

Denial data is the most honest report the revenue cycle produces: the payer is telling you, claim by claim, where the process failed. Analytics turn that into a small number of measures that leadership can act on, and a feedback loop that sends each category back to the department that can prevent it.

The measures

Measure	Formula	Common target	What it tells you
Initial denial rate	Claims (or dollars) denied on first adjudication ÷ claims (or dollars) submitted, by month of submission	Under 5% by claims is a frequent goal; the hospital industry median was 11.8% in 2024	Front-end and coding quality. Report by payer, category and department; the blended number hides everything.
Final denial rate (write-off rate)	Dollars written off to denial reasons ÷ net revenue (or ÷ dollars submitted), by month of service	Under 2%; Kodiak's hospital median was 2.8% in 2024 and about 3% in 2025	Money actually lost. The gap between initial and final is the cost of rework.
Overturn (appeal success) rate	Appeals decided in the provider's favor (count and dollars) ÷ appeals decided, by payer, category and level	Varies widely; the MA prior-authorization benchmark is 80.7%	Which denials are worth appealing. Low overturn rates in a category mean the denial is usually correct and the fix is upstream.
Appeal rate	Denials appealed ÷ appealable denials	High for clinical denials above a balance threshold; the MA average is 11.5%	Whether money is being left on the table.
Days to resolution	Denial date to final outcome (paid, written off), median and 90th percentile	Under 30 days for correctable, under 90 for appealed	Queue health and payer responsiveness.
Cost to work a denial	Denial-management labor and fees ÷ denials worked	Premier's 2024 survey average: $43.84	The denominator in every prevention business case.
Preventable share	Denials in categories classified as preventable (registration, eligibility, authorization, coding, timely filing) ÷ all denials	Trend down	Where prevention investment goes.
Denials expiring unworked	Denials that passed their appeal or correction deadline with no action, count and dollars	Zero	Queue discipline. Any non-zero number is a process failure, not a payer problem.
Audit metrics	ADRs received, response rate on time, error rate by round, dollars demanded, dollars overturned, extrapolated vs actual	100% on-time response; error rate below the contractor's threshold	Audit exposure and the effectiveness of documentation improvement.

The monthly denial review

1
Top of the report: four numbers Page 1
Initial denial rate, final denial rate, dollars overturned, dollars expired unworked. Each with the trend over 13 months and the same month last year. Leadership reads nothing else unless one of these moved.
2
Pareto by root-cause category Page 2
Categories ranked by denied dollars, with the count, the overturn rate and the final write-off. Typically five categories explain 80% of the dollars. Each category names its owning department.
3
Payer scorecard Page 3
Per payer: initial denial rate, request-for-information rate, overturn rate, days to decision, payer-error denials, and open audits. Payers that deny far above their peers for the same services, or whose denials are overturned at very high rates, are a contract conversation, not a work-queue problem.
4
Department drill-downs Pages 4+
Registration: top error fields and the registrars involved. Authorization: denials by service line and vendor. Coding: top CARC/modifier combinations and coders. Clinical: status denials by physician and unit. Each page goes to that department's manager with the specific claims.
5
Actions and owners Last page
Each top category has one action, one owner and one date. Next month's review opens with whether last month's actions changed the number. A denial program without this page is a reporting program.

Analytics that find money

Payer behavior

Edit changes and silent policy shifts

A new CARC/RARC combination from one payer spiking in one month usually means a new edit or policy. Catching it in week one, and escalating to the payer representative, saves the next three months of denials.

Underpayments

Expected vs actual

Not a denial, but found in the same data: a contract modeling engine compares the allowed amount on the 835 with the contracted rate. Variances are a provider dispute with a strong overturn rate.

Overturn-rate models

Probability by payer, category and balance

Six months of outcomes, grouped by payer, CARC/RARC, service line and balance band, give the probability that feeds the prioritizer. Refresh monthly. Where the sample is thin, use the category average.

Denial prediction

Pre-bill scoring

Models that score claims for denial risk before submission (missing auth for a service the payer usually authorizes, diagnosis not on the LCD list) route them to a pre-bill queue. Useful when they act on specific, fixable attributes; otherwise another dashboard.

AI-assisted appeals

Drafting with review

Generative tools that assemble the citation and the record map from the chart can cut appeal writing time, with a nurse or coder reviewing every letter. The reviewer's time is the constraint; the tool's value is first-draft quality, not volume.

Audit self-assessment

PEPPER and internal probes

Run the contractor's own target areas against your claims quarterly. A ten-claim internal probe on a high-percentile area costs an afternoon and tells you whether a TPE letter would find a 5% or a 50% error rate.

Closing the loop at the front desk

The most effective feedback is specific and fast: the registrar who entered the wrong subscriber on Tuesday learns about it on Thursday, with the claim, not in a quarterly aggregate. Registration accuracy scores, authorization turnaround and coding query rates are the leading indicators; the denial rate is the lagging one. When the leading indicators are on the department dashboards, the denial rate follows.

Chapter 11

Rules and regulations

Denials and audits run on a layered rulebook: the Social Security Act and its regulations for Medicare and Medicaid, ERISA and the ACA for private coverage, state insurance law for fully insured plans, and the contract for everything the law leaves open. These are the provisions revenue cycle teams cite most.

Federal · Medicare appeals

Social Security Act §1869; 42 CFR Part 405, Subpart I

Defines the five levels (redetermination, reconsideration, ALJ, Council, judicial review), the filing deadlines (120, 180, 60, 60, 60 days), the decision timeframes (60, 60, 90, 90 days), the amount-in-controversy thresholds indexed annually ($200 and $1,960 for 2026, 90 FR, December 4, 2025), aggregation of claims, escalation when a decider misses its deadline, the five-day presumption of receipt (405.942), and the evidence cutoff after reconsideration (405.1028). OMHA's procedural rules sit in 42 CFR 405.1000 to 405.1063.

Federal · Overpayments and recoupment

SSA §1893(f)(2) (MMA §935); 42 CFR 405.370–405.379; 42 CFR 401.305

The limitation on recoupment: no recoupment until day 41 after the demand, stayed by a timely redetermination (by day 30) and reconsideration (within 60 days), interest from day 31 at the Treasury-based rate reset quarterly, and refund with interest if the provider prevails at the ALJ or above. Section 401.305 implements the ACA's 60-day report-and-return rule with the 2025 "knowingly" standard for identification, the 180-day investigation suspension and the six-year look-back. Extended repayment schedules are at 42 CFR 401.607.

Federal · Review contractors

SSA §1893 (Medicare Integrity Program); §1893(h) (Recovery Audit); Program Integrity Manual (CMS Pub. 100-08)

Authorizes MACs, UPICs, the SMRC and RACs. The RAC statute sets contingency-fee payment and the obligation to return fees on overturned findings; CMS policy sets the three-year look-back from the paid date and the ADR limits (0.5% of paid claims per year for institutional providers, adjusted by denial rate). PIM chapter 3 governs medical review and ADRs (45-day response), chapter 8.4 governs statistical sampling and extrapolation (sustained or high level of payment error; statistician-approved methods; lower bound of the confidence interval), and chapter 3.2.5 and TPE guidance define the three-round probe-and-educate process.

Federal · Medicare Advantage

42 CFR Part 422, Subpart M; 42 CFR 422.101 and 422.138; CY 2024 and CY 2026 MA final rules

Organization determinations, the 65-day reconsideration window (422.582), plan decision clocks (72 hours, 30 days, 60 days), automatic IRE review (422.592), and access to the ALJ and beyond at the Medicare thresholds. Section 422.101(b)–(c) requires plans to follow traditional Medicare coverage criteria, including the two-midnight benchmark, and to base medical-necessity decisions on the individual enrollee with physician review. The CY 2026 rule added that approved inpatient admissions may be reopened only for obvious error or fraud and that concurrent-review decisions are appealable organization determinations. Non-contracted providers appeal with a waiver of liability (422.574).

Federal · Medicaid

42 CFR Part 438, Subpart F; 42 CFR 431 Subpart E; 42 CFR 455 and 1007

Managed care enrollees have 60 days to appeal an adverse benefit determination, the plan must resolve it in 30 days (72 hours expedited, 14-day extension), and a state fair hearing must be available within 90 to 120 days of the resolution notice; providers may act with the enrollee's written consent where state law allows. Part 455 governs state program integrity (screening, payment suspension on credible allegations of fraud, Medicaid RACs) and Part 1007 the Medicaid Fraud Control Units.

Federal · ERISA and the ACA

29 CFR 2560.503-1; 45 CFR 147.136; ERISA §502(a)

The claims procedure regulation: 72-hour urgent, 15-day pre-service and 30-day post-service decisions, at least 180 days to appeal, full and fair review with the claimant's right to the claim file and the criteria relied on, and specific content for adverse benefit determinations. The ACA extended internal appeal protections to the individual market and created external review by an accredited IRO for denials involving medical judgment, rescissions and surprise-billing determinations: four months to request, 45 days to decide (72 hours expedited), binding on the plan. Self-funded plans are generally exempt from state insurance law.

State law

Prompt-pay, utilization review, retroactive denial and audit limits

Most states set prompt-pay deadlines with interest for clean claims, utilization review standards (reviewer qualifications, criteria disclosure, appeal clocks) for fully insured plans, limits on retroactive denial and recoupment (commonly 12 to 24 months after payment, with written notice and a dispute period), and provider appeal rights that run alongside the member's. Several states restrict AI-only adverse determinations and require a physician to make medical-necessity denials. These apply to fully insured and often Medicaid managed care products, not to self-funded ERISA plans.

Federal · Fraud and abuse

False Claims Act (31 USC 3729–3733); Anti-Kickback Statute (42 USC 1320a-7b); Civil Monetary Penalties Law (42 USC 1320a-7a); exclusion (42 USC 1320a-7)

The FCA imposes treble damages plus a per-claim penalty of $14,308 to $28,619 (for penalties assessed after July 3, 2025), allows whistleblowers to sue (1,297 qui tam suits in FY 2025) and treats a knowingly retained overpayment as a false claim. The CMPL lets the OIG impose penalties administratively and the exclusion authorities bar providers from federal programs (1,212 exclusions in the six months to March 2026). Audit findings that show a pattern are where these statutes begin.

Federal · Transactions and codes

HIPAA; 45 CFR Part 162; X12 835 and 277; CARC/RARC code sets; CAQH CORE operating rules

Payers must use the standard 835 and the adopted CARC and RARC code sets to explain adjustments, and the CORE rules require code combinations that make sense (a CARC with a RARC that explains it, for defined business scenarios). A denial without a valid reason code, or with a proprietary one, violates the standard and is a legitimate basis for a complaint to CMS's National Standards Group.

Federal · Patient protections

No Surprises Act (PHSA §2799A, 45 CFR Part 149); Medicare limitation on liability (SSA §1879) and ABN rules

Balance-billing bans for emergency and certain non-emergency out-of-network services, and the independent dispute resolution process for the payment amount. Medicare's limitation-on-liability rules decide when a beneficiary can be charged for a denied service: only with a valid, timely ABN for services that are not reasonable and necessary. These rules determine who absorbs a denial that is not overturned.

Chapter 12

Key numbers 2026–27

Item	Figure	Context
Denial rates and costs
Initial denial rate, hospitals (Kodiak, 2024)	11.8%	10.2% in 2020; final denial rate 2.8%
Commercial inpatient initial / final (Kodiak, 2025)	21% / 3%	Outpatient 11% / 3%
Private-payer claims initially denied (Premier, 2024)	~15%	54% ultimately paid; $43.84 per appeal; $19.7 billion a year
Providers reporting 10%+ of claims denied (Experian, 2025)	41%	Top causes: data 50%, authorizations 35%, registration 32%
ACA marketplace in-network claims denied (2024)	19%	Range 3% to 36% by insurer; under 1% appealed; 66% of internal appeals upheld
Medicare Advantage prior authorization (2024)
Determinations / denied	52.8 million / 7.7%	4.1 million denials
Denials appealed / overturned	11.5% / 80.7%	Overturn range 51% to 95.5% by insurer
OIG 2022 sample: denials that met Medicare rules	13% / 18%	Prior authorization / payment denials
Appeal clocks and thresholds
Medicare FFS filing windows, levels 1–5	120 / 180 / 60 / 60 / 60 days	Decisions due 60 / 60 / 90 / 90 days
Amount in controversy, ALJ / federal court	$200 / $1,960	Requests filed on or after January 1, 2026
OMHA average ALJ processing time	74 days (FY 2025)	137 days in FY 2023; 69 days FY 2026 to date
MA reconsideration: file / decide	65 days / 30–60 days	72 hours expedited; automatic IRE review if upheld
Medicaid managed care: file / decide	60 days / 30 days	72 hours expedited; fair hearing within 90–120 days
ERISA: appeal window / external review	180 days / 4 months	IRO decides in 45 days (72 hours expedited)
Audits and recoupment
Medicare FFS improper payment rate (FY 2025)	6.55% / $28.8 billion	Insufficient documentation 53%; medical necessity 15%; coding 11%
Medicare Advantage / Medicaid improper rates (FY 2025)	6.09% / 6.12%	$23.7 billion / $37.4 billion
ADR response window (Medicare contractors)	45 days	RAC discussion period 30 days after results letter
RAC look-back / ADR baseline	3 years / 0.5%	Of prior-year paid claims, across eight 45-day cycles; 0 to 10× by denial rate
TPE rounds / claims per round	3 / 20–40	Next round 45–56 days after education
Extrapolation threshold (one basis)	50% sample error	Or failed education; PIM 8.4 since Jan 2, 2019
Recoupment: interest / offset begins	Day 31 / Day 41	Interest 11.875% for the quarter from July 21, 2026; resets quarterly, check the current rate
60-day rule investigation suspension	180 days	"Knowingly" standard since January 1, 2025; six-year look-back
Enforcement
False Claims Act recoveries (FY 2025)	$6.8 billion	$5.7 billion health care; 1,297 qui tam suits filed
FCA per-claim penalty (after July 3, 2025)	$14,308–$28,619	Plus treble damages
OIG semiannual (Oct 2025–Mar 2026)	$5.56 billion	317 criminal, 287 civil actions; 1,212 exclusions
National takedown (June 30, 2025)	324 defendants	$14.6 billion alleged intended loss; 96 licensed professionals
MA RADV expansion (announced May 2025)	~550 contracts / 200 records	Every contract annually; PY 2018–2024 extrapolated

What is changing

In effect 2026

MA plans held to Medicare criteria and their own approvals

Two-midnight benchmark, no reopening of approved admissions, concurrent decisions appealable, specific denial reasons, and public denial and appeal metrics every March 31. Cite them.

Expanding

Audit volume and automation

RADV every year for every MA contract, Cotiviti's new RAC regions active, WISeR prepayment review in six states, and payer payment-integrity vendors using analytics on every claim. Expect more ADRs and faster takebacks.

Rising

Enforcement and overpayment exposure

Record FCA recoveries, the 2025 "knowingly" overpayment standard, and penalty ranges indexed every year. Self-audit findings now carry a clock and a legal standard.

Sources

Chapter 13

Glossary

Chapter 14

Knowledge check

Eight questions drawn from the chapters above. Pick an answer to see the explanation.

Score: 0 / 8

For training and reference. This page summarizes general rules and does not replace payer contracts, plan documents, CMS manuals, state law or legal advice. Example names, identifiers, claim numbers, policy numbers, clinical details and payers are fictional.

Figures checked October 15, 2026.