E/M coding audit failures cost US healthcare organizations millions in overpayments, penalties, and compliance risk every year. Recent Office of Inspector General reports show a clear pattern: the same seven documentation and coding errors appear repeatedly across physician practices, hospital outpatient departments, and emergency facilities. Understanding these failure patterns and building prevention protocols around them isn't optional anymore—it's the difference between clean audits and costly recoupment demands.
This post breaks down the top seven E/M coding audit failures identified in 2025-2026 OIG and MAC audits, with specific prevention checklists you can implement immediately.
Why E/M coding audit failures are spiking in 2026
E/M codes represent the largest volume of claims submitted to Medicare and commercial payers. That volume makes them a priority audit target.
The 2021 E/M guideline changes reduced some documentation burden, but they also created new failure points. Coders and physicians who relied on the old bullet-point counting system now struggle with medical decision making (MDM) documentation. Many organizations never fully retrained their teams after the guideline shift.
OIG work plans for 2025 and 2026 specifically called out E/M services as high-risk areas. Recovery Audit Contractors and Unified Program Integrity Contractors have increased E/M review rates by 34% compared to 2023 levels, according to CMS contractor activity reports.
When auditors pull records, they're not looking for perfect charts. They're looking for the seven patterns below.
Audit failure pattern 1: Medical decision making unsupported by documentation
This is the most common E/M audit failure. A provider selects a level 4 or 5 visit based on MDM complexity, but the documentation doesn't support the number and complexity of problems addressed, data reviewed, or risk level.
Under current guidelines, MDM has three elements: number and complexity of problems, amount and complexity of data reviewed, and risk of complications or morbidity. You need to meet the requirements in two of three elements to justify the MDM level.
The failure happens when coders or providers assume clinical judgment alone justifies the level. It doesn't. You must document what data you reviewed, what you considered, and why the problem is complex.
Prevention checklist for MDM documentation
- Require explicit documentation of what diagnostic data was reviewed (imaging, labs, prior notes) with dates and findings
- Document independent interpretation when providers personally review images or test results
- Specify what treatment options were considered and why one was selected over alternatives
- Describe complicating factors that elevate problem complexity (comorbidities, treatment interactions, patient circumstances)
- Use the AMA's MDM grid as a documentation template during EHR optimization
- Audit 10 charts per provider quarterly to verify MDM elements match coded levels
Audit failure pattern 2: Upcoding based on time without proper documentation
When providers select E/M levels based on total time, they must document the total time spent on the date of encounter and what activities comprised that time.
Auditors consistently flag time-based coding where the only documentation is a time stamp or a generic statement like "45 minutes spent." That's insufficient.
CMS requires documentation of activities included in total time: history, exam, MDM, care coordination, counseling, and other face-to-face or non-face-to-face services on the date of encounter. If you can't show what filled those 45 minutes, the claim fails.
Prevention checklist for time-based E/M coding
- Document total time numerically and describe major activities (example: "Total time 52 minutes including history, examination, review of outside records from referring physician, discussion of treatment options with patient and family")
- Train providers that only certain activities count toward total time—review CPT time definitions annually
- Build EHR templates with time fields that require activity description, not just a number
- Flag time-based codes during pre-bill scrubbing when documentation is vague or absent
- Compare time documented to service complexity—40 minutes for a straightforward problem triggers audit risk
Audit failure pattern 3: Copy-forward documentation obscuring current visit
Copy-forward functionality in EHRs is a top contributor to audit failures. When previous visit information is copied into a current note without updates, auditors can't determine what was actually done or considered during the current encounter.
This isn't about whether copy-forward is allowed. It's about whether the current note reflects current clinical work. If your review of systems is identical across 6 visits, auditors assume it wasn't actually performed.
OIG reports specifically cite "cloned documentation" as evidence of potential false claims. Even if the care was appropriate, identical documentation creates presumption of fraud.
Prevention checklist for copy-forward documentation
- Implement EHR alerts when more than 80% of a note matches a prior visit
- Require dated attestations when copying prior information: "Previous history reviewed and updated as documented above"
- Train physicians to modify copied content with current findings, even if unchanged (example: "No interval change in chronic conditions since last visit")
- Audit notes for repeated phrases across multiple dates—this is an immediate red flag
- Document what changed or what's new in each visit prominently at the note's beginning
Audit failure pattern 4: Prolonged service codes billed without threshold documentation
Prolonged service add-on codes (99417 for outpatient, 99418 for inpatient) require total time to exceed the base code's time threshold by at least 15 minutes. The audit failure happens when time documentation doesn't clearly show this threshold was met.
If you bill 99215 with 99417, you're claiming at least 55 minutes of total time (40 minutes for 99215 plus 15 for the first prolonged unit). Your documentation must show that time and describe what filled it.
Many auditors also look for medical necessity justification: what about this encounter required that additional time? Generic "counseling" isn't sufficient.
Prevention checklist for prolonged service codes
- Document exact start and stop times or total time with statement like "Total time 58 minutes, exceeding threshold for prolonged services"
- Describe specific activities during the additional time (extensive counseling topics, complex care coordination details, detailed discussion of treatment risks)
- Build claim edits that reject prolonged codes when base code time isn't documented
- Review all prolonged service claims before submission—these have high audit selection rates
If your coding team needs external validation on complex E/M scenarios, a coding quality audit can identify documentation gaps before payers do.
Audit failure pattern 5: Observation or inpatient E/M misalignment with status
Billing inpatient E/M codes (99221-99223, 99231-99233) for patients in observation status, or vice versa, creates immediate audit failures. The patient's official status determines which code set applies.
This error often happens when status changes during the stay or when coders assume clinical intensity determines the code set. It doesn't. Official admission status does.
MAC audits in 2025 showed a 28% error rate on initial hospital care codes where patient status and code set didn't match.
Prevention checklist for observation and inpatient E/M alignment
- Verify patient status in the registration system before coding any hospital E/M service
- Use observation codes (99217-99220, 99224-99226) only when observation status is documented
- When status changes from observation to inpatient, code the admission using inpatient codes only if the provider documents a separate admission decision and note
- Train coders that clinical severity doesn't override official status for code selection
- Audit hospital E/M codes monthly against registration data to catch systematic mismatches
Audit failure pattern 6: ED E/M coding without medical necessity for higher levels
Emergency department E/M codes (99281-99285) don't follow the same MDM framework as office visits, but they still require documentation of medical necessity for higher levels.
Auditors flag ED level 5 codes (99285) when documentation shows straightforward problems or minimal diagnostic workup. High-level ED codes require documentation of severe symptoms, significant diagnostic uncertainty, or high risk of morbidity without immediate intervention.
Many ED audit failures stem from coding based on resources used (CT, labs, consults) rather than medical necessity. Using resources doesn't automatically justify level 5 if the presenting problem and risk level don't support it.
Prevention checklist for ED E/M coding
- Document presenting symptoms' severity and potential for serious deterioration
- Describe diagnostic uncertainty that drove testing decisions
- Specify risk factors that elevated concern (patient history, vital signs, symptom progression)
- Review ED level 4 and 5 codes during charge reconciliation to verify documentation supports the level
- Compare your facility's ED level distribution to national benchmarks—significant outliers attract audits
- Train ED physicians on documentation expectations for high-level codes, not just clinical decision-making
If your ED team struggles with documentation standards, consider specialized support through ED coding services that include physician education.
Audit failure pattern 7: Split/shared visits without proper attribution and documentation
Split/shared E/M visits allow a physician and non-physician practitioner (NPP) to share a visit, with the claim billed under the physician's NPI. CMS updated these rules in 2022, but documentation failures persist.
The audit failure happens when documentation doesn't clearly show who performed what portion of the visit, or when the substantive portion isn't documented. The physician must perform or directly supervise the substantive portion (typically the MDM) to bill under their NPI.
Many organizations still use the old "hands-on" rule or don't document the physician's specific involvement. That creates presumption of improper billing.
Prevention checklist for split/shared E/M visits
- Document both providers' involvement with names, credentials, and specific activities
- Clearly identify who performed the substantive portion: "Dr. Smith performed history and examination, Dr. Jones performed medical decision making and is billing provider"
- Use distinct electronic signatures or addenda to show both providers participated
- Verify the substantive portion meets the requirements for the billed level
- Audit split/shared claims quarterly to ensure documentation meets current CMS rules from the CMS Physician Fee Schedule
- Train billing staff that only certain settings allow split/shared billing (facility settings, not office)
Building a sustainable E/M audit defense system
Prevention checklists help, but sustainable audit performance requires systematic controls.
Start with baseline measurement. Pull 20 random E/M charts per provider or department quarterly. Score them against the seven failure patterns above. Calculate your error rate.
Most organizations find 15-25% error rates on first audit. That's fixable, but only if you measure it.
Second, implement pre-bill review for high-risk scenarios: time-based codes, prolonged services, ED level 5, split/shared visits. A coding specialist should review documentation before claim submission. This catches errors when they're easy to fix.
Third, close the feedback loop. When you find documentation failures, tell the provider immediately with specific examples. Generic "document better" emails don't work. Show them the exact note, explain what's missing, and provide the corrected language.
Fourth, update EHR templates to prompt required elements. If MDM data review is your weak spot, build it into your template. Make it easier to document correctly than to skip it.
What to do if you're already facing an E/M audit
If you've received an audit notification targeting E/M services, your response timeline is tight. Most audit requests require records within 30-45 days.
Don't try to "fix" documentation after the audit request arrives. That's alteration of medical records and creates worse legal exposure than the original coding error.
Instead, pull all requested records immediately. Review them against the specific failure patterns auditors cite in their request letter. Identify which charts have strong documentation and which are vulnerable.
For vulnerable charts, prepare written rationale documents that explain clinical decision-making using information in the existing record. You can't add to the record, but you can interpret and contextualize what's already there.
Engage coding consultants or legal counsel experienced in audit defense before you submit your response. A poorly structured response increases your liability.
Frequently asked questions about E/M coding audit failures
What is the most common cause of E/M coding audit failures?
Insufficient documentation of medical decision making is the most common cause. Providers select higher-level codes based on clinical complexity but don't document the specific problems addressed, data reviewed, or risk factors that justify that complexity. Auditors can only evaluate what's written, not what the provider was thinking.
How far back can auditors review E/M claims?
Medicare and most commercial payers can audit claims for up to 4 years from the date of service under federal False Claims Act provisions. MAC and RAC audits typically focus on the most recent 12-24 months, but OIG investigations can reach back further if fraud is suspected.
Can I bill based on time and medical decision making for the same visit?
No. You must choose either time or MDM as the basis for code selection for each visit. You can't combine them or use whichever results in a higher level. Documentation should clearly indicate which method you used, though CMS doesn't require an explicit statement if it's obvious from the note structure.
Do audit findings for one provider affect the entire practice or facility?
Sometimes. If auditors find systematic problems (like EHR template issues or training failures) that likely affect multiple providers, they can expand the audit to additional claims or perform a widespread probe review. Individual documentation errors usually stay contained to that provider, but pattern errors can trigger enterprise-level scrutiny.
What's the difference between a coding error and fraud in E/M audits?
Coding errors are mistakes without intent to deceive. Fraud requires knowing and intentional submission of false claims. Auditors presume errors initially, but patterns of overcoding, ignored feedback, or documentation alteration can shift the determination to fraud. That changes penalties from repayment to fines, exclusion, and potential criminal liability.
Take action before the audit notice arrives
The seven failure patterns above account for most E/M audit liability in US healthcare. You don't need perfect documentation. You need defensible documentation that clearly supports the codes billed.
Start with one failure pattern. Pick the one most relevant to your highest-volume E/M service. Implement that prevention checklist this month. Measure your baseline error rate and track improvement quarterly.
If your team lacks bandwidth for internal audits or you're already managing audit responses, you don't have to solve this alone. MedCodex Health provides coding quality audits, documentation improvement support, and audit defense consultation for physician practices, hospital outpatient departments, and emergency facilities across the US. We help you identify vulnerabilities before auditors do, with specific remediation protocols tailored to your EHR and workflow. Contact us for a confidential assessment of your E/M coding risk profile.