E/M coding audit failures cost US hospitals and physician practices millions in denied claims, delayed reimbursement, and compliance penalties every year
E/M coding audit failures happen when documentation doesn't support the level billed, medical necessity isn't clear, or coders select the wrong service category. OIG work plans and Medicare Administrative Contractor (MAC) audits consistently target Evaluation and Management codes because they account for the largest volume of Medicare Part B claims.
This post breaks down the specific documentation gaps and level selection errors that trigger E/M coding audit failures in 2026. You'll get checklists your coding team can use tomorrow to prevent denials, spot high-risk patterns before auditors do, and close the gaps that turn routine claims into compliance headaches.
Why E/M codes fail audits more than any other service category
E/M codes made up 41% of all Medicare Part B spending in 2024, according to CMS data. That volume makes them a top target for Recovery Audit Contractors (RACs) and Unified Program Integrity Contractors (UPICs).
Auditors look for three things: level supported by documentation, medical necessity, and correct place of service. When any of those fail, the claim gets downgraded or denied.
The 2021 E/M office visit guideline changes simplified some requirements but created new risk areas. Coders who bill based on time must document start and stop times. Coders who bill on medical decision-making (MDM) must show the elements that justify the level. Missing either piece triggers a downgrade.
Place of service errors are rising. Telehealth claims coded as in-person office visits. Observation coded as inpatient. Hospital outpatient department coded as office. Each carries different reimbursement rates and documentation requirements.
Common E/M documentation gaps that trigger audit findings
Missing or incomplete time documentation
If you bill E/M on time, you need the total time spent on the date of the encounter documented in the medical record. "15 minutes" isn't enough. CMS requires time spent on the encounter date, which can include activities before and after the face-to-face visit.
Auditors deny claims when the documented time falls below the CPT code range. A 99214 requires 30 to 39 minutes. If your note says 28 minutes, it's a 99213.
Start and stop times aren't required, but total time is. Document it clearly: "Total time: 32 minutes."
MDM elements not fully supported
Medical decision-making has three components: number and complexity of problems addressed, amount and complexity of data reviewed, and risk of complications or morbidity. You need to meet or exceed the threshold for two of the three components to support the level.
Auditors see these gaps repeatedly:
- Problem list doesn't match the assessment and plan
- Data review documented in the note but not tied to the decision-making
- Risk level claimed without documentation of prescription drug management, procedure ordered, or diagnosis considered
- Copy-forward notes where the assessment never changes but the level stays high
If you bill a 99215 based on high MDM, the note must show extensive problems addressed, independent interpretation of tests or discussion with external providers, and risk of major complications or drug therapy requiring intensive monitoring. One element missing drops the level.
History and exam documentation for emergency department visits
ED E/M codes (99281-99285) still use the 1995 and 1997 documentation guidelines. Unlike office visits, you can't bill ED E/M on time alone.
Auditors flag ED claims when the history of present illness (HPI) doesn't match the level billed. A 99285 requires a comprehensive history with extended HPI, complete review of systems, and past/family/social history. If the note shows 4 HPI elements and no ROS, it won't support the level.
Physical exam documentation must match the presenting problem. A complaint of chest pain without a cardiovascular exam triggers questions.
Medical necessity not established
Every E/M service must be medically necessary. The chief complaint, diagnoses, and treatment plan must connect logically. Auditors deny claims when the service doesn't match the clinical picture.
Examples that fail medical necessity reviews:
- Well-visit coded as a problem-oriented E/M without documentation of acute illness
- High-level E/M for medication refill with no new problem addressed
- Preventive visit with problem E/M add-on when the chronic condition was stable and not assessed
Document why the patient needed to be seen and what clinical decisions you made. If the reason for the visit doesn't justify the service, the claim fails.
Level selection errors that turn into E/M coding audit failures
Upcoding based on template defaults
Many EHR templates auto-populate E/M levels based on checkbox fields. If the provider clicks comprehensive exam boxes but the clinical scenario is straightforward, the note inflates the level beyond what's supported.
Auditors compare billed levels to peer benchmarks. If your practice bills 99215 at 35% of office visits and your specialty's national average is 8%, you're getting audited.
Train coders to verify level selection against both time and MDM. Don't rely on EHR-suggested codes.
Incorrect prolonged service reporting
CPT codes 99417 (prolonged office visit) and G2212 (prolonged outpatient services) require total time to exceed the maximum time for the base code by at least 15 minutes.
A 99215 covers 40 to 54 minutes. You can't add 99417 unless total time reaches 69 minutes (54 + 15). Auditors deny prolonged service claims when the documented time doesn't cross the threshold.
Document the total time clearly and ensure it supports both the base code and the add-on. If total time is 68 minutes, you can bill 99215 but not the prolonged service code.
Modifier 25 misuse with procedures
Modifier 25 indicates that a separately identifiable E/M service was performed on the same day as a procedure. Auditors look for documentation that the E/M was significant, separately identifiable, and above and beyond the usual pre- and post-procedure work.
Claims fail when the E/M note doesn't show a distinct evaluation. If the only documentation is the procedure note, you can't bill an E/M with modifier 25.
The E/M service must address a different diagnosis or problem, or be a distinct service for the same problem requiring separate evaluation. Document both clearly.
Audit prevention checklist for coding supervisors and CDI teams
Use this checklist to catch high-risk claims before submission:
- Total time documented when billing by time (not estimated, not range)
- MDM elements present and clearly tied to assessment and plan when billing on complexity
- HPI, ROS, and exam match the CPT level requirements for ED visits and consults
- Diagnosis codes support the E/M level and service type
- Medical necessity is clear from the chief complaint through the plan
- Prolonged service claims include total time that exceeds the base code maximum by 15+ minutes
- Modifier 25 claims show a separately identifiable E/M service in the documentation
- Place of service matches where the visit actually occurred
- E/M level distribution matches your specialty's benchmarks (compare to CMS Physician Fee Schedule data)
- Copy-forward notes reviewed for outdated information or unchanged assessments
Run weekly reports on E/M level distribution by provider. Flag anyone billing high-level codes at rates 20% above your group's average. Review a sample of those claims for documentation quality.
Query providers when the documented time or MDM doesn't match the level selected. A physician query process catches errors before the claim goes out.
How pre-bill audits reduce E/M denial rates
Pre-bill audits review a sample of claims before submission. You catch documentation gaps, level mismatches, and modifier errors while you can still fix them.
Target these claim types for pre-bill review:
- 99215 and 99285 (highest-level office and ED visits)
- Any E/M with modifier 25
- Prolonged service add-ons (99417, G2212)
- New patient E/M codes (higher denial risk than established)
A coding quality audit program identifies patterns before they become compliance issues. If 40% of your 99215 claims don't meet MDM thresholds, you know where to focus coder training.
Build feedback loops. Share audit findings with providers monthly. Show specific examples of what passed and what failed. Coders need to see the documentation gaps that drive denials.
What to do when you receive an E/M audit notification
MAC and RAC audit letters give you 45 days to respond. Don't wait.
Pull the requested medical records immediately. Review them against the CPT and CMS guidelines in effect on the date of service. If the documentation supports the level billed, submit the records with a clear explanation of how the note meets the requirements.
If the documentation doesn't support the level, consider voluntary refund for those specific claims. Fighting an indefensible claim costs more in legal fees and compliance risk than the reimbursement.
Track all audit requests by auditor, provider, and claim type. If you're seeing repeat findings for the same issue, that's your priority fix.
Use audit results to update your coding policies and provider education. An audit finding isn't just a single claim problem. It's a pattern you need to prevent going forward.
Frequently asked questions about E/M coding audit failures
What percentage of E/M claims fail audits?
OIG reports show improper payment rates for E/M services ranging from 8% to 12% depending on the setting and auditor. Emergency department E/M claims have higher error rates than office visits, typically around 15%. The most common finding is documentation that doesn't support the level billed, followed by medical necessity failures and incorrect modifier use.
Can I bill E/M codes based on time if I also document MDM?
Yes. You can choose to bill based on time or MDM, whichever supports the higher level. Document both when possible, but select one method for level determination and make it clear in the note which you're using. If you bill on time, ensure total time is documented. If you bill on MDM, ensure all three components are addressed in the assessment and plan.
How far back can Medicare audit E/M claims?
Medicare can audit claims up to 4 years from the date of service under standard review. For suspected fraud, the lookback period extends to 10 years. RAC audits typically focus on the most recent 12 to 24 months. State Medicaid programs have varying lookback periods, but most align with the federal 4-year standard for routine audits.
What happens if an E/M audit finds a pattern of overbilling?
If an auditor identifies a pattern of upcoding or unsupported level selection across multiple claims, you'll receive an extrapolation demand. The auditor calculates an error rate from the sample reviewed and applies it to all similar claims during the audit period. This can result in six-figure repayment demands. You also face increased scrutiny, mandatory corrective action plans, and potential referral to OIG if the pattern suggests intentional fraud.
Do telehealth E/M visits have different audit risks than in-person visits?
Telehealth E/M codes use the same documentation requirements as in-person office visits. The audit risk comes from place of service errors and incomplete documentation of the virtual encounter. Auditors look for clear documentation that the service was provided via telehealth, the reason it was medically appropriate, and that all E/M elements were met. Claims coded as office visits but provided via telehealth during periods when specific modifiers were required will be denied.
Clean claims start with clean documentation
E/M coding audit failures come down to three core issues: documentation doesn't match the level billed, medical necessity isn't clear, or coders select codes based on EHR defaults instead of clinical content.
Fix those and your denial rate drops. Your compliance risk drops. Your revenue cycle runs cleaner.
If you're seeing E/M denials climb or you're preparing for an upcoming audit, a third-party coding review can identify gaps before auditors do. MedCodex Health offers a 30-day coding pilot with no long-term commitment. We review your current E/M documentation practices, flag high-risk patterns, and give you a detailed report on where your team's claims are most vulnerable. Reach out today and see where your claims stand.