I'll never forget the call I got from a coding manager three years ago—her team had just failed an E/M audit for the second time in six months. The denial rate was north of 30%, and the financial hit? Over $200,000 in recoupments. The worst part? Most of the errors were preventable.
If you're reading this, you've probably faced similar anxiety around E/M coding audit failures. Whether you're coding for a busy physician practice, an ED, or managing an entire coding department, E/M audits can feel like walking through a minefield. One misstep with documentation, one overlooked guideline change, and suddenly you're staring down denials and compliance issues.
The truth is, E/M coding audit failures have become increasingly common since the 2021 guidelines overhaul—and the 2023-2024 OIG reports confirm it. But here's the good news: most failures follow predictable patterns. In this post, I'm breaking down the top five mistakes I've seen across hundreds of audits and giving you practical prevention strategies you can implement today.
Why E/M Coding Audit Failures Are Rising in 2026
Let's start with some context. The CMS E/M guidelines underwent massive changes starting in 2021, and many organizations are still struggling to adapt. The shift from history/physical/MDM elements to time-based or MDM-only coding created confusion that persists today.
I've worked with dozens of practices through coding quality audits, and the pattern is clear: coders who trained under the old system often carry outdated habits into current workflows. Add in documentation shortcuts, EHR auto-population issues, and inconsistent provider education, and you've got a perfect storm for audit failures.
Recent OIG reports flag E/M services as a top risk area, particularly for:
- Office/outpatient visits (99202-99215)
- Emergency department services (99281-99285)
- Hospital inpatient/observation care (99221-99223, 99234-99236)
- Prolonged services and time-based coding
The financial stakes are real. One mid-size physician group I consulted with faced a RAC audit that identified $430,000 in potential overpayments—95% related to E/M coding errors. That's not just money; it's reputation, compliance standing, and staff morale.
Mistake #1: Misunderstanding Medical Decision Making (MDM) Levels
This is hands-down the most common trigger for E/M coding audit failures I see. Medical Decision Making replaced the old three-component system as the primary driver for E/M level selection, but many coders still don't fully grasp how to evaluate it correctly.
The Three Elements of MDM
Under current guidelines, MDM has three measurable elements:
- Number and complexity of problems addressed – Are we dealing with minimal, self-limited issues or multiple chronic conditions with severe exacerbation?
- Amount and/or complexity of data reviewed – Did the provider review external records, order tests, independently interpret imaging?
- Risk of complications and/or morbidity or mortality – What's the risk associated with the presenting problem(s), diagnostic procedures, and treatment options?
Here's where coders trip up: you only need to meet two of three elements to justify a particular MDM level. I've seen auditors downcode visits because coders assumed all three elements had to align perfectly—they don't.
Prevention Checklist for MDM Coding
- Create a laminated MDM grid showing the "2 out of 3" rule for each level (straightforward, low, moderate, high)
- Flag documentation that mentions independent interpretation, external records reviewed, or prescription drug management—these often push complexity higher
- Don't confuse "problem complexity" with "documentation length"—a brief note can still support high MDM if decision-making is clearly complex
- Use the AMA's Table of Risk as a reference, but remember CMS has additional guidance on risk stratification
- When auditing your own work or team's work, document which two elements you're relying on for level selection
For teams handling physician coding across specialties, standardizing MDM evaluation is critical. At MedCodex Health, we've built MDM assessment tools into our workflow to ensure consistency—especially important when you're working with offshore teams spanning multiple time zones.
Mistake #2: Time-Based Coding Without Proper Documentation
Time-based coding seemed like a relief when the guidelines changed—finally, a concrete metric! But I've watched it become one of the biggest sources of E/M coding audit failures because providers and coders don't document it properly.
Here's the reality: you can select an E/M level based on total time spent on the date of encounter, but only if that time is clearly documented and meets specific criteria. The time must include face-to-face and non-face-to-face activities on the same day, like reviewing records, coordinating care, and documenting the encounter.
Common Time Documentation Failures
I've seen these mistakes sink audits repeatedly:
- Vague time statements – "Spent significant time with patient" doesn't cut it. You need specific minutes: "Total time spent: 42 minutes."
- Missing activity descriptions – For prolonged services codes (99417, 99418), you must document what activities consumed that additional time
- Confusing time with complexity – A long visit isn't automatically high-level. Time and MDM are separate pathways to code selection
- Including non-countable time – Time spent on activities unrelated to the specific encounter doesn't count
Time-Based Coding Prevention Tips
Here's what actually works:
- Create EHR templates with time fields that prompt providers to document start and total time
- Educate providers on what counts: reviewing test results from today's encounter counts; chatting in the hallway about unrelated cases doesn't
- For ED coding, remember that prolonged services codes have different rules and time thresholds than office visits
- Build a conversion chart showing time ranges for each E/M level—keep it visible at workstations
- Flag any claim coded by time for pre-bill audit if time documentation is incomplete
One orthopedic practice I worked with reduced their time-based coding denials by 62% simply by implementing a mandatory time-documentation field in their EHR. Small changes, big impact.
Mistake #3: Inadequate Medical Necessity Documentation
Medical necessity is the foundation of every E/M claim, yet it's often treated as an afterthought. I can't count how many audits I've reviewed where the service level was technically supported, but the reason for the visit wasn't clearly established.
Auditors look for answers to basic questions: Why did this patient need to be seen? What clinical indication justified this level of service? How does the documentation support the diagnoses billed?
The Office of Inspector General consistently flags medical necessity as a top concern in E/M audits. When documentation is ambiguous or doesn't tie symptoms to diagnoses, even a perfectly coded chart becomes vulnerable.
Medical Necessity Red Flags
- Chief complaint doesn't match the documented visit focus
- High-level E/M code for a routine follow-up with no documented change in condition
- No clear link between diagnostic testing ordered and the presenting problem
- Assessment and plan doesn't address the stated reason for visit
- Copy-forward documentation that contradicts current symptoms or findings
Building Medical Necessity Into Your Workflow
Preventing medical necessity failures requires collaboration between coding and clinical documentation teams:
- Implement physician query management protocols to clarify ambiguous documentation before coding
- Train coders to identify when documentation supports a code technically but fails the "why" test
- Use medical necessity review tools as part of your QA process
- Create clinical scenarios and case studies for coder education—real examples stick better than abstract rules
- For inpatient coding, ensure admission documentation clearly establishes medical necessity from day one
MedCodex Health integrates medical necessity screening into every chart review because we know it's the difference between a clean audit and a costly denial pattern.
Mistake #4: Failing to Differentiate Between New and Established Patients
This seems basic, right? Yet new-versus-established patient errors show up constantly in E/M coding audit failures. The three-year rule is straightforward, but real-world scenarios get messy fast.
A patient is "new" if they haven't received any professional services from the physician or another physician of the same specialty in the same group within the past three years. Sounds simple until you're dealing with multi-specialty groups, locum tenens coverage, or physicians who've moved between practices.
Common New vs. Established Mix-Ups
I've seen these scenarios cause audit problems repeatedly:
- Specialty confusion – Patient saw a cardiologist in your group; now they're seeing the electrophysiologist. Are they established? (Usually yes, if both bill under the same subspecialty)
- Practice acquisitions – Group A acquires Group B. Do previous visits to Group B count? (Generally yes)
- Resident/fellow involvement – Patient was treated by a resident under an attending's supervision—that counts as receiving services from the attending
- Hospital-based encounters – Patient seen in ED by your group's physician, then follows up in office. New or established? (Established, if within three years)
Prevention Strategy
- Run periodic reports showing new patient codes (99202-99205) and cross-reference against patient history in your practice management system
- Create clear protocols for front-desk staff on documenting new patient status
- Query providers when coding a new patient visit if records show prior encounters in your system
- Remember: when in doubt, code as established—it's the lower-risk choice and usually defensible
One multi-specialty group I audited had a 15% error rate on new versus established designation. After implementing a registration flag system and monthly audits, they dropped that to under 2% within six months.
Mistake #5: Neglecting Documentation of Counseling and Coordination of Care
Under the revised guidelines, counseling and coordination of care are no longer standalone reasons to select an E/M level (except when using time). But they still matter—especially when you're trying to justify higher-level services or defend prolonged service codes.
I've reviewed countless charts where a provider clearly spent significant time on care coordination, family counseling, or complex discharge planning, but it's either not documented or buried in narrative text that auditors skip over.
Documentation Best Practices for Counseling/Coordination
- Use discrete fields or headers in templates: "Counseling/Coordination of Care"
- Specify what was discussed: "30 minutes spent counseling patient and spouse regarding chemotherapy options, side effect management, and palliative care resources"
- For discharge summary reviews, ensure care coordination activities are clearly documented
- Link counseling activities to MDM elements—patient education about prescription drug management can support higher complexity
- Document when more than 50% of total time is spent on counseling/coordination if using time-based coding
This is particularly critical for outpatient coding in complex chronic disease management scenarios. A diabetes educator visit that involves extensive counseling needs clear documentation to support the service level billed.
Building an Audit-Resistant E/M Coding Program
Preventing E/M coding audit failures isn't about perfection—it's about systems. After 15 years in this field, I've learned that sustainable accuracy comes from workflows, education, and quality checks, not from relying on individual coder heroics.
Essential Program Elements
Regular internal audits: Monthly or quarterly focused audits catch patterns before external auditors do. Use random sampling across all providers and service types, including same day surgery coding when applicable.
Ongoing education: Guidelines evolve. Your team needs regular updates on AMA CPT changes, CMS policy updates, and payer-specific requirements. Quarterly coding workshops beat annual marathon training sessions every time.
Provider-coder collaboration: Many E/M errors start in the exam room. Establish regular feedback loops with providers. Share audit results (de-identified), clarify documentation needs, and address EHR template issues together.
Technology leverage: Modern coding software can flag common E/M errors before claims go out. Use computer-assisted coding tools, but don't let them replace human judgment—I've seen CAC systems make spectacular mistakes on complex E/M scenarios.
CDI integration: Your Clinical Documentation Improvement team is your first line of defense. Strong CDI program support catches documentation gaps before they become coding problems.
The MedCodex Health Advantage
Organizations that partner with specialized coding companies often achieve better audit outcomes because they tap into broader expertise and dedicated quality processes. MedCodex Health brings that advantage to US healthcare clients through dedicated coding teams with deep E/M expertise.
Our approach combines certified coders with multi-layered QA, regular calibration sessions, and proactive audit preparation. When you're managing coding in-house, it's easy for education and quality checks to slide when volume spikes—outsourcing partners absorb that variability while maintaining consistency.
Frequently Asked Questions About E/M Coding Audit Failures
How often should we conduct internal E/M coding audits?
I recommend quarterly focused audits at minimum, with monthly spot checks if you have the resources. Focus each audit on a specific element—one quarter might emphasize MDM documentation, the next could focus on time-based coding. For new coders or after significant guideline changes, increase frequency to biweekly for the first 90 days. Random sampling of 10-15 charts per coder per audit cycle gives you statistically meaningful data without overwhelming your QA team. Track trends over time rather than obsessing over single-audit results—patterns matter