Provider Audits: The New Normal No One Talks About

Olga Khabinskay, Director of Operations, WCH

I’ve been in this industry for over 21 years, and in all the years my team has been helping healthcare providers handle audits, one thing has become clear: we’re well past the point of prevention—audits are inevitable. Every provider will be audited—multiple times, across different insurers, sometimes for single claims, sometimes for comprehensive reviews. The question isn’t whether you’ll face an audit, but whether you’ll be ready when it happens.

I’ve watched too many excellent physicians get blindsided by audit requests, scrambling to gather documentation while trying to understand what went wrong. The reality is that most providers don’t realize how easily they can trigger an audit, even when they’re doing everything right clinically.

What Actually Triggers an Audit

Insurance companies aren’t randomly selecting providers to audit. They’re using sophisticated data analysis to identify patterns that suggest potential issues. After reviewing hundreds of audit cases, we’ve seen the same red flags appear again and again.

The “Impossible Day” Problem

Claims data analysis starts with a simple question: can this provider physically deliver all the services they’ve billed for? If you’re billing for more than 24 hours of work in a single day or seeing 70 patients when that seems impossible, you’re going to get flagged.

Now, my team has worked with an orthopedist who actually does see 70 patients a day. He has a system, uses scribes, and moves efficiently through his schedule. But that high volume still triggered an audit. The key difference? His documentation clearly showed which services were provided by physician assistants under his supervision, and everything was properly coded.

The problem isn’t necessarily the volume—it’s when the documentation doesn’t support what you’re billing for. If you’re using mid-level providers, that’s fine, but your records need to show the supervision and the actual care provided.

Pattern Recognition Gone Wrong

Here’s something that surprises many providers: billing the same CPT codes for every patient is a huge red flag, even when it’s clinically appropriate. A pulmonologist running pulmonary function tests on every patient makes sense—that’s what patients come to see him for. But a primary care physician ordering the same test for every patient? That’s going to trigger questions.

Insurance companies compare your billing patterns to other providers in your specialty and geographic area. If you’re always billing at the highest level codes, or always at the lowest, you stand out. If you’re the highest-billing provider in your area, you’re definitely going to get audited.

The Geography Problem

This one catches providers off guard. If you’re billing from multiple locations on the same day—say, Brooklyn in the morning and Manhattan in the afternoon—that’s flagged as potentially impossible. The system assumes you can’t be in two places at once, even when you legitimately can.

We’ve seen providers get audited because they were covering multiple locations or doing hospital rounds at different facilities. The solution isn’t to stop providing care across locations—it’s to ensure your documentation clearly shows your schedule and the services provided at each location.

High-Risk Specialties: What We’re Seeing

Some specialties are getting hit harder than others, and it’s not random. Certain types of services attract more scrutiny because of cost, complexity, or historical abuse patterns.

Wound Care: The Documentation Nightmare

Wound care providers are facing intense scrutiny, and I understand why. The materials are expensive, and there’s significant room for interpretation in wound severity assessment. We’ve seen providers get in trouble for misrepresenting wound depth or complexity, sometimes unintentionally.

The bigger issue? Many wound care providers are using products or techniques based on manufacturer recommendations without verifying FDA approval or insurance coverage. When the audit comes, saying “The manufacturer told me this was covered” doesn’t help your case.

Diagnostic Testing: The Necessity Question

Genetic testing has become a major audit target, especially for elderly patients. Insurance companies are questioning whether comprehensive genetic panels are medically necessary for every patient receiving them. The recent focus on genetic testing for cancer predisposition in asymptomatic elderly patients shows how quickly audit priorities can shift.

If you’re offering diagnostic services, you need rock-solid documentation of medical necessity. It’s not enough that the test is available or that it might provide useful information—you need to show why this specific patient needed this specific test at this specific time.

Physical Therapy: The “Gym Membership” Problem

Physical and occupational therapy providers are dealing with a particular challenge: proving that patients are receiving therapeutic benefit rather than just using the service recreationally. Medicare’s position is clear—patients can’t use PT as a personal gym.

The key requirement is documented improvement in patient function. If you can’t show that patients are getting better, you’re going to have problems. This means objective measurements, functional assessments, and clear documentation of progress toward specific goals.

The Manufacturer Trap

This is where many providers get caught, and it’s particularly frustrating because they’re often trying to do the right thing by offering new services or technologies to their patients.

Here’s how it typically works: a manufacturer or supplier approaches you with an exciting new device or service. They show you impressive revenue projections, explain how much you can bill per procedure, and provide marketing materials that make everything sound straightforward. What they don’t adequately explain are the compliance requirements, documentation standards, and coverage limitations.

When the audit comes, you discover that the glossy brochures and verbal assurances don’t constitute proof of coverage or compliance. We’ve seen providers face significant recoupments because they relied on manufacturer representations rather than doing their own due diligence.

The lesson? Never implement a new service or technology without independently verifying coverage requirements, FDA approval status, and documentation standards. If it sounds too good to be true, it probably is.

What’s Coming: The Regulatory Pressure Cooker

The audit environment is going to get worse before it gets better. Budget pressures at federal and state levels are driving more aggressive cost containment measures, and provider audits are seen as a primary tool for identifying inappropriate payments.

Medicaid’s Money Problems

Medicaid programs are facing budget constraints that will likely result in more frequent and intensive audits. States are looking for ways to preserve limited healthcare funding, and recovering overpayments from providers is an obvious target.

The proposed changes to Medicaid funding mechanisms will create additional pressure for states to demonstrate tight control over provider payments. This translates directly to more audits with higher stakes.

The OIG Work Plan Reality

The Office of Inspector General publishes an annual work plan that outlines audit priorities, and smart providers pay attention to it. But here’s what many don’t realize: the work plan represents only a fraction of total audit activity. Individual insurance companies and state Medicaid programs are conducting their own audits based on their specific concerns.

We always recommend that providers review the OIG work plan and proactively address any issues related to their specialty, but don’t assume that’s the only audit risk you face.

Building Your Defense

Since we can’t prevent audits, we need to focus on being prepared for them. This means thinking like an auditor and ensuring your documentation and processes can withstand scrutiny.

Documentation: Beyond “If It Wasn’t Documented, It Wasn’t Done”

Everyone knows the basic rule about documentation, but most providers don’t understand how detailed and specific that documentation needs to be. It’s not enough to document that you provided a service—you need to document why it was medically necessary, how it was performed, and what the outcome was.

Your templates need to be current with coverage requirements and coding guidelines. This isn’t a one-time setup—coverage requirements change, and your documentation needs to evolve with them.

Staff Training: The Weak Link

We’ve met practices with excellent clinical documentation fail audits because their staff didn’t understand HIPAA requirements or proper telephone protocols. When auditors visit your office, they’re not just looking at medical records—they’re observing how your staff handles patient information and whether your office procedures comply with regulations.

Every staff member who touches patient information needs to understand their role in maintaining compliance. This includes knowing when to refer questions to appropriate personnel and understanding the proper response when auditors arrive.

Internal Audits: Practice What You Preach

Regular internal audits are essential, but they need to mirror the methodology external auditors use. Don’t just check whether your coding is correct—verify that your documentation supports the codes you’re using and that your processes comply with all relevant regulations.

The results of internal audits can be valuable evidence of good faith compliance efforts if you do face an external audit. They show that you’re actively monitoring your compliance and addressing issues proactively.

The Professional Help Reality

The complexity of healthcare compliance has reached a point where most providers can’t effectively manage all aspects without professional help. I know too many providers trying to handle everything in-house, only to discover during an audit that they’ve been missing critical requirements.

When to Bring in the Experts

If you’re being offered a new service or technology, especially if it involves significant revenue potential, get professional advice before implementing it. The cost of consultation is minimal compared to the potential cost of audit failures.

If you receive an audit request, don’t try to handle it alone. The initial response can significantly impact the outcome, and there are specific procedures and timelines that must be followed.

The Investment Perspective

Professional coding and auditing services aren’t just an expense—they’re an investment in your practice’s stability. The cost of professional help is typically far less than the cost of audit failures, which can include not only financial recoupments but also provider sanctions and the administrative burden of appeals.

Living in the New Reality

We’re operating in an environment where audit preparedness isn’t optional—it’s essential for practice survival. The providers who understand this and invest in comprehensive compliance programs are the ones who will thrive.

I’ve worked with practices that view compliance as a competitive advantage rather than a burden. They understand that meticulous attention to documentation and regulatory requirements demonstrates their commitment to quality care and positions them for success in an increasingly regulated environment.

The key is recognizing that compliance is an ongoing process, not a one-time checklist. Regulations change, coverage requirements evolve, and audit priorities shift. Staying current requires constant attention and often professional support.

The audit notice will come. The question is whether you’ll be ready to demonstrate your compliance when it does. The time to prepare is now, while you still have the opportunity to implement the systems and processes necessary for successful outcomes.

In my experience, the practices that succeed in this environment are those that embrace compliance as part of their operational excellence rather than viewing it as an external burden. They invest in the right systems, get professional help when needed, and maintain the documentation standards that protect both their patients and their practice.

The new reality is challenging, but it’s not insurmountable. With the right approach and adequate preparation, providers can navigate the audit environment successfully while maintaining their focus on patient care.