Outpatient Mental Health Billing: Navigating Incident-To, Telehealth, and Audit Risk

Section analysis by Susanna Bekirova, Billing Department, WCH  

Editorial note: This article reflects CMS guidance, 42 CFR 410.26, and the CMS CY 2026 Medicare Physician Fee Schedule Final Rule as of the date of publication. Payer-specific requirements vary by contract, state, plan, product line, and effective date. Content is for educational purposes and does not constitute legal or compliance advice. Readers should verify current requirements with qualified counsel and current payer manuals before billing.

***This article draws on a recent webinar led by Susanna Bekirova on outpatient mental health billing compliance, which examined incident-to billing, telehealth documentation, and audit-readiness in detail. WCH regularly hosts webinars on billing and compliance topics across specialties — readers are encouraged to follow announcements on the WCH website for upcoming sessions.

There is a phrase that captures the compliance challenge in outpatient mental health billing more precisely than any regulation: accurate billing is not just the final claim. It starts with provider eligibility, clinical documentation, supervision, treatment plan alignment, and payer-specific rules. By the time a claim is submitted, every one of those upstream decisions has already determined whether that claim is defensible — or not.

Outpatient psychiatric practices in 2026 are navigating a billing environment that is more complex than it has ever been. Telehealth has become a permanent feature of psychiatric care delivery, with its own documentation requirements, place-of-service codes, and modifier rules that vary by payer, modality, and setting. Incident-to billing — the mechanism that allows auxiliary personnel services to be billed under a supervising physician’s NPI at the physician fee schedule rate — remains widely used and widely misunderstood. And audit pressure on behavioral health claims is increasing, driven by Medicare Advantage utilization review, commercial payer documentation audits, and CMS’s intensified oversight of high-volume billing patterns.

The compliance failures that generate audit exposure in outpatient mental health are rarely deliberate. They are almost always the product of assumptions — assumptions about supervision, about patient status, about payer rules — that were never verified against the actual requirements. The framework below addresses each of the three highest-risk areas in turn.

Incident-To Billing: What It Is, What It Requires, and Where It Breaks Down

Incident-to billing allows services furnished by auxiliary personnel — therapists, nurses, medical assistants, and other qualified staff — to be billed under a supervising physician or eligible non-physician practitioner’s NPI when all applicable requirements are met. When billed correctly, incident-to services are reimbursed at 100% of the physician fee schedule rate rather than the 85% rate that applies when an NPP bills under their own NPI. In high-volume outpatient psychiatric settings, this differential has significant revenue implications.

The definition established by CMS is precise: incident-to services are those furnished by auxiliary personnel that are integral and incidental to a physician or eligible practitioner service, when all requirements are met. Eligible supervising practitioners include physicians, nurse practitioners, certified nurse midwives, clinical nurse specialists, and physician assistants — when payer, enrollment, and scope-of-practice rules allow. The compliance point that practices most commonly overlook is this: employment alone does not create eligibility. The medical record must prove the plan of care, the supervision, and the active practitioner involvement that incident-to billing requires.

The nine requirements that must all be met simultaneously — verified before billing, not assumed — are: an initial service performed by the physician or NPP; an active diagnosis and plan of care; an established patient relationship; no new unmanaged problems at the service visit; qualified auxiliary personnel performing the service; the required level of supervision met; ongoing practitioner involvement in the patient’s care; state law and payer policy satisfied; and documentation that supports every element of the claim.

The compliance scenarios that generate the most audit exposure illustrate where these requirements break down in practice. The cleanest compliant scenario: a psychiatrist performs the initial evaluation, establishes the diagnosis and plan of care, qualified staff provide follow-up services within that plan, and the supervising practitioner remains actively involved with documented supervision. The highest-risk scenario: a therapist independently evaluates a new patient, creates the treatment plan, and services are billed under a psychiatrist who never personally saw the patient. That scenario is not incident-to billing — it is fraudulent billing. A scenario that appears compliant but carries significant risk: a treatment plan exists, but the supervising practitioner was not available as required by the payer’s policy on the date of service. The plan’s existence does not satisfy the supervision requirement.

Payer rules add another layer of complexity that cannot be managed with a single universal approach. Major commercial payers apply incident-to rules differently. Aetna and UnitedHealthcare recognize Medicare-style incident-to and reimburse at 100% of the physician rate when the supervising provider’s NPI is on the claim with modifier SA. Cigna often does not recognize Medicare-style incident-to for advanced practice providers — it may require billing under the APP’s NPI at 85% per its own policy. Anthem/BCBS frequently does not follow CMS incident-to reimbursement rules, applies NPP NPI or supervising provider NPI inconsistently depending on the market, and often pays at a reduced rate. The table the presenter used in this webinar carries a warning that applies universally: use payer-specific information as a training framework only; actual requirements depend on the contract, state, plan, product line, and effective date.

Real-world cases document how incident-to requirements break down in ways that are not immediately obvious. Case one: a psychiatrist established a diagnosis and plan of care, and an NP sees the patient for a medication follow-up while the psychiatrist is in Europe on vacation but available by video. The question is whether this can be billed incident-to under the psychiatrist. The answer is no: incident-to billing requires the supervising practitioner to be present in the office suite and immediately available — a provider abroad does not satisfy that requirement regardless of video availability. The correct approach is to use another available licensed and enrolled supervising practitioner if all requirements are met and documented, or to bill under the NP’s own NPI when permitted. Case two: a physician diagnosed major depressive disorder and prescribed sertraline; at follow-up, the patient reports new symptoms of anxiety and insomnia; an NP starts buspirone without physician awareness. The new medication and new symptoms represent a significant change outside the established plan of care, and active practitioner involvement is missing — this cannot be billed incident-to. The NP should bill under their own NPI if permitted, and the physician should review and update the plan before future incident-to billing is considered. Case three: a physician started the patient on Lexapro 10mg, the patient partially improved, the NP discussed the case with the physician during clinic, and the physician agreed to increase the dose to 20mg. This scenario is stronger because it involves the same diagnosis, an established patient, active physician involvement, documented decision-making, and supervision aligned with policy — incident-to may be appropriate if all payer, state, and documentation requirements are satisfied.

Telehealth Billing: Documentation, Place of Service, and Modifiers

Telehealth has become a standard delivery modality in psychiatric practice, and its billing requirements have matured significantly since the public health emergency period. The compliance framework for telehealth billing in outpatient mental health rests on four pillars that must be applied consistently for every telehealth encounter.

Documentation of the encounter must capture the modality used, the patient’s location, the provider’s location when required by the payer, patient consent when required, duration if the service is time-based, the diagnosis, the clinical content of the visit, risk assessment when applicable, and the follow-up plan. Documentation that captures the clinical content but omits the modality or patient location is incomplete for telehealth billing purposes and creates audit exposure even when the clinical care was entirely appropriate.

Place of service coding is not interchangeable between telehealth settings. POS 02 applies to telehealth services provided to a patient in a location other than their home — a clinic, a skilled nursing facility, or another healthcare setting. POS 10 applies to telehealth services provided to a patient in their home. Using the wrong POS code affects reimbursement and creates billing errors that auditors identify routinely; payer policy may also affect reimbursement based on place of service in ways that make accuracy financially material, not just technically correct.

Modifier application is payer-specific and cannot be standardized across all claims. Modifier 95 indicates a synchronous telemedicine service rendered via a real-time interactive audio and video telecommunications system. Some payers require using Modifier GT instead, which also denotes interactive audio and video telecommunications systems. Which modifier applies depends on the payer, the setting, and the modality — one-size-fits-all modifier application is among the most common billing errors in telehealth psychiatry.

When incident-to billing and telehealth intersect, both compliance layers must be verified independently. Telehealth coverage must be confirmed for the specific service, and incident-to requirements must separately be met — supervision requirements and state licensure requirements remain applicable to telehealth incident-to services and are not relaxed by the telehealth delivery modality. The CMS CY 2026 Physician Fee Schedule Final Rule specifies that virtual direct supervision through real-time audio and video is permitted for incident-to services — but audio-only supervision is explicitly excluded.

Claim form accuracy for telehealth and incident-to services requires attention to specific fields. For sole proprietor practices billing incident-to: the supervising physician’s name appears in Item 17 with their NPI in Item 17b, and the physician’s billing details appear in Item 33 with NPI in Item 33a. For incorporated groups and clinic settings: the ordering provider’s information and NPI appear in Item 17 and 17b, the supervising provider’s NPI appears in Item 24J, and the entity’s billing details with NPI appear in Item 33 and 33a. The compliance principle that applies to both: do not use the claim form as the only proof of compliance. The claim form is a billing document; the medical record must independently document patient status, the established plan of care, who supervised, provider location and availability when remote, and whether the payer allows the billing pathway claimed.

Building a Defensible Audit Response: The Internal Compliance Cycle

Audit exposure in outpatient mental health is reduced most effectively not by responding to audits but by building the internal monitoring infrastructure that identifies and corrects documentation and billing vulnerabilities before external auditors do. The framework recommended in this webinar — and applied across WCH Service Bureau’s compliance work — is a four-stage internal audit cycle.

The first stage is audit planning: defining the risk areas to be reviewed, the sampling frequency and methodology, the criteria for evaluation, and the escalation pathway when problems are identified. High-risk areas in outpatient psychiatric billing include incident-to claims for established patients with new clinical developments, telehealth claims with inconsistent modifier or POS coding, and claims where the rendering provider and supervising provider NPIs are not clearly aligned with the actual service delivery structure.

The second stage is documentation review: examining each sampled claim for medical necessity support, coding accuracy, time documentation for time-based services, telehealth-specific documentation elements, supervision documentation, and treatment plan alignment. A specific risk in behavioral health documentation is copy-paste note content — notes that replicate prior session content without reflecting the actual clinical content of the current encounter. Auditors identify copy-paste documentation readily, and it creates both billing compliance risk and clinical quality concerns.

The third stage is claims review: examining the CPT codes, modifiers, place-of-service codes, and rendering, billing, and supervising provider identifiers for each sampled claim against the payer’s specific rules, looking for duplicate claims, and verifying that the claim’s billing pathway matches the actual service delivery structure documented in the medical record.

The fourth stage is corrective action: education for clinicians, coders, billers, and schedulers based on the findings; policy updates that address identified systematic vulnerabilities; system fixes where charge capture or billing system settings are contributing to errors; follow-up audits to verify that corrections have been sustained; and trend monitoring to detect whether previously corrected error patterns are recurring.

The operational pre-billing checklist that the webinar distills all of this into is worth keeping at every billing workstation: Before submitting any incident-to or telehealth mental health claim, ask — Is there an established plan of care? Is this the same problem addressed in the original plan? Is the auxiliary personnel qualified? Was the required supervision met on the date of service? Is the practitioner’s involvement documented? Does this payer allow this billing path for this provider type? Are the telehealth modality, POS code, and modifier correct for this payer and this service?

The closing principle from the webinar captures the compliance philosophy that distinguishes practices with sustainable audit defense from those that are perpetually reactive: compliance is a repeatable process, not a one-time claim check.

Sources:

1. CMS. “Incident To Services and Supplies.” 42 CFR 410.26. cms.gov
2. CMS CY 2026 Medicare Physician Fee Schedule Final Rule and Summary: virtual direct supervision through real-time audio and video telecommunications, excluding audio-only. cms.gov
3. HHS/CMS. “Telehealth Billing Guidance: Medicare Fee-for-Service, POS 02 and POS 10.” cms.gov
4. Current payer policies and contracts: Aetna, Cigna, Anthem/BCBS, UnitedHealthcare, Medicare Advantage, and state Medicaid programs. Verify current requirements before billing.