Upcoding
Upcoding is billing a higher-paying code than the documentation and service support, such as reporting a level-5 visit for level-3 work. It is a form of healthcare fraud under the False Claims Act, carrying treble damages and per-claim penalties, and it is detected through payer data analytics comparing your code mix to peers.
- Legal exposure
- False Claims Act: treble damages + per-claim penalties
- Detection
- Payer bell-curve analytics, RAC/UPIC audits
- Common form
- E/M level inflation (99214/99215 heavy)
- Defense
- Documentation that supports the level billed
What counts as upcoding?
Upcoding is any billing choice that claims more service than was performed and documented: E/M levels above what the medical decision making or time supports, unit inflation, billing physician rates for work that did not meet incident-to rules, or diagnosis coding that exaggerates severity. The unifying element is a gap between the claim and the chart.
It is the mirror image of downcoding, and both are documented-versus-billed mismatches; only the direction differs. The E/M framework since 2021 (medical decision making or total time) actually made honest level selection easier, which also made persistent outlier patterns harder to excuse.
How does upcoding get caught?
Statistically, before anyone reads a single chart. Every payer profiles E/M distribution by specialty. A family physician whose established-visit curve runs 5% 99213 / 60% 99214 / 35% 99215 against specialty norms closer to 45/40/8 lights up the analytics regardless of whether any individual chart is defensible. What follows is a comparative billing report letter, then prepayment review or a records request, then extrapolation: auditors review 30 charts, find a 40% error rate, and project it across two years of claims volume.
Concrete math: the payment gap between 99213 and 99214 is roughly $35 at 2026 Medicare rates. One level of systematic inflation on 20 visits a week is about $36,000 a year in overpayment per provider, and under the False Claims Act the settlement conversation starts at three times that, plus per-claim penalties.
Is billing a lot of high-level visits automatically upcoding?
No. A geriatric practice managing eight chronic conditions per patient legitimately codes heavier than a walk-in clinic, and correct coding of genuinely complex work is not upcoding; undercoding it would just be donated revenue. The question is never the curve alone, it is whether each chart independently supports its level under medical necessity and the MDM/time rules. An outlier curve plus supporting documentation is an audit you win. An outlier curve plus thin notes is a repayment demand.
How do you protect the practice?
- Baseline your curve: run each provider's E/M distribution against CMS specialty utilization data annually.
- Audit 10 charts per provider per quarter against MDM and time requirements, with education, not blame, as the output.
- Fix cloned documentation: copy-forward notes where every visit looks identical are auditor catnip and undermine even correct levels.
- Repay what you find: identified overpayments must be reported and returned within 60 days under the CMS overpayment rule; sitting on them converts a billing error into a False Claims Act problem.
Frequently asked questions
Legally, the False Claims Act reaches not just deliberate schemes but reckless disregard and deliberate ignorance. A practice that never audits, ignores payer warning letters, and keeps billing 80% level-5 visits cannot defend itself by claiming nobody meant to overbill. Intent matters at sentencing; recklessness is enough for liability.
Billing 99215 for a stable med refill visit, coding a comprehensive metabolic panel when a basic panel was run, reporting 45 minutes of psychotherapy (90837) for 38-minute sessions, billing incident-to services at the physician rate when supervision requirements were not met, or adding severity diagnoses the chart does not support to inflate risk scores.
Under the False Claims Act: up to three times the government's damages plus an inflation-adjusted penalty per false claim that runs into five figures per claim. Since every visit is a claim, a two-year pattern across thousands of encounters produces settlement math that dwarfs the original overpayment. Criminal exposure and program exclusion are also possible.
Yes. Commercial payers pursue it through special investigations units, prepayment review, network termination, and civil recovery, and many states have insurance fraud statutes mirroring the FCA. Payer analytics do not distinguish between Medicare and commercial claims when profiling your coding curve.
Sources & further reading
Reviewed by the ImmediCare Solutions RCM team
Certified billers and coders handling claims across 50+ specialties nationwide. This entry is reviewed against current payer policy and CMS rules. Last review: Jul 5, 2026.
Stop losing revenue to problems like this.
A free billing audit shows exactly where your practice is leaking money — no cost, no commitment.
