50-Point Revenue Audit

Medical Billing Audit Checklist

The complete 50-point billing audit checklist that revenue cycle experts use to find revenue leaks, fix denial patterns, and benchmark billing performance. Run it yourself — or let us run it for free.

18–32%
Avg. Revenue Recovered
6 Areas
Checklist Categories
50 Items
Individual Checkpoints
4–8 hrs
Time to Complete

Why Every Practice Needs a Regular Billing Audit

The average medical practice loses between 10% and 30% of its billable revenue to preventable billing problems — and most of it is invisible. Denied claims closed without appeal, AR sitting past 90 days, coding errors that trigger systematic underpayments, provider credentialing gaps that silently block entire payer channels. None of this shows up on a profit and loss statement as "lost revenue." It just never arrives.

A structured medical billing audit is the most direct way to find and fix these leaks — and once you've identified what's broken, pairing those findings with a trusted revenue cycle management company like Healix RCM is how those leaks get permanently closed. Our claims processing service is designed specifically to eliminate the submission and denial failures this checklist uncovers. Unlike a general financial review, a billing audit goes claim-level — examining exactly where in the revenue cycle money is leaving the system and whether it can be recovered. For a practice billing $200K/month, finding and fixing a 15% revenue leak represents an additional $30,000 per month with zero additional patient volume. For context on what fixing those leaks through outsourced billing actually costs, see our medical billing cost guide.

This checklist covers the six critical areas of medical billing performance: claims submission, denial management, accounts receivable, coding accuracy, credentialing status, and compliance. Each section includes specific benchmarks so you can compare your practice against industry best-in-class performance — not just guess whether your numbers are acceptable.

Work through each category systematically. Flag any items where you cannot confirm compliance or where your metrics fall below the benchmarks. Every red flag is a potential revenue recovery opportunity. When you're done, compare your findings against the revenue loss calculator below to estimate what a full remediation could return to your practice.

How to Conduct a Billing Audit in 6 Steps

Before working through the checklist, run these six data pulls to establish your baseline metrics.

01

Pull Your AR Aging Report

Export a full accounts receivable aging report segmented by payer, provider, and date of service. Flag everything over 60 days as requiring immediate action. Calculate what percentage of total AR is over 90 days — this is your first benchmark.

02

Calculate Your Denial Rate

Divide total denied claims in the last 30 days by total claims submitted. Industry average is 10–15%; best-in-class is below 5%. Sort denials by reason code to find your top 3 denial categories — these drive 80% of your revenue loss.

03

Run a First-Pass Rate Analysis

Your billing software or clearinghouse should report the percentage of claims accepted on first submission without rejection or payer denial. Below 95% indicates systematic claim preparation problems — wrong codes, missing modifiers, or eligibility errors.

04

Audit 25 Recent Claims End-to-End

Select 25 claims across different payers and dates. Trace each from charge entry through posting. Look for: incorrect CPT/ICD-10 pairing, missing modifiers, late submission, underpayments accepted without review, and denials closed without appeal.

05

Review Credentialing Status

Pull enrollment status for every active provider with your top 10 payers. Confirm NPIs match, no lapsed re-credentialing dates, and all specialties and service locations are correctly listed. A single enrollment gap can silently block months of payments.

06

Compare Net Collection Rate

Net collection rate = (payments received ÷ adjusted charges). Best-in-class is 96%+. Below 90% means significant revenue is being lost to write-offs that should be appealed or recoded. This is the single most important number in your billing audit.

1. Claims Submission & First-Pass Rate

Target: 98%+ first-pass rate
Watch: 90–97%
Action Required: Below 90%
First-pass clean claim rate is above 98%Critical
Claims submitted within 24 hours of service dateCritical
Electronic remittance advice (ERA) is set up with all major payers
Eligibility verification is completed before every visitCritical
Coordination of benefits (COB) is confirmed on dual-coverage patients
Claims scrubbing tool catches errors before submission
Secondary claims submitted automatically after primary EOB
Timely filing deadlines are tracked per payer (range: 90 days – 1 year)Critical

If your first-pass rate is below 95%, you are losing $3,000–$15,000/month in unnecessary rework and delayed cash flow.

2. Denial Management & Appeals

Target: < 5% denial rate
Watch: 5–10%
Action Required: Above 10%
Denial rate is below 5% of all submitted claimsCritical
Every denial is worked within 5 business daysCritical
Denial root causes are tracked and reported monthlyCritical
Appeal templates exist for every common denial code (CO-16, CO-4, CO-45, etc.)
Prior authorization denials are appealed with supporting clinical documentationCritical
CO-97 bundling denials are reviewed for unbundling opportunities
Payer-specific appeal deadlines are tracked (typically 30–180 days)Critical
Denial patterns are escalated to clinical team for upstream fixes

The average practice writes off 40% of denied claims without attempting an appeal. This is pure revenue loss — most denials are reversible.

3. Accounts Receivable Aging

Target: < 15% over 90 days
Watch: 15–25% over 90 days
Action Required: Above 25% over 90 days
Total AR over 90 days is below 15% of outstanding balanceCritical
Average days in AR is below 30 daysCritical
Claims over 60 days are actively followed up with payers weeklyCritical
AR aging report is reviewed with practice leadership monthly
Bad debt write-offs are reviewed — not automatically applied before appealCritical
Patient balance statements are sent within 30 days of EOB
Collections agency referrals happen only after internal process is exhausted
Unapplied credits are reviewed and resolved monthly

AR over 90 days is largely uncollectable. Every 10 days added to AR represents approximately 1% reduction in net collection rate.

4. Medical Coding Accuracy

Target: < 2% coding error rate
Watch: 2–5%
Action Required: Above 5%
E&M level documentation supports the CPT codes billedCritical
ICD-10 codes are at the highest specificity available (5–7 characters)Critical
Modifiers are applied correctly (25, 59, 26, TC, etc.)Critical
CPT codes are updated with January 1 annual code changesCritical
NCCI edit conflicts are caught before submission
Upcoding and downcoding are monitored in internal auditsCritical
Procedure-to-diagnosis crosswalks are verified for medical necessity
Telehealth modifiers (95, GT, FQ) are applied when applicable

Incorrect modifiers alone account for 12–18% of all commercial claim denials. A single misused modifier 59 can trigger a payer audit.

5. Credentialing & Payer Enrollment

Target: 100% provider enrollment current
Watch: 1–2 expired enrollments
Action Required: 3+ expired or lapsed
All active providers are enrolled with every contracted payerCritical
Provider credentialing files are re-verified every 2–3 years per payerCritical
NPI numbers are confirmed in NPPES and match payer enrollment recordsCritical
CLIA and DEA certificates are current and on file
New providers are enrolled before their first patient dayCritical
Locum tenens billing rules (Q6 modifier) are understood and applied
Payer contracts are reviewed for fee schedule updates annually
Out-of-network billing decisions are documented and communicated to patients

Lapsed credentialing is silent — claims still submit but return CO-97 or PR-96 denials. Practices can lose months of revenue before noticing.

6. Compliance & HIPAA

Target: Zero compliance flags
Watch: Minor documentation gaps
Action Required: Active audit or OIG flags
Business Associate Agreements (BAA) are in place with all vendorsCritical
Staff complete annual HIPAA training with signed acknowledgmentCritical
PHI is transmitted only over encrypted channelsCritical
EHR access logs are reviewed quarterly for unauthorized access
OIG exclusion database is checked for all staff and providers monthlyCritical
Billing practices are reviewed against OIG Work Plan annually
Incident response plan exists for PHI breaches
CMS conditions of participation are met for all enrolled service lines

A single HIPAA violation can trigger fines from $100–$50,000 per violation. OIG exclusion violations carry mandatory repayment and exclusion from federal programs.

Common Revenue Leaks & Monthly Cost Estimates

Based on audits across 500+ practices and 20+ medical specialties, these are the most common revenue leaks — and what fixing each one is worth monthly.

Revenue Leak SourceMonthly Revenue LossFix
Uncollected denials (40% of denials written off)$8,000 – $45,000Active denial management workflow
Timely filing write-offs$2,000 – $15,000Track and submit within deadline
Missed charges / incomplete documentation$5,000 – $30,000Charge capture audit + provider education
Coding errors (undercoding)$3,000 – $20,000Quarterly coding audit and E&M review
Slow AR follow-up (90+ days)$5,000 – $25,000Systematic follow-up schedule
Lapsed credentialing denials$2,000 – $40,000Proactive credentialing calendar
Total Potential Monthly Recovery$25,000 – $175,000Depends on practice size and specialty

What to Do After Your Billing Audit

Completing the audit is step one. Revenue recovery requires action — and action requires prioritization. Not every finding has the same urgency or financial impact. Here's the framework we use when conducting audits for Healix RCM clients:

Priority 1: Immediate Revenue Recovery

This week
  • Work all denials sitting unworked over 30 days — sort by dollar amount, work highest value first
  • Pull AR over 90 days and call payers on the top 20 balances
  • Check for timely filing deadlines on any claims approaching the payer window

Priority 2: Systemic Process Fixes

This month
  • Fix the top 3 denial reason codes with process changes (pre-auth workflow, eligibility timing, modifier education)
  • Implement daily eligibility verification before appointments
  • Set up appeal templates for your most common denial types

Priority 3: Long-Term Performance Improvements

Next 90 days
  • Conduct a coding audit with an external CPC to catch undercoding
  • Audit all provider credentialing files for re-verification dates
  • Build monthly reporting dashboards to catch problems earlier next cycle

When to escalate to professional help: If your audit reveals a denial rate above 15%, AR over 90 days exceeding 25% of total outstanding, or net collection rate below 88%, the problem is systemic and likely requires more than process tweaks. These are the indicators that your current billing infrastructure — whether in-house or with a current vendor — has a fundamental performance gap. Use our guide to comparing medical billing companies to understand what best-in-class performance looks like and what to ask vendors before switching. Or speak directly with a billing specialist who can walk through your specific findings. Get a free professional billing audit from Healix RCM and we'll tell you exactly what we'd change and what it would recover.

Skip the Self-Audit. Get Ours for Free.

Healix RCM's billing audit analyzes your actual claims data — denial codes, AR aging, collection rates, and credentialing status — and delivers a written report with specific dollar figures and a recovery roadmap. No cost. No obligation. Results in 48 hours.

500+ practices audited
48-hour turnaround
Written findings report
Zero obligation

Billing Audit FAQ

Common questions about medical billing audits, what to expect, and how to act on findings.

What is a medical billing audit?
A medical billing audit is a systematic review of your practice's billing processes, claim submissions, denial patterns, AR aging, coding accuracy, and compliance to identify revenue leaks and process gaps. Audits can be internal (self-conducted) or external (third-party, like the free audit Healix RCM offers). External audits are more objective and typically find 15–30% more issues than internal reviews.
How often should a medical practice conduct a billing audit?
At minimum, quarterly audits should review denial rates, AR aging, and first-pass rates. A full coding audit (reviewing actual claims against documentation) should happen twice per year. Credentialing audits should happen annually or when adding new providers. If your denial rate or AR days suddenly worsen, trigger an immediate audit rather than waiting for the scheduled cycle.
What's the difference between a billing audit and a compliance audit?
A billing audit focuses on revenue — finding leaks in your claim submission, denial management, and collection workflows. A compliance audit focuses on risk — ensuring your billing adheres to CMS, OIG, and HIPAA requirements and that codes billed are supported by documentation. Best practice is to combine both: run a revenue audit to find money, and a compliance audit to confirm you're earning it correctly.
What is a good first-pass claim acceptance rate?
Best-in-class first-pass rate is 98%+. Industry average is 70–85%. Every percentage point below 98% represents rework, delays, and potential timely filing denials. If your rate is below 90%, you have a systematic problem — either in eligibility verification, charge entry, coding, or payer-specific claim requirements.
What are the most common revenue leaks found in billing audits?
The top revenue leaks we find in free billing audits are: (1) denied claims closed without appeal (average: 40% of denials); (2) AR over 90 days not being worked; (3) undercoding — selecting lower E&M levels to avoid audits, which costs more than the audit risk; (4) timely filing write-offs from slow submission workflows; and (5) lapsed credentialing causing silent claim rejections. Together these typically represent 10–30% of total potential revenue.
How long does a billing audit take?
A self-conducted checklist audit (like this one) takes 4–8 hours if you have access to your AR reports, denial data, and billing software. A professional external audit takes 2–5 business days depending on practice size and data access. Healix RCM's free billing audit is typically completed in 48 hours and includes a written report with specific findings and revenue recovery projections.
Can a billing audit trigger a payer or government audit?
No — an internal billing audit cannot trigger an external audit. In fact, documented internal audits are considered a compliance best practice by the OIG and can protect you if you're ever selected for a RAC or MAC review. The risk runs the other direction: practices without audit programs are statistically more likely to have billing patterns that trigger payer audits.
What should I do if my billing audit reveals significant problems?
Prioritize by revenue impact: first address denial patterns (immediate revenue recovery), then AR aging (cash flow improvement), then coding issues (long-term accuracy). If you find systematic compliance issues (consistent upcoding, unsupported codes), consult a healthcare attorney before self-reporting. For operational billing gaps, consider whether your current in-house team has the bandwidth and expertise to fix them — or whether outsourcing to a specialized billing company makes more financial sense.
H

Reviewed & Verified By

Healix RCM Billing Experts — CPC & CPMA Certified Team

This checklist was developed and reviewed by Healix RCM's certified billing and audit team. Our CPMA (Certified Professional Medical Auditor) and CPC (Certified Professional Coder) credentialed specialists have conducted billing audits across 500+ practices in 20+ specialties. Benchmarks and thresholds in this checklist reflect current AAPC standards, CMS guidelines, and real-world performance data from our active client base.

CPMA AuditorsCPC CertifiedCBCS Certified500+ Audits Conducted20+ SpecialtiesHIPAA Compliant

Ready to Find and Fix Your Revenue Leaks?

Our certified billing experts will audit your practice and show you exactly where revenue is leaving — and how to get it back.

Free for qualifying practices. 48-hour turnaround. Written report with specific findings.