An audit letter from a payer is unsettling even when your billing is sound. It usually arrives as a request for medical records on a list of claims, with a deadline and a submission method. It does not mean you have done something wrong — payers audit routinely, and also when a pattern in your claims catches their attention. What matters most is your response: a careful, complete, on-time reply protects revenue a rushed one can put at risk.
This guide walks through the response step by step. It is general information, not legal advice — if an audit alleges fraud or involves a government investigation, involve qualified counsel early.
What a payer audit request actually is
A payer audit is a review of claims you already submitted, usually after payment. The payer — or a contractor working for it — asks for the documentation behind selected claims and checks whether the records support what was billed: diagnosis, service, code level, medical necessity, and any required authorization.
Audits come in a few common forms: a routine post-payment review that samples claims, a targeted review of a specific code or pattern, Medicare program-integrity reviews run by its contractors, and commercial-payer special-investigations units. The letter should tell you which kind you are dealing with, and that detail shapes your response.
Keep this separate from a billing audit you commission yourself: when your own team reviews your claims, that is a self-audit. A payer audit is the other direction — someone else reviews your claims, and their findings can lead to a repayment demand. Our guide to what a billing audit checks covers the self-audit side.
Step 1: Read the letter before you do anything else
Do not start pulling charts until you know exactly what is being asked. Note five things: who is auditing (the payer or a contractor); which claims are under review; what issue is being examined — medical necessity, coding level, authorization, or something else; the deadline, which runs from the letter’s date, not the day you opened it; and how to submit, including whether a cover letter or claim index is requested.
If anything is unclear, contact the auditor in writing and ask. Questions asked early cost nothing; assumptions discovered late can cost a claim.
Step 2: Put one person in charge and work backward from the deadline
Assign a single response lead, usually the billing manager or compliance lead, with authority to pull records from clinicians and billing staff. Responses stall when everyone assumes someone else is handling them.
Work backward from the deadline: records pulled and reviewed, a buffer for a final check, then submission. If the deadline cannot realistically be met, request an extension in writing before it passes and keep the reply. A missed deadline can turn a documentation question into a default overpayment.
Step 3: Send only what was requested — and send all of it
These two rules are the core of a good response. Send every record the auditor asked for, for the dates of service requested, and nothing extra. Unrelated visits or other patients’ records can raise questions the audit never asked.
For each claim, gather the records your own practice created: the visit note, treatment plan, orders, and any authorization on file. Do not send records created by another practice unless the auditor asked for them. Make sure every page is legible; an unreadable scan will be treated as if the documentation does not exist. Organize the packet by patient and date of service, with a cover sheet matching the auditor’s claim list.
One rule is absolute: never alter a record after the audit notice arrives. Do not add to a note, backdate a signature, or rewrite documentation to fit the claim. If you find an error, note it separately — an addendum written now, clearly dated as such, is very different from a note quietly changed to look original. Altered records can turn a billing dispute into a credibility problem far larger than the claim.
Step 4: Review the packet before it leaves your office
Before submitting, check each claim against the questions the auditor will ask: does the note support the diagnosis and code level billed? Does it show medical necessity in the payer’s terms? Is it signed, dated, and complete? Was authorization obtained when required? Do the dates, provider, and codes match the note exactly?
Where a clinician’s judgment matters — whether a note proves medical necessity, for example — have a clinician involved. If the review finds claims that genuinely should not have been paid, that is useful to know before the auditor finds it.
Step 5: Submit with proof, then keep a complete copy
Submit through the method the letter specified, and keep proof of delivery: a portal confirmation, a fax receipt, or a tracking record. Keep a complete copy of everything you sent, the original letter, any extension correspondence, and a log of what went to whom and when. If the payer later says a record was never received, your log is the answer. Findings may take weeks or months, and the dispute clock starts when they arrive.
What happens after: findings, overpayments, and extrapolation
The findings letter will say which claims the auditor considers unsupported and what it believes you were overpaid. Read it as carefully as you read the first letter. Auditors make mistakes — missed pages, wrong policy versions, misread notes. Check every denied claim against the packet you sent before deciding how to respond.
One finding deserves special attention: extrapolation. In larger audits, the auditor reviews a sample of claims, calculates an error rate, and applies it to a much larger set of claims from the same period — including claims never individually reviewed. A few disputed charts can therefore produce a repayment demand far larger than the sampled claims. If your findings include an extrapolated amount, ask for the sampling method and calculation: how the sample was chosen, which claims counted as errors, and how the rate was projected.
The table below is a clearly labeled illustration of how that math works — not a real audit result.
| Illustrative example only | Figure |
|---|---|
| Claims in the sample reviewed | 50 |
| Sample claims the auditor counted as errors | 10 |
| Sample error rate | 20% |
| Claims in the larger period the rate is applied to | 1,000 |
| Illustrative extrapolated error count | 200 claims |
If the findings include a repayment demand, the payer may ask for a refund or offset it against future payments — see our guide to payer clawbacks and recoupments before money moves.
If the findings are wrong: dispute them on time
Do not ignore a findings letter, and do not simply pay it without reviewing it — paying without review can set a precedent for future audits on the same issue. If the findings misread your documentation or apply the wrong rule, dispute them through the process and deadline the letter states. A missed dispute deadline can waive your right to appeal.
A strong dispute is specific: the exact claim, the exact page of the record that supports it, and the exact policy or contract provision that applies. General complaints rarely move an auditor; a page reference does. If the amount is large, if extrapolation is involved, or if the audit alleges anything beyond a documentation error, involve counsel or a compliance advisor first. Our denial management work follows the same discipline, and it applies to audit findings as much as to denied claims.
Mistakes that make a payer audit worse
- Missing the deadline. The most avoidable way to lose a supported claim.
- Altering records. Backdating or rewriting notes damages credibility across the whole audit.
- Sending the entire chart. Unrequested material invites new questions and slows the review.
- Sending incomplete packets. A missing page reads the same as a missing service.
- Treating findings as final. Every findings letter deserves a claim-by-claim check.
Frequently asked questions
Does a payer audit mean my practice did something wrong?
Not necessarily. Payers audit routinely, and also when a billing pattern stands out, even when the care was appropriate. Treat the letter seriously, but do not assume the outcome.
How quickly do I have to respond to a payer audit request?
By the deadline in the letter — that date governs, and it is often shorter than practices expect. Calendar it the day the letter arrives, and request any extension in writing first.
Should I send the patient’s entire medical record?
No. Send what the auditor requested, for the dates of service requested, from your own practice’s records. A full chart can slow the review and raise questions the audit never asked.
What is extrapolation in a payer audit?
It is when an auditor reviews a sample of claims, calculates an error rate, and applies it to a larger set of claims from the same period. Dispute it by challenging the individual errors, the sampling method, or the calculation.
What if I disagree with the audit findings?
Dispute them through the process in the findings letter, within its deadline, claim by claim, citing the record pages and policy provisions that support your position.
Conclusion
A payer audit request is a deadline-driven documentation exercise. Practices that treat it that way — one owner, a complete packet, a review before submission, and a claim-by-claim check of the findings — protect far more revenue than practices that rush or ignore it. The habits that get you through an audit prevent the next one: notes that prove medical necessity, authorizations on file, and claims that match the record.
If an audit letter has landed on your desk, or you want your billing reviewed before one does, request a free medical billing audit. We will review how your claims and documentation hold up — and where a payer’s review would find gaps first.
