AI for Medical Coding Audits

Coding audits come in two forms. Prospective audits review claims before billing. Retrospective audits review claims already paid. Both internal and external reviewers do this work. External reviewers include Medicare Administrative Contractors (MACs), which run Targeted Probe and Educate reviews; Recovery Audit Contractors; Unified Program Integrity Contractors; CMS's Comprehensive Error Rate Testing program; the HHS Office of Inspector General; and commercial and Medicare Advantage payers. The OIG's General Compliance Program Guidance, released in November 2023, lists auditing and monitoring as a core element of a compliance program. AI helps in three places. First, risk scoring picks where to look. It compares code distributions with peers, flags unusual modifier use and spots edit violations. Second, automated review compares each code with the documentation and payer rules, such as NCCI edits and local and national coverage determinations. It then drafts a finding with the supporting evidence. Third, the results feed into reporting and education, broken down by provider, code or error type. The most important misconception is that reviewing 100 percent of claims with AI replaces statistical sampling. It does not. An AI flag is a lead, not a finding, until a qualified auditor confirms it. To estimate how much an overpayment is worth across a whole group of claims, you need a documented, statistically valid sampling method. The OIG offers free RAT-STATS software for this. Targeted reviews of high-risk claims are useful, but they cannot be projected onto the whole group of claims. The stakes follow from federal overpayment rules, which require overpayments to be reported and returned within 60 days of being identified. CMS updated the rule in 2024 to allow a limited pause in that deadline while a good-faith investigation is underway. An AI system that surfaces problems but has no process for resolving them can create exposure rather than reduce it.