See how AI medical-record review links every fact to the exact Bates page that proves it — click any citation and jump straight to the record.
See the 60-second demo →Medical billing fraud costs the US healthcare system an estimated $100 billion annually. A significant portion of that fraud takes the form of CPT code upcoding — billing for a more expensive service than was actually provided. For personal injury attorneys, medical malpractice lawyers, and anyone managing healthcare costs, understanding upcoding is essential.
This guide gives you a working knowledge of how upcoding works, real-world examples of the most common schemes, how to detect upcoded bills in your cases, and how to dispute inflated charges effectively.
CPT codes — Current Procedural Terminology codes — are five-digit numbers assigned to every medical procedure and service. They're developed by the American Medical Association and form the foundation of medical billing. When a physician performs a procedure, they assign a CPT code that corresponds to that service; insurers and patients pay based on that code.
Upcoding occurs when a provider bills a CPT code that represents a more complex or more expensive service than was actually provided. It's essentially fraud: the bill doesn't match the service.
Upcoding is distinct from — but often confused with — "unbundling," which involves billing separately for services that should be billed together under a single comprehensive code. Both are forms of billing fraud, but they operate differently.
To understand upcoding, you need to understand how CPT codes are structured. Many code categories use a tiered system where complexity determines the code — and the reimbursement. This is where the fraud happens.
E&M codes cover office visits, hospital visits, and consultations. They're tiered by complexity, and the tiers determine reimbursement:
| Code | Level | Description | Medicare Rate (approx) |
|---|---|---|---|
| 99212 | Level 2 | Simple problem, straightforward decision-making | ~$50 |
| 99213 | Level 3 | Low complexity, requires some medical decision-making | ~$80 |
| 99214 | Level 4 | Moderate complexity, detailed history and exam | ~$115 |
| 99215 | Level 5 | High complexity, comprehensive evaluation | ~$165 |
A provider who bills 99215 for every office visit — regardless of actual complexity — is upcoding. Medicare data consistently shows that certain providers bill Level 4 and Level 5 E&M codes at rates far above the national average, which is a red flag for systematic upcoding.
Consider a typical scenario: A patient comes in for a follow-up on a soft tissue injury from a car accident. The physician spends 8 minutes with them, reviews their pain levels, adjusts a medication, and sends them home. The appropriate code is 99213 (Level 3, low complexity). The bill shows 99215 (Level 5, high complexity). The overcharge: $85 per visit. If the patient has 20 follow-up visits, the upcoded billing inflates the medical special damages by $1,700 — before adding in any multiplier in a personal injury demand.
Emergency departments systematically upcode E&M visits. A 2017 OIG study found that hospitals upcoded ED visits at alarming rates, with the percentage of high-complexity visits increasing dramatically at some facilities. The mechanism: ED physicians are often pressured to document at higher complexity levels regardless of actual patient acuity.
Example codes to audit: Watch for a facility billing 99285 (highest complexity ED visit, ~$280) for the majority of ED encounters. A normal distribution would show a spread across complexity levels. A facility where 80%+ of visits are billed at the highest level is almost certainly upcoding.
Surgical upcoding involves billing for a more complex version of a procedure than was performed. This is especially common when there are similar codes for different complexity levels of the same surgery.
Example: Wound Repair
| Procedure | Code | Rate |
|---|---|---|
| Simple wound repair, 2.5 cm | 12001 | ~$85 |
| Intermediate wound repair, 2.5 cm | 12031 | ~$125 |
| Complex wound repair, 2.5 cm | 13100 | ~$200 |
If the operative note describes a simple laceration repair but the bill shows CPT 13100 (complex repair), that's upcoding. The note is the key — the CPT code must match what's documented.
Physical therapy billing is a hotbed of upcoding because services can be difficult to verify retroactively. Common schemes include:
Anesthesia is billed in "base units" plus time units (typically 15-minute increments). Anesthesia upcoding often involves billing more time units than the procedure actually required — or billing for anesthesia provided by a CRNA as if a physician anesthesiologist were personally present.
Labs sometimes bill for complex panels (using high-reimbursement panel codes) when only individual tests were ordered and run. Alternatively, they run "reflex tests" automatically — without physician order — and bill for each additional test under separate CPT codes.
As a personal injury attorney or malpractice lawyer, you likely receive medical bills as part of your case file. Here's a systematic approach to auditing them:
The bill alone isn't enough. You need the corresponding medical records for every service billed. The clinical documentation must support every CPT code charged. If it doesn't, you have potential upcoding.
For every office visit or hospital visit, check the physician's note against the billing code. High-complexity codes (99214, 99215, 99285) require documented evidence of complex medical decision-making, comprehensive history, and detailed examination. A one-paragraph note cannot support a 99215.
For time-based services (physical therapy, psychotherapy, anesthesia, some E&M), check whether the time billed matches any documented start/stop times in the records. Nursing notes often record patient arrival and departure — compare these against the billed service times.
If a provider is billing Level 5 E&M codes for 90%+ of their visits, that's statistically impossible for a normal patient population. Medicare publishes utilization data by provider — look up the provider's billing patterns. Outliers are strong evidence of systematic upcoding.
Manual audit of thousands of CPT codes is time-consuming and error-prone. AI billing audit tools — like the bill auditor in MedLegal AI — can cross-reference every CPT code in a bill against the clinical documentation automatically, flagging mismatches, statistical outliers, and potential upcoding patterns in minutes.
MedLegal AI's Bill Auditor cross-references CPT codes against clinical documentation, flags upcoding patterns, and produces a structured dispute report — in minutes, not days. 14-day free trial.
Start Free Trial → medicalai.lawOnce you've identified upcoding, the dispute process depends on context:
Upcoded medical bills inflate the special damages in your client's case — which sounds good until you realize that inflated bills from questionable providers are often challenged by defense counsel and can undermine your client's credibility with juries. Identifying and correcting upcoding actually strengthens your case.
If you're representing a plaintiff and you've identified upcoding in their treatment bills, you can:
Defense attorneys routinely challenge inflated medical bills. A thorough CPT code audit, supported by expert testimony, can significantly reduce the claimed medical specials — and the jury's damages award. When a plaintiff's treating physician has a history of billing at the 99215 level for 95% of visits, that's powerful impeachment material.
If you're involved in qui tam (False Claims Act) litigation, CPT code upcoding against government payors is the heart of the case. The same analytical approach — comparing CPT codes against clinical documentation — forms the foundation of the government's damages calculation.
When confronted with upcoding allegations, providers typically argue:
"The documentation supports the code." Your response: Get the AMA's CPT guidelines for the specific code and compare them against the documentation element-by-element. Often, the documentation technically checks boxes without reflecting actual clinical complexity.
"Medical necessity justified the higher level." Your response: Medical necessity justifies performing a service; it doesn't automatically justify billing at a higher complexity level. The documentation must support the specific code billed.
"Our coding was reviewed by our compliance team." Your response: Internal compliance reviews are self-serving. Third-party audit by a certified medical auditor is the appropriate standard.
Medical billing is complex enough that upcoding can hide in plain sight. The attorneys and firms that know what to look for — and use the right tools to find it — consistently deliver better outcomes for their clients and more effective challenges to inflated damages claims.
John Mahoney is a medical-legal AI expert and founder of MedLegal AI. For questions about CPT code auditing or medical bill review, contact us at [email protected] or (856) 497-9417.