The money is not yours until the look-back period closes
Payment is not the end of adjudication. Payers reserve the right to review claims after paying them and to recover what they conclude should not have been paid — often years later, usually in bulk, and frequently by extrapolating a small sample across a whole period. That last mechanic is what turns a documentation habit into a five-figure demand.
Post-payment review goes by several names — recoupment, clawback, overpayment recovery, audit — and arrives from several directions: a commercial payer's special investigations unit, a Medicaid programme integrity contractor, a Medicare recovery audit contractor, or a managed behavioral health organisation's routine review programme.
How it starts
Almost always with a records request. A letter arrives asking for documentation supporting a list of claims — commonly twenty to forty, spread across a period.
The request itself is not an accusation and is often genuinely routine. What matters is that it is the point at which your documentation stops being a private matter and becomes evidence, and that nothing you do afterwards can improve what the notes already say. See progress note standards on why amending at this stage makes things categorically worse.
Extrapolation, which is the part that hurts
Here is the mechanic practices consistently underestimate.
The reviewer examines the sample and calculates an error rate — say six of thirty claims unsupported, twenty per cent. Rather than recovering the value of those six claims, the payer applies that rate to the entire universe of claims in the review period and demands the resulting sum.
Worked through. Thirty claims reviewed, six found unsupported, at roughly $120 each — an apparent exposure of about $720. But if the review period covers two years and four thousand claims, a twenty per cent extrapolated error rate against roughly $480,000 in payments produces a demand near $96,000. Same six notes. Two orders of magnitude difference.
Extrapolation rules differ: some programmes require a threshold error rate or evidence of a sustained problem before extrapolating, and statistical methodology is itself challengeable. But the possibility is why a documentation weakness affecting a small share of notes is not a small problem.
Look-back periods
How far back a payer can reach varies by payer type, contract and state law. Commercial contracts commonly specify a window measured in months to a couple of years; government programmes reach further, and allegations of fraud typically remove the limit entirely.
Your own contracts are the authority. It is worth actually knowing the number for your largest payers, because it determines how long documentation exposure stays live and how long records must remain readily producible rather than merely retained.
The overpayment you find yourself
Discovering an overpayment creates its own obligation, which practices often do not realise.
For federal healthcare programmes, identified overpayments must generally be reported and returned within 60 days of identification, and retaining one beyond that window can convert an honest billing error into a false-claims exposure. Commercial contracts impose their own return obligations.
The practical implication is uncomfortable but clear: if a self-audit finds a systematic error, the options are to address it — which means quantifying and repaying — or to have knowingly retained money you identified as not yours. There is no third option in which you fix it going forward and leave the past alone. This is a point at which healthcare counsel is worth the fee.
Responding to a request
- Diarise the deadline immediately. Missing it can itself produce a finding of unsupported claims.
- Send exactly what was asked for. Over-disclosure creates new surface area, and for substance use records may itself breach 42 CFR Part 2.
- Do not amend anything. Produce the record as it stands.
- Assess your own exposure first. Read the sampled notes before sending them. Knowing what a reviewer will find is materially better than learning it from their letter.
- Get counsel if the sample looks weak, or if the period is long, or if the request comes from a special investigations unit rather than routine review.
Appealing a demand
Recoupment demands are appealable, and appeals succeed more often than practices expect. Three lines of argument are available and are not mutually exclusive: the clinical documentation does support the claims and the reviewer misread it; the extrapolation methodology is flawed; or the review exceeded the contractual look-back period.
Note that payers frequently begin offsetting future payments while an appeal is pending, which creates cash-flow pressure independent of the merits. Knowing whether your contract permits that before you are in it is worth ten minutes now.
Reducing exposure
Nothing here is exotic. Notes that name the treatment plan goal they advanced, durations that reflect actual sessions, codes proposed from documentation rather than chosen and justified afterwards, plans reviewed on schedule, and outcome measures that visibly influenced decisions. The entire golden thread exists because this is the review it is built to survive.
The one additional control worth adding is periodic self-review: pull ten of your own notes at random each quarter and read them as a reviewer would. It is uncomfortable and it is far cheaper than the alternative.
What triggers a review
Reviews are not purely random, and knowing the common triggers is useful because most are detectable in your own data before a payer detects them.
- Statistical outliers. Billing patterns diverging from peers in the same specialty and region — the classic being a caseload billed almost entirely at the longest psychotherapy code.
- High volume per clinician. More billed hours in a day than a person can plausibly deliver, which is arithmetic rather than judgement.
- Complaints. From clients, former employees or competitors.
- Sequential dates. Identical service patterns repeating without variation.
- Referral from another review. A finding in one programme frequently prompts interest from another.
Running a self-audit
The single highest-value compliance activity available to a small practice, and it takes an afternoon a quarter.
Pull ten claims at random. For each, check that a note exists, that it is signed and dated, that it documents duration, that it names an active treatment plan goal, that the plan was in force and current, that the diagnosis matches the claim, and that any authorisation covered the date. Score them honestly.
Any failure rate above the low single digits is a finding to act on now rather than after a letter arrives — and if the pattern looks systematic rather than sporadic, that is the point to involve counsel before quantifying anything further.
Cash-flow planning
A practical consequence practices rarely plan for. A recoupment demand does not arrive as a bill you can schedule — it frequently arrives as an offset against payments you were expecting, which means the shortfall hits before you have decided how to respond.
For a small practice running close to its receipts, a demand in the tens of thousands recovered through withheld payments is an operating crisis independent of whether the demand is correct. This is one of the better arguments for a genuine cash reserve, and for knowing your contractual offset terms before you need them.
If the finding is correct
Worth addressing directly, because most guidance assumes you will be disputing.
Sometimes the reviewer is right. Notes genuinely did not support what was billed, or a supervision arrangement genuinely did not meet requirements. In that situation the useful questions are how far the problem extends, whether it was systematic or sporadic, and what the disclosure obligations are — not how to argue it.
Practices that engage counsel early in that scenario generally fare better than those that litigate a losing position first and seek advice afterwards, because the options available narrow considerably once you have taken a formal stance.
Verified 29 July 2026. Transaction standards (X12 270/271, 835, 837) are set federally under HIPAA; coverage, authorisation requirements, timely-filing windows and appeal rights are set by individual payers and by state law, and vary by contract. Figures described as typical are illustrative, not guarantees. Primary references: CMS billing guidance; X12 code lists; HHS HIPAA. This page is billing reference, not legal or coding advice.