Payment integrity is the process of making sure healthcare providers and insurers pay only for services that were actually delivered and are medically necessary.

In practice, this means someone reviews a claim before or after payment to check that the service happened, the patient was covered on that date, the provider was licensed to deliver it, and the diagnosis supports the treatment. If the claim fails any of these checks, the payer either denies it or asks for the money back. Payment integrity exists because healthcare claims are submitted in high volume—millions per day across the US—and errors, fraud, and billing mistakes happen at scale.

The term covers both intentional fraud (a provider billing for a service that never occurred) and unintentional errors (a coder using the wrong diagnosis code, or a claim submitted twice by accident). Both cost money. Both are caught by the same systems.

Key Takeaways

  • Payment integrity reviews check that a service was actually delivered, the patient was insured on the date of service, and the treatment was medically necessary before the claim is paid.
  • Medicare and Medicaid use dedicated contractors called Recovery Audit Contractors and Medicaid Integrity Program contractors to review claims after payment and demand refunds for errors.
  • Private insurers run their own pre-payment and post-payment reviews, often using automated software to flag claims that don't match expected patterns.
  • Providers who submit claims face audits, recoupment demands, and penalties if their error rates are high or patterns suggest intentional billing mistakes.
  • A claim can fail payment integrity review for reasons that have nothing to do with fraud—a coding error, a missing document, or a service that fell outside the patient's coverage.

How payment integrity reviews actually work

A claim enters the system when a provider submits it to an insurer or government program. Before the payer sends money, or sometimes weeks after, someone or something checks it. The review looks for specific problems: Does the patient's insurance cover this service on this date? Is the provider licensed and in-network? Does the diagnosis code match the procedure code—for instance, is the provider billing for knee surgery on a patient whose chart shows they came in for a sore throat?

For Medicare claims, the Centers for Medicare & Medicaid Services (CMS) uses automated systems to flag outliers—providers whose billing patterns differ sharply from peers, or claims that exceed normal frequency. A cardiologist who bills for 50 stress tests a week when the regional average is 8 will trigger a review. So will a claim for a procedure that is almost never billed together with another one.

If a claim passes the automated checks, it may still be selected for manual review by a human auditor. If it fails, the payer either denies it outright or requests documentation—medical records, operative reports, proof of service—before deciding whether to pay.

Who performs payment integrity reviews for Medicare and Medicaid

Medicare uses Recovery Audit Contractors (RACs) to review claims after payment and identify overpayments. A RAC is a private company hired by CMS to audit a specific region. If a RAC finds that Medicare paid for a service that should not have been paid—because it was not medically necessary, was billed twice, or the patient was not covered—the RAC demands the money back. Providers have appeal rights, but the burden is on them to prove the claim was correct.

Medicaid uses Medicaid Integrity Program (MIP) contractors to do similar work. Because Medicaid is state-run, each state has its own contractor or team of contractors. They review claims, audit provider records, and investigate suspected fraud.

Private insurers—Blue Cross, Aetna, United, and others—run their own payment integrity departments. They do not use external contractors in the same way Medicare does. Instead, they employ staff or contract with specialized vendors who review claims using proprietary software and manual audits.

What triggers a payment integrity review

Some claims are reviewed at random. Others are flagged because they match a known pattern of error or fraud. A few common triggers are: a provider's billing volume is much higher than peers in the same specialty and region; a claim includes a diagnosis code that rarely appears with that procedure; a patient received the same service twice in an impossibly short timeframe; or a provider is billing for a service they are not licensed to perform.

Patterns matter. If one claim looks odd, it might be a typo. If 200 claims from the same provider all have the same coding error, that is a pattern, and the payer will demand repayment for all of them. The provider then has to decide whether to appeal, accept the finding, or negotiate a settlement.

Audits can also be triggered by a complaint—a patient who says they were billed for a service they did not receive, or a competitor who reports suspicious billing. Medicare and Medicaid have hotlines for reporting suspected fraud.

The difference between payment integrity review and fraud investigation

Payment integrity review is civil—it is about money owed. A payer finds an error and asks for repayment. Fraud investigation is criminal—it is about intent. A fraud investigator looks for evidence that a provider knowingly submitted false claims to get paid for services that did not happen.

In practice, the line blurs. A payment integrity review might uncover a pattern so suspicious that it triggers a fraud investigation by the Department of Justice or a state attorney general. But most payment integrity reviews never reach that threshold. They are administrative: the payer finds an error, the provider either pays it back or appeals, and the case closes.

A provider can be held liable for repayment even if the error was unintentional. A coder who used the wrong diagnosis code, or a billing clerk who submitted a claim twice, created an overpayment. The provider has to repay it regardless of whether anyone intended to defraud anyone.

What happens to a provider after a payment integrity finding

If a RAC or MIP contractor finds an overpayment, they send a demand letter. The provider can appeal within a set timeframe—usually 30 days. If the provider does not appeal, or if the appeal is denied, the payer recoupes the money from future claims or demands a lump-sum payment.

Repeated findings can lead to higher scrutiny. A provider with a high error rate may have all claims reviewed before payment instead of after. A provider with a pattern of fraud may be excluded from the program entirely—meaning they can no longer bill Medicare or Medicaid at all.

For private insurance, the consequences vary by contract. Some insurers will terminate a provider relationship after a certain number of findings. Others will impose higher audit rates or require pre-authorization for certain services. A provider can also face civil penalties or criminal charges if the pattern suggests intentional fraud.

Why payment integrity matters to patients

Payment integrity reviews protect the solvency of insurance programs. If overpayments and fraud go unchecked, premiums rise and coverage shrinks. But reviews also affect patients directly. A claim that fails a payment integrity review may be denied, leaving the patient responsible for the bill. A provider who is excluded from Medicare or Medicaid because of fraud findings is no longer available to those patients.

Patients can also be harmed by aggressive billing practices that payment integrity is meant to catch. If a provider bills for services that were not delivered, or bills for more expensive services than were actually provided, the patient's out-of-pocket costs rise and their insurance is depleted faster.

Frequently Asked Questions

What does it mean if my claim failed a payment integrity review?

It means the payer found something wrong with the claim—a coding error, missing documentation, a service not covered under your plan, or a duplicate submission. The payer will either deny the claim or ask your provider for more information. You should contact your provider's billing department to find out what the specific issue was and whether they plan to appeal.

Can I be billed if my claim fails a payment integrity review?

That depends on the reason the claim failed and your state's laws. If the service was not covered under your plan, you may be responsible for the bill. If the provider made a billing error, they usually absorb the cost rather than billing you. Ask your provider's billing department and your insurer what you owe.

How long does a payment integrity review take?

Automated reviews happen in seconds or minutes. Manual reviews can take weeks or months. A RAC or MIP audit of a provider's records can take many months. If you are waiting to know whether a claim will be paid, contact your insurer for a status update.

What is the difference between a payment integrity review and a medical necessity review?

A medical necessity review asks whether the treatment was appropriate for the patient's condition. A payment integrity review asks whether the claim was submitted correctly and the service actually happened. Both can deny a claim, but for different reasons.

Can a provider appeal a payment integrity finding?

Yes. Medicare and Medicaid both have formal appeal processes. A provider can submit additional documentation, medical records, or a written argument explaining why the claim should have been paid. Private insurers also have appeal processes, though the rules vary by plan.