What "Upcoding" Actually Means (and How to Push Back)

What Upcoding Actually Is

Upcoding means a provider bills for a higher level of service than was actually performed. Every medical service has a corresponding CPT (Current Procedural Terminology) code, and each code maps to a specific complexity or intensity of care. When the code submitted to the insurer describes a more complex visit or procedure than what actually happened, that's upcoding.

It matters because insurers pay more for higher-level codes — and those higher payments often pass through to patients in the form of larger deductibles, higher coinsurance amounts, or inflated out-of-pocket costs. According to the CFPB, up to 49% of medical bills contain at least one error, and upcoding accounts for a significant portion of those errors.

The CMS CERT Program reported a 6.55% improper-payment rate for Medicare fee-for-service in FY2025 — upcoded evaluation and management codes are consistently among the most cited causes of improper payments in that program.

Upcoding is not always intentional. Busy billing departments work from physician notes, and if the documentation is vague, a coder may assign a higher-complexity code that the documentation doesn't actually support. Intentional upcoding is fraud. Accidental upcoding is still correctable — and correcting it is your right.

How Upcoding Happens — and Why It's So Common

The U.S. billing system runs on the assumption that clinical documentation drives the code. The physician writes a note, the coder reads the note, and the code is supposed to match. When that chain breaks down, the result is often a code that's one level too high.

Documentation ambiguity

Physicians are under enormous documentation pressure. Notes written quickly or using templates may check boxes that technically support a higher-level code even when the actual clinical complexity was lower. The physician may not even be aware of how the visit was ultimately coded.

Revenue cycle incentives

Hospitals and large physician groups employ revenue cycle specialists whose job is to maximize reimbursement. Training emphasis on capturing "all documented complexity" can push coders toward higher codes at the margin.

Lack of patient awareness

Most patients never look at the CPT codes on their EOB. There's no natural feedback loop unless a patient specifically requests an itemized bill and compares codes to the actual visit. That's why learning to check — and knowing what to look for — is so useful.

The Office Visit Example: 99213 vs. 99214

Evaluation and management (E/M) codes for office visits run from 99202 (new patient, low complexity) through 99215 (established patient, high complexity). The two most frequently confused codes are 99213 and 99214.

CPT 99213 — Moderate-complexity established patient visit

A 99213 is appropriate for an established patient presenting with a problem that requires low-to-moderate medical decision-making. Think: a routine blood pressure follow-up, a medication check, a sinus infection, or a minor skin concern. The visit is typically 15 to 20 minutes. The documentation should reflect at least two of three elements: a brief history, a focused examination, and straightforward-to-moderate medical decision-making.

You can review the exact description at BillBusted's CPT 99213 page.

CPT 99214 — High-complexity established patient visit

A 99214 requires moderate-to-high complexity medical decision-making. It's appropriate for a patient with multiple chronic conditions that need active management, a new symptom requiring significant workup, or a treatment decision that involves real risk. These visits typically run 30 to 39 minutes. The documentation must support the higher level of decision-making — not just time.

You can review the full description at BillBusted's CPT 99214 page.

The red flag

If you had a quick, routine follow-up — you were in and out in 15 minutes, the doctor renewed a prescription, nothing new was assessed — and you see 99214 on the EOB or itemized bill, that is a red flag worth questioning. It doesn't automatically mean fraud, but it is worth asking the billing department to show you the documentation that supports the higher code.

The ER Visit Example: 99284 vs. 99285

Emergency department visits use their own E/M code set, running from 99281 (minor, self-limited problem) through 99285 (high-complexity decision-making with a high threat to life or bodily function). The two most commonly discussed codes are 99284 and 99285.

CPT 99284 — High-severity ED visit

A 99284 is for a patient presenting with a high-severity problem that requires an urgent evaluation. The patient is in significant distress, but the threat to life or bodily function is not necessarily immediate. Examples might include a kidney stone, a controlled asthma attack, or a laceration requiring sutures.

See BillBusted's CPT 99284 entry for the full billing description.

CPT 99285 — Highest-severity ED visit

A 99285 requires high-complexity medical decision-making and a high threat to life or bodily function. It's reserved for cases where the presenting problem — if not treated immediately — could result in significant morbidity, severe physiologic impairment, or death. A chest pain workup, a stroke protocol, or a major trauma all fit. A straightforward ankle sprain or a minor cut typically does not.

See BillBusted's CPT 99285 entry for the documentation requirements.

Why 99285 is overbilled so often

Some hospitals default to billing 99285 for nearly every ED visit because the code is worth substantially more. Patients rarely review the code. Unless someone requests an itemized bill and compares the code to the clinical notes, the upcode goes unchallenged. That's why requesting an itemized bill after any ER visit is one of the most useful steps a patient can take.

How to Spot Upcoding on Your Own Bill

You don't need a medical billing certificate to identify a potential upcode. Here is a practical checklist.

Step 1: Get an itemized bill

Your provider's patient statement usually shows a total. The itemized bill shows every line item with its CPT code. Request one in writing or at the billing desk — providers are generally required to provide it. If you need a template, BillBusted's itemized bill request tool generates the right language automatically.

Step 2: Find the E/M code

Look for a five-digit code in the 99200–99499 range on the itemized bill. That's the evaluation and management code that describes your visit level. Write it down.

Step 3: Compare the code to your actual visit

Think about the visit honestly. How long were you in the room with the physician? Was it a simple concern or a complex one? Was anything new prescribed or changed? Was a significant workup ordered? If the code is 99214 or 99285 and the visit felt routine or quick, that mismatch is worth investigating.

Step 4: Review the clinical notes

Under HIPAA, you have the right to your medical records. Request the clinical note for the date of service. A legitimate 99214 or 99285 should have documentation that clearly shows high-complexity decision-making. If the note is thin — brief chief complaint, no substantial exam findings, no complex decision-making — the documentation may not support the code billed.

How to Push Back: A Step-by-Step Process

Call the provider's billing department first

Start with a simple, non-accusatory call. Ask: "Can you help me understand why this visit was billed as a Level 4 (or Level 5) visit? I'd like to understand what documentation supports that code." In many cases, a billing department can escalate the question to the coding team and issue a corrected claim without a formal dispute.

File a dispute with your insurer

If the billing department confirms the code and you believe it's wrong, take it to your insurer. Insurers have financial incentives to catch upcoding too — every dollar of overcoded reimbursement costs them money. File a written complaint through your insurer's member portal or by certified mail, citing the specific CPT code, the date of service, and the reason you believe the code level doesn't match the care received.

Cite JAMA's 74% success rate for context

Research published in JAMA Health Forum found that 74% of patients who dispute a medical bill receive a correction or reduction. Upcoding disputes — where you have specific code-level evidence — tend to be among the more straightforward cases. The dispute process is worth starting.

Escalate if needed

If both the provider and insurer decline to adjust the code and you believe the case is legitimate, you can escalate to your state insurance department (for fully insured plans), the Department of Labor EBSA (for self-funded employer plans), or for Medicare cases, the HHS Office of Inspector General. BillBusted's Full Audit maps out the right escalation route for your specific plan type and generates the escalation letters you'll need.

Upcoding and Medicare: Higher Stakes, More Options

For Medicare patients, upcoding has direct implications beyond a single bill. CMS's CERT (Comprehensive Error Rate Testing) program identified evaluation and management code errors — including upcoding — as a top driver of the 6.55% improper-payment rate in FY2025.

Medicare patients have several additional options when they suspect upcoding:

• Request a Medicare Summary Notice (MSN) — the Medicare equivalent of an EOB — which shows exactly what code was billed and what Medicare paid.
• Contact your State Health Insurance Assistance Program (SHIP) for free, local counseling.
• File a complaint with your Medicare Administrative Contractor (MAC).
• Report potential fraud to the HHS Office of Inspector General at 1-800-HHS-TIPS.

If you are on Medicare and received a hospital bill that looks like a Level 5 visit for a routine concern, comparing the MSN to your itemized bill — and then running both through BillBusted's free scan — is a reasonable first step before making any payment.