Table of Contents
Ready to See Results?
From strategy through execution, Atlantic Health Strategies integrates compliance, operations, and growth into durable, measurable results. Let’s put our expertise to work for your organization.
The Short Answer: Five Mistakes That Blow Up Behavioral Health Revenue
The five billing mistakes that most consistently trigger takebacks, denials, and False Claims Act exposure at behavioral health treatment centers are: (1) weak or missing documentation of medical necessity, (2) wrong CPT codes and time-based coding errors for psychotherapy and telehealth, (3) broken utilization management and prior authorization workflows, (4) credentialing and enrollment gaps that make otherwise clean claims unpayable, and (5) ignoring the 60-day overpayment rule when a problem surfaces.
None of this is theoretical. CMS reported the Medicare Fee-for-Service estimated improper payment rate at 6.55% for FY 2025, or $28.83 billion, and CMS itself said most improper payments occurred in situations where a reviewer could not determine if a payment was proper because of insufficient documentation from a state, provider, or the Part D Sponsor. On the commercial side, insurers reported receiving about 496 million claims in 2024, with 91% (451 million claims) filed for in-network services. Of these in-network claims, approximately 85 million were ultimately denied, resulting in an average in-network denial rate of 19%, per KFF’s analysis of federal Transparency in Coverage data.
If you run a residential program in Florida or an intensive outpatient program in Texas, those numbers are your reality, not somebody else’s. Below is what I actually see when we open the books during a turnaround or a payer audit at an AHS client, and what to do about each one.
Mistake 1: Documentation That Doesn't Support the Level of Care Billed
This is the mistake behind almost every extrapolated repayment demand I have watched land on a client’s desk in the last three years. The chart says one thing. The claim says another. The surveyor or SIU auditor pulls a sample and the whole thing unravels.
The scale is not hypothetical. In its nationwide psychotherapy audit, the HHS Office of Inspector General estimated that of the $1 billion that Medicare paid for psychotherapy services, providers received $580 million in improper payments for services that did not comply with Medicare requirements, consisting of $348 million for telehealth services and $232 million for non-telehealth services. The root cause OIG cited: for 84 of the 216 sampled enrollee days, providers met Medicare requirements. However, for 128 sampled enrollee days, providers did not meet these requirements (e.g., psychotherapy time was not documented).
As OIG’s auditors put it in the final report: “The deficiencies we identified in our audit occurred because CMS’s oversight was not adequate to prevent or detect payments for psychotherapy services, including telehealth services, that did not meet Medicare requirements and guidance.”
What that means for a behavioral health operator running PHP (ASAM Level 2.5, an outpatient level of care) or a residential program: your chart must document medical necessity at the level of care you are billing, session time when the code is time-based, and the ASAM Criteria 4th Edition dimensions supporting the placement. Not the summary. Not the treatment plan from three weeks ago. The note tied to that date of service.
Fix it with mock chart audits on a defined cadence, done by humans who understand the payer’s clinical policy bulletin and the ASAM criteria. Your clinical leadership and your utilization management team need to agree, in writing, on what “medical necessity documented” looks like for each level of care you operate.
Mistake 2: Wrong CPT Codes, Wrong Times, Wrong Modifiers
Time-based coding is where behavioral health billing quietly hemorrhages money. Psychotherapy CPTs hinge on documented minutes with the patient. If your note says “session held” without a start and stop time, the auditor treats the claim as unsupported.
The nationwide OIG data shows exactly how thin the margin of error is. In 54 sampled enrollee days, providers did not meet Medicare documentation and billing guidance, like forgetting provider signatures or not specifying whether services were telehealth or in-person care. Small errors, compounded across a full census, become extrapolated repayment demands.
Then there is the upcoding pattern payers actually look for. If your practice bills 90837 for the overwhelming majority of psychotherapy claims, expect scrutiny. Payer SIU teams and Medicare contractors both benchmark 90837-to-90834 ratios and flag outliers. Telehealth POS codes, add-on codes, group vs. Individual distinctions. Pick your poison. The auditor will find it if your charge master, your EMR templates, and your clinicians’ documentation are not aligned.
OIG’s fix, in its own words: CMS should edit systems to prevent payments for improperly billed services and improve education for providers about billing requirements. Payers are building those edits now. Assume every claim you send is being scored against a pattern.
Mistake 3: Broken Utilization Management and Prior Authorization
You can have the cleanest chart in Florida and still not get paid if UM was not done right. Authorizations expire. Concurrent reviews get missed. Continued stay criteria never get submitted. The claim goes out, the denial comes back, and now your AR team is chasing a level of care that clinically ended two weeks ago.
The macro numbers back this up. The Experian Health 2025 State of Claims survey found that 41 percent of providers now face denial rates of 10 percent or higher, an issue that has grown each year since the first survey in 2022. On the marketplace side, insurers of qualified health plans sold on HealthCare.gov denied 19% of in-network claims in 2024 and 37% of out-of-network claims for a combined average of 20% of all claims. Among the denial reasons that were reported, nine percent of denials were for lack of prior authorization or referral, and only 5% of denials were for lack of medical necessity.
Payer readiness is not a one-time exercise before you go live with a new contract. It is a weekly discipline. Your UM team needs a running dashboard of auth expirations, a scripted concurrent review process built around the ASAM criteria, and a hard escalation path when a payer’s medical director denies a continued stay. Your clinical leadership owns this, not a biller sitting in another state.
Mistakes 4 and 5: Credentialing Gaps, and Ignoring the 60-Day Rule
Mistake 4: billing under a provider who is not credentialed with the payer, whose enrollment lapsed, or whose supervision documentation does not tie back to the claim line. This is the most preventable line item on the list and the one I see missed most often at multi-site operators mid-scale. Rendering provider mismatch. NPI not linked to the group. Re-credentialing packet sitting in someone’s inbox for 90 days. Every one of those claims is a takeback waiting to happen.
Mistake 5: when you find the problem, do not sit on it. As Bass, Berry & Sims summarized, the rule changes when an overpayment is “identified,” replacing the “reasonable diligence” standard with the False Claims Act definition of “knowingly,” and removing the quantification construct from the regulations that apply to Parts A and B providers and suppliers. The final rule was published as part of the 2025 Medicare Physician Fee Schedule Final Rule and takes effect January 1, 2025.
The rule does give you a runway. For the Parts A and B regulations, a new provision suspends the obligation to report and return overpayments for up to 180 days if, after identifying an overpayment, the provider conducts a timely, good-faith investigation to determine whether related overpayments exist. Practically, as Duane Morris explained, the 60-day return period now begins once an overpayment of a claim is identified (by actual knowledge, willful blindness or reckless disregard of information), even if the provider has not yet completed an investigation that would quantify the amount of the overpayment.
The operators who get destroyed by this rule are the ones who identify a coding problem in a mock audit, decide to “look into it,” and then let six months pass without documentation of what they did. Build a compliance program that treats an internal audit finding as a formal trigger. Log the date. Open the investigation file. Quantify. Return. That is what protects the enterprise value you spent years building in Florida, Texas, or wherever you operate.
Frequently asked questions
What is the biggest single driver of behavioral health billing takebacks?
Insufficient documentation. CMS reported the FY 2025 Medicare FFS improper payment rate at 6.55% ($28.83 billion) and noted that most improper payments occurred where reviewers could not determine if payment was proper because of insufficient documentation from a state, provider, or the Part D Sponsor. OIG’s nationwide psychotherapy audit tied $580 million in estimated improper Medicare payments to missing session times and other documentation gaps across 128 of 216 sampled enrollee days. Fix documentation and you eliminate the majority of your audit exposure.
How fast do we have to return a Medicare or Medicaid overpayment once we find one?
Under the revised CMS 60-Day Rule effective January 1, 2025, you must report and return an identified overpayment within 60 days of identification, using the False Claims Act “knowingly” standard. The updated rule redefines “identified” to align with the FCA’s standard of “knowingly,” which includes actual knowledge, reckless disregard, or deliberate ignorance of an overpayment. CMS has clarified that organizations have up to 180 days to conduct a good faith investigation to determine whether related overpayments that arise from the same or similar cause or reason as the initially identified overpayment exist. The 60-day return period now begins once an overpayment of a claim is identified, even if the provider has not yet completed an investigation that would quantify the amount. Missing that window can trigger False Claims Act liability.
What denial rate should a behavioral health operator expect?
Experian Health’s 2025 State of Claims survey found that 41 percent of providers now face denial rates of 10 percent or higher, an issue that has grown each year since the first survey in 2022. KFF’s analysis of 2024 CMS transparency data shows HealthCare.gov insurers denied 19% of in-network claims and 37% of out-of-network claims for a combined average of 20% of all claims. Behavioral health typically runs higher than the all-payer average because of medical necessity scrutiny and prior authorization complexity, so an operator seeing sustained initial denials above 12% should treat that as an operational alarm, not a cost of doing business.
Do we need mock chart audits if our EMR has built-in compliance checks?
Yes. Software catches formatting and coding logic errors. It does not read a progress note and tell you whether the content supports medical necessity at the residential or PHP (ASAM Level 2.5) level, whether session time justifies 90837 over 90834, or whether the rendering provider is properly credentialed with that specific payer. Human chart audits, run by people who understand payer clinical policies and the ASAM Criteria 4th Edition, catch the failures that produce extrapolated repayment demands, the same category of failure OIG flagged when providers missed documentation requirements on 128 of 216 sampled enrollee days in the nationwide psychotherapy audit.
References
- CMS, Fiscal Year 2025 Improper Payments Fact Sheet
- HHS Office of Inspector General, Medicare Improperly Paid Providers for Some Psychotherapy Services (A-09-21-03021)
- KFF, Claims Denials and Appeals in ACA Marketplace Plans in 2024
- Experian Health, 2025 State of Claims Survey
- Bass, Berry & Sims, A New Year, A New Overpayment Rule: CMS Revises the 60-Day Rule
- Duane Morris, CMS Issues Final Rule on Returning Medicare and Medicaid Overpayments
- CMS, Comprehensive Error Rate Testing (CERT) Program