Medical bill auditor (itemized bill, errors, negotiation)

01Problem

Patients are billed from a chargemaster they never agreed to, by hospitals and groups that hold the codes, the payer contracts, and the collection clock. The Commonwealth Fund (Sept. 17, 2026) found 32% of working-age privately insured adults paying medical bills or debt over time; among those with debt, 46% owed $2,000+ and 64% of the debt was hospital-related. KFF (Feb. 12, 2024) put U.S. medical debt at ≥$220 billion, with 14 million adults owing more than $1,000. An unaudited bill becomes collections, a lawsuit, or a closed charity-care window.

02Intake

Itemized statement with CPT/HCPCS, modifiers, units, NDCs, revenue codes, and dates of service (not a one-line “balance due”).
UB-04 / CMS-1450 (facility) and CMS-1500 (professional) claim images.
Every EOB / remittance, including CARC/RARC denial codes.
Plan type (fully insured, self-funded ERISA, Marketplace, Medicaid, Medicare, uninsured) and in-network status of the facility and each clinician.
Good Faith Estimate (uninsured/self-pay) or No Surprises Act notice-and-consent form, if any.
Hospital FAP, plain-language summary, AGB percentage, and application (501(c)(3) hospitals).
Household size and income proof for FAP / Medicaid.
Account numbers, first post-discharge bill date, collector name, any 30-day ECA warning.
Medical record (HIPAA designated-record-set request if missing) and credit reports if a medical collection was furnished.

03Playbook

01
Do not pay a lump sum and do not card the bill. CFPB Ask-CFPB (reviewed Oct. 28, 2026): a card converts medical debt into ordinary credit and drops FAP/NSA/state defenses. Calendar PPDR 120 days from the initial self-pay bill; FAP 240 days from the first post-discharge bill; plan appeal 180 days from the EOB; HIPAA records 30 days.
02
Demand documents by name, in writing, to a confirmed address. Hospital: itemized statement with CPT/HCPCS, units, modifiers, NDCs, revenue codes, plus the UB-04. Doctor: the claim sent to the plan, with CPT codes, plus the CMS-1500. 45 CFR 164.524: 30-day access (one 30-day written extension); no search/retrieval fee; unpaid bills cannot block records. Illinois 210 ILCS 88 requires notice that an itemized bill is available on request.
03
Triage the legal box before negotiating. Insured emergency or OON ancillary at an in-network facility → No Surprises Act (45 CFR 149.110 / 149.120 / 149.420): in-network cost-sharing; notice-and-consent cannot waive ancillary. Air ambulance in (149.130); ground ambulance out. Uninsured GFE → PPDR if billed $400+ over GFE within 120 days, $25 (https://nsa-idr.cms.gov/billdisputes/s/). Nonprofit → 501(r) FAP. Possible Medicaid → apply now (Skill 9). QMB → no Medicare cost-sharing bills.
04
Pull every EOB. Match network flags, authorization, patient-responsibility vs. contractual write-off. Chargemaster remainder after a contracted allowed amount is balance billing (and an NSA violation if Part 149 applies). Never send the patient into IDR (provider vs. plan). Patient path: CMS No Surprises complaint + state DOI (fully insured) or DOL EBSA (self-funded ERISA).
05
Audit codes against the record. Duplicate CPT; NCCI PTP unbundling (indicator 0 = never); Medically Unlikely Edit caps; drug units vs. NDC; canceled labs on the UB-04; observation vs. inpatient; ED 99281–99285 vs. complaint; floor-stock 027x; double-billed implant. NCCI Manual (Jan. 1, 2026): https://www.cms.gov/medicare/coding-billing/national-correct-coding-initiative-ncci-edits/medicare-ncci-policy-manual.
06
Price-check the hospital file. Fetch https://<hospital-domain>/cms-hpt.txt (required since Jan. 1, 2024): gross, discounted cash, payer-specific, 2026 median/10th/90th allowed. Compare Medicare Procedure Price Lookup and FAIR Health. BillMender Oct. 2026 private MRF (482 hospitals): ER 99283 list $1,285 vs. median allowed $288 (illustration).
07
Apply FAP and Medicaid before “prompt-pay” or “cash.” FAP-eligible patients at 501(c)(3) hospitals cannot be charged more than AGB for emergency/medically necessary care (26 CFR 1.501(r)-5). Off-chargemaster “cash” often still exceeds AGB. Apply Medicaid in 2026 while retroactivity is three months (42 CFR 435.915); P.L. 119-21 §71112 cuts that on Jan. 1, 2027 (Skill 9).
08
File rights processes in parallel: NSA complaint, plan appeal, FAP, and (if self-pay and $400 over GFE) PPDR.
09
Negotiate only after four numbers: corrected itemized total, MRF cash, AGB, Medicare allowed. Offer the lesser as payment in full with collector recall and CRA-deletion request. Prompt-pay is hospital policy, not federal law; “$4,000 to $400” is anecdote.
10
If a collector is involved: FDCPA validation (15 U.S.C. 1692g / 12 CFR 1006.34) inside the printed 30-day window and a FAP application to the hospital. 501(c)(3) hospitals own their collectors’ ECAs (26 CFR 1.501(r)-6). Cease-communication does not stop a lawsuit (15 U.S.C. 1692c(c)).
11
If sued: answer. Raise FAP, NSA, missing itemization, FDCPA, state fair-billing. NY and MD restrict medical-debt wage garnishment and/or home liens; PA exempts wages in the employer’s hands (42 Pa.C.S. §8127). Default is how these cases are won against the patient.
12
Close in one written settlement: amount, “payment in full,” no interest, collector recall, CRA deletion, lien/garnishment reversal, and refund of amounts paid above FAP/AGB if more than $5.

04Checklists