Upcoding and Downcoding in Medical Billing: Meaning, Examples, Penalties and Prevention

Upcoding is billing a higher-level or more expensive code than the documented service supports, for example billing a level 5 office visit (99215) when the note supports level 3 (99213).

Downcoding is the opposite: billing a lower-level code than the service supports, which costs the provider revenue. Upcoding is a compliance violation that can lead to False Claims Act penalties of $14,308 to $28,619 per claim. Downcoding is legal, but it is still a coding error and quietly drains revenue.

Both problems start the same way, with codes that don’t match the documentation. At AffinityCore, our certified coders audit E/M levels, procedure codes and diagnosis specificity every day. This guide explains what upcoding and downcoding mean, shows real examples, sets out the penalties, and gives a step-by-step plan to prevent both.

What Is Upcoding in Medical Billing?

Upcoding means assigning a procedure or diagnosis code that represents a more complex, more severe or more expensive service than the one actually performed and documented. The result is a higher payment than the provider is entitled to. In healthcare, upcoding is treated as a form of billing fraud when it is knowing or reckless, and as an overpayment that must be repaid even when it is accidental.

Upcoding medical definition

The medical definition of upcoding is simple: the code on the claim is higher than the care in the chart. Payers, auditors and the Office of Inspector General (OIG) judge a claim only by the documentation. If the note doesn’t support the code, the claim is upcoded, however much work the provider believes they did.

What is overcoding?

Overcoding is often used as another word for upcoding. It also covers adding codes the record doesn’t support, such as an extra diagnosis, an unneeded modifier or a separately billed service that should be bundled. Upcoding raises the level of a code; overcoding adds more codes than the visit justifies. Both inflate the claim.

Examples of upcoding in healthcare

Setting	What was documented	What was billed (upcoded)
Office E/M visit	Low medical decision making, stable condition (99213)	99214 or 99215
New vs established patient	Established patient follow-up	New patient code (99203–99205)
Hospital inpatient	Diagnosis with no complication documented	A CC or MCC diagnosis that moves the stay into a higher-paying DRG
Ambulance	Basic life support (BLS) transport	Advanced life support (ALS)
Psychotherapy	38-minute session (90834)	60-minute session (90837)
Modifier misuse	Routine visit on the same day as a minor procedure	E/M with modifier 25 and no separately identifiable work

E/M visits are the most common upcoding target, because the difference between levels depends on medical decision making or total time, both of which have to be clearly documented.

What Is Downcoding in Medical Billing?

Downcoding means billing a lower-level or less expensive code than the documented service supports. The term covers two different situations, and both cost the practice money.

1. Provider downcoding (undercoding)

The provider or coder chooses a lower code than the chart supports, usually out of fear of an audit, uncertainty about E/M rules, or habit. Examples:

• Billing 99213 when the note supports 99214 moderate medical decision making
• Leaving off a billable add-on code or a separately payable procedure
• Coding an unspecified diagnosis when the note supports a more specific one, which can lower risk-adjusted payments

Undercoding isn’t fraud, but it’s still inaccurate coding. It lowers revenue, understates how sick your patients are in quality and risk-adjustment data, and can make your coding pattern look unusual to payers.

2. Payer downcoding

Here the insurance company lowers the code after the claim is submitted, paying a level 3 visit when you billed level 4, for example. Several large commercial payers now run automated “E/M coding accuracy” policies that review level 4 and 5 visits and pay them at a lower level unless documentation supports the original code.

If a payer downcodes your claim, check the remittance for the adjustment reason, compare it with the note, and appeal with the documentation when the original code was correct.

Upcoding vs Downcoding: Key Differences

Factor	Upcoding	Downcoding
What it means	Code is higher than the documentation supports	Code is lower than the documentation supports
Effect on payment	Overpayment to the provider	Underpayment to the provider
Who does it	Provider or coder	Provider or coder (undercoding), or the payer after submission
Legal risk	High: False Claims Act, civil penalties, exclusion, possible criminal charges	Low legal risk, but still inaccurate coding
Financial risk	Repayment, penalties, extrapolated audit recoupments	Lost revenue on every affected claim
Typical cause	Template-driven notes, pressure to raise revenue, misunderstanding E/M rules	Fear of audits, low confidence in E/M rules, payer policies
Fix	Code to the documentation; audit and refund overpayments	Code to the documentation; appeal payer downcoding

The fix is the same in both columns: code exactly what the documentation supports, no higher and no lower.

What Can Upcoding Result In? Laws and Penalties

Upcoding can result in repayment demands, civil penalties of thousands of dollars per claim, exclusion from Medicare and Medicaid, and, in serious cases, criminal prosecution. Even accidental upcoding creates an overpayment that must be returned.

Consequence	What it involves
False Claims Act (FCA) liability	Civil penalties of $14,308 to $28,619 per false claim (the DOJ’s latest inflation adjustment, effective July 3, 2025), plus up to three times the government’s damages
Civil Monetary Penalties (CMP)	OIG can impose per-claim penalties and assessments for claims the provider knew or should have known were false
Exclusion	OIG can bar the provider from billing Medicare, Medicaid and other federal health programs
Criminal charges	Health care fraud under 18 U.S.C. § 1347 carries up to 10 years in prison
Audits and recoupment	RAC, UPIC, TPE and commercial payer audits, often extrapolated from a sample to the whole claim population
Payer and reputational damage	Prepayment review, terminated network contracts, loss of patient trust

Accidental upcoding still has to be repaid

Under the federal 60-day overpayment rule, a provider must report and return a Medicare or Medicaid overpayment within 60 days of identifying it. Keeping a known overpayment past that deadline can itself become a False Claims Act violation. That is why regular coding audits matter: they find errors while they are still a refund, not a fraud case.

Whistleblowers drive many upcoding cases

Many FCA cases start with a qui tam lawsuit filed by an employee, such as a coder, biller or nurse. Whistleblowers can receive 15% to 30% of the government’s recovery, so internal coding problems rarely stay internal.

Why Do Upcoding and Downcoding Happen?

Most coding errors aren’t deliberate. They come from gaps in process:

• EHR templates and copy-forward notes fill in exam and history detail that wasn’t actually done, which pushes E/M levels up.
• E/M rule confusion: since 2021 (2023 for hospital and other settings), most E/M levels are chosen by medical decision making or total time, not the old bullet-point counts. Many providers still code by habit.
• Revenue pressure to hit productivity or RVU targets.
• Audit fear, which leads providers to code everything at level 3 “to be safe” and causes downcoding.
• No regular audits, so the same error repeats on hundreds of claims before anyone notices.

How to Prevent Upcoding and Downcoding

1. Code to the documentation, every time. Choose the E/M level by MDM or total time as the note supports, not by visit length or habit.
2. Train providers on current E/M rules at least once a year, and whenever CPT or CMS guidance changes.
3. Turn off auto-populated EHR text that adds exam or review-of-systems detail the provider didn’t perform.
4. Use certified coders (CPC, CCS) to review high-risk codes before claims go out: level 4 and 5 visits, modifier 25, high-value procedures.
5. Run regular internal audits. Review a sample of claims per provider each quarter, and compare your E/M distribution with national benchmarks for your specialty.
6. Refund overpayments within 60 days of identifying them, and document the correction.
7. Appeal payer downcoding when your documentation supports the original code.
8. Keep a written compliance program following OIG guidance: policies, training, audits and a way for staff to report concerns.

How AffinityCore Keeps Your Coding Accurate and Compliant

AffinityCore protects practices from both sides of the coding problem: the compliance risk of upcoding and the lost revenue of downcoding.

• Certified medical coding: AAPC-certified coders assign E/M levels, CPT, HCPCS and ICD-10 codes exactly as the documentation supports, no higher and no lower.
• Medical billing audits: we review your E/M distribution against specialty benchmarks and flag both upcoded and undercoded claims, provider by provider.
• Documentation feedback: providers get specific, practical notes on what the chart needs to support the level they intended to bill.
• Denial management: payer downcoding is appealed with the note and the payer’s own policy language.
• Overpayment support: when an audit finds an error, we help you quantify and refund it correctly within the 60-day window.

Frequently Asked Questions

What is upcoding in medical billing?

Upcoding is billing a higher-level or more expensive code than the documented service supports, such as billing 99215 for a visit documented at the 99213 level. It produces an overpayment and can violate the False Claims Act.

What is downcoding in medical billing?

Downcoding is billing a lower-level code than the documentation supports. Providers do it out of caution or habit, and payers do it when they reduce a submitted code. Either way, the practice is paid less than it earned.

Is upcoding illegal?

Knowing or reckless upcoding is illegal under the False Claims Act and can bring civil penalties, exclusion and criminal charges. Accidental upcoding isn’t fraud, but the overpayment must still be repaid within 60 days of being identified.

What can upcoding result in?

Upcoding can result in repayment demands, False Claims Act penalties of $14,308 to $28,619 per claim plus triple damages, OIG civil monetary penalties, exclusion from Medicare and Medicaid, and up to 10 years in prison for criminal fraud.

What is the difference between upcoding and overcoding?

Upcoding raises a code to a higher level than documented. Overcoding adds more codes than the record supports, such as extra diagnoses or unbundled services. The terms are often used interchangeably, and both inflate the claim.

How can practices prevent upcoding and downcoding?

Code strictly to the documentation, train providers on current E/M rules, limit auto-filled EHR text, have certified coders review high-risk claims, run quarterly audits against specialty benchmarks, and refund any overpayments promptly.