Upcoding is a form of healthcare fraud where a medical provider submits billing codes for more expensive services or more severe diagnoses than what was actually provided or documented. It inflates reimbursements from insurance companies, Medicare, and Medicaid, and it costs the U.S. healthcare system billions of dollars every year.
How Upcoding Works
Every medical service, from a routine office visit to a complex surgery, is assigned a standardized billing code. These codes determine how much an insurer pays the provider. Upcoding happens when a billing department selects a code that represents a higher level of complexity, a longer visit, or a more serious condition than what actually occurred. The provider then receives a larger payment than the service warranted.
The key distinction is between what happened in the exam room and what appears on the bill. If a doctor spends 15 minutes doing a simple medication check but the claim says it was a 60-minute face-to-face session, that’s upcoding. If a hospital admits a patient for a routine procedure but bills it at the highest severity level, that’s upcoding too.
Common Forms of Upcoding
Upcoding shows up in several predictable patterns across different healthcare settings:
- Inflated office visit codes. Evaluation and management (E/M) codes are ranked by complexity. A provider who always bills the highest-level visit code regardless of what the patient actually came in for is upcoding. An oncologist who defaults to the most complex visit code for every appointment, even when a patient presents with a straightforward issue, is a textbook example.
- Billing for longer visits than occurred. One psychiatrist was fined $400,000 and permanently excluded from Medicare and Medicaid after billing for 30- or 60-minute sessions when patients were only seen for 15 minutes each.
- Overstating hospital severity levels. Hospitals sometimes bill inpatient stays at the highest severity tier even though the patient’s care was routine.
- Billing for a higher-level provider. When a nurse practitioner or physician assistant provides care, the reimbursement rate is lower than for a physician. Submitting the claim as though a physician performed the service inflates the payment.
- More expensive equipment than supplied. Durable medical equipment companies may bill for a premium wheelchair or oxygen device while delivering a cheaper model.
- Misusing modifier codes. Modifier codes indicate that additional services were performed. Adding modifiers for services that were already covered under the standard visit code artificially raises the bill.
A related practice called “unbundling” or “fragmentation” works differently but achieves the same result. Instead of coding a group of related procedures under one bundled code (which has a set price), the provider bills each component separately. The total of the individual charges exceeds what the bundled code would have paid.
How Upcoding Affects Medicare Advantage
Upcoding has an outsized impact on Medicare Advantage (MA) plans, and the mechanism is worth understanding because it affects how much the federal government spends per enrollee. Medicare pays MA plans a monthly per-person payment that is adjusted based on how sick each enrollee is. Sicker patients generate higher “risk scores,” which translate directly into higher monthly payments.
When MA plans report diagnostic codes for more serious conditions than would have appeared on a traditional Medicare claim for the same patient, they inflate enrollee risk scores. An inflated risk score means Medicare sends a larger check for that enrollee every month. Research from USC Schaeffer found that this coding intensity varies widely across MA plans, meaning some plans upcode far more aggressively than others.
The Centers for Medicare and Medicaid Services (CMS) currently applies a uniform 5.9 percent reduction to MA risk scores to compensate for this higher coding intensity compared to traditional Medicare. But because the reduction is the same for every plan, it doesn’t penalize plans that upcode aggressively or reward those that code accurately. Plans with the worst upcoding behavior still come out ahead financially.
Legal Penalties for Upcoding
Upcoding violates the federal False Claims Act, which makes it illegal to submit claims for payment to Medicare or Medicaid that you know, or should know, are false or fraudulent. The civil penalties are steep: fines of up to three times the government’s loss, plus $11,000 per false claim filed. Because each individual service billed counts as a separate claim, fines accumulate rapidly. A provider who upcodes hundreds of patient visits over a few years can face penalties in the millions.
There is also a criminal version of the False Claims Act. Criminal penalties include imprisonment and criminal fines. In fiscal year 2024, the HHS Office of Inspector General reported 1,548 criminal and civil enforcement actions against individuals and entities suspected of targeting federal healthcare programs. The OIG’s investigations and audits that year resulted in over $7 billion in expected recoveries and receivables.
Even a single audit finding can reveal a pattern worth millions. In one case, Medicare found it had improperly paid hospitals an estimated $79 million for patients who received mechanical ventilation, partly because hospitals had incorrectly coded the procedures or selected the wrong diagnosis codes.
Upcoding vs. Legitimate Coding Optimization
Not every high-level billing code signals fraud. Providers are entitled to bill for the full complexity of the care they deliver, and good documentation practices help ensure that the code matches the actual work done. If a physician thoroughly evaluates a complex patient, documents every element of that visit in the medical record, and selects a code that accurately reflects that complexity, that’s appropriate billing.
The line is crossed when the code no longer aligns with the actual care provided. Upcoding is about the gap between the service a patient received and the service described on the claim. A practice that invests in better documentation to capture work that was already being done is optimizing legally. A practice that inflates codes beyond what the documentation supports is committing fraud.
How Patients Can Spot It
After you receive medical care, your insurer sends an Explanation of Benefits (EOB) that lists the services billed and what was paid. Comparing this to what actually happened during your visit is the simplest way to catch upcoding. A few things to look for:
Check whether the visit length or complexity described on the EOB matches your experience. If you had a 10-minute check-in but the bill describes a comprehensive evaluation, something may be off. Look for services or procedures you don’t recognize or don’t remember receiving. Watch for charges that suggest a physician provided your care when you only saw a nurse practitioner or physician assistant.
If something looks wrong, start by calling the provider’s billing department. Coding errors do happen, and many are corrected once flagged. If the provider can’t explain the discrepancy or won’t correct it, you can report suspected fraud to your insurance company or, for Medicare and Medicaid claims, to the HHS Office of Inspector General.