Most Healthcare Audit Exposure Doesn't Start With a Coding Error. It Starts With a Documentation Gap.

Most of what gets called a coding problem is not a coding problem. It is a documentation problem that surfaces in the coding function – months after the clinical encounter, long after the physician has moved on, usually right before an audit.

The care was delivered. The code was applied. But the documentation does not prove it well enough to survive scrutiny.

CMS's FY2025 Improper Payments Fact Sheet puts the scale into plain language [1]. For Medicaid, 77.17% of $37.39 billion in improper payments came from insufficient documentation. For CHIP, 56.07% of $1.37 billion. For Medicare Advantage, CMS found most Part C overpayments were attributable to documentation failing to substantiate the diagnosis data submitted for payment. And for Medicare FFS – an improper payment rate of 6.55%, representing $28.83 billion – CMS identifies insufficient documentation as a primary cause category within the program. Across every major federal healthcare program, the same finding surfaces. The dominant driver of improper payments is not fraud. It is documentation.

The OIG's 2026 audit campaign confirms what happens when this goes unaddressed. Four coordinated Medicare Advantage coding compliance audits published in 2026 – finding the majority of sampled codes unsupported by medical records in every one. The June 2026 acute stroke finding: 97 of 97 sampled codes unsupported, $462 million in estimated overpayments [2]. Not coding errors. Documentation that did not hold up.

At the same time, HFMA reports that provider denial rates averaged nearly 12% in 2025, with AI-enabled payer adjudication systems now automatically flagging documentation-code inconsistencies that previously passed through manual review [3]. The window between submitting a claim and having a gap identified has never been narrower.

Documentation-to-code risk is created at the point of care and discovered at the point of audit. The gap in timing is what makes it so hard to catch – and so expensive when it surfaces.

A physician documents a condition. The note looks complete. The coder works with what exists. The claim submits and is paid. Then weeks or months later, a payer review or federal audit flags the documentation as insufficient to support the coded service. The care happened. The revenue was earned. The documentation does not prove it.

Common sources across medical coding services engagements:

• Conditions named but not linked to the current encounter
• Severity and specificity absent from the clinical narrative
• Templated notes that look complete but do not reflect the individual visit
• Delayed record completion after the encounter has already been coded
• Specialty-specific documentation requirements not consistently applied across providers

Generic documentation guidance breaks down at the specialty level. The specific risk – and the specific fix – differs by clinical setting. Medical coding services that apply uniform standards across all specialties miss the nuances that generate the most concentrated audit exposure.

Healthcare organizations evaluating medical coding companies should verify specialty-specific documentation expertise across every service line they operate – not general coding credentials that treat all clinical settings identically.

• Specificity standards by specialty: not generic documentation checklists. What orthopedics requires from a clinical note is not what emergency medicine requires. Both need different things from what oncology or pathology require.
• Pre-submission validation: confirming documentation supports assigned codes before the claim leaves the billing workflow. This is where medical coding services create the most measurable financial value – catching the gap before it becomes a denial, an audit selection, or a repayment obligation.
• Concurrent coding review: catching gaps while the encounter is recent and the provider is accessible. Not after the claim has aged into an accounts receivable problem with no practical correction path.
• Provider education that is specific and ongoing: not annual compliance training. Direct, specialty-specific feedback to individual physicians about the documentation patterns generating the most audit exposure in their own patient population.
• Audit-ready documentation practices built in from the start: not retrofitted after a review is announced. Records that hold up to external scrutiny because they were built to that standard at the point of care.
• Denial and audit feedback loops that close in real time: findings go back into documentation workflows immediately, not into quarterly compliance reports. Organizations that do this consistently reduce repeat findings. Those that don't address the same gaps cycle after cycle.

Most medical coding companies measure performance through throughput – volume, turnaround time, first-pass acceptance rates. Those metrics matter for daily operations. They do not tell you where your documentation is creating risk you have not found yet.

3Gen Consulting approaches documentation-to-code integrity through three connected capabilities that most medical coding solutions do not combine:

• Certified coding expertise across 40+ specialties. Not generalist coders applying the same approach to every service line. Specialists who understand what adequate documentation looks like in cardiology, orthopedics, pathology, and emergency medicine – and who flag gaps before claims submit rather than after denials arrive.
• Structured audit programs built for the current enforcement environment. Concurrent internal review designed around the code categories and documentation patterns the OIG and CMS are actively scrutinizing in 2026 — not a generic annual coding audit reviewing last year's claims for this year's compliance environment.
• Provider education that changes documentation behavior. Specialty-specific feedback loops connecting coding findings directly to the physicians generating the documentation. Not compliance memos. Targeted, practical guidance on the most common documentation gaps in their patient population and what correcting them means for reimbursement and audit standing.

The organizations closing the documentation-to-code gap are not those with the most sophisticated technology. They are those where certified coders, concurrent audit review, and provider education operate as a connected function – not three departments that share a problem but not a workflow.

For a closer look at how documentation quality connects to underpayment risk specifically, see Why Paid Isn't the Same as Paid Correctly – Underpayment and Revenue Leakage in Medical Billing and Coding.

CMS says these findings are "generally not indicative of fraud or abuse." [1]

That is the most important sentence in this entire blog for anyone in a revenue cycle leadership role. Organizations are not losing revenue because of wrongdoing. They are losing it because their documentation does not fully support the care they delivered – and they typically do not know where the gaps are until an auditor finds them first.

When documentation-to-code integrity is working, the outcomes are direct: fewer denials, less retrospective audit exposure, more predictable reimbursement, and revenue legitimately earned from care delivered actually collected. The AMA added 288 new and revised CPT codes for 2026 – each with its own documentation requirements [4]. Payer adjudication systems flag inconsistencies automatically. The documentation standard is not getting easier to meet.

The organizations positioned for this environment are those that started closing the gap before the scrutiny arrived – not those scrambling to understand their exposure after the first audit request.

If your organization is experiencing denials or audit findings that trace back to documentation rather than coding errors, the gap is upstream of your billing department. Connect with 3Gen's medical coding specialists to assess your documentation-to-code alignment.