Authorization is one of the most important checkpoints between a provider’s treatment plan and successful reimbursement. A medically necessary service can still face delayed payment or denial when the payer requires approval before treatment and that approval is missing, expired, incomplete, or does not match the services ultimately billed.
For physicians, hospitals, clinics, and other healthcare providers, understanding authorization in medical billing is therefore more than an administrative concern. It directly affects scheduling, treatment continuity, claim acceptance, patient communication, and revenue.
The challenge is that authorization rules are not uniform. They can vary according to the patient’s insurance plan, payer, network status, diagnosis, CPT or HCPCS code, place of service, requested units, treatment frequency, and clinical circumstances. A service that requires prior authorization under one plan may not require it under another.
Organizations such as Vermont Medical Billing may help practices manage these payer-specific requirements by verifying benefits, identifying authorization requirements, tracking approvals, and ensuring that claim information matches the authorization obtained.
This guide explains what authorization means. It covers the types of authorization. It shows how authorization and retro authorization work. The guide includes CPT codes, HCPCS codes and ICD-10-CM codes. It discusses modifiers. It outlines documentation requirements. It lists denial codes. It shares strategies that providers can use. These strategies help reduce claim problems related to authorization.
What Is Authorization in Medical Billing?
When a provider asks about authorization, in billing I would say that authorization is the approval that a patients insurance company gives for specific health services, procedures, medicines, equipment or treatments. Authorization is the step that lets a provider know the payer will cover the cost. Without authorization the patient might face a surprise bill.
Depending on the payer, the process may also be called:
- Prior authorization
- Preauthorization
- Precertification
- Pre-approval
- Utilization review
- Advance authorization
The payer reviews the requested service against its coverage and medical-necessity criteria before deciding whether the service satisfies applicable requirements.
Authorization does not automatically guarantee payment.
Even after a payer approves a service, the resulting claim may still be denied because of issues such as:
- Inactive patient coverage
- Incorrect CPT or HCPCS coding
- Incorrect diagnosis coding
- Provider network restrictions
- Incorrect place of service
- Authorization date mismatch
- Exceeded approved units
- Missing referral
- Coordination-of-benefits problems
- Failure to satisfy another coverage requirement
Authorization should therefore be treated as one part of the complete reimbursement process rather than as a promise that the claim will be paid.
Why Authorization Is Important in Medical Billing
Healthcare payers use authorization to check if certain services meet the plans benefit, coverage and medical-necessity rules before those services are given.
For a provider doing the authorization process correctly can help avoid problems later.
Imagine a patient who is going to have an MRI. The doctor may have written a reason, for the test. If the patients health insurance requires approval before the scan and the test is done without that approval the insurance company might refuse to pay for it.
The same issue can happen with surgery, injections, physical therapy, specialty medication, durable medical equipment, advanced diagnostic imaging and many other services.
A strong authorization workflow helps providers confirm not only whether approval is required but also:
- Which procedure was approved
- Which diagnosis supported the request
- How many visits or units were authorized
- Which provider or facility is authorized
- The effective date
- The expiration date
- Whether a referral is also necessary
- Whether additional clinical records are required
Small mismatches in any of these areas can lead to prior authorization denials.
Types of Authorization in Medical Billing
There are several types of authorization in medical billing, and the terminology used by payers is not always consistent.
Understanding the major categories can help providers determine the correct process before delivering care.
1. Prior Authorization
Prior authorization is approval requested before a healthcare service, procedure, medication, or item is provided.
The provider generally submits information explaining:
- The patient’s condition
- The requested treatment
- The diagnosis
- The CPT or HCPCS code
- Previous treatments
- Clinical findings
- Medical necessity
- Requested treatment frequency or units
The insurance company then determines whether the request meets its applicable criteria.
Prior authorization commonly applies to services such as advanced imaging, selected surgeries, specialty drugs, DME, therapy services, and certain outpatient procedures.
However, requirements are payer- and plan-specific.
2. Pre Authorization in Medical Billing
Pre authorization in medical billing usually refers to essentially the same process as prior authorization.
A payer requires the provider to obtain approval before performing a particular service.
Some insurers use the term preauthorization, while others use prior authorization or precertification.
Providers should avoid assuming that these terms represent different coverage guarantees. The actual requirement must be verified against the patient’s specific benefit plan.
3. Precertification
Precertification is another term frequently used by commercial health plans.
It often involves notifying the payer and demonstrating that a proposed procedure or admission meets applicable medical-necessity requirements.
Precertification may be required for:
- Hospital admissions
- Elective surgeries
- Advanced imaging
- Rehabilitation
- Behavioral health treatment
- Specialty procedures
Because terminology varies, a provider should verify exactly what the payer expects rather than relying on the terminology alone.
4. Referral Authorization
Some health plans, particularly certain managed-care arrangements, may require a referral from the patient’s primary care provider before specialty services are covered.
For example, a patient may require authorization or a valid referral before seeing:
- An orthopedic surgeon
- Cardiologist
- Neurologist
- Dermatologist
- Physical therapist
- Other specialist
Referral requirements should be checked separately from procedural prior authorization.
A patient can have a valid specialist referral but still require authorization for a procedure subsequently ordered by that specialist.
5. Concurrent Authorization
Concurrent authorization occurs while treatment is already in progress.
It is especially relevant when continued treatment depends on the payer approving additional days, visits, or units.
Examples may include:
- Inpatient hospitalization
- Rehabilitation
- Skilled nursing services
- Behavioral health treatment
- Extended therapy
- Home healthcare
The provider may have initial authorization for a limited period and need additional approval if treatment extends beyond that period.
6. Retro Authorization
Retro authorization, sometimes called retrospective authorization, is requested after the service has already been performed.
A payer may permit it under limited circumstances, but providers should never assume that retroactive approval will be available.
Common circumstances might include:
- Emergency treatment
- Incorrect insurance information supplied before treatment
- Coverage identified after service
- Administrative processing problems
- Situations specifically permitted under payer policy
Whether retrospective approval is accepted depends on the payer and plan.
Prior and Retro Authorization in Medical Billing
Understanding prior and retro authorization in medical billing is particularly important because the timing of the request can determine whether payment is available.
Prior authorization
Authorization is requested and obtained before the service takes place.
Typical sequence:
Patient scheduled → benefits verified → authorization requirement checked → clinical documentation submitted → payer decision received → service performed → claim submitted.
Retro authorization
The service has already been performed and the provider requests authorization afterward.
Typical sequence:
Service performed → missing authorization discovered → payer contacted → retro authorization requested when permitted → payer reviews request → corrected claim or appeal submitted if appropriate.
Prior authorization is generally the safer process because it allows the provider to resolve coverage issues before delivering a potentially expensive service.
Retro authorization should generally be treated as an exception rather than a standard workflow.
Authorization vs. Referral vs. Eligibility Verification
These processes are related but they are not interchangeable.
| Process | Primary Purpose |
|---|---|
| Eligibility verification | Confirms whether the patient’s insurance coverage is active |
| Benefits verification | Determines whether a particular category of service is covered |
| Referral | Directs the patient to another provider or specialist when required |
| Prior authorization | Obtains payer approval for a specific service or treatment |
| Medical necessity review | Determines whether clinical circumstances satisfy coverage criteria |
For example, a provider may verify that a patient’s insurance is active and that MRI services are part of the benefit package. The plan may still require authorization before the MRI is performed.
Verifying eligibility alone therefore does not confirm that authorization has been obtained.
How the Authorization Process Works
A well-controlled authorization process typically begins before the patient reaches the date of service.
Step 1: Verify Patient Eligibility
Confirm:
- Patient name
- Member ID
- Insurance payer
- Plan type
- Effective coverage dates
- Primary and secondary insurance
- Provider network status
Outdated insurance information is a common source of authorization problems.
Step 2: Verify Benefits
Determine whether the planned service is covered under the patient’s benefit package.
Benefit verification and authorization should be treated separately.
A covered benefit can still require authorization.
Step 3: Determine Whether Authorization Is Required
Check the payer’s portal, provider manual, authorization tool, or appropriate payer channel.
Verification should generally consider:
- CPT or HCPCS code
- Diagnosis
- Provider
- Facility
- Place of service
- Number of units
- Treatment frequency
- Patient plan
Do not rely entirely on historical authorization requirements because payer policies can change.
Step 4: Gather Clinical Documentation
The payer may require records showing why the requested service is medically necessary.
Depending on the service, documentation may include:
- History and physical
- Progress notes
- Diagnostic findings
- Imaging results
- Laboratory results
- Failed conservative treatments
- Medication history
- Treatment plan
- Operative plan
- Specialist recommendations
Step 5: Submit the Authorization Request
Depending on the payer, authorization may be submitted through:
- Payer portal
- Electronic prior authorization platform
- Telephone
- Fax
- Clearinghouse
- Integrated EHR workflow
Record the payer’s reference number even when the request has not yet been approved.
Step 6: Track the Request
A submitted authorization should not automatically be treated as approved.
Track the request until there is a documented determination.
Possible statuses include:
- Pending
- Approved
- Partially approved
- Additional information required
- Denied
- Cancelled
- Expired
Step 7: Verify the Approval Details
When authorization is approved, compare the approval carefully with the planned service.
Check:
- Authorization number
- Approved CPT/HCPCS code
- Approved units
- Approved date range
- Rendering provider
- Facility
- Place of service
- Diagnosis when applicable
A payer may approve a service but restrict the number of treatments or the dates during which it can be provided.
Step 8: Perform the Service and Submit the Claim
Before claim submission, compare what was actually performed with what was authorized.
A code change during treatment may require the authorization to be updated.
CPT and HCPCS Codes Related to Authorization
There is no universal CPT code for prior authorization.
CPT and HCPCS codes describe the services, procedures, drugs, equipment, or supplies for which authorization may be required.
Whether a code requires authorization depends on payer policy.
Examples of services that may be subject to authorization include:
| Service | Example CPT/HCPCS Code | Description |
|---|---|---|
| Brain MRI | 70551 | MRI brain without contrast |
| CT abdomen/pelvis | 74177 | CT abdomen and pelvis with contrast |
| PET/CT | 78815 | PET/CT imaging |
| Polysomnography | 95810 | Overnight sleep study |
| CPAP device | E0601 | Continuous positive airway pressure device |
| Botulinum toxin | J0585 | OnabotulinumtoxinA |
| Spinal neurostimulator lead | 63650 | Percutaneous implantation of neurostimulator electrode |
| Anterior cervical fusion | 22551 | Cervical anterior interbody arthrodesis |
| Physical therapy evaluation | 97161–97163 | PT evaluation levels |
| Therapeutic exercise | 97110 | Therapeutic exercises |
These examples do not mean that each code always requires authorization.
The provider must check the patient’s individual payer policy.
Medicare Fee-for-Service has programs that require authorization. The Centers for Medicare & Medicaid Services says that some hospital outpatient services need approval before they can be provided. These services include procedures, like blepharoplasty, botulinum toxin injections, panniculectomy, rhinoplasty, vein ablation implanted neurostimulators, cervical fusion with disc removal and facet joint interventions.
HCPCS Authorization for DMEPOS
Durable Medical Equipment, Prosthetics, Orthotics and Supplies require particular attention because authorization requirements can depend directly on HCPCS codes.
CMS maintains a Master List of DMEPOS items that may potentially become subject to additional payment requirements. Being on the Master List alone does not automatically mean prior authorization is required; the item must also be selected for the applicable Required Prior Authorization List.
CMS has continued updating these requirements during 2026, including new DMEPOS codes and implementation dates. Because these lists change, providers and suppliers should verify the current CMS Required Prior Authorization List rather than relying on an old code list.
CMS also explains that relevant DMEPOS documentation may involve face-to-face encounter requirements and a written order containing elements such as the beneficiary’s identification, description of the item, quantity when applicable, treating practitioner information, order date, and practitioner signature.
ICD-10-CM and DX Codes Used in Authorization
There is also no universal ICD-10 authorization code.
ICD-10-CM diagnosis codes explain the patient’s condition and help support why a requested procedure is medically necessary.
The diagnosis therefore needs to make clinical sense in relation to the requested service.
Examples include:
| Clinical Situation | Example ICD-10-CM Code |
|---|---|
| Lumbar radiculopathy | M54.16 |
| Primary osteoarthritis, right knee | M17.11 |
| Obstructive sleep apnea | G47.33 |
| Chronic migraine without aura | G43.709 |
| Cervical radiculopathy | M54.12 |
| Malignant neoplasm of lung, unspecified | C34.90 |
| Low back pain | M54.50 |
| Unilateral primary osteoarthritis, left knee | M17.12 |
The most specific clinically supported diagnosis should be reported.
For example, using only a general pain diagnosis when documentation establishes a more specific condition may make it harder to demonstrate medical necessity for an advanced procedure.
At the same time, providers should never choose a diagnosis merely because it is more likely to secure authorization. ICD-10-CM coding must accurately reflect the patient’s documented condition.
Why CPT and ICD-10 Codes Must Match the Authorization
One of the most preventable authorization problems occurs when the code submitted on the claim differs from the code approved by the payer.
Suppose authorization was obtained for CPT 70551, but the service performed and billed is CPT 70553.
Even though both describe MRI services involving the brain, they are different CPT codes. The payer may determine that the billed service was not authorized.
The same problem can happen with:
- Surgical procedure changes
- Additional therapy units
- Bilateral procedures
- Different drug quantities
- Different DME items
- Different imaging protocols
- Extended treatment periods
When the treatment plan changes after authorization has been issued, the provider should determine whether the approval needs to be amended before proceeding.
Modifiers and Authorization in Medical Billing
There is no standard CPT modifier that universally means “prior authorization obtained.”
This is an important distinction.
Modifiers provide additional information about how or why a service was performed. They do not generally replace the authorization number or payer approval.
Depending on the service, modifiers that may affect claim processing include:
| Modifier | General Use |
|---|---|
| 25 | Significant, separately identifiable E/M service on the same day as another service |
| 26 | Professional component |
| TC | Technical component |
| 50 | Bilateral procedure |
| LT | Left side |
| RT | Right side |
| 59 | Distinct procedural service |
| NU | New DME equipment |
| RR | Rental |
| UE | Used DME equipment |
| KX | Requirements specified by applicable medical policy have been met |
| GA | Waiver of liability statement issued when required by payer policy |
| GY | Item or service statutorily excluded or not a Medicare benefit in applicable circumstances |
These modifiers should only be used when their official requirements are met.
For example, an authorization covering a right-sided procedure may not necessarily support billing the same service with modifier LT.
Similarly, if a payer authorizes a limited number of therapy units, adding a modifier does not permit the provider to exceed the approved quantity.
In certain Medicare prior-authorization programs, modifiers can interact with how a claim is processed, but providers should follow the applicable CMS or payer-specific instructions rather than treating any modifier as a substitute for authorization. CMS has previously documented program-specific processing involving modifiers such as GY and EY for certain prior-authorized DME claims.
Documentation Required for Prior Authorization
Good documentation is often the deciding factor in whether a payer approves a request.
Clinical notes should show why the requested service is reasonable and medically necessary for the patient.
The specific requirements vary, but documentation frequently includes:
Diagnosis
The patient’s condition should be clearly documented and supported by the appropriate ICD-10-CM code.
Symptoms and clinical findings
Include relevant examination findings, symptoms, severity, functional impairment, and diagnostic findings.
Conservative treatment history
Some payer policies require evidence that less-intensive treatment was attempted first.
Examples can include:
- Medication
- Physical therapy
- Home exercise
- Activity modification
- Injections
- Other conservative interventions
Treatment response
Document whether previous treatments improved the patient’s condition and why another level of care is now necessary.
Requested procedure
The requested CPT or HCPCS code should correspond to the treatment documented by the provider.
Supporting studies
When applicable, include:
- X-rays
- MRI findings
- CT results
- Laboratory reports
- Pathology
- Sleep study results
- Therapy evaluations
Treatment plan
Document expected frequency, duration, units, and clinical goals when appropriate.
The strongest authorization request tells a coherent clinical story rather than simply sending a diagnosis and procedure code.
Common Prior Authorization Denials
Prior authorization denials are frequently preventable.
Common causes include:
Authorization Was Never Obtained
The payer required authorization, but the service was performed without it.
This can lead to CARC 197.
CMS identifies Claim Adjustment Reason Code 197 as:
Precertification/authorization/notification/pre-treatment absent.
Authorization Number Is Missing or Invalid
The authorization may have been obtained but not correctly linked to the claim.
CMS lists CARC 15 for situations in which the submitted authorization number is missing, invalid, or does not apply to the billed services or provider.
Authorization Was Exceeded
The provider may have delivered more visits, days, services, or units than were approved.
CARC 198 represents situations in which precertification, notification, authorization, or pre-treatment limits were exceeded.
Authorization Was Obtained Too Late
If a payer requires prior approval but receives the authorization request outside the required timeframe, the claim can still be adjusted.
CARC 210 indicates that precertification or authorization was not received in a timely fashion.
Procedure Does Not Match Authorization
A provider may receive authorization for one CPT code and submit another.
This may occur because of:
- Coding changes
- Changes made during surgery
- Different imaging protocols
- Different treatment units
- Bilateral services
- Incorrect claim entry
Authorization Expired
Authorizations frequently have defined effective and expiration dates.
A treatment provided outside that date range can be denied even when the underlying service was previously approved.
Wrong Rendering Provider or Facility
Some approvals are specific to:
- Individual physicians
- Group NPIs
- Facilities
- Imaging centers
- Hospitals
Changing the facility without updating the authorization may result in denial.
Insufficient Clinical Documentation
A payer may deny an authorization request because the records do not demonstrate the applicable medical-necessity criteria.
The response should focus on supplying the missing clinical evidence rather than simply resubmitting the same information.
Important Authorization-Related CARC and RARC Codes
Providers should always review the complete Electronic Remittance Advice because CARCs, RARCs, and group codes work together to explain how the payer processed the claim.
| Code | Meaning / Common Relevance |
|---|---|
| CARC 15 | Submitted authorization number is missing, invalid, or does not apply |
| CARC 16 | Information required for adjudication is missing |
| CARC 17 | Requested information was not provided or was insufficient |
| CARC 197 | Authorization/precertification/notification absent |
| CARC 198 | Authorization/precertification exceeded |
| CARC 210 | Authorization was not received within the required timeframe |
| RARC N54 | Claim information is inconsistent with precertified/authorized services |
| RARC M62 | Missing, incomplete, or invalid treatment authorization code |
CARC 197, 198, and 210 are specifically identified in CMS code resources as authorization-related adjustment reasons.
The exact corrective action depends on the payer’s remittance message and policy.
How to Correct an Authorization Denial
An authorization denial should not automatically be rebilled without investigation.
Start by comparing five items:
1. Payer requirement
Was prior authorization actually required on the date the service was performed?
2. Authorization record
Was authorization obtained, and what number was assigned?
3. Authorization details
Verify the approved:
- CPT/HCPCS codes
- Units
- Dates
- Provider
- Facility
4. Claim details
Compare the authorization with what was submitted on the claim.
5. Medical record
Confirm that the documentation supports the requested and billed service.
Once the cause has been identified, the appropriate action may include:
- Correcting the authorization number
- Filing a corrected claim
- Requesting retro authorization when payer policy allows it
- Submitting clinical documentation
- Appealing the denial
- Requesting reconsideration
- Correcting CPT/HCPCS coding when genuinely coded incorrectly
- Correcting provider or facility information
Codes should never be changed solely to bypass an authorization requirement.
Prior Authorization and Medical Necessity
Authorization and medical necessity are closely connected, but they are not identical.
Prior authorization is the payer’s approval process.
Medical necessity refers to whether the service meets applicable clinical and coverage criteria.
A payer may ask whether:
- The patient’s diagnosis supports the requested service
- Conservative treatment has been attempted
- Clinical findings satisfy coverage criteria
- A less intensive alternative is available
- The treatment frequency is reasonable
- Requested equipment meets applicable coverage requirements
Strong documentation should answer these questions before they become reasons for denial.
Prior Authorization in Medicare Advantage
Providers participating in Medicare Advantage should also be familiar with CMS rules governing utilization management.
CMS finalized requirements stating, among other provisions, that Medicare Advantage coordinated care plans may use prior authorization to confirm diagnoses or other medical criteria and determine whether an item or service is medically necessary.
CMS also established continuity-of-care protections, including a minimum 90-day transition period for certain active treatment when a beneficiary switches Medicare Advantage plans, and requirements related to the duration of approved courses of treatment.
Providers should still verify the individual Medicare Advantage plan’s operational requirements because submission systems and authorization procedures may differ between plans.
CMS Prior Authorization Changes Providers Should Know
The authorization environment is becoming increasingly electronic.
Under the CMS Interoperability and Prior Authorization Final Rule, CMS requires impacted payers to implement several policies intended to improve prior-authorization processes and information exchange.
Certain provisions became applicable January 1, 2026, while many of the required API provisions primarily have a January 1, 2027 compliance timeline.
Impacted payer categories include Medicare Advantage organizations, certain Medicaid and CHIP programs and managed-care plans, and qualified health plan issuers on federally facilitated exchanges.
The direction is toward more standardized electronic data exchange and better visibility into authorization requirements and decisions.
Providers should nevertheless continue validating payer-specific requirements during the transition because workflows will not become identical overnight.
How to Prevent Prior Authorization Denials
The best authorization denial is the one that never reaches the claim.
Providers can reduce preventable problems by building authorization checkpoints into their scheduling and clinical workflow.
Verify insurance before every significant service
Do not assume coverage is unchanged because the patient has visited previously.
Check authorization requirements by CPT or HCPCS code
A general benefit inquiry may not reveal procedure-specific requirements.
Keep authorization attached to the patient’s account
The authorization record should include the approval number, dates, approved codes, units, provider, and facility.
Monitor expiration dates
Do not allow treatment to continue past the approved period without checking whether an extension is required.
Track authorized units
Therapy, behavioral health, infusion, home health, and other recurring services frequently involve quantity limits.
Compare authorization to the final claim
Before submission, confirm that the billed procedure matches the authorization.
Document payer conversations
Record:
- Date
- Time
- Payer representative
- Reference number
- Information provided
- Outcome
This information can be valuable during appeals.
Review payer changes regularly
Authorization policies are not static.
CMS itself continues to update prior-authorization requirements for programs such as DMEPOS, making current policy verification essential.
Authorization Workflow Example
Consider a patient with lumbar radiculopathy who is being evaluated for an advanced procedure.
The physician documents symptoms, neurological findings, treatment history, and previous imaging.
The patient’s plan is checked before scheduling.
The payer confirms that the requested procedure requires authorization.
The request includes:
Diagnosis: M54.16 — Radiculopathy, lumbar region
Procedure: The appropriate planned CPT code
Supporting records: Imaging, progress notes, prior treatment history, and clinical findings
The payer approves the procedure for a specified provider, facility, and date range.
Before treatment, the office confirms that:
- The authorization is active
- The CPT code still matches the treatment plan
- The provider and facility are correct
- The patient remains eligible
The claim is then submitted with the appropriate claim information and authorization details.
This type of closed-loop process is substantially safer than trying to correct missing authorization after the service has already been performed.
What Providers Should Never Assume About Authorization
Several assumptions create unnecessary denials.
“If the service is covered, authorization is not required.”
Incorrect. A covered service can still require authorization.
“If authorization was approved, payment is guaranteed.”
Incorrect. Claims remain subject to eligibility, coding, coverage, contractual, and other payer requirements.
“Authorization follows the patient to any facility.”
Not necessarily. Some authorizations are facility- or provider-specific.
“The CPT code does not matter as long as the procedure is similar.”
Incorrect. Payers can match authorization against the actual CPT or HCPCS code billed.
“A modifier can fix missing authorization.”
Usually not. Modifiers communicate claim circumstances; they do not generally replace required payer authorization.
“We can always obtain retro authorization.”
Incorrect. Retroactive authorization availability varies significantly by payer and circumstance.
How Authorization Affects Revenue Cycle Performance
Authorization problems create more than claim denials.
They can also increase:
- Days in accounts receivable
- Administrative rework
- Appeal volume
- Staff follow-up
- Treatment rescheduling
- Patient dissatisfaction
- Uncollectible balances
For expensive procedures, one missed authorization can represent thousands of dollars in lost reimbursement.
This is why authorization should not be treated as a small front-office task. It is a revenue-cycle control.
An effective authorization program connects scheduling, clinical documentation, eligibility verification, coding, claim submission, and denial management.
How Vermont Medical Billing Can Support Authorization Management
For providers managing multiple insurance plans, keeping track of changing authorization rules can become difficult, particularly when each payer uses different portals, clinical criteria, forms, and submission procedures.
Vermont Medical Billing can support practices by helping coordinate insurance verification, pre authorization checks, authorization tracking, documentation follow-up, claim review, and denial management so that authorization problems are identified before they become unpaid claims.
The goal should not simply be to obtain an authorization number. The authorization must accurately correspond with the service that is ultimately provided and billed.
Authorization in Medical Billing Checklist
Before a scheduled service, confirm:
| Checkpoint | Status |
|---|---|
| Patient coverage is active | ✓ |
| Provider is in network when required | ✓ |
| Benefits have been verified | ✓ |
| Authorization requirement checked | ✓ |
| Correct CPT/HCPCS codes identified | ✓ |
| Appropriate ICD-10-CM diagnosis documented | ✓ |
| Medical-necessity documentation available | ✓ |
| Authorization request submitted | ✓ |
| Final payer determination received | ✓ |
| Authorization number documented | ✓ |
| Approved units confirmed | ✓ |
| Effective and expiration dates confirmed | ✓ |
| Provider/facility matches approval | ✓ |
| Final claim matches authorization | ✓ |
A simple checklist can prevent costly mistakes.
Frequently Asked Questions About Authorization in Medical Billing
What is authorization in medical billing?
Authorization in medical billing is a payer approval process used for certain healthcare services, procedures, medications, or equipment. The provider submits information to the payer so the payer can evaluate the request according to applicable benefit, coverage, and medical-necessity requirements.
Is prior authorization the same as pre authorization?
The terms are generally used interchangeably by many payers. Both typically refer to obtaining approval before a service is performed.
Does authorization guarantee payment?
No. Authorization does not guarantee reimbursement. Eligibility, benefits, coding, medical necessity, network status, claim accuracy, and other requirements still apply.
What happens if authorization is not obtained?
If authorization was required but not obtained, the payer may deny the claim. CARC 197 is commonly associated with absent precertification, authorization, notification, or pre-treatment approval.
Can authorization be obtained after treatment?
Some payers permit retro authorization under specific circumstances, but policies vary. Providers should not assume retroactive approval will be granted.
What is CARC 198?
CARC 198 indicates that the approved precertification, notification, authorization, or pre-treatment limit was exceeded.
What is CARC 210?
CARC 210 indicates that precertification or authorization was not received within the required timeframe.
Is there an ICD-10 code for prior authorization?
No single ICD-10-CM code represents prior authorization. ICD-10-CM codes identify the patient’s diagnosis and help demonstrate medical necessity for the requested service.
Is there a CPT code for authorization?
No universal CPT code represents obtaining authorization. CPT and HCPCS codes identify the procedure, service, drug, supply, or equipment that may require payer approval.
Which procedures require prior authorization?
Requirements vary by payer and insurance plan. Advanced imaging, selected surgeries, specialty medications, DME, therapy, inpatient services, and high-cost procedures are common examples, but the requirement must be verified for the individual patient.
Final Thoughts
Authorization in medical billing sits at the intersection of patient care, medical necessity, payer policy, coding, and reimbursement.
For providers, the safest approach is to verify authorization requirements before treatment, obtain the correct approval, document the medical necessity of the requested service, and ensure that the final claim matches the approved CPT or HCPCS code, date range, units, provider, and facility.
Practices should also remember that diagnosis codes and modifiers support accurate claim reporting but do not replace prior authorization.
When a denial occurs, reviewing the payer’s CARC and RARC codes can help identify whether the problem involved a missing authorization, invalid authorization number, exceeded authorization, late submission, or mismatch between the authorization and claim.
As payer policies and CMS programs continue to evolve, maintaining a consistent authorization workflow can reduce preventable denials, improve cash flow, and prevent unnecessary disruption to patient care.
