Auditors Going from Targeting Just Physicians to Targeting Physicians and NPPs

There are now 200,000 new targets for CMS and private payers.

Since the first of this year, I have engaged in several audits for which the target is not the physician, but rather a physician’s assistant (PA) or a nurse practitioner (NP). While there have always been audit issues regarding the use of incident-to and split/shared services, the focus was usually the physician provider and not the non-physician practitioner (NPP). But this is obviously changing.

Why the concern? Well, physicians alone provide nearly a million targets for the Centers for Medicare & Medicaid Services (CMS) and private payer audits, which seems like enough to keep them busy for the next few decades. But add in another couple of hundred thousand NPs and PAs, and target acquisition becomes that much richer; and in their minds, so do the auditors. But first, a bit of background.

The use of NPPs in medical care has been a generally accepted model since the physician shortage of the 1960s. In particular, I am talking about the inclusion of PAs and NPs. Part 3 of the Medicare Carriers Manual (MCM) touches on PA services (section 2156) and NP services (section 2158), and there is little doubt among healthcare professionals as to the value they add to the overall efficiency and quality of care for a provider organization. Way back in the day, I spent several years as a PA before trading in my stethoscope for a calculator, and in my humble opinion, a well-trained and qualified PA could do 80 percent of what a physician can do. I know that is not universally accepted, but it is my opinion and personal experience.

CMS has a bunch of rules and guidelines regarding what NPPs can do and how they are to be paid. This includes the controversial differences between incident-to and non-incident-to services, as well as the rules surrounding shared/split services. While this article is not about those policies per se, it is important to at least understand the basic differences between them.

In general, the MCM states that if basic requirements are met, Pas and NPs may be covered under Medicare Part B payments. Incident-to is defined as “those services that are furnished incident to physician professional services in the physician’s office (whether located in a separate office suite or within an institution) or in a patient’s home. To qualify as ‘incident to,’ services must be part of your patient’s normal course of treatment, during which a physician personally performed an initial service and remains actively involved in the course of treatment.” (MLM Matters Number: SE0441)

From a reimbursement standpoint, incident-to services are paid less than if the NPP were to perform those services not incident-to. Under most circumstances, they are paid at around 85 percent of what would have been paid had a physician performed the service.

A split/shared service is a bit different from an incident-to service, both in requirements and payment. Medicare Part B defines a split/shared E/M visit as “a medically necessary encounter with a patient where the physician and a qualified NPP each personally perform a substantive portion of an E/M visit face-to-face with the same patient on the same date of service.” Split/shared services are paid at the physician rate of the E/M code; however, the payment is singular, and based on the combined efforts and documentation of both the physician and the NPP.

I probably should have stated this earlier, but I am not an expert on NPP policies, rules, laws, or billing requirements. I am, however, an expert on audits and audit risk, and I am confident in the shift that I am seeing take place: auditors going from targeting just physicians to targeting physicians and NPPs. For example, in one of the audits in which I was engaged this year, the focus was on evaluation and management (E&M) codes submitted by the NP using their NPI number. It really wasn’t much different than I would have expected for a provider, but in the past, at least from my experience, it appeared that NPs were immune from targeting. Another audit involved a PA and included both E&M and AS modified procedures. Again, in the past, it would have been the physician that was the most likely target, but in this case, the primary target was the PA.

Some years ago, I read a great article titled “Can NPs and PAs Fill the Primary Care Gap?” written by Ben Hartman of MedPage Today (Sept. 17, 2013). I know the article is a bit dated, but the concerns for the future were spot on. Of particular interest is a quote by Fitzhugh Mullan, MD of George Washington University School of Health Sciences. He stated the following: “over time, I can’t think of any reason the overall attitudes, proclivities, problems, and successes won’t be similar to those of physicians.”

In context, Dr. Mullan was referring to the movement away from primary care to specialization; however, I would expand that to the audit risk issues that have faced physicians for what seems like forever. Physicians face these myriad administratively complex sets of rules and regulations, and NPPs are not immune from any of them. In fact, there are even more rules and regulations that apply to them, so I would opine that their risk is even higher, although it has not been realized until recently.

In an article published by RACmonitor on Sept. 28, 2017, Shannon Deconda, founder of NAMAS and a partner in Doctors Management, LLC, noted how UnitedHealthcare (UHC) now requires physicians “reporting E/M services on behalf of their employed advanced practice healthcare professionals to report services with a modifier to denote the service were provided in collaboration with a physician.” The crux of the article was about the possibility of this change causing denials of submitted claims, but in my paranoid, conspiratorial mind, it is nothing more than a more sophisticated tracking mechanism to allow UHC to specifically target the NPP along with the physician provider.

The bottom line is that there are now 200,000 new targets for both CMS and private payers’ auditors to go after with respect to recoupment and recovery audits. I believe we will continue to see an increase in the number of incident-to and shared/split services audits. At least in my experience, that isn’t in question. But what I also expect to see this year is an increase in audits that have typically been associated with providers encapsulating the NPP arena. As such, it is the wise compliance officer that begins to treat their NPPs just like they treat their physicians. From my perspective, we have tweaked our algorithms to account for NPPs just as we would for physicians, and from the perspective of risk-based auditing, everyone else should be doing the same.

It was Giovanni Torriano who first coined the phrase, “to go about to fetch blood out of a turnip.” Somewhere around 1788, Vicesimus Knox changed that to “it is impossible to get blood out of a stone.” I agree with both, but that is not going to stop payers from trying.

And that’s the world according to Frank.

 

Comment on this article

Facebook
Twitter
LinkedIn

Frank Cohen, MPA

Frank D. Cohen is Senior Director of Analytics and Business Intelligence at VMG Health, LLC, and is Chief Statistician for Advanced Healthcare Analytics. He has served as a testifying expert witness in more than 300 healthcare compliance litigation matters spanning nearly five decades in computational statistics and predictive analytics.

Related Stories

Leave a Reply

Please log in to your account to comment on this article.

Featured Webcasts

One Chart, Five Truths: How CDI Prevents the Same Diagnosis from Becoming Five Different Outcomes

What happens when everyone reviews the same chart, but reaches a different conclusion? In this case-based clinical documentation integrity (CDI) webcast, Penny Jefferson examines how documentation involving clinical support, timing, causation, linkage, and terminology can produce very different outcomes for ICD-10 coding, reimbursement, quality, risk adjustment, medical necessity, denials, and compliance. Using cases involving postoperative respiratory failure, severe malnutrition, and encephalopathy, you’ll learn the practical CLEAR framework to help attendees learn to evaluate whether a diagnosis is codeable, consistent, specific, reportable, and ultimately defensible across the different teams and systems that rely on the medical record.

September 30, 2026

Mastering Spinal Fusion Coding for Inpatient Facilities: ICD-10-PCS Precision, Documentation, and MS-DRG Impact

Spinal fusion cases are among the most complex inpatient procedures to code, where even minor ICD-10-PCS errors can affect MS-DRG assignment, reimbursement, compliance, and audit outcomes. This practical webcast provides a step-by-step framework for interpreting operative reports, assigning accurate ICD-10-PCS codes, recognizing documentation gaps, and confidently coding complex fusion procedures. You’ll leave with practical tools that improve coding accuracy, reduce denials and audit risk, and strengthen documentation-driven reimbursement decisions.

July 29, 2026

AI, Audits, and the Future of the Revenue Cycle

Artificial intelligence is rapidly transforming healthcare revenue cycle operations, from coding and auditing to compliance and denials. Join industry leaders Pam Warren (MaineHealth) and Raemarie Jimenez (AAPC) for a live fireside chat exploring how AI is changing workflows, workforce roles, payer-provider dynamics, and compliance risk—and what organizations should be doing now to prepare.

Webcast Only Available On ICD10monitor Subscription – Subscribe Below

June 17, 2026

Trending News

Featured Webcasts

Radiation Oncology Fundamentals: Coding, Billing & Compliance for Hospital Outpatient & Professional Services

Join Michael Calahan, PA, MBA for this radiation oncology coding and compliance webcast as he explains the fundamentals of coding, billing, reporting, and documentation for hospital outpatient and professional services. Learn how the 2026 radiation therapy coding changes affect current practices, how to distinguish technical and professional services, and how to address bundling, units, frequency, modifiers, and documentation requirements. Michael will also help you identify radiation oncology coding and billing vulnerabilities that could lead to denials, overpayments, repayment demands, or federal audit exposure.

October 20, 2026

CMS Compliance & Audit Readiness Bundle

Get two essential perspectives on CMS compliance for $199.

The Two-Midnight Rule helps you navigate short-stay admissions, patient status, and evolving 2026-2027 requirements, while CMS CRUSH explores the next wave of program integrity, payment oversight, and data-driven scrutiny.

Two RACmonitor webcasts. One practical approach to preparing for increased CMS oversight.

September 20, 2026

Preparing for 2027: Inpatient & Outpatient Policy Changes for Case Management and Utilization Review

The 2027 CMS policy changes will impact case management, utilization review, reimbursement, and patient status decision-making long before they officially take effect. Join nationally recognized physician advisor Dr. Ronald Hirsch as he explains the finalized and proposed inpatient and outpatient rule changes, expanding bundled payment initiatives, payment updates, and evolving payer expectations. Gain practical guidance to help your organization prepare early, strengthen compliance, reduce reimbursement risk, and confidently navigate the transition to 2027.

September 17, 2026

Trending News

Celebrate Lab Week with MedLearn! Sign up to win one year of our Laboratory All Access Pass! Click here to learn more →

Have a Medicare regulation question you’d love Dr. Hirsch to answer? Now is your chance! CLICK HERE to learn more→

Happy National Doctor’s Day! Learn how to get a complimentary webcast on ‘Decoding Social Admissions’ as a token of our heartfelt appreciation! Click here to learn more →

This Memorial Day, we honor those who gave all for our freedom. Take 20% off sitewide through May 29 with code MEMORIAL26 at checkout

CYBER WEEK IS HERE! Don’t miss your chance to get 20% off now until Dec. 1 with code CYBER25

CYBER WEEK IS HERE! Don’t miss your chance to get 20% off now until Dec. 2 with code CYBER24