Upcoding: The Quiet Engine Of Medicare Fraud

Most health care fraud doesn’t involve elaborate shell companies or fake patients. It’s far simpler: coding something one level higher than what was actually done. That practice—upcoding—has quietly drained billions from Medicare and Medicaid for decades. It’s the oldest trick in the book, and it’s still everywhere. If you are aware of health care fraud, contact our False Claims Act lawyer today.

What Upcoding Really Means  

In plain terms, upcoding occurs when a provider bills the government for a more expensive service, diagnosis, or procedure than the one actually performed or justified. Medicare and Medicaid pay based on codes. Each code corresponds to a level of complexity or intensity—and a dollar amount. Move that code up one notch, and the reimbursement jumps.  

It’s the medical equivalent of saying you ordered a steak when you got a burger.  

Common Examples

• Evaluation and Management (E/M) Codes: Physicians mark a visit as “level 4” (99214) instead of “level 3” (99213), claiming a more complex patient history or exam that never happened.
• Hospital Billing: Facilities record a “major complication or comorbidity” (MCC) diagnosis that isn’t supported by the chart, converting a lower-paying DRG into a higher one.
• Skilled Nursing Facilities: Before 2019, nursing homes inflated RUG scores by exaggerating the number of therapy minutes a resident supposedly received. Since Medicare switched to PDPM, the fraud migrated: facilities now manipulate “clinical categories” and “nursing function” assessments instead.
• Rehab and Therapy Chains: Physical therapy companies claim 60-minute sessions when the therapist only spent 30 minutes with the patient.
• Home Health Agencies: Agencies overstate the patient’s functional limitations or comorbidities to qualify for higher reimbursement.

If you work inside one of these settings, you’ve probably seen some version of this—whether it’s a “coding consultant” recommending aggressive codes or a supervisor “retraining” staff to “capture full value.”  

The Legal Framework  

The False Claims Act (31 U.S.C. §§ 3729–3733) makes it illegal to knowingly submit, or cause the submission of, false or fraudulent claims for payment to the United States. Upcoding almost always falls under that umbrella. It can also implicate criminal statutes (18 U.S.C. § 1347, health care fraud) and, if part of a broader scheme, conspiracy statutes (18 U.S.C. § 371).  

A claim is “false” when the code doesn’t accurately reflect the service rendered. It’s “knowingly” false when the provider either:

• knew the documentation didn’t support the code,
• acted in reckless disregard of that fact, or 
• deliberately ignored red flags.  

The “knowingly” standard is broad; it doesn’t require intent to defraud. That’s why the Department of Justice (DOJ) can—and does—bring civil False Claims Act cases where executives or compliance officers turned a blind eye to aggressive coding practices.  

How DOJ And OIG Catch It  

Upcoding is data-driven, and so are the investigators. DOJ and the Office of Inspector General (OIG) use analytics to flag providers whose billing patterns deviate sharply from peers. A physician who bills 80 percent of visits at level 5 when the regional average is 10 percent stands out like a flare.  

Once flagged, investigators look for corroboration:

• patient charts that don’t justify the codes,
• internal audits showing “downcoding” penalties for staff,
• training materials urging coders to “optimize revenue,” or 
• whistleblower emails complaining about “pressure to code higher.”

When those align, the government or a relator’s complaint can uncover systemic inflation.  

The Role Of Whistleblowers  

Most major upcoding cases start with insiders—coders, nurses, therapists, or compliance officers—who notice patterns that don’t add up. The data may look clean to auditors, but the humans in the trenches see the manipulation: therapy minutes padded, diagnoses copied forward, patients “recertified” indefinitely.  

Under the False Claims Act, whistleblowers (known as relators) can file suits on behalf of the United States and receive 15 to 30 percent of the government’s recovery if the case succeeds. DOJ recovered over $2.6 billion from health-care fraud cases in 2024, and upcoding was central to many of them.  

Illustrative Cases

• Life Care Centers of America (2016): Paid $145 million to resolve allegations that it pressured therapists to reach ultra-high RUG levels regardless of patient need.
• Saratoga Center for Rehabilitation (2023): Investigated for upcoding, poor care, and operating without proper licensing—illustrating how billing fraud often coexists with patient harm.
• Physician E/M Coding Sweeps: OIG audits have repeatedly found error rates above 50 percent for higher-level E/M codes.  

The takeaway: when volume meets velocity—high patient counts and high coding intensity—expect scrutiny.  

Why It Persists  

Because it’s easy and profitable. Upcoding doesn’t require fake patients or falsified signatures. It just requires “interpretation.” Providers convince themselves they’re simply “documenting better” or “capturing complexity.” Compliance officers rationalize it as “borderline coding judgment.”

And unlike overt fraud, upcoding hides behind medical subjectivity. There’s rarely a single smoking-gun email saying, Let’s commit fraud. Instead, you see euphemisms: “optimize,” “maximize,” “capture.” Those are the new red flags.  

The PDPM And Risk-Adjustment Era  

The 2019 shift to the Patient-Driven Payment Model (PDPM) was supposed to kill RUG-based therapy manipulation. It didn’t. Fraud just adapted.  

Now facilities inflate “clinical categories” like major joint replacement or “nursing functional score.” In Medicare Advantage, insurers perform the same trick on the risk-adjustment side—adding unsupported diagnoses to raise capitation payments. DOJ calls this the “new frontier” of upcoding, and it’s targeting major insurers (Cigna, Humana, Kaiser, Elevance, UnitedHealth).  

For whistleblowers, that means fertile ground: chart review vendors, data-mining algorithms, and “coding integrity teams” all create potential FCA exposure.  

How Relators Can Identify Upcoding  

Here’s what insiders often notice first:  

1. Pressure to Code High: Supervisors question any claim coded below a certain level.
2. Audit Feedback Loops: Internal audits focus only on missed revenue, never on overbilling.
3. Templates and Copy-Forward Notes: EHRs prefill histories or exams to justify higher codes.
4. Volume vs. Time: Clinicians document hour-long therapy sessions while seeing four patients per hour.
5. Patient Incongruence: Notes describe “high-intensity therapy” for patients barely able to participate.
6. “Coding Consultants” Paid on Contingency: A red flag for kickback or FCA exposure.

If any of those sound familiar, it’s worth talking to a lawyer experienced in False Claims Act work. Documentation is everything—emails, coding guidelines, meeting notes. The question isn’t whether there’s smoke; it’s whether the smoke can be tied to intent.  

The Cost Beyond Dollars  

Upcoding isn’t victimless. It distorts care. When facilities chase high-paying codes, they push staff to provide unnecessary services—or worse, to falsify documentation so the books look right. That drives burnout, patient neglect, and erosion of trust in the system.  

Every inflated claim also crowds out legitimate care. Medicare and Medicaid operate on finite budgets; billions siphoned through false coding mean fewer resources for real patients.  

What’s Next  

DOJ is expanding its data analytics programs and cross-referencing billing with patient outcomes. Expect more actions involving:

• AI-generated documentation and automated code selection;
• Medicare Advantage risk-score manipulation; and compliance officers held personally 
• responsible for ignoring red flags.  

For whistleblowers, that means opportunity—but also responsibility. Filing a qui tam case requires precision and corroboration, not speculation. The best relators document not only the what (the false codes) but also the why (pressure, policies, or directives that show knowledge).  

Final Thoughts  

Upcoding thrives in the gray area between documentation and deception. The line between error and fraud is thin, but not invisible. When executives reward coding intensity without regard for medical necessity, they cross it.  

The False Claims Act remains the government’s most effective tool to hold them accountable. But it’s whistleblowers—coders, clinicians, auditors—who make those cases possible.

If you suspect systematic upcoding where you work, document what you see, preserve communications, and seek advice before going to regulators. The law protects—and often rewards—those who tell the truth.  

And as long as reimbursement depends on codes, there will be someone trying to push those codes higher. The challenge, for both compliance officers and relators, is knowing when “optimization” turns into fraud—and having the courage to call it what it is. Contact our team at Whistleblower Law Partners today to discuss your case.