Work through the ten groups in order, because later application assumes earlier foundations. Each concept pairs a rule with a resolved example and a targeted pitfall, so read the explanation, predict the example's outcome before finishing it, and note the mistake line for review sessions. Use the table of contents to track coverage across compliance, payer programs, privacy, coding conventions, and claims workflow. This guide teaches subject matter through worked distinctions; it is a study companion, not a substitute for official publications or a guarantee of exam outcomes.
Regulatory and Compliance Foundations
1. Distinguishing Fraud from Abuse
Fraud means making false statements or misrepresenting facts to obtain payment or a benefit from a federal healthcare program; abuse means practices that create unnecessary cost, directly or indirectly, without proven intent. Intent separates the two and drives how a matter is characterized.
Example: A biller submits claims for visits that never took place, while a colleague repeatedly reports a higher service level causing excess cost. The first is fraud; the second is abuse because intent to deceive is absent.
Mistake to avoid: Labeling every coding error as fraud without evidence of knowing misrepresentation.
Reference: AAPC CPB study guide sample
2. Reverse False Claims Liability
The False Claims Act reaches not only affirmative false claims but also reverse false claims, where a person acts improperly to avoid paying money owed to the government. Retaining an identified overpayment from a federal program creates exposure under this provision.
Example: A practice discovers through an audit that Medicare overpaid several claims and quietly keeps the funds. Liability attaches under the reverse false claims provision because money owed to the government was improperly retained.
Mistake to avoid: Assuming the False Claims Act covers only affirmatively false claims.
Reference: AAPC CPB study guide sample
3. Qui Tam Relator Actions
A qui tam action is a civil suit brought by a private person on behalf of that person and the United States government. If there is a recovery, the relator may be awarded a percentage of the amount recovered, which is why insiders can lawfully initiate False Claims Act exposure.
Example: A billing employee reports a systematic upcoding scheme through a qui tam action. The case proceeds for both the relator and the government, and the relator may receive a percentage of any recovery.
Mistake to avoid: Assuming only government agencies can bring False Claims Act cases.
Reference: AAPC CPB study guide sample
4. Covered Entity Scope
Covered entities are health plans, healthcare clearinghouses, and any provider transmitting health information electronically in connection with standard transactions such as claims or eligibility inquiries. General email use alone does not confer covered status; the transmission must relate to an adopted standard transaction.
Example: A small paper-record practice uses an outside billing service that submits electronic claims. The practice is covered because the standard transactions occur on its behalf, even though it never emails records itself.
Mistake to avoid: Deciding covered status from general email use rather than standard transactions.
Reference: AAPC CPB study guide sample; HHS Summary of the HIPAA Privacy Rule
5. Business Associate Determination
A business associate is a non-workforce person or organization performing functions for a covered entity that involve protected health information, such as claims processing, billing, repricing, data analysis, or utilization review. A written agreement imposing safeguards is required before sharing information with such a contractor.
Example: An outside billing company processes the practice's claims using identifiable data, so a signed agreement is required. A janitorial vendor with only incidental access to records is not a business associate.
Mistake to avoid: Releasing records to contractors without a business associate agreement.
Reference: AAPC CPB study guide sample; HHS Summary of the HIPAA Privacy Rule
6. Truth in Lending Act Trigger
The Truth in Lending Act protects consumers dealing with lenders and creditors. A medical practice that charges finance charges on outstanding balances is acting as a creditor and becomes subject to the Act's requirements, which shapes how collection programs must be structured and disclosed.
Example: An office adds a monthly finance charge to unpaid patient balances. By charging for the extension of credit it becomes a creditor and must satisfy the Act's disclosure requirements before collecting.
Mistake to avoid: Adding interest to patient balances without creditor disclosures.
Reference: AAPC CPB study guide sample
Health Plan Models and Cost-Sharing
7. HMO versus PPO Access Rules
An HMO generally requires members to select a primary care physician and obtain referrals within its network. A PPO builds a network of doctors and hospitals with predetermined negotiated fees but does not require a primary care physician or referrals, giving members direct access to specialists.
Example: A PPO member books a dermatology appointment without any referral. The visit is billed at the negotiated network rate because PPO design neither requires a gatekeeper nor a referral.
Mistake to avoid: Requiring referral authorization before PPO specialist visits.
Reference: AAPC CPB study guide sample
8. Managed Care Organization Functions
A managed care organization combines health insurance, care delivery, and administration in one entity. In Medicaid, MCOs agree to provide most benefits in exchange for a monthly state payment, which changes where claims are directed even though the underlying program is Medicaid.
Example: A Medicaid enrollee is assigned to an MCO receiving a monthly payment covering most benefits. Claims must go to the MCO rather than the state fee-for-service system.
Mistake to avoid: Billing the state directly for members enrolled in an MCO.
Reference: AAPC CPB study guide sample
9. Group Model HMO Payment
A group model HMO contracts with a multispecialty group practice that provides care to members. The HMO pays the group an established rate that is distributed to physicians as salary, so reimbursement flows through the group arrangement rather than through individual physician claims.
Example: A patient belongs to a group model HMO. The HMO pays the multispecialty group an established rate, so the individual physician does not submit a separate claim to the HMO.
Mistake to avoid: Billing patients outside the group's HMO payment arrangement.
Reference: AAPC CPB study guide sample
10. FSA versus HSA Behavior
A flexible spending account holds employee contributions for out-of-pocket healthcare costs but, for the most part, money not used during the plan year is forfeited. A health savings account pairs high-deductible coverage with a portable, interest-earning account whose funds persist and can pay the deductible.
Example: A patient with an unused year-end balance asks whether it carries over. The HSA balance remains available; the FSA balance may be forfeited under the plan's use-it-or-lose-it structure.
Mistake to avoid: Telling patients flexible spending balances always roll over.
Reference: AAPC CPB study guide sample
11. Participating versus Non-Participating Medicare
Participating providers accept the Medicare approved amount and write off the difference from their charge. Non-participating providers do not take assignment but may collect from the beneficiary only up to a limiting charge calculated from the non-PAR fee schedule, protecting patients from unrestricted balance billing.
Example: A non-participating physician treats a Medicare patient. Collections from the patient are capped at the limiting charge, which is set above the non-PAR fee schedule amount but no higher.
Mistake to avoid: Balance billing non-PAR patients beyond the limiting charge.
Reference: AAPC CPB study guide sample
12. Medigap Supplemental Role
Medigap policies are private supplemental plans designed by the federal government and marketed commercially to fill gaps in Medicare cost sharing, such as deductibles, copayments, and coinsurance. They supplement rather than replace Medicare, so claim sequencing always places Medicare first.
Example: A beneficiary holds a Medigap policy. The Medicare claim is submitted first, and the Medigap carrier handles the deductible and coinsurance amounts second, never as primary coverage.
Mistake to avoid: Treating a Medigap policy as primary coverage replacing Medicare.
Reference: AAPC CPB study guide sample
Medicare Coverage and Billing Rules
13. Part A versus Part B Coverage Split
Part A covers hospital care, skilled nursing facility care, nursing home care, hospice, and home health services. Part B covers medically necessary services such as physician visits, ambulance, durable medical equipment, and mental health, plus an expanded list of preventive services. Routing depends on the benefit category, not the patient's age.
Example: A physician office visit for a 70-year-old beneficiary is billed to Part B. Part A never pays physician office claims because it is limited to facility-based benefit categories.
Mistake to avoid: Submitting physician office claims to Part A.
Reference: AAPC CPB study guide sample
14. Preventive Services and Diagnosis Policy
Part B covers a long list of preventive services, including the annual wellness visit, initial preventive physical, colorectal and lung cancer screening, mammograms, depression and diabetes screening, and vaccines. Medicare policies for screening services often attach specific diagnosis requirements, so the reported diagnosis must match the preventive benefit.
Example: A screening mammogram is billed with a diagnostic breast complaint diagnosis and is denied. Checking the preventive policy's diagnosis requirements before submission would have prevented it.
Mistake to avoid: Billing preventive services with problem-oriented diagnoses.
Reference: AAPC CPB study guide sample
15. Medicare Eligibility Before Age 65
Part A coverage is available below age 65 for individuals who have received Social Security or Railroad Retirement Board disability benefits for 24 months, or who have End-Stage Renal Disease and meet certain requirements. Eligibility screening must therefore consider disability and ESRD pathways, not just age.
Example: A 50-year-old patient on dialysis seeks care. Verify Medicare eligibility through the ESRD pathway before converting the account to self-pay.
Mistake to avoid: Assuming Medicare eligibility begins only at age 65.
Reference: AAPC CPB study guide sample
16. Medicare Administrative Contractors
Medicare Parts A, B, and C are administered by private companies that contract with CMS as Medicare Administrative Contractors. These contractors process claims and handle jurisdictional questions, so billing inquiries, corrections, and appeals route to the MAC rather than to central CMS offices.
Example: A question arises about a processed Part B claim. The correct contact is the regional Medicare Administrative Contractor identified on the remittance, not CMS headquarters.
Mistake to avoid: Directing claims or appeals to CMS central offices.
Reference: AAPC CPB study guide sample
17. Assignment, Write-Offs, and Coinsurance Math
When a provider accepts assignment, the practice must write off the difference between its charge and the approved amount. Medicare then pays 80 percent of the approved amount once the deductible is met, leaving the patient responsible for the 20 percent coinsurance calculated on the allowed amount, never the billed charge.
Example: A visit is billed at 200 dollars with an allowed amount of 130 dollars. The provider writes off 70 dollars, and with the deductible met the patient owes 20 percent of the allowed amount.
Mistake to avoid: Billing the patient the full charge after accepting assignment.
Reference: AAPC CPB study guide sample
18. Medicare Secondary Payer Screening
When a beneficiary has Medicare and other coverage, the Medicare Secondary Payer form is used to determine whether Medicare is secondary. Situations such as working-aged beneficiaries with employer group health plans change claim sequencing, so the questionnaire must be completed before the first claim is submitted.
Example: A 67-year-old still working has active employer group coverage. Completing the MSP screening establishes whether Medicare pays secondary before any claim is released.
Mistake to avoid: Billing Medicare primary without secondary-payer screening.
Reference: AAPC CPB study guide sample
Medicaid and CHIP Administration
19. State Flexibility in Medicaid Design
Medicaid has primary federal oversight, but each state establishes its own eligibility standards, determines the type and scope of services, sets payment rates, and administers its own program. Coverage decisions therefore depend on the specific state plan, and a service covered in one state may be unavailable in another.
Example: A therapy service covered in a neighboring state is denied here. The denial stands or falls on this state's plan, not on another state's benefit list.
Mistake to avoid: Assuming Medicaid benefits are nationally uniform.
Reference: AAPC CPB study guide sample
20. Mandatory versus Optional Medicaid Services
To receive federal matching funds, states must cover mandatory services including inpatient and outpatient hospital services, physician services, prenatal care, vaccines for children, laboratory and x-ray, nursing facility services, and family planning. Optional services such as optometry, clinic services, prosthetics, and physical therapy are state choices.
Example: An eyewear claim is denied because optometry is an optional service in that state. The denial reflects state choice, not a billing error.
Mistake to avoid: Assuming every common service is federally mandatory.
Reference: AAPC CPB study guide sample
21. Federal Matching Funds (FMAP)
Federal Medical Assistance Percentage matching funds are provided only when states deliver required services to eligible individuals. The percentage is determined year to year by a formula comparing the state's per-capita income with the national average, so states with lower average incomes receive higher matching percentages.
Example: Two states fund the same service at different match rates. The difference affects state budgets and program design, not what the patient can be charged.
Mistake to avoid: Expecting identical Medicaid funding levels across states.
Reference: AAPC CPB study guide sample
22. Medicaid Categorical Eligibility Pathways
Medicaid eligibility is not a single income test. Beyond meeting TANF requirements, a person may qualify by receiving Supplemental Security Income, being a child under age 6 in a family at or below 133% of the federal poverty level, being a pregnant woman with family income below 133% of that level, receiving adoption or foster care assistance under Title IV of the Social Security Act, being under age 19 in a family at or below the poverty level, or falling in a protected group such as those who lose cash assistance because of earnings from work. Citizenship or eligible immigration status is required unless the application is for emergency services. Screening these pathways is what decides whether the account bills Medicaid or converts to self-pay.
Example: A patient arrives with no insurance card and mentions she receives Supplemental Security Income. Because SSI receipt is itself an eligibility pathway, staff verify Medicaid coverage with the state before listing the account as self-pay, and the visit is billed to Medicaid once eligibility is confirmed.
Mistake to avoid: Converting accounts to self-pay after one income question without screening categorical pathways such as SSI or pregnancy.
Reference: AAPC CPB study guide sample
23. CHIP as the Bridge Program
The Children's Health Insurance Program offers free or low-cost coverage for children in families whose incomes are too high for Medicaid but who cannot afford private coverage. States administer it, and it is jointly funded by the federal government and the states, making it the next payer to evaluate after a Medicaid denial for income.
Example: A child fails the Medicaid income test. Screening for CHIP before converting the account to self-pay identifies free or low-cost coverage the family can actually obtain.
Mistake to avoid: Moving CHIP-eligible families straight to self-pay status.
Reference: AAPC CPB study guide sample
24. Medicaid Cost-Sharing Exemptions
States may charge premiums and out-of-pocket spending requirements such as copayments, coinsurance, and deductibles, but certain groups, including pregnant women and children, are exempt from most out-of-pocket costs and cannot be charged coinsurance or copayments for certain services. Front-desk collection routines must reflect these exemptions.
Example: A pregnant enrollee arrives for a covered prenatal visit. No copay is collected because her group is exempt from most out-of-pocket charges.
Mistake to avoid: Collecting copays from exempt enrollee groups.
Reference: AAPC CPB study guide sample
Registration, Eligibility, and Verification
25. Insurance Card Data Capture
The insurance ID card should be presented and photocopied or scanned front and back at each visit, with the copy filed in the patient's financial record. The front carries the identification number, benefits, deductible, and copay amounts; the back carries contact information and the claims submission address.
Example: A claim is mailed to the wrong payer address and stalls. The back of the card shows the correct submission location, which the copy on file would have revealed.
Mistake to avoid: Filing claims without a current card copy in the record.
Reference: AAPC CPB study guide sample
26. Eligibility versus Verification of Benefits
Eligibility verification confirms that coverage is active and records effective and termination dates. Verification of benefits goes further, confirming copay, deductible, and coinsurance amounts and plan rules by specialty and place of service, which enables accurate point-of-service collection instead of after-the-fact billing surprises.
Example: Coverage is active, but the plan's specialist copay differs from the primary care copay. Verified benefits let staff collect the correct amount at check-in rather than refunding later.
Mistake to avoid: Treating active eligibility as proof of full benefits.
Reference: AAPC CPB study guide sample
27. Birthday Rule for Dependent Children
When a child is covered under both parents' plans, the plan of the parent whose birthday comes first in the calendar year is primary. Only the month and day matter; the year of birth is irrelevant, and neither the parent who accompanies the child nor the parents' ages changes the determination.
Example: The mother was born March 12 and the father September 3. The mother's plan is primary even though the father is older, because month and day alone control.
Mistake to avoid: Sequencing dependent claims by birth year or accompanying parent.
Reference: AAPC CPB study guide sample
28. Primary versus Secondary by Subscriber Status
When a patient holds more than one policy, the plan on which the patient is the subscriber is primary. Coverage held as a dependent, for example through a spouse's employer, is secondary. Sequencing follows subscriber status rather than which card was presented or which plan appears first in the file.
Example: A patient is the subscriber on her own employer plan and a dependent on her spouse's plan. Her own plan is billed first because subscriber status, not card order, controls.
Mistake to avoid: Sequencing coverage by the order cards were presented.
Reference: AAPC CPB study guide sample
29. Handling Ineligible Verification Responses
When verification shows the patient is not eligible with the stated insurer, the patient must be contacted for updated information. If the patient believes the coverage is correct, the patient should contact the insurer to have eligibility files updated, and then decides whether to reschedule or be treated as self-pay.
Example: The insurer shows coverage terminated. Staff contact the patient, who disputes it; the patient must have the insurer correct the file, then chooses to reschedule or self-pay.
Mistake to avoid: Canceling appointments without contacting the patient first.
Reference: AAPC CPB study guide sample
30. Authorization Form Mechanics
A HIPAA authorization must specify the type of information, the recipient, an expiration, and the right to revoke in writing. Revocation must be presented in writing, does not affect actions already taken, and the form should be updated no less than once a year to remain a valid basis for disclosures.
Example: A patient revokes an authorization in writing. Releases already made under it remain effective, and the practice updates the file for future disclosures only.
Mistake to avoid: Accepting a verbal revocation of a written authorization.
Reference: AAPC CPB study guide sample; HHS Summary of the HIPAA Privacy Rule
HIPAA Privacy in Billing Operations
31. Minimum Necessary Standard
Covered entities must make reasonable efforts to limit uses, disclosures, and requests to the minimum information needed for the purpose, and may not send an entire medical record unless the whole record is specifically justified. The standard does not apply to treatment disclosures, disclosures to the individual, authorized disclosures, HHS reviews, or legally required disclosures.
Example: A payer requests records for three dates of service. Sending only those encounters satisfies the standard; copying the entire chart for a limited request does not.
Mistake to avoid: Releasing entire records for a limited-purpose request.
Reference: AAPC CPB study guide sample; HHS Summary of the HIPAA Privacy Rule
32. Treatment, Payment, and Operations Uses
A covered entity may use and disclose protected health information without authorization for treatment, payment, and health care operations. Payment includes a plan obtaining premiums, determining coverage responsibilities, and furnishing reimbursement, and a provider obtaining payment for care, which covers routine claim submission and follow-up.
Example: Submitting a claim to a health plan is a payment activity. No signed patient authorization is needed because payment is a permitted use under the privacy rule.
Mistake to avoid: Demanding patient authorization for routine claim submission.
Reference: HHS Summary of the HIPAA Privacy Rule
33. Psychotherapy Notes Protection
Most uses and disclosures of psychotherapy notes, including for payment purposes, require an individual's authorization, with narrow exceptions such as the originator's own treatment or legal defense. The definition excludes medication prescription and monitoring, session start and stop times, and summaries of diagnosis, symptoms, prognosis, and progress.
Example: A payer requests psychotherapy notes to adjudicate a claim. The patient's authorization must be obtained first, unlike the ordinary clinical record supporting the claim.
Mistake to avoid: Releasing psychotherapy notes as ordinary claim documentation.
Reference: HHS Summary of the HIPAA Privacy Rule
34. De-Identification Methods
De-identified information carries no use or disclosure restrictions and can be achieved two ways: a formal determination by a qualified statistician, or removal of the specified identifiers of the individual and of relatives, household members, and employers, which is adequate only if the entity has no actual knowledge the remainder could identify the person.
Example: An internal analytics project needs claims data without restrictions. Stripping the listed identifiers, with no actual knowledge of residual identifiability, permits unrestricted use.
Mistake to avoid: Deleting only names and calling the data de-identified.
Reference: HHS Summary of the HIPAA Privacy Rule
35. Personal Representatives and Minors
A covered entity must treat a personal representative, meaning a person legally authorized to make health decisions for the individual or to act for a deceased person or estate, the same as the individual. Parents are generally personal representatives for minor children, with exceptional cases deferring to state law on parental access.
Example: A noncustodial parent requests a minor's billing record. The parent is the personal representative absent a state-law exception, so access is handled like the patient's own request.
Mistake to avoid: Refusing parental access without a state-law basis.
Reference: HHS Summary of the HIPAA Privacy Rule
36. Incidental Disclosures
The privacy rule does not require eliminating every risk of incidental disclosure. A disclosure that occurs as a byproduct of an otherwise permitted use is allowed when the covered entity has adopted reasonable safeguards and limited the underlying information to the minimum necessary for the permitted purpose.
Example: Another patient overhears a name called at check-in. The exposure is incidental to permitted operations and acceptable because safeguards and minimum necessary limits were in place.
Mistake to avoid: Believing privacy rules prohibit every accidental exposure.
Reference: HHS Summary of the HIPAA Privacy Rule
ICD-10-CM Structure and Conventions
37. Index-Then-Tabular Workflow
To select a code, first locate the term in the Alphabetic Index, then verify the code in the Tabular List, reading and being guided by any notes and conventions at the final code. The instructions and conventions of the classification itself take precedence over the guidelines, so unverified index results are never final.
Example: An index entry leads to a code that a tabular Excludes note blocks. The tabular instruction governs, and the alternative code is assigned instead.
Mistake to avoid: Assigning codes directly from the Alphabetic Index.
Reference: CDC ICD-10-CM Official Guidelines, FY 2027
38. Excludes1 versus Excludes2
An Excludes1 note is a pure exclusion meaning the excluded code is never used at the same time as the code above the note; it applies when two conditions cannot occur together, such as congenital versus acquired forms. An Excludes2 note means the condition is not included here but the patient may still have both, so both codes can be reported.
Example: A congenital form and an acquired form of the same condition sit under an Excludes1 note. Only the documented form is reported, because the two cannot coexist.
Mistake to avoid: Reporting both codes across an Excludes1 note.
Reference: CDC ICD-10-CM Official Guidelines, FY 2027
39. Other Specified versus Unspecified Codes
Codes titled other specified capture documented conditions that lack a unique code, often via Alphabetic Index entries folded into an other code. Unspecified codes apply when the record is insufficient to assign anything more specific, and each encounter is coded to the level of certainty actually known at that encounter.
Example: Pneumonia is diagnosed but the type is undocumented. The unspecified pneumonia code is correct; selecting an organism-specific code would invent specificity.
Mistake to avoid: Upgrading to specific codes the record does not support.
Reference: CDC ICD-10-CM Official Guidelines, FY 2027
40. Placeholder Character X
When a code that requires a seventh character has fewer than six characters, the placeholder character X fills the empty placeholder positions so the seventh character extends the code to its proper length. Omitting the placeholder produces an invalid code that will fail edits or map to the wrong concept.
Example: An injury code requires a seventh character but has only five characters. The placeholder X fills the gap so the seventh character lands in its correct position.
Mistake to avoid: Appending seventh characters without placeholder padding.
Reference: CDC ICD-10-CM Official Guidelines, FY 2027
41. Code Also Without Sequencing
A code also note instructs that two codes may be required to fully describe a single condition, but it deliberately provides no sequencing direction. The sequence depends on the circumstances of the encounter, so the coder must decide order from the reason for the visit rather than from the note.
Example: A code also note links a condition with its common companion condition. Their order on the claim follows the reason for this particular encounter, not the note itself.
Mistake to avoid: Treating a code also note as a sequencing rule.
Reference: CDC ICD-10-CM Official Guidelines, FY 2027
42. Provider Statement over Clinical Criteria
Code assignment is based on the provider's diagnostic statement that the condition exists; that statement is sufficient. Assignment is not based on the clinical criteria the provider used to establish the diagnosis, and when record documentation conflicts, the correct response is to query the provider rather than to adjudicate the evidence.
Example: A provider documents pneumonia despite an inconclusive workup. The stated diagnosis is coded as given; the supporting criteria are not re-adjudicated by the coder.
Mistake to avoid: Overriding provider diagnoses based on test results or criteria.
Reference: CDC ICD-10-CM Official Guidelines, FY 2027
Documentation Authority and Query Decisions
43. Data Coded from Other Clinicians
Code assignment rests on documentation by the patient's provider, with narrow exceptions permitting other clinicians' documentation for BMI, pressure ulcer stage, non-pressure ulcer depth, coma scale, NIH stroke scale, social determinants of health, laterality, blood alcohol level, underimmunization status, and firearm injury intent. The associated diagnosis must still come from the provider.
Example: A nurse documents a stage 3 pressure ulcer and the provider documents the pressure ulcer. Combining both yields the staged code; the nurse's note alone would not.
Mistake to avoid: Coding diagnoses from nursing or ancillary notes alone.
Reference: CDC ICD-10-CM Official Guidelines, FY 2027
44. Laterality Documentation Rules
When the patient's provider does not document laterality, code assignment for the affected side may be based on documentation from other clinicians. If documentation conflicts about the side, the provider should be queried, and unspecified side codes should rarely be used, only when documentation is insufficient and clarification cannot be obtained.
Example: Imaging documents a left-sided finding while the provider is silent on side. Left is assigned; if two notes disagreed on side, the provider would be queried.
Mistake to avoid: Defaulting to unspecified side when a side is documented.
Reference: CDC ICD-10-CM Official Guidelines, FY 2027
45. Uncertain Diagnoses in Outpatient Settings
In outpatient settings, when no definitive diagnosis has been established by the end of the encounter, codes for the documented signs and symptoms are reported in place of a definitive diagnosis. Suspected, probable, or likely conditions are not coded as confirmed in outpatient claims, unlike the inpatient uncertain-diagnosis rule.
Example: A clinic note ends with probable asthma and no confirmation. The documented wheeze or cough is coded instead of reporting asthma as established.
Mistake to avoid: Coding suspected outpatient conditions as confirmed.
Reference: CDC ICD-10-CM Official Guidelines, FY 2027
46. Borderline Diagnoses
A borderline diagnosis documented at discharge is coded as confirmed unless the classification provides a specific entry for that borderline condition, in which case the specific entry is used. Borderline conditions are not uncertain diagnoses, so no distinction is made between inpatient and outpatient treatment of them.
Example: The note states borderline hypertension with no specific index entry for it. Hypertension is coded as confirmed, in any setting, without treating it as suspected.
Mistake to avoid: Handling borderline conditions like suspected or uncertain ones.
Reference: CDC ICD-10-CM Official Guidelines, FY 2027
47. Complications of Care Standard
Coding a complication of care requires the provider's documentation of a cause-and-effect relationship between the condition and the care or procedure, and the condition must be clinically significant. The provider need not use the word complication; a condition that alters the surgical course qualifies. Unclear relationships call for a query.
Example: Bleeding alters the operative course per the report. The complication code is assigned even though the word complication never appears in the documentation.
Mistake to avoid: Coding every post-procedure condition as a complication.
Reference: CDC ICD-10-CM Official Guidelines, FY 2027
48. Querying over Guessing
When medical record documentation conflicts, whether within one clinician's notes or across clinicians, the patient's provider should be queried for clarification. The coder's job is to resolve ambiguity through the provider, not to select the more specific, more recent, or more reimbursable reading of the conflict.
Example: One note says type 1 diabetes and another says type 2. The provider is queried before assignment rather than choosing the more specific option.
Mistake to avoid: Resolving documentation conflicts by picking the higher-specificity code.
Reference: CDC ICD-10-CM Official Guidelines, FY 2027
Condition-Specific Coding Decisions
49. Diabetes Type Default and Insulin Coding
When the type of diabetes is not documented, the default is type 2, and insulin use alone does not make it type 1. Long-term use of insulin, oral hypoglycemics, or injectable non-insulin drugs is captured with additional Z79 codes, but the insulin code is not assigned when insulin is given only temporarily to bring blood sugar under control during an encounter.
Example: A type 2 patient uses insulin long term, so the E11 series is assigned with the long-term insulin code. A single inpatient insulin course for glucose control adds nothing.
Mistake to avoid: Assigning type 1 from insulin use or Z79.4 for temporary insulin.
Reference: CDC ICD-10-CM Official Guidelines, FY 2027
50. Urosepsis Requires a Query
The term urosepsis is nonspecific, is not considered synonymous with sepsis, and has no default code in the Alphabetic Index. When a provider uses it, the provider must be queried for clarification rather than the term being mapped to a sepsis or severe sepsis code on the coder's initiative.
Example: A discharge note lists urosepsis. The provider is queried for the intended condition before any sepsis code is assigned.
Mistake to avoid: Assigning sepsis from the word urosepsis without obtaining the provider's diagnostic clarification.
Reference: CDC ICD-10-CM Official Guidelines, FY 2027
51. Severe Sepsis Multi-Code Structure
Severe sepsis requires a minimum of two codes: first the underlying systemic infection, then a code from the severe sepsis subcategory, plus additional codes for the associated acute organ dysfunction. Negative or inconclusive blood cultures do not preclude sepsis with clinical evidence, but the provider should be queried, and dysfunction not clearly tied to sepsis stays out of the severe sepsis code.
Example: Sepsis with acute kidney injury is documented. The infection code comes first, then the severe sepsis code, then the acute renal dysfunction code.
Mistake to avoid: Assigning severe sepsis without documented acute organ dysfunction.
Reference: CDC ICD-10-CM Official Guidelines, FY 2027
52. Burn Degree and Site Rules
When burns of different degrees affect the same anatomic site on the same side, only the subcategory for the highest degree recorded is assigned. Separate codes are assigned for each burn site, the highest-degree burn is sequenced first when treatment of multiple burns is the reason for the encounter, and body-region-unspecified codes are rarely appropriate.
Example: Second- and third-degree burns of the right thigh are documented. One highest-degree code for that site is assigned, not separate codes per degree.
Mistake to avoid: Reporting each degree at the same site as separate codes.
Reference: CDC ICD-10-CM Official Guidelines, FY 2027
53. Pressure Ulcer Staging and Progression
Pressure ulcer stage comes from the medical record documentation, with unspecified stage assigned when staging is absent. An ulcer present on admission that progresses to a higher stage during the stay receives two codes: the site and stage at admission plus the same site at the highest stage reached. Non-pressure ulcers completely healed at admission receive no code.
Example: A stage 2 pressure ulcer on admission evolves to stage 4 during the stay. Both codes are reported for the same site: the admission stage and the highest stage.
Mistake to avoid: Reporting only the final stage for a progressing ulcer.
Reference: CDC ICD-10-CM Official Guidelines, FY 2027
54. Pain Code Sequencing by Encounter Purpose
When the encounter is for pain control or pain management, the category G89 pain code is sequenced first, followed by the code identifying the specific site of pain. When the encounter is for another reason and no related definitive diagnosis is confirmed, the site code is sequenced first, followed by the appropriate G89 code.
Example: The visit is solely for chronic neck pain management. The chronic pain category code is sequenced first, followed by the cervical site code.
Mistake to avoid: Always sequencing the site code before the pain category code.
Reference: CDC ICD-10-CM Official Guidelines, FY 2027
Claims Processing, Denials, and Special Payers
55. Clean Claim Standard
A clean claim is one submitted with all the information necessary for the payer to process it. Completeness at submission, including valid subscriber identifiers, is what separates claims that enter adjudication from claims that bounce at the front end and consume rebilling effort.
Example: A claim missing the subscriber ID fails at the electronic gateway. It was never clean; the ID is corrected from the card on file and the claim is resubmitted.
Mistake to avoid: Resubmitting unchanged claims after front-end rejections.
Reference: AAPC CPB study guide sample
56. Rejection versus Denial Response
A rejection, such as an electronic error for a missing or invalid subscriber ID, means the claim never entered payer adjudication; the fix is to correct the data and rebill. A denial is an adjudicated refusal to pay, which is contested through the appeal process. Choosing the wrong path wastes the correction or the appeal right.
Example: An electronic report shows a claim rejected for a missing subscriber ID. The card is pulled, the ID is fixed, and the claim is rebilled; an appeal would be the wrong path.
Mistake to avoid: Appealing claims that were only rejected, or rebilling denied ones.
Reference: AAPC CPB study guide sample
57. Clearinghouse Role in Transmission
A clearinghouse is an entity that processes or facilitates the processing of claims for providers and healthcare plans, converting nonstandard data into standard format or vice versa. Because clearinghouses sit between the practice and the payer, their error reports reflect front-end failures, not payer coverage decisions, which changes the corrective action required.
Example: A practice submits claims through a clearinghouse. Its daily processing report flags acknowledged versus rejected claims before payers ever adjudicate them.
Mistake to avoid: Confusing clearinghouse error reports with payer denials.
Reference: AAPC CPB study guide sample; HHS Summary of the HIPAA Privacy Rule
58. Subrogation When a Liability Payer May Owe
When treatment follows an injury for which a liability payer may be responsible, the health insurance plan is billed first, and the process of subrogation then determines whether that liability payer should be considered primary. The biller does not hold the claim while waiting for a liability carrier to accept responsibility and does not unilaterally resequence the liability payer as primary; the health plan processes the claim and subrogation resolves primarity.
Example: A patient is treated for an injury caused by another party, and the front desk asks whether to bill the responsible party's insurer. The claim is submitted to the patient's health insurance plan first, and subrogation determines whether the liability payer is primary, so the account is not parked pending the third party's decision.
Mistake to avoid: Holding injury claims unsubmitted until a liability carrier agrees to pay.
Reference: AAPC CPB study guide sample
59. Chargemaster as the Hospital Billing Source
The chargemaster is the hospital-specific master list that includes all hospital procedures, services, supplies, and medications billed to payers. Each line item carries an item number, description, CPT or HCPCS code, a four-digit numeric code established by the National Uniform Billing Committee that classifies the line item, a general ledger number, any modifier, and the set charge. Hospital charges and codes therefore come from the chargemaster rather than from the physician encounter form or superbill used in office billing, which changes where the biller looks before ever pricing a hospital claim.
Example: A hospital outpatient department performs an ultrasound and the biller needs the billable amount. Opening the chargemaster line item supplies the CPT/HCPCS code, the four-digit revenue code, the modifier field, and the hospital's set charge, and that charge is reported on the claim instead of an office fee schedule amount.
Mistake to avoid: Pricing hospital services from a physician superbill or encounter form instead of the chargemaster.
Reference: AAPC CPB study guide sample
60. Workers' Compensation Billing Route
Work-related injury and illness claims are billed to the workers' compensation carrier under that separate system rather than to the patient's health plan. Privacy rules permit disclosures of protected health information as authorized by workers' compensation laws and similar programs, so releasing the necessary records to the comp carrier is lawful without patient authorization.
Example: An employee injures a back lifting stock at work. The claim goes to the employer's workers' compensation carrier, not the employee's group health plan.
Mistake to avoid: Routing work-related injuries to regular health insurance.
Reference: AAPC CPB study guide sample; HHS Summary of the HIPAA Privacy Rule
References and further reading
Source links checked on Oct 2, 2026.