A health insurer's routine post-payment audit in 2022 flagged something odd: the same hip replacement procedure, performed at the same hospital within a three-month window, had been coded at two different severity levels. One claim listed the patient's condition as mild, the other as severe. The reimbursement difference was substantial — roughly US$4,000 more for the severe code. The hospital, when contacted, called it a clerical error. But the insurer's special investigations unit (SIU) had seen this pattern before.

One Hospital, Two Codes, Double the Payout

The flagged claims came from a hospital system in Ohio, one that handled a steady volume of orthopedic procedures. The first claim, from February, used diagnosis code M16.11 — unilateral primary osteoarthritis of the right hip, a relatively straightforward classification. The second, from April, used M16.12, indicating bilateral primary osteoarthritis with more severe joint deformity. Both patients had received a total hip replacement, but the medical records told a different story: the second patient's pre-operative imaging and notes showed only mild unilateral arthritis, not the bilateral severe condition the code suggested.

The insurer's automated claims-scoring system had flagged the discrepancy because the severity level exceeded typical clinical patterns for that patient's age and history. The SIU analyst assigned to the case pulled a random sample of 20 similar claims from the same hospital and found that six of them — 30% — used severity codes that appeared inflated relative to the medical records. The hospital's billing department had apparently applied a higher-severity diagnosis code to procedures that, under standard coding guidelines, should have been classified as routine.

When the insurer demanded repayment and an explanation, the hospital initially argued that the coders had misinterpreted vague notes from surgeons. But the pattern — consistent upcoding across multiple surgeons and time periods — suggested something more systematic. The insurer eventually recovered roughly US$1.2 million in overpayments through a civil settlement, with no admission of liability. The case was recorded in the National Association of Insurance Commissioners (NAIC) complaint database as an example of severity-level coding abuse, though the public entry notes only the settlement amount and the code category.

This type of discrepancy is not rare. Industry estimates from audit firms and government reports suggest that somewhere between 10% and 15% of inpatient claims contain some form of coding error, with a significant portion involving severity-level inflation. For a procedure like hip replacement, where Medicare's diagnosis-related group (DRG) payment can vary by thousands of dollars depending on the assigned severity tier, the financial incentive to upcode is strong.

The Diagnosis-Coding Loophole That Drives Overbilling

Severity-level coding is built into the DRG system that Medicare and many private insurers use to reimburse hospitals. Each DRG has a base payment rate, which is then adjusted upward or downward based on patient complexity — captured by codes for comorbidities, complications, and severity of illness. For hip replacements, the base DRG 470 (major joint replacement without major complications) might pay around US$12,000, while the same procedure with a complication code can jump to DRG 469, paying roughly US$16,000 or more. The difference is entirely in the coding.

The loophole is that severity codes are often subjective. A patient with mild hypertension, for example, might be coded as having a comorbid condition that raises the DRG level, even if the hypertension was well-controlled and irrelevant to the surgery. Auditors look for statistical outliers — hospitals where a high percentage of cases fall into the most severe tiers — but the line between aggressive coding and outright fraud is blurry. A 2021 report from the Office of Inspector General for the Department of Health and Human Services found that roughly 8% of inpatient claims reviewed had coding errors that resulted in overpayments, with severity-level upcoding being the most common type.

Orthopedic procedures, along with cardiac surgeries, are particularly prone to this practice because the range of severity codes is wide and the documentation requirements are complex. A surgeon's note that mentions "some difficulty with mobility" could be interpreted as a complication code by a coder looking to maximize reimbursement. The American Hospital Association has argued that coding reflects actual patient care, but critics say the system creates perverse incentives for hospitals to document conditions they might otherwise ignore.

At the same time, it is important to acknowledge that not all variation in severity coding is fraudulent. Hospitals that treat a disproportionately sicker patient population — for example, a tertiary referral center that handles complex cases from rural areas — will naturally have higher severity rates. A 2022 study in the Journal of the American Medical Association found that academic medical centers had severity coding rates roughly 20% higher than community hospitals, even after adjusting for patient demographics. This means that a simple comparison of severity rates across hospitals can be misleading without adjusting for case mix. The challenge for auditors is to distinguish between legitimate clinical variation and intentional inflation. Some insurers have begun using risk-adjustment models that account for patient comorbidities, but these models are imperfect and can themselves be gamed.

Private insurers have responded by deploying their own audit software. Companies like Optum and Cotiviti offer tools that compare a hospital's coding patterns to regional and national benchmarks. If a hospital's rate of severe-code usage for hip replacements is two standard deviations above the mean, the insurer's system automatically flags those claims for review. But these tools only catch the most egregious outliers; hospitals that upcode consistently but within a plausible range can evade detection for years.

How One Insurance SIU Caught the Pattern

The SIU that uncovered the double-coded hip replacement did not rely solely on automated alerts. The unit, which handles roughly 200 cases a year for a mid-sized regional insurer, had developed a specialized protocol for orthopedic claims after noticing an uptick in severity-code complaints from employer-sponsored plans. The lead investigator, a former nurse with certification in coding, manually reviewed a sample of 200 hip replacement claims from five hospitals in the same network. The results were striking: three of the five hospitals showed consistent patterns of upcoding, with severity levels that did not match the clinical notes.

The investigator cross-referenced billing data with medical records — a time-consuming process that required requesting paper files and digital imaging reports from the hospitals. In one case, a patient's chart described a routine recovery without complications, but the claim included a code for post-surgical infection that would have required antibiotics and extended hospital stay. There was no record of such treatment. The hospital's billing system had apparently overridden the coder's initial entry with a higher-severity code.

The turning point came when a former coder from one of the hospitals contacted the insurer through a whistleblower tip line. The coder reported that managers had pressured staff to "find" complications in patient records, even when none were documented. The tip included internal emails discussing targets for severity-code usage. The SIU used that information to expand its investigation, eventually filing a false claims act lawsuit on behalf of the federal government, since the claims involved Medicare beneficiaries as well as private-plan members.

The case was settled in 2024 for roughly US$2–4 million, with the hospital system agreeing to a three-year compliance monitoring period. The hospital did not admit liability, but the settlement terms required retraining of all coding staff and the resignation of the billing manager who had overseen the unit. Public records from the Department of Justice show similar settlements in Texas and Florida, where hospital systems have paid tens of millions to resolve allegations of DRG upcoding across multiple service lines.

From Audit to Settlement: The Legal Aftermath

The legal path from audit to settlement is rarely straightforward. Under the federal False Claims Act, insurers and whistleblowers can sue hospitals for knowingly submitting false claims. The government can intervene or decline. In the hip replacement case, the Department of Justice declined to intervene, leaving the insurer to pursue the case on its own. The insurer's legal team argued that the hospital's pattern of upcoding constituted a "reverse false claim" — that is, the hospital had underpaid its obligation to return overpayments once they were identified.

The hospital's defense centered on the argument that coding is a matter of clinical judgment, not fact. They brought in expert witnesses who testified that the severity codes were defensible under the official coding guidelines, which allow for interpretation. The insurer countered with a statistical analysis showing that the hospital's coding patterns deviated from peer institutions by a margin that could not be explained by patient demographics alone. The judge allowed the case to proceed to discovery, which is when the hospital agreed to settle.

Settlement terms typically include a monetary payment, a corporate integrity agreement, and an external compliance monitor. The monitor's role is to review a sample of claims quarterly and report any ongoing issues to the insurer. In this case, the monitor found that coding accuracy improved significantly in the first year, but that some of the same patterns reappeared in a different department — cardiology — two years later. The hospital system was required to expand its training and implement a second layer of coding review for high-dollar claims.

Public records of the settlement are available through the NAIC and state insurance department websites, though the details are often redacted. The case has been cited in industry publications as an example of how severity-level upcoding can persist even after an audit, because the incentives for hospitals to maximize reimbursement remain strong. As of late 2024, similar cases were pending in at least three other states, according to news reports from outlets like the Insurance Journal.

Why Severity Coding Remains a Blind Spot for Regulators

Medicare's audit programs, such as the Recovery Audit Contractor (RAC) program, focus largely on outright fraud — phantom billing, unbundling, and medically unnecessary services. Severity-level upcoding is harder to detect because it relies on clinical documentation that is often ambiguous. A RAC auditor reviewing a hip replacement claim would need to compare the billing code to the medical record, but the record itself may contain just enough vague language to support the higher code. The auditor has to prove that the code was not just wrong, but knowingly wrong — a high bar.

Private insurers face similar challenges. They can contract with independent review organizations to conduct pre-payment audits, but these are expensive and typically reserved for the highest-cost claims. Many insurers rely on post-payment statistical analysis, which catches patterns only after the money has been paid. By that point, recovering the overpayment requires legal action, which many insurers avoid unless the amounts are substantial. Smaller overpayments — a few thousand dollars per claim — are often written off as a cost of doing business.

There is no national database that tracks provider-level severity coding patterns. The NAIC complaint database captures some cases, but it is voluntary and incomplete. Insurers share data through trade groups like America's Health Insurance Plans, but the sharing is limited to aggregated statistics, not individual provider profiles. This means a hospital that has been flagged by one insurer for upcoding may continue the practice with another insurer that has no knowledge of the pattern.

Some regulators have proposed requiring hospitals to publish their coding accuracy rates, similar to how they publish infection rates and readmission statistics. The idea has met resistance from hospital associations, which argue that coding is too complex to be reduced to a single metric. They also point out that severity coding reflects real differences in patient populations, and that penalizing hospitals for high severity rates could discourage them from treating sicker patients. The debate is ongoing, with no consensus in sight.

What Policyholders and Employers Can Look For

For individuals covered by employer-sponsored or individual health plans, the first line of defense is the explanation of benefits (EOB) statement. The EOB lists the diagnosis and procedure codes used for each claim. Policyholders who suspect a problem can compare the severity code to their own understanding of their condition, though they should seek professional interpretation if needed. For example, a hip replacement coded as "severe" when the patient had only mild arthritis might be a red flag. The codes are not always easy to interpret, but a quick online search of the code can reveal its meaning. However, policyholders should consult with a qualified medical billing advocate or healthcare provider before drawing conclusions, as coding nuances require expert understanding.

Employers who self-fund their health plans have more leverage. They can request detailed claims data from their third-party administrator (TPA) and ask for a coding audit of high-volume procedures. Some TPAs offer analytics dashboards that show coding patterns by hospital. If a particular hospital's severity rates are consistently higher than peers, the employer can steer employees toward other facilities or negotiate lower reimbursement rates. A 2023 study by the Employee Benefit Research Institute found that employers who conducted regular coding audits saved an average of 5–7% on inpatient claims.

State insurance departments accept complaints about billing irregularities, including upcoding. Policyholders who suspect a problem can file a complaint online, and the department will review the claim and may contact the insurer. In some states, the department has the authority to order a refund if the overpayment is confirmed. The process is slow, but it creates a paper trail that can help regulators identify systemic issues.

Some insurers now require pre-certification for high-severity procedures, meaning the hospital must submit documentation before the surgery to justify the severity code. This shifts the burden of proof to the provider and reduces the chance of post-payment disputes. As of 2025, roughly 30% of commercial plans had adopted some form of pre-certification for orthopedic procedures, according to a survey by the National Association of Insurance Commissioners. The trend is growing, but it remains voluntary for most plans.

The case of the double-coded hip replacement is not an isolated anomaly. It is a symptom of a payment system that rewards aggressive coding and punishes conservative documentation. Until regulators, insurers, and providers agree on clearer standards for severity assessment, patients and employers will need to stay vigilant. The money at stake is not trivial — it flows into hospital balance sheets and out of premium dollars, affecting everyone who pays for health insurance.

This article is for informational purposes only and does not constitute legal, medical, or financial advice. Readers should consult qualified professionals for guidance on their specific circumstances.