Medical Billing and Coding: A Patient-Facing Overview

Medical billing and coding are the administrative processes that translate clinical care into standardized financial transactions between healthcare providers, insurers, and patients. This page explains how those processes work, what coding systems are used, and where disputes or errors commonly arise. Understanding this framework helps patients interpret Explanation of Benefits (EOB) documents, recognize billing errors, and navigate prior authorization requirements that may affect care access.

Definition and scope

Medical coding is the conversion of diagnoses, procedures, services, and equipment into alphanumeric codes drawn from standardized classification systems. Medical billing is the subsequent process of submitting those codes to payers—insurance companies, government programs, or patients—to obtain reimbursement for services rendered.

Three coding systems form the operational core of US healthcare billing:

1. ICD-10-CM / ICD-10-PCS — The International Classification of Diseases, 10th Revision, maintained by the World Health Organization (WHO) and adapted for US use by the Centers for Disease Control and Prevention (CDC). ICD-10-CM codes diagnoses; ICD-10-PCS codes inpatient procedures. The ICD-10-CM system contains more than 70,000 diagnosis codes.
2. CPT (Current Procedural Terminology) — Maintained by the American Medical Association (AMA), CPT codes describe outpatient and physician services. The AMA updates the CPT code set annually; the 2024 edition added 349 new codes.
3. HCPCS Level II — The Healthcare Common Procedure Coding System Level II, maintained by the Centers for Medicare & Medicaid Services (CMS), covers supplies, durable medical equipment, and services not captured in CPT.

The scope of these systems extends across outpatient and inpatient care settings, from a routine office visit coded with a single Evaluation and Management (E/M) CPT code to a complex inpatient surgical episode requiring dozens of ICD-10-PCS procedure codes.

HIPAA (the Health Insurance Portability and Accountability Act, 45 CFR Parts 160 and 162) mandates the use of standardized code sets for electronic transactions between covered entities, as enforced by the HHS Office for Civil Rights and the CMS. This regulatory requirement is why a provider cannot simply describe a service in plain language on an insurance claim—it must map to an approved code.

How it works

The billing cycle follows a defined sequence from patient encounter to final payment. Each step introduces a potential point of error or delay.

1. Patient registration and insurance verification — Demographic and coverage data are collected before or at the point of service. Errors here—wrong policy number, outdated group ID—cause downstream claim rejections.
2. Clinical documentation — The treating provider documents the encounter in the medical record. Coding accuracy depends entirely on the completeness of this documentation; coders cannot assign codes for conditions or procedures not explicitly documented.
3. Medical coding — A certified medical coder (or automated coding software) reviews the documentation and assigns ICD-10, CPT, and HCPCS codes. Professional coders hold credentials such as the CPC (Certified Professional Coder) from the American Academy of Professional Coders (AAPC) or the CCS (Certified Coding Specialist) from the American Health Information Management Association (AHIMA).
4. Charge capture and claim creation — The coded encounter is converted into a claim form. Physician and outpatient claims use the CMS-1500 form; hospital inpatient and outpatient claims use the UB-04 form.
5. Claim submission and payer adjudication — Claims are submitted electronically (or, less commonly, on paper) to the payer. The payer's adjudication system checks for coverage, medical necessity, duplicate claims, and correct coding. A claim may be paid, partially paid, denied, or returned for correction.
6. Payment posting and patient billing — Payments and contractual adjustments are posted. The remaining patient balance—co-pay, deductible, or coinsurance—is billed directly to the patient, accompanied by an Explanation of Benefits from the insurer.
7. Appeals and collections — Denied claims may be appealed; unpaid balances may enter collections if unresolved.

Common scenarios

Upcoding and downcoding are two distinct coding errors with opposite financial effects. Upcoding assigns a higher-complexity or higher-value code than the documented service supports—a compliance violation that can trigger audits under the False Claims Act (31 U.S.C. § 3729), enforced by the U.S. Department of Justice. Downcoding assigns a lower-intensity code, often to avoid scrutiny, resulting in under-reimbursement.

Unbundling occurs when a provider bills separately for components of a procedure that should be submitted as a single bundled code. CMS publishes the National Correct Coding Initiative (NCCI) edits—updated quarterly—specifically to detect unbundling patterns in Medicare and Medicaid claims.

Prior authorization denials represent a frequent patient-facing collision point between coding and coverage. An insurer may deny a claim because the ICD-10 diagnosis code on the authorization does not exactly match the code submitted on the claim, even when the underlying clinical situation is identical. Patients navigating chronic disease management or specialty medical care encounters are particularly exposed to this scenario.

Surprise billing emerged as a distinct regulatory category under the No Surprises Act (effective January 1, 2022), codified at 42 U.S.C. § 300gg-111 through § 300gg-113. This law limits out-of-network charges in emergency settings and for certain scheduled services at in-network facilities, with enforcement through HHS, the Department of Labor, and the Department of Treasury.

Decision boundaries

Medical billing and coding intersects with several adjacent frameworks that define distinct operational limits:

The distinction between a coding error and a billing error matters procedurally. A coding error (wrong ICD-10 code) requires clinical documentation review and may involve a certified coder or HIM specialist to correct. A billing error (wrong date of service, duplicate claim) can often be resolved at the billing office level without clinical input.

Electronic health records systems increasingly automate code suggestions using natural language processing, but automated coding still requires human review to meet documentation accuracy standards set by CMS under the Medicare Physician Fee Schedule. CMS publishes the Medicare Claims Processing Manual (Publication 100-04) as the authoritative operational guide for claim submission requirements.

Patients disputing a bill should request an itemized statement listing each CPT and ICD-10 code billed, the associated charge, and the payer's adjudication decision. Patient rights in healthcare frameworks—including those established under the ACA and HIPAA—support access to this documentation. When a balance involves a government program, CMS maintains a dedicated appeals framework: Medicare beneficiaries have 5 levels of appeal, from redetermination through federal court review, as described in CMS Medicare Appeals guidance.

References

• Centers for Medicare & Medicaid Services (CMS) — ICD-10
• CDC National Center for Health Statistics — ICD-10-CM
• American Medical Association — CPT Code Set
• CMS — Healthcare Common Procedure Coding System (HCPCS)
• CMS — National Correct Coding Initiative (NCCI)
• CMS — Medicare Claims Processing Manual (Publication 100-04)
• CMS — Medicare Appeals
• HHS — HIPAA for Professionals
• U.S. Department of Justice — False Claims Act
• American Academy of Professional Coders (AAPC)
• [American Health Information Management Association (AHIMA)](https://www.