Medicare telehealth billing continues to be a key compliance concern for health care providers, physician practices, and telemedicine companies. As federal agencies review telehealth claims for fraud, waste, and abuse, the Health and Human Services Office of Inspector General (OIG) has highlighted billing patterns that may increase enforcement risk. By understanding these OIG telehealth billing risk factors, providers can strengthen compliance programs, reduce False Claims Act exposure, and better prepare for audits or investigations.
OIG Telehealth Billing Risk Factors for Medicare Providers
The OIG’s seven telehealth billing risk factors are best understood as data-driven warning signs rather than conclusions of wrongdoing. Each factor points to a pattern that may be inconsistent with ordinary telehealth utilization, documentation practices, coding behavior, or medical necessity support. For providers, the key compliance question is not simply whether one of these patterns exists, but whether the organization can explain and support the pattern with accurate coding, complete records, appropriate supervision, and a legitimate clinical rationale.
- Facility and duplicate billing concerns: Billing both a telehealth service and a facility fee for most visits may raise questions about whether the patient and provider were actually in separate locations, whether an originating site fee was appropriate, and whether claims were submitted consistently with Medicare telehealth rules. Similarly, billing both Medicare fee-for-service and a Medicare Advantage plan for the same service can suggest duplicate payment risk, coordination problems, or weaknesses in claims controls.
- High-cost or unusually intensive billing: Consistently billing every telehealth encounter at the highest and most expensive level may indicate possible upcoding if the documentation does not support the level selected. Billing a high average number of hours per visit can also draw attention because it may appear inconsistent with typical telehealth encounter patterns. Providers should be prepared to show that time-based coding, medical decision-making, and documentation standards were applied correctly.
- High-volume telehealth billing: Billing telehealth services on an unusually high number of days in a year or for an unusually large number of beneficiaries may suggest that a provider’s volume is outside expected norms. High volume alone does not establish misconduct, especially for large practices or telehealth-focused models, but it may prompt reviewers to examine scheduling practices, provider availability, patient relationships, documentation quality, and whether services were actually furnished as billed.
- Telehealth billing combined with medical equipment orders: Billing telehealth services while also ordering medical equipment for a high proportion of beneficiaries can raise concerns about whether telehealth encounters were being used to generate equipment orders rather than to provide medically necessary care. This factor is particularly important where telehealth arrangements involve outside marketing companies, lead generators, equipment suppliers, or compensation structures that could create kickback or medical necessity concerns.
Why These Risk Factors Matter in a Telehealth Compliance Review
These risk factors matter because they reflect the types of patterns enforcement agencies can identify through claims analytics. A provider may have a legitimate explanation for an outlier pattern, such as a specialized patient population, a high-volume telehealth model, or temporary operational changes during the pandemic. Even so, the organization should be able to demonstrate that its billing practices are supported by contemporaneous documentation, compliant coding decisions, and policies that align with Medicare requirements.
From a legal risk perspective, unexplained patterns may increase exposure in audits, overpayment reviews, False Claims Act investigations, and matters involving alleged kickbacks or medically unnecessary services. Providers should therefore treat the OIG’s measures as a practical roadmap for internal monitoring rather than as a checklist used only after an inquiry begins.
How OIG Uses Medicare Data to Identify Telehealth Billing Risk
The OIG based its review on Medicare fee-for-service claims data and Medicare Advantage encounter data from the first year of the COVID-19 pandemic, covering March 1, 2020, through February 28, 2021.
Telehealth Use Increased Sharply During the Pandemic
During that period, telehealth use increased dramatically. According to a separate OIG report, two out of every five Medicare beneficiaries received care through telehealth, representing approximately 88 times more telehealth encounters than before the pandemic.
To develop its risk measures, the OIG analyzed billing data from approximately 742,000 providers who billed for telehealth services and considered information from fraud investigators. Based on that review, the agency identified seven measures that may help flag potential telehealth fraud, waste, or abuse.
Telehealth Compliance Steps for Providers | Telehealth Billing Risk Factors
Importantly, the OIG report does not conclude that any particular telehealth provider engaged in fraudulent or abusive conduct. Rather, the indicators may be used to support further review or investigation of provider billing practices. Providers should evaluate whether their own claims data shows similar patterns and, if so, whether those patterns can be explained by patient mix, service lines, staffing models, coding rules, or other legitimate factors. Internal audits should include a review of encounter documentation, time records where relevant, medical necessity support, modifier usage, place-of-service coding, duplicate billing controls, and relationships with third parties involved in telehealth operations.
Where weaknesses are identified, providers should consider corrective action, including education for billing staff and clinicians, updated telehealth policies, repayment analysis where appropriate, and enhanced monitoring of high-risk claim categories. Because regulators increasingly rely on data analytics to detect outlier billing, compliance programs should also use their own data proactively to identify and address risk before an audit, subpoena, or contractor review occurs.
Key Takeaway for Health Care Organizations
For health care organizations that bill Medicare for telehealth services, the OIG’s guidance offers a useful framework for evaluating billing risk. A proactive review of telehealth coding, documentation, claims patterns, and medical necessity support can help providers identify issues before they become enforcement problems.
How Counsel Can Help Address OIG Telehealth Billing Risk Factors
Given the OIG’s continued focus on telehealth program integrity, providers should not wait for a government audit or contractor inquiry to assess their risk. Experienced health care counsel can help organizations review telehealth billing data, evaluate documentation and coding practices, assess relationships with vendors and referral sources, and develop a practical response plan if potential issues are identified. Counsel can provide you with legal guidance as you assess the OIG Telehealth Billing Risk Factors.
Health care organizations that identify possible concerns telehealth billing risk factors should consider taking prompt, privileged steps to understand the scope of the issue, preserve relevant records, and determine whether corrective action, repayment analysis, or additional compliance measures are appropriate. Proactive legal and compliance review can help reduce enforcement risk and position providers to respond more effectively if questions arise from Medicare contractors, the OIG, or the Department of Justice.
If your organization bills Medicare for telehealth services, now is the time to evaluate whether your claims data, documentation, and compliance controls align with OIG expectations. Contact our health care regulatory and compliance team to discuss a targeted telehealth billing risk factors review or to develop a strategy for responding to audit, investigation, or overpayment concerns.
