Most California medical practices facing a Medi-Cal audit or a federal fraud investigation didn’t set out to commit billing fraud. The problem usually starts with the two coding patterns that happen quietly inside the normal workflows: upcoding and unbundling.
Upcoding means billing a higher-paying code than the medical record supports.
Unbundling means billing separate codes for procedures that should be submitted together under one code.
Both can happen without anyone on the staff realizing it. For example, it can happen due to a missed review step, a copied EHR note, or even a code pair that slipped past without an NCCI edit check.
Under the California False Claims Act, the intent does not matter. So, a practice can still face civil liability for claims.
This guide covers what California and federal rules govern upcoding and unbundling, how these errors enter normal billing workflows, penalties a practice faces, and internal audit steps to catch the problems before regulators do.
What Laws Actually Govern Upcoding and Unbundling
California providers face two layers of fraud liability for billing errors: state law covering Medi-Cal claims and federal law covering Medicare claims. Both can apply to the same practice, and neither requires proof that the provider intended to commit fraud.
The California False Claims Act
The California False Claims Act (Government Code §§ 12650–12656) applies to any false or fraudulent claim submitted to a state-funded program. It also includes Medi-Cal and covers upcoding and unbundling directly, i.e., a provider who submits claims for services not supported by medical records, or who bills bundled procedures separately to increase reimbursement, faces liability under the CFCA.
The law also enables qui tam whistleblower lawsuits. It means that the current or former billing staff, coders, or clinical employees can file suit on behalf of the state and receive 15-30% of the government’s recovery. Most major California billing fraud cases begin this way, not through external audits.
How the federal False Claims Act creates parallel exposure for Medicare claims
The federal False Claims Act (31 U.S.C. §§ 3729–3733) creates the same exposure for Medicare claims that CFCA creates for Medi-Cal. A California practice billing both programs can face investigations from state and federal authorities over the same coding error.
Federal detection is automated. OIG (Office of Inspector General) and RACs (Recovery Audit Contractors) use statistical analysis to flag providers whose coding patterns deviate.
CMS also uses data analysis and AI-based tools to identify unusual billing patterns. For example, a pattern of consistently billing E/M Level 4 when peers bill Level 3 can trigger a pre-payment review. This means suspicious claims can be flagged even before payment is made.
Upcoding vs. Unbundling: How California Practices Get Flagged Without Knowing It
People often use upcoding and unbundling interchangeably, but both of them are different terms. They are involved in different problems and require different solutions.
What upcoding means and the most common ways it happens unintentionally
Upcoding means submitting a CPT or E/M code that represents a more expensive or complex service than what was documented. Even if the error is unintentional, it can lead to claim denials, repayment demands, and false claims liability.
For example, billing E/M Level 4 (99214) visits while your system supports only Level 3 (99213), billing a complex procedure while in reality a simple procedure was done, or copy-pasting EHR notes that carry forward old diagnoses and make it appear every listed condition was actively managed during the visit.
The Office of Inspector General (OIG) warns that some EHR systems may encourage higher-paying codes. Regular coding reviews can help you catch such errors before you submit a claim.
What unbundling means and why NCCI edits exist to prevent it
Unbundling means billing separate CPT codes for procedures that should be submitted together under a single bundled code.
For example, billing a surgical incision and wound closure as two separate line items when both are included in one procedure code. The result is a higher total reimbursement than the bundled rate would have paid. This is what the auditors look for.
The National Correct Coding Initiative (NCCI) maintains code-pair edits that automatically flag or deny unbundled claim combinations. If your billing system does not check claims against current NCCI edits before submission, unbundled codes can go out on hundreds of claims before anyone notices the pattern.
Whether intentional or accidental, bundling can lead to audits, repayments, and compliance issues, creating the same false claims exposure as deliberate fraud.
The EHR documentation trap that produces unsupportable codes
Many coding errors occur due to copy-pasting EHR notes from previous visits. When a provider carries forward old problem lists, diagnoses, or review -of-systems entries without updating them, the record makes the visit more complex.
The billed E/M level then reflects the inflated documentation rather than the care that was delivered.
So, if the documented complexity does not match the actual time spent or the medical decision-making involved in that specific visit, the code is unsupported.
During audit review, match the medical record with the code that was billed. If the documentation does not support the billed service, the claim can be denied. Regular documentation reviews can help you sort out these matters.
Practices without a documentation review step carry compliance liability on every claim that goes out unchecked.
A virtual medical assistant dedicated to documentation workflows can maintain that review step consistently, making sure records are updated before codes are assigned.
Documentation and Coding Standards That Lead to Upcoding Risk
Federal rules set the baseline, but California has its own medical billing and coding requirements that directly affect how upcoding and unbundling errors are identified and penalized. Understanding these rules can help practices avoid compliance issues and billing errors.
Documentation standards that directly determine whether a code holds up
The rule auditors apply is simple: medical records must support the code that was billed. Under the 2021 AMA E/M guidelines, providers document the level of service using one of two methods, i.e., time spent with the patient or the complexity of medical decision-making (MDM).
If the chart shows a 10-minute straightforward visit but the claim carries an E/M Level 4 code that requires either 30–39 minutes or moderate MDM complexity, the code is unsupportable, and the claim fails review.
California also requires providers to provide itemized billing statements when patients request them. Failing to provide clear billing statements can lead to compliance issues and patient complaints.
How Medi-Cal’s documentation rules create separate upcoding exposure
Medi-Cal has some specific requirements that are different from Medicare and can create billing risks.
- Some services require prior authorization through a TAR or SAR. Submitting claims without approvals can lead to denials, even if the coding is accurate.
- Medi-Cal reimbursement rules change over time. Practices that use outdated fee schedules create rate mismatches that flag during reconciliation. AB 118, effective January 1, 2024, raised Medi-Cal reimbursement for primary care, OB, and outpatient mental health to 87.5% of the Medicare fee schedule.
- The Department of Health Care Services (DHCS) regularly updates billing policies. Providers should review current guidance to avoid errors during audits.
Penalties for Upcoding and Unbundling Under California Law
Federal and California law both impose penalties that multiply the original overpayment, and in serious cases, providers face criminal prosecution and permanent exclusion from government healthcare programs.
Civil and criminal consequences under the federal and California False Claims Acts
Under the Federal False Claims Act, each false claim triggers three layers of financial liability.
- First, the provider must repay the overpaid amount.
- Second, the government applies treble damages; three times the total loss caused by the false claims.
- Third, civil penalties apply per claim, currently exceeding $27,000 per false claim submitted.
For a practice that upcoded 200 claims over 18 months, the per-claim penalties alone can reach millions before treble damages are calculated.
Criminal prosecution under 18 U.S.C. §1347 carries up to 10 years of imprisonment and fines up to $250,000 for individuals.
Real California enforcement cases that show the financial scale
Enforcement cases show you how costly a penalty structure can be for a practice. Tenet Healthcare paid more than $900 million in 2006 to resolve federal False Claims Act allegations involving improper billing practices, kickback violations, multiple facilities, including California hospitals. The case remains one of the largest healthcare fraud settlements in U.S. history.
In California specifically, Attorney General Rob Bonta secured a $15 million settlement against Sweetwater Care, a skilled nursing facility chain, for Medi-Cal billing fraud.
Separately, SuperCare Health paid $3.31 million to resolve Medi-Cal fraud allegations brought by the California Attorney General’s office.
How to Identify and Correct Upcoding and Unbundling Risk in Your Practice
Understanding the risk is the beginning of mitigating it. The next step is to review your billing processes, finding potential issues and correcting them before they become financial concerns for your healthcare practice.
How OIG, RAC auditors, and Medi-Cal reviewers detect billing patterns
Auditors don’t read every chart manually; they use data and billing patterns to find unusual claims. There can be regular use of higher-paying codes more than normal.
CMS, RAC auditors, and Medi-Cal reviewers use data analysis to identify claims that may need further review. Internal reviews and regular coding checks can help practices find errors before they become larger compliance issues.
Five internal audit steps your billing team can run immediately
You can audit your billing team using 5 internal audit steps given below:
- Pull a 90-day E/M distribution report: Check recent E/M claims and compare your use of higher-level codes with similar providers to identify unusual patterns.
- Check top 20 CPT code pairs: Review commonly billed code combinations using NCCI edits to find procedures that may have been billed separately when they should be combined.
- Review high-level E/M claims: Check a random sample of 10-15 patient charts to confirm the documentation supports the billed service level.
- Review modifier use: Make sure modifiers like -25 and -59 are only used when the medical record supports them.
- Check filing deadlines on open claims: Review open claims to make sure they are submitted before Medi-Cal 180-day window, Medicare 12-month window, or commercial payer deadlines expire.
These five steps address the compliance side, but upcoding and unbundling errors also affect your overall revenue cycle, from initial claim submission through final payment.
When to escalate to an external medical billing compliance audit
An outside audit can help when internal reviews are not enough. Consider one if your practice recently added providers, changed EHR systems, received an overpayment notice, or has never completed a formal coding review.
A proactive audit can identify billing errors early and create documentation showing that your practice took steps to maintain compliance.
Protect Your California Practice Before an Audit Finds the Problem First
Many practices facing upcoding or unbundling investigations did not intend to commit fraud. The pattern is almost always the same: EHR systems auto-selecting codes without documentation review, copy-paste notes inflating visit complexity, or NCCI edits not applied consistently across high claim volumes.
A proactive internal audit, conducted now and documented properly, does two things: it finds and corrects errors before they become enforcement targets, and it creates a compliance record that matters significantly if questions are ever raised. The five-step checklist above is where to start. If your practice has changed EHR systems, added providers, or never had a formal coding review, an external audit is the next step. A dedicated virtual medical biller can also help review claims and verify coding accuracy against documentation before submission, catching errors at the point where they’re cheapest to fix
Most Frequently Asked Questions
What laws govern upcoding and unbundling in California?
Upcoding and unbundling in California are governed primarily by the California False Claims Act (Government Code §§ 12650–12656), which covers Medi-Cal fraud, and the federal False Claims Act (31 U.S.C. §§ 3729–3733), which covers Medicare billing.
Enforcement agencies include the Department of Health Care Services (DHCS), the California Attorney General’s office, OIG, CMS, and Recovery Audit Contractors (RACs).
Is upcoding illegal in California even if it was accidental?
Yes. The California False Claims Act does not require proof of intent. A practice can face false claims liability if it knowingly submits incorrect claims or ignores signs that claims may be inaccurate, even without intending to commit fraud.
What is the difference between upcoding and unbundling in medical billing?
Upcoding means submitting a CPT or E/M code that represents a more expensive or complex service than what the medical record supports. Unbundling means billing separate codes for procedures that should be submitted together under a single bundled code.
Both result in higher reimbursement than the provider is entitled to, and both trigger liability under the California False Claims Act and federal False Claims Act regardless of intent.
How do I know if my practice is accidentally unbundling claims?
Review your commonly billed CPT code pairs using an NCCI edit checker. If procedures that should be billed together are being submitted as separate charges, your practice may be unintentionally unbundling claims.
Can I be held liable for billing fraud if my EHR or billing software generated the codes?
Yes. The responsibility remains with the provider or practice that submits the claim, not the software. If the documentation does not support the billed code, the practice must identify and correct the issue before submission.
What penalties can a California medical practice face for upcoding?
California practices that upcode face penalties on three levels.
- First, they must repay the overbilled amount.
- Second, the government applies treble damages, three times the total loss.
- Third, civil fines exceed $27,000 per false claim under both the California False Claims Act and federal False Claims Act.
A practice with hundreds of upcoded claims can face millions in penalties before repayment is even calculated. In serious cases, criminal prosecution under 18 U.S.C. §1347 carries up to 10 years imprisonment. Providers can also lose the right to bill Medicare and Medi-Cal entirely.
