Staff Reports
Here’s a story that should make both taxpayers and busy hospital bill clerks roll their eyes: the HHS Office of Inspector General released a data brief this week showing Medicare paid millions on outpatient drug claims where the procedure code didn’t match the drug code. In plain English, the payment system had the information it needed but didn’t bother to check it. That’s not just sloppy — it’s exactly the kind of avoidable mess Washington is supposed to stop.
What the OIG found
The OIG reviewed about 10.5 million Medicare Part B outpatient claim lines that included both a HCPCS procedure code and an NDC drug code. It found 160,918 lines where the billed HCPCS did not match the HCPCS associated with the NDC in CMS crosswalk files. Medicare paid $27.6 million on those lines. The mismatches were clustered: six HCPCS codes made up 62% of the problem, and two provider types — critical access hospitals and short‑term acute‑care hospitals — accounted for 99% of the mismatched lines. The OIG sampled 30 claims and found coding errors in most of them, but it did not model total overpayments or call this fraud. That’s the kind of careful audit language that reads like a polite wake-up call.
Why this matters for taxpayers and providers
Medicare expects providers to bill correctly. Taxpayers should expect CMS to check those bills before cash leaves the vault. When the system doesn’t cross-check HCPCS against NDCs, you get either overpayments or underpayments, both of which waste time and money. Providers get stuck fixing messy claims, and taxpayers get stuck paying for avoidable errors. The brief blames missing system edits and weak provider education — not glamorous, but fixable. Yet CMS offered only technical comments to the draft and the final brief makes no specific fix recommendations. That’s bureaucratic complacency at its finest.
What needs to change — and how to do it without breaking payroll
Fixing this doesn’t require reinventing Medicare. Start with targeted, automated edits that flag HCPCS/NDC mismatches for review before payment. Pilot those edits so legitimate claims don’t get delayed and measure false positives. Require Medicare Administrative Contractors to run targeted training for the handful of HCPCS codes and provider types responsible for most mismatches. And for heaven’s sake, set a public timetable and metrics so taxpayers can see whether controls actually work. Accountability isn’t just for hospitals — it’s for the agency running the money too.
Bottom line
Patients shouldn’t need to memorize billing codes, and taxpayers shouldn’t need an inspector general to point out that the payment system didn’t check the data it already had. This OIG brief is a clear, practical sign that a small set of smart fixes could stop millions in wasted payments and spare hospitals unnecessary headaches. CMS should stop treating this like a friendly suggestion and start acting like a manager of other people’s money. If it won’t, Congress should ask why the checks are missing and force the agency to fix them — no more vague technical comments, please.
