Skip to main content

Prior Authorization in Medical Billing: A Complete Guide

Prior authorization requirements are expanding rapidly, and a single missed approval can mean a complete denial of a high-value service. Here is how to manage it correctly.

← Back to Blog
Insurance EligibilityApril 2026 · 9 min read

What is Prior Authorization?

Prior authorization (also called pre-authorization, pre-approval, or prior approval) is a payer requirement that a provider obtain approval before delivering a specific service, procedure, or medication for it to be covered. Without it, the payer may deny the claim entirely, even if the service was medically necessary.

Requirements have expanded dramatically. Commercial payers, Medicare Advantage plans, and Medicaid managed care now apply it to a growing list of services, including many previously covered without it. Imaging, surgery, specialty referrals, infusion therapies, durable medical equipment, and high-cost medications are most commonly affected.

Why Prior Authorization Denials Are So Costly

Prior authorization denials are often hard denials, with limited or no opportunity for recovery. When a service is performed without authorization, the practice frequently absorbs the full cost. For high-value procedures, one missed authorization can mean thousands of dollars in unrecoverable revenue.

The process is also a heavy administrative burden. The American Medical Association estimates that physicians and their staff spend an average of 14 hours per week managing prior authorizations, time that could go to patient care, and smaller practices without dedicated staff feel it most.

How to Build a Systematic Prior Authorization Process

The most effective programs share these characteristics:

  • Eligibility verification identifies requirements early: Requirements are identified at eligibility verification, before the appointment
  • Dedicated authorization tracking system: Every pending authorization is logged with submission date, expected timeline, service date, and escalation triggers
  • Proactive follow-up on pending requests: Follow up within 48 hours if no acknowledgment is received, and escalate through payer-specific contacts when delays occur
  • Expiration date monitoring: Approved authorizations are tracked and renewed before the service date when needed
  • Peer-to-peer review readiness: When denied on medical necessity, your clinical team is ready to speak with the payer's medical director
  • Documentation alignment: Clinical documentation supports the payer's medical necessity criteria, reducing initial denials

Common Prior Authorization Mistakes That Cost Revenue

The most expensive errors are largely preventable. Performing a service before authorization is confirmed is the most common and costly mistake; a verbal approval means nothing without a written authorization number. Incomplete clinical documentation causes delays and rework. Unrenewed authorizations leave covered services billed as unauthorized. And procedure codes in the request that don't match what is billed trigger denials even when the authorization was approved.

The Role of Technology in Authorization Management

Electronic prior authorization (ePA) is increasingly available through payer portals and integrated EHR systems. Where available, ePA reduces processing and hold times and creates an electronic trail. Blue Bird Medserv integrates with all major payer portals and EHR authorization workflows to manage this process with maximum efficiency and zero manual bottlenecks.

What Typically Needs Authorization

Requirements vary by payer and plan and change often, so never assume. These categories commonly carry authorization or notification rules:

  • Advanced imaging such as MRI, CT and PET
  • Inpatient admissions and many outpatient surgeries
  • Specialty and infusion drugs and some injectables under the medical benefit
  • Durable medical equipment, home health and therapy visits beyond a set number
  • Sleep studies, genetic testing and some cardiology or pain procedures
  • Out-of-network services, which are more likely to need approval

Traditional Medicare fee-for-service uses prior authorization for a limited set of items and services; Medicare Advantage, Medicaid managed care and commercial plans often use it more broadly. Referrals are separate from authorization, and some plans need both.

Authorization vs. Referral vs. Notification

TermMeaningWho usually handles it
Prior authorizationPayer approval before a service, based on medical necessity and benefitsOrdering or rendering provider's office
ReferralPCP recommendation to see a specialist, required by some HMO-style plansPCP office, tracked by the specialist
NotificationInforming the payer of a service (often an admission) without full medical necessity reviewFacility or provider
Authorization numberReference issued on approval, tied to codes, dates, units and providerMust be on the claim where the payer requires it

The Prior Authorization Workflow, Step by Step

  1. Identify the requirementAt scheduling and eligibility verification, check the payer's current authorization list or portal for the planned CPT or HCPCS codes.
  2. Gather clinical supportCollect the order, diagnosis codes, recent notes, test results, prior treatments and payer forms.
  3. Submit the requestUse the payer portal, ePA, or fax or phone if that is all the payer offers. Request correct codes, units, dates and rendering provider.
  4. Log and trackRecord submission date, reference number, expected turnaround, service date and follow-up owner.
  5. Follow upIf there is no acknowledgment or decision on time, check status and escalate. Answer requests for information immediately.
  6. Record the decisionSave the approval letter or portal screen, authorization number, approved codes, units and valid dates.
  7. Match the schedule to the approvalConfirm the service, provider and facility match the approval. Request changes or extensions before the date of service.
  8. Carry it to the claimPut the authorization number on the claim when required and check billed codes and units against the approval.

Tracking Authorizations: What to Log

  • Patient, payer, plan, member ID
  • Service, CPT or HCPCS codes, units and diagnosis codes
  • Rendering provider and place of service
  • Request date, method, reference number, expected decision date
  • Status: pending, approved, denied, pended, expired
  • Approved date range, visits or units remaining
  • Next-action owner and due date

Run a daily work list sorted by service date so the nearest procedures are chased first, and review weekly anything still pending within days of service.

Denied Authorizations, Peer-to-Peer and Appeals

Read the denial letter for the reason, the criteria used, and the deadline and method for review. Common reasons are unmet medical necessity criteria, missing clinical information, and wrong codes or provider.

  1. Review the rationaleDetermine whether the issue is administrative (wrong code, missing form) or clinical (criteria not met).
  2. Fix administrative errors firstResubmit corrected information if the payer allows.
  3. Request a peer-to-peerFor clinical denials, ask promptly; many payers allow only a short window. Prepare the physician with the patient's history, failed conservative treatment, the payer's published criteria and why the service is needed.
  4. File a formal appeal if neededInclude a letter of medical necessity, supporting records and guidelines, and meet the appeal deadline. Some plans offer external review after internal appeals.
  5. Track the outcomeLog every step, and avoid treating the patient before a decision when possible.

Retroactive Authorization: Know the Limits

Some payers consider authorization after the service in narrow cases, such as emergencies, payer system errors, or retroactively established eligibility. Many will not, and where allowed there is typically a short deadline and strict documentation requirements. Check each payer's policy and treat a retro request as a last resort.

Payer Portals and Electronic Authorization

  • Keep a current list of portal logins, payer forms and phone or fax numbers, with access controlled under your security policy.
  • Check each payer's authorization lookup tool before submitting; lists change.
  • Use the portal to upload documents, view status, and save confirmations.
  • Use ePA where the payer and EHR support it; it cuts phone and fax time and leaves an audit trail.
  • Standardize a template for each high-volume procedure so the right clinical elements are attached.

Illustrative Example

Illustrative scenario, not a client result. A patient is scheduled for an outpatient MRI in ten days. At scheduling, staff find the plan requires authorization for advanced imaging, gather the order, diagnosis and prior conservative treatment notes, and submit through the portal the same day. After three days with no update, the team checks status and learns the payer is waiting for a missing note. They upload it that day, the request is approved, and the authorization number and date range are saved. Two days before the test, the team confirms the facility and CPT code match the approval. A request submitted the day before would have left no time to fix it.

Common Mistakes and Fixes

MistakeFix
Scheduling before the authorization is approvedHold the date or mark it provisional until the number is on file
Approval does not match the billed code, provider or placeCompare the approval to the order and claim before the visit and billing
Authorization expires before the serviceTrack end dates and request extensions early
Thin clinical documentationUse payer checklists and ask providers for needed elements up front
Relying on a verbal approvalAlways get a reference number and written confirmation
Missing the peer-to-peer or appeal windowTrack review deadlines the day a denial arrives

Key Takeaways

  • Check requirements at scheduling, per payer and code.
  • Track every request with an owner, due date and approved details.
  • Verify the approval matches the final order, provider and codes.
  • Act fast on denials; windows are short.
  • Do not count on retroactive authorization.