Underpayment vs Denial Risk in Biologic Claims

Denial risk and underpayment risk in biologic claims look like the same problem from a distance. Denial risk and underpayment risk in biologic claims look like the same problem from a distance, but they are not: one blocks payment before it happens; the other lets payment through and quietly shorts it. One blocks payment before it happens; the other lets payment through and quietly shorts it. Practices that route both through the same queue, the same staff, and the same denial report end up managing neither one well, and the gap between billed and collected keeps growing without anyone noticing until the money's already gone.

Biologic claims carry a different risk profile than routine E/M or procedural billing from the start. The drug cost, the authorization burden, and the reimbursement math all run on separate rules. In a buy-and-bill model, the practice has already paid for the drug before a single claim goes out the door. That timing turns a denial into a cash-flow emergency and an underpayment into a quiet, permanent hit to margin. For rheumatology practices, where biologic therapies make up somewhere in the range of 60 to 70% of total revenue, neither risk is a rounding error. Both sit close enough to the center of the business that getting them wrong threatens the practice itself.

How denial risk in biologic claims works, and where it originates

Denial rates have been climbing for years, and the trend line isn't flattening. Experian Health's State of Claims survey, which polled 250 revenue cycle leaders, found 30% of providers reporting denial rates above 10% back in 2022. That number rose to 38% in 2024 and 41% in 2025. A relevant industry association considers 5 to 10% the acceptable range. Practices are running well past it, and for specialty medications specifically, denial rates climb even further, into the 25 to 35% range.

A denial doesn't happen at the moment it shows up on an aging report. By the time it appears there, the decision that caused it happened days, sometimes weeks, earlier. Denial risk is manufactured upstream, long before a claim touches a biller's desk.

Authorization gaps are one of the biggest culprits. Experian's 2025 data has 35% of providers citing authorization as a major denial trigger. A prior auth that lapses, that lists the wrong rendering NPI, or that doesn't reflect a change in the treatment plan gets auto-denied under current payer logic, no human review required.

Missing or inaccurate claim data ranks even higher, cited by half of providers as the top denial factor, with registration errors adding another 32%. Even a clean prior authorization doesn't guarantee safety: research cited by the American Medical Association found 38% of initially approved treatments later face medical necessity challenges that require an appeal anyway.

Documentation mismatch is a newer, sharper threat. Payers now run natural language processing tools that compare clinical notes against CPT and ICD-10 codes before a human ever looks at the claim. Vague language, or a missing comorbidity note that used to slide through, now triggers an automatic denial. High-value claim categories, like biologic infusions, are broadly reported to carry meaningfully higher denial rates than routine E/M claims as a result.

Payer-specific logic adds another layer. UnitedHealthcare has substantially expanded its unbundling detection logic, adding large numbers of new code pairs to its detection list in recent quarters. NPI mismatches, date-of-service range mismatches, and place-of-service mismatches now get flagged and denied without anyone at the payer reading the claim.

Step therapy compounds all of it. Insurers often require patients to fail on one or more cheaper agents before approving the biologic a clinician actually wants to prescribe. Each failed trial takes months to document and complete, and every transition between drugs creates a fresh window where authorization can lapse or documentation can fall out of sync, opening the door to another denial.

Put together, denial risk is built at intake, in benefits verification, inside the authorization workflow, and in how clinical documentation gets written. Billing doesn't cause most denials. Billing just discovers them.

The financial scale of denial exposure in infusion, and why appealing is not a recovery strategy

The dollar figures here are not small. A single denied rituximab infusion carries $6,000 to $8,000 in lost revenue. Other biologic infusions run $2,000 to $8,000 per denied claim, depending on the drug.

Scale that across a practice doing 200 infusions a month at a 30% denial rate, and the annual revenue at risk is between $4.32 million and $5.76 million. The average rheumatology practice sees 30 to 50 denials monthly, which translates to $720,000 to $4.8 million sitting at risk every year.

Appeals sound like the obvious fix, but the math doesn't support leaning on them. A traditional appeal eats 4 to 6 hours of staff time per case and takes 45 to 90 days to resolve, start to finish. MGMA data shows practices only appeal 25 to 40% of their denials. Most denied claims never get worked at all because the staff time an appeal demands outweighs what the practice expects to get back.

So if most denials sit unappealed, and the ones that do get appealed take up to three months to resolve, a revenue strategy can't be built around appeal volume. Prevention is the only lever that consistently moves the number. This isn't just a financial problem either: 91% of infusion providers report that authorization burdens hurt patient care directly, and insurance barriers are widely reported to cause regular treatment delays for rheumatology patients. Denial risk fails on two fronts at once, the balance sheet and the exam room.

Prior authorization as the highest-leverage denial prevention point in recurring infusion treatment

Authorization is revenue protection. It's revenue protection, full stop, and the claim's outcome is usually locked in before the patient ever sits down for the infusion.

KFF data shows 99% of Medicare Advantage plans require prior authorization for physician-administered drugs billed under the medical benefit. There's no equivalent to the protections Part D drugs get. And while 96% of PA requests eventually get approved, the approval rate isn't where the damage happens. Delay is.

A specialty drug prior auth can push treatment back by as much as 31 days, according to an article in the Journal of Managed Care & Specialty Pharmacy. In pediatric inflammatory bowel disease, insurance-related delays have been tied to worse outcomes or reduced quality of life in 60% of affected patients, with 21% of those facing biologic coverage delays ending up hospitalized.

Reauthorization is an underappreciated risk, too. Payers increasingly reopen authorizations on infusion therapies that have been running for months. Miss an expiration date, and a claim that's been clean for a year suddenly denies for no clinical reason at all.

CMS tried to address part of this. The CMS-0057-F final rule caps standard PA decisions at 7 calendar days and urgent reviews at 72 hours. But the rule doesn't cover the full category of physician-administered Part B infusion drugs, leaving exactly the gap that matters most for infusion practices wide open.

The documentation failures that trigger PA denials tend to repeat:

• Step-therapy evidence missing, no record of the required DMARD failure before biologic approval
• Disease activity scores not recorded, or recorded but falling short of payer-specific thresholds
• Off-label age or indication used without clinical rationale mapped explicitly to payer criteria
• A treatment plan change that never got reflected in the active authorization on file

Electronic prior authorization moves faster than manual submission, which can take one to three weeks or longer. But speed alone doesn't solve the need to track authorization status continuously after approval. Someone has to track status and expiration dates continuously, because an authorization approved cleanly at intake can lapse or be invalidated by a treatment change discovered months down the line.

How underpayment risk in biologic claims differs structurally from denial risk

A denial announces itself. The claim bounces back, a denial code posts, and the aging report flags it, so someone in the billing office sees it.

An underpayment does none of that. Payment posts, the claim closes, and the shortfall lives quietly inside the remittance data, invisible unless someone actually reads the line items.

Underpayments enter biologic billing at different points than denials do. A payer might apply the wrong fee schedule or the wrong contract tier. A J-code might get reimbursed at fewer units than billed, with no denial code attached at all, just a smaller check. Medicare Part B is supposed to pay average sales price plus a statutory percentage, but sequestration reduces the effective rate below that nominal figure, a gap the practice has to catch in the remittance itself, since no denial queue will ever surface it. Modifier JW, used for wasted drug from single-dose vials, gets applied incorrectly often enough that payers reduce or drop the wastage reimbursement while still paying the administered dose, a partial underpayment that reads on the surface like a normal payment. Bundling reductions work the same way: the line item gets cut, but the claim still shows as paid.

None of these produce a denial code. None of them trigger an aging flag or an appeal deadline. The workflow just moves on, and the money stays gone.

Recovery windows for underpayments are often shorter than practices assume, and once an underpaid claim ages past its contractual dispute deadline, it turns into a permanent write-off rather than a balance still on the books. Without someone reading remittance at the line level, underpayments pile up quietly across hundreds of claims and turn into a structural loss in margin, one that never appears as a single dramatic number, just as a slow bleed.

J-code billing mechanics and where underpayment errors enter the claim

Buy-and-bill demands precision at every step, requiring the right J-code, the right NDC, the right unit count, and the right administration codes. A mistake anywhere in that chain produces either a denial or an underpayment, and it's often hard to predict which one in advance.

Unit calculation is one of the most common underpayment vectors. J-code descriptors specify an exact metric unit, something like "per 10 mg," and billers have to convert the total dose administered into the right multiplier. Forty milligrams of a drug billed "per 10 mg" means 4 units, not 40. Get that conversion wrong, and it produces high-dollar underpayment across oncology and infusion billing. The error usually is the number typed next to the code. It's the number typed next to it.

Wastage documentation adds another layer. Modifier JW applies to drug discarded from single-dose vials, and payers apply it strictly. If the wastage documentation is missing or incomplete, the payer just reduces reimbursement on that portion, no denial, no flag, just less money. The same documentation gaps that cause underpayments, dosage accuracy, vial wastage, and medical necessity, are the kinds of issues that draw audit attention on high-cost biologics.

Code volatility doesn't help. The HCPCS Level II list added 160 new codes and deleted 101 in 2026. A practice running on outdated code tables ends up billing deleted or superseded codes and gets paid less, or paid wrong, with no clean denial signal pointing at the cause.

The dollar exposure is concrete. J9035, ten milligrams of bevacizumab, averages around $73.20 per unit under the 2026 Medicare Part B national payment limits, with commercial reimbursement scaling higher depending on the specific contract. The space between what a contract actually requires and what a payer actually remits is exactly where underpayment lives, quietly, claim after claim.

Infusion hierarchy errors compound all of this. CPT rules require billing infusion services in a defined hierarchy, and applying the wrong initial service code shifts the payment basis for the entire encounter. Pick the wrong initial service code because that hierarchy got misapplied, and the payment basis for the entire encounter shifts, not just one line item.

None of this is theoretical to auditors. An OIG audit found $313 million paid out for 3.3 million intravitreal injections, with $124 million of those payments flagged as at risk for noncompliance. The coding precision gaps that create underpayments are the same gaps that draw federal audit attention.

Remittance reconciliation as the detection method underpayment requires, and why denial workflows cannot provide it

Denial management works because a code, a rejection, or a flag on an aging report triggers it. Existing billing workflows are built to surface that automatically.

Underpayment is the absence of a flag, and most billing workflows read the absence of a flag as "claim closed, move on." It's the absence of a flag, and most billing workflows read the absence of a flag as "claim closed, move on." That's the structural mismatch. The tool built to catch denials is structurally blind to underpayments, because underpayments don't look like problems. They look like payments.

Line-level remittance reconciliation is the only fix, and it means comparing what was billed, what the contract specifies, and what actually got paid, line by line, on every claim, going beyond a glance to confirm a payment landed. That reconciliation has to catch a payer paying fewer units than billed without denying anything, a lower fee schedule applied than the contract specifies, wastage reimbursement quietly excluded, a bundling reduction on administration codes that should have paid separately, and ASP-based payments calculated off the wrong base, since the post-sequestration effective rate falls below the nominal statutory percentage and has to be checked against published payment limits directly.

Timing matters here too. Denial appeals run on defined timely filing windows, with 45 to 90 day resolution timelines that are annoying but at least predictable. Underpayment disputes run on contractual timelines that are often shorter and far less visible, so the lag between when the underpayment happens and when someone catches it has to stay short, or the recovery window closes before anyone notices there was ever a problem.

Underpayment recovery needs its own standing workflow, staffed by people whose job is reading remittance at the line level, rather than relying on a downstream glance at claims that already denied. Practices that dump every payment variance into the denial queue miss underpayments completely. The claim is marked paid. It ages out of anyone's attention. And the shortfall becomes permanent before anyone ever looked at what the payment actually contained.

How denial patterns and underpayment patterns differ by payer

Treating "payer risk" as one bucket erases the pattern that actually matters, because denial behavior and underpayment behavior vary payer by payer, and neither looks the same from one insurer to the next.

UnitedHealthcare's pattern centers on automated matching logic. The 847 new code pairs added to its bundling detection list in the third quarter of 2025 work alongside tightened authorization-to-claim matching as part of its automated adjudication upgrade. NPI mismatches, date-of-service range mismatches, and place-of-service mismatches now auto-deny with no human review involved. For a six-provider oncology practice, that adds up to an estimated $45,000 to $120,000 a year in exposure just from UHC's retroactive prior authorization matching denials.

BCBS plans, working through AIM Specialty Health, updated their clinical criteria guidelines in the second quarter of 2025, a shift that changes what documentation counts as sufficient for medical necessity review on a given biologic.

None of these patterns look alike, and none of them respond to the same fix. A practice that lumps every payer into one denial report and one underpayment spreadsheet loses the payer-specific signal that actually explains why the numbers move the way they do. Denial risk gets stopped at authorization and documentation. Underpayment risk gets caught at the remittance line. Confusing the two, or worse, managing them through the same queue with the same staff, is exactly how a six-figure gap in annual revenue stays invisible until it's too large to ignore.