Prior Authorization Approval Does Not Guarantee Payment

Authorization checks necessity before the service. Adjudication checks coverage, codes and dates afterward, where most post-approval denials begin.

Altair Health 18 September 2026

A prior authorization approval means the payer agrees the service looks medically necessary. It does not mean the payer will pay for it. Two different questions, decided by two different processes, on two different timelines, and the gap between them is where clean revenue goes missing.

Most practices treat the approval as the finish line. The payer treats it as a reservation. It holds the table. It says nothing about the meal.

Two questions, two systems

The authorization review happens before the service, on whatever clinical information was submitted at that moment. It asks one question: does this look necessary?

Adjudication happens after the service and asks different ones. Eligibility on the date of service. Whether the plan covers the service at all. Whether the codes, units, place of service and rendering provider match what was authorized. Whether the documentation supports the level of care billed. A claim can fail any of those with the authorization sitting approved in the payer's own system.

Most payer contracts and remittances say so in a line billing staff stopped reading years ago: prior authorization is not a guarantee of payment. A practice that treats the approval as the end of the work has built the denial into its own process before the claim exists.

What the first public transparency data shows

Until this year, nobody outside the payers had insurer-level visibility into how often prior authorization requests are denied outside Medicare Advantage, where CMS has collected the data since 2019. The CMS Interoperability and Prior Authorization final rule changed that. Medicare Advantage organizations, Medicaid and CHIP programs, and qualified health plan issuers on the federal exchanges had to post their 2025 prior authorization metrics by 31 March 2026.

KFF analyzed the 2025 postings from the largest insurers in each market. Standard prior authorization denial rates averaged 12% in Medicare Advantage, 14% in Medicaid managed care and 18% in the ACA marketplace: between one in eight and one in five requests, at the biggest insurers in the country.

The averages hide the operational number, which is how far insurers sit from each other. In Medicare Advantage, Elevance Health denied 5% of standard requests and UnitedHealth Group denied 17%, more than a threefold gap between two plans under the same federal rules. In the marketplace, GuideWell denied 3% and Centene 25%. A spread that wide is not about how sick anyone's members are. It is payer policy and internal process.

The overturn rates are the part to read twice. Of the denials that were appealed, 67% were overturned in Medicare Advantage, 47% in Medicaid managed care and 43% in the marketplace, per KFF. Centene's Medicare Advantage plans overturned more than nine in ten. UnitedHealth Group's Medicaid plans overturned 81%. In Medicare Advantage the first decision was wrong more often than right, and it held only when nobody appealed.

Two limits on that data. First, these are denial rates on the authorization requests themselves. They say nothing about claims denied after an authorization was approved, which the public metrics do not report at all. Second, the rule does not reach self-funded employer plans under ERISA, so a practice with a heavy self-funded book has none of the new visibility and none of the new deadlines.

The conditions attached to an approval

An authorization is a narrow window with conditions on every edge, and each condition is a place the claim can fail after necessity was never in question.

Units come first. In physical therapy, home health and infusion, visit counts are fixed in advance, and a claim that bills past the authorized count is denied for the overage. Place of service is next: an authorization for an outpatient setting does not cover the same service delivered by telehealth, and a single wrong digit in that field is an automatic denial. Dates of service outside the authorization's effective window, sometimes by a day, are treated as unauthorized care.

The rendering provider has to match. A service delivered by one clinician and billed under another NPI is denied because the authorized provider on file is not the billing provider on the claim. Group practices with mid-level providers, locum coverage or split-care arrangements produce this one constantly.

And the codes have to match exactly. A different diagnosis code, a modifier the payer does not accept for that place of service, a procedure code the payer considers bundled: any of them denies regardless of what was authorized. Our prior authorization guide covers how those requirements differ by payer.

Coverage is a different test from necessity

A service can be authorized because it is clinically necessary and denied at adjudication because the patient's plan excludes it, or the patient has hit a benefit limit, or eligibility changed between the authorization date and the date of service. Authorization checks necessity. Adjudication checks coverage. Passing one says nothing about the other.

Then there is the retrospective review. The payer approves, the practice renders care in good faith, and weeks later the payer reviews the records and reverses the approval. It does happen, the contract language reserves the right to do it, and the only defense is a clinical record that supports the level of care billed on the day it was billed.

What to do the day the approval arrives

Treat the authorization document as a checklist. The authorized NPI, the approved codes, the unit count, the place of service, the effective and expiration dates: each one maps onto the claim template before the service is rendered, not after.

Re-verify eligibility on the date of service. Coverage changes between the authorization date and the visit more often than practices expect, and a flawless authorization on a lapsed policy pays nothing.

For multi-visit care, track units against the approved count and start re-authorization before the count runs out, not after the denial arrives asking for it. Keep the documentation in step with the authorized level of care for the whole episode, because a note that drifts from what was authorized cannot be repaired afterwards without a formal appeal. And run the final codes against the authorization's codes before submission, since payer systems match those fields with no tolerance for drift.

None of it holds without memory. The payers that run retrospective reviews, the ones that read place of service narrowly, the one that changed its bundling edits last quarter: that knowledge compounds, but only if someone records it and applies it claim by claim instead of carrying it in their head.

When the denial lands anyway

Read the denial letter before anything else moves. For payers under the CMS rule, the letter has had to state a specific reason for the denial since 1 January 2026, rather than a bare code. The letter is handing over the argument that needs answering.

Ask for a peer-to-peer review before filing a formal appeal, wherever the payer offers one. It puts the ordering physician on the phone with the payer's medical director, with no appeal letter and no multi-week wait, and at several payers filing the formal appeal first closes the door on it. The windows are short, they differ by payer and by line of business, and they run from the denial date. Confirm the deadline from the denial letter or the payer's manual rather than from memory, because the figures that circulate for them are wrong more often than they are right.

If the peer-to-peer does not resolve it, the formal appeal needs new material: a physician letter of medical necessity, the updated record, and the payer's own policy cited by version and date. Where delay could seriously harm the patient, Medicare Advantage and marketplace plans must decide an expedited appeal within 72 hours. A failed internal appeal moves to external review, which exists under Medicare Advantage, Medicaid and ACA rules independent of the new transparency requirements.

One routing detail before any of that starts. A self-funded employer plan follows the deadlines written into its plan document, not CMS timelines. Identify the plan type before routing the appeal, because guessing wrong can cost the whole window.

The overturn rates make the case for working every denial. One worked the day it lands is recoverable revenue. One set aside for next month's review has spent that month against a clock the practice cannot see.

Why the timing decides it

A practice that posts remittances in batches at month-end learns about a denial after part of its appeal window has already run. A practice reading the 835 on arrival learns the same day. The claim is identical. The date the practice found out is not.

The same gap opens between systems. If the authorization record, the claim and the remittance sit in three places nobody reconciles, deadlines expire inside the lag. Scrubbing before submission catches unit overruns, NPI mismatches and place-of-service conflicts before the payer sees them, but only against the payer's current requirements, which means somebody has to be tracking those requirements as a standing job. Our payer guides hold the current filing and appeal windows by payer.

In June 2025, AHIP announced voluntary commitments from CVS Health, UnitedHealthcare, Cigna, Humana, Elevance Health and Blue Cross Blue Shield plans: a common electronic submission process by 2027, a reduced scope of services subject to prior authorization from 1 January 2026, and a 90-day window honoring a prior insurer's authorizations when a patient changes plans. Whether that moves the denial rates is a question the 2026 postings will answer.

Altair runs eligibility verification, authorization tracking, claim scrubbing against each payer's current policies, denial work and appeals, and keeps what it learns about each payer in the system rather than in a person. Coding stays with the practice's own coders. Altair's in-house billers own the exceptions the automation should not decide, and the practice keeps the EMR and clearinghouse it already uses. See how Altair runs denial management, and our denial code reference for what each CARC requires.

The approval was never the finish line. It opens a narrow window with conditions on every side, and the job is to close it before the payer does.

The conditions attached to an approval

Common questions