Dan Nandan is the CEO of Staffingly, Inc. With 25+ years in IT consulting and a decade leading healthcare BPO operations across India, Latin America, and Pakistan, his team now serves 800+ U.S. healthcare providers across medical, dental, pharmacy, and post-acute care verticals.
2026 Compliance Verified: HIPAA, SOC 2 Type II, ISO 27001, HITRUST-aligned workflows.
Featured in Computerworld →
State of Illinois. Registered Professional Nurse
Bincy Shiiju Kuriakose is a U.S.-licensed Registered Nurse (MSN, RN), NCLEX-RN certified, with expertise in hospital nursing, telehealth, and nursing education. She reviews every publication for medical accuracy, YMYL compliance, and evidence-based clinical context.
What Is Ethical medical coding practices?
Ethical coding is the foundation that holds up your entire billing operation. Patients rely on accurate codes for correct treatment records. Payers rely on truthful codes for fair reimbursement. The federal government relies on honest coding to prevent the estimated $68 billion to $230 billion in annual healthcare fraud losses (NHCAA).
Why Ethical Coding Matters More Than Ever
Ethical coding is the foundation that holds up your entire billing operation. Patients rely on accurate codes for correct treatment records. Payers rely on truthful codes for fair reimbursement. The federal government relies on honest coding to prevent the estimated $68 billion to $230 billion in annual healthcare fraud losses (NHCAA). When ethical standards slip, the consequences come from every direction: audits, recoupments, exclusion from federal programs, and criminal prosecution.
A TechTarget survey found that 90% of medical coders say upcoding remains the number one ethical dilemma in the profession. And 18% of coding staff report being pressured or directly ordered by their employer to upcode for financial gain. That means nearly one in five coders has been asked to cross an ethical line at work.
The enforcement response is scaling to match the problem. CMS is increasing its medical coder audit staff by a factor of 50 and raising per-plan audit record reviews from 35 to 200 per audit year. The DOJ is using machine learning to flag outlier billing patterns faster than ever. The era of coding quietly and hoping nobody notices is over.
AAPC Code of Ethics and AHIMA Standards of Ethical Coding
Two professional organizations set the ethical standards every credentialed coder must follow.
AAPC Code of Ethics The AAPC defines six core ethical values for all credentialed members: 1. Integrity — Honest and truthful in all professional activities 2. Respect — Value the rights and dignity of others 3. Commitment — Dedicated to the highest standards of coding and billing 4. Competence — Maintain and improve coding knowledge continuously 5. Fairness — Treat all parties equitably 6. Responsibility — Accept accountability for professional actions
Violating the AAPC Code of Ethics can result in loss of certification. For coders holding CPC, CRC, or other AAPC credentials, ethical coding is a condition of maintaining professional standing.
AHIMA Standards of Ethical Coding AHIMA publishes 11 principles of ethical coding, approved by the AHIMA House of Delegates. Key principles: – Apply accurate, complete, and consistent coding practices based on documentation – Report only codes and data clearly supported by health record documentation – Query providers for clarification before assigning final codes when documentation is unclear – Refuse to participate in coding activities intended to skew or misrepresent data – Protect the confidentiality of health records and comply with HIPAA
Failing to follow AHIMA’s standards can result in loss of AHIMA certification. For credentialed coders, these are the baseline, not the ceiling.
1. Document Only What Is in the Record
Ethical coding starts with documentation integrity. Coders can only assign codes for what the provider documented. If it is not in the chart, it did not happen. Assuming or inferring diagnoses violates both AAPC and AHIMA standards. When documentation is unclear, query the provider. Do not guess.
2. Prevent Upcoding and Under-Coding
Upcoding means billing for a more complex service than what was provided. It is the most common False Claims Act allegation in healthcare. Example: billing 99215 (high-complexity E/M) when documentation only supports 99213 (low-complexity).
Under-coding means reporting a lower-level code than the documentation supports. It misrepresents the care provided, skews public health data, and costs the practice revenue. Both directions are ethically wrong. Prevention: audit E/M level distribution quarterly against specialty benchmarks. Flag outliers in both directions.
3. Prevent Unbundling
Unbundling means separating services that should be billed under a single bundled code into individual codes to increase reimbursement. NCCI edits catch many unbundling errors at the claim level, but not all. Coders must understand bundling rules for their specialty and apply them before claim submission.
4. Stay Current on Coding Guidelines
ICD-10-CM, CPT, and HCPCS code sets update annually. CMS publishes new Official Coding Guidelines each fiscal year. In 2026, there are 487 new ICD-10-CM codes (effective October 2025) and 288 new CPT codes (effective January 2026) per AMA CPT 2026 and CMS ICD-10-CM FY2026 release. Billing with outdated codes after the effective date is a compliance violation. Update your EHR and billing software before each code set release.
5. Build a Culture of Transparency
Healthcare organizations must create an environment where coders can report errors, question documentation, and refuse unethical coding requests without fear of retaliation. The OIG's seven-element compliance framework requires "open lines of communication" as a mandatory component. Anonymous reporting channels are not optional. Coders who cannot report internally will report to the DOJ. The DOJ recorded record qui tam filings in FY 2025.
6. Conduct Regular Coding Audits
Quarterly internal audits are the minimum standard. Audit a 10-15% random sample of charts per coder. Measure accuracy rate, error type (upcoding, downcoding, unbundling, modifier misuse), and compare results across the coding team. Every audit should include 1-on-1 education within 7 days. Audits that only punish without teaching create fear. Audits that teach create compliance.
Common Ethical Dilemmas in Medical Coding
Pressure to Upcode for Higher Reimbursement The most reported ethical conflict. 18% of coding staff say they have been pressured by management to upcode (TechTarget). The AAPC and AHIMA codes of ethics both require coders to refuse. Practices that pressure coders to upcode are creating FCA liability for both the organization and the individual coders.
Falsifying Diagnoses to Justify Procedures Assigning a diagnosis code that does not match the patient’s actual condition to get a procedure covered is not a gray area. It is fraud. It exposes the practice to FCA penalties and creates incorrect treatment records for the patient.
Modifier Misuse Modifier 25 (significant, separately identifiable E/M service) is the most frequently misused modifier in the industry. Applying it without meeting the clinical criteria inflates reimbursement and triggers payer audits. CMS and commercial payers both flag high modifier-25 usage rates as an audit priority.
Ignoring Documentation Errors Turning a blind eye to incomplete or inaccurate documentation to avoid query delays compromises coding accuracy and violates AHIMA’s standard requiring coders to query providers before assigning final codes.
AI-Generated Code Acceptance Without Review With 70%+ of health systems expanding AI in revenue cycle operations (HFMA 2024 RCM survey), a new ethical dilemma has emerged: accepting AI-suggested codes without human review. The OIG’s February 2026 Medicare Advantage guidance explicitly names AI-generated coding prompts as a risk adjustment abuse vector. Every AI-suggested code needs a credentialed human coder’s review and approval before claim submission.
Save 40-70% with dedicated Coding specialists
Book a 15-minute call. We will map your current medical coding workflow, denial rates, and staff hours against what a dedicated team typically delivers in the first 30 days.
ICD, CPT, and HCPCS Codes: Ethical Use in Compliance
ICD-10-CM Diagnosis Codes These codes describe the patient’s condition. Using incorrect diagnosis codes misrepresents patient conditions, skews public health data, and triggers claim denials or recoupments. CMS requires the highest level of specificity supported by documentation. Defaulting to unspecified codes (.9 endings) when the provider documented enough detail for a specific code is a compliance problem.
CPT Procedure Codes These describe procedures and services performed. The 2026 CPT code set includes 288 new codes. Coders must use current codes and correct E/M leveling criteria based on medical decision-making or total time, per 2021 CMS/AMA guidelines.
HCPCS Level II Codes These cover supplies, durable medical equipment, and non-physician services. Ethical use means coding only what was actually provided at the quantities actually used. Inflating supply quantities or billing for items not furnished is a common OIG audit target.
State-Specific Ethical Coding Enforcement: New York, New Jersey, California
Coding enforcement is not only federal. New York’s Office of the Medicaid Inspector General (OMIG), New Jersey’s Medicaid fraud enforcement, and California’s Medi-Cal program each run their own coding audits on top of CMS and DOJ activity. Practices in these states answer to state Medicaid auditors as well as federal reviewers, so a code that fails an OMIG or Medi-Cal review carries recoupment risk independent of any False Claims Act exposure. The same standards apply: every code must be supported by the documentation in the chart.
Building a Coding Compliance Program That Protects Your Practice
Phase 1: Foundation
Designate a Compliance Officer: Someone must own coding compliance. In small practices, a senior coder or practice manager can take on this role. The key requirement is one person monitoring OIG alerts, CMS transmittals, and payer policy changes.
Write Coding Policies and Review Annually: Cover code selection standards, documentation requirements, modifier usage rules, query protocols, and how to handle payer rules that conflict with CMS guidelines. Update every October (ICD-10-CM) and January (CPT).
Create an Anonymous Reporting Channel: The OIG requires it. An anonymous email address or third-party hotline is sufficient. Employees who cannot report internally will report to the DOJ.
Phase 2: Operations
Train on Ethics, Not Just Code Sets: Annual training that consists of a PowerPoint and a quiz is not sufficient. Train on the False Claims Act, Anti-Kickback Statute, HIPAA, AAPC/AHIMA ethical standards, and OIG compliance elements with specialty-specific scenarios.
Run Quarterly Coding Audits with Education: Audit 10-15% of charts per coder per quarter. Measure accuracy, error types, and denial correlations. Follow every audit with 1-on-1 coder education within 7 days.
Respond to Problems Immediately: When an audit finds a pattern, act. Refund overpayments through self-disclosure. Retrain the coder. Update the policy. Document everything. The OIG looks favorably on organizations that self-correct.
The OIG’s Seven Elements of a Compliance Program: 1. Written policies, procedures, and standards of conduct 2. Compliance officer and compliance committee 3. Training and education 4. Open lines of communication (anonymous reporting) 5. Internal monitoring and auditing 6. Enforcement through disciplinary guidelines 7. Prompt response to detected offenses and corrective action
What Coders Actually Say About Ethical Pressure
Coders on Reddit’s r/medicalcoding consistently describe the same dilemma: management pressure to code higher E/M levels than documentation supports, modifier 25 usage above payer benchmarks, and AI-suggested codes being accepted without query. A recurring theme in r/medicalcoding and r/healthcarecompliance is that certified coders who refuse unsupported code assignments cite AAPC or AHIMA ethical standards as their professional protection, and practices with written compliance policies backing coders up see lower audit exposure.
A 5-provider cardiology group in Manhattan, NY implemented a prospective audit workflow (pre-submission review on 10% of charts) and cut their OMIG audit findings from 14 per year to 2 within one cycle. A 3-provider internal medicine practice in Newark, NJ replaced annual checkbox compliance training with quarterly chart-based workshops and saw their modifier 25 denial rate drop by more than half. A multi-location dermatology group in Los Angeles, CA moved coding to certified specialty-matched coders with second-level QA review and reported their E/M downcoding denials on Medi-Cal claims fell from 9% to under 3%.
How Staffingly Maintains Ethical Coding for 800+ Providers
Staffingly provides medical coding through certified professionals, clinical oversight, and built-in compliance controls.
Compliance credentials: SOC 2 Type II certified, HITRUST certified, ISO 27001 certified, HIPAA compliant.
How it works: – Certified coders (CPC, CCS, CRC) assigned by specialty, not generalists coding across all disciplines – Every chart reviewed by a second-level QA coder before claim submission – Clinical oversight from Bincy Kuriakose, MSN, RN (IL RN License #041.577729) – Internal coding audits with accuracy tracking per coder, per specialty – 99.2% clean claim rate across 800+ providers served – Go-live in 48-72 hours with 50+ EHR integrations – Rate: $399/week (volume discounts to $299/week), saving practices up to 70% compared to in-house coding staff
“Ethics is not a training module you complete once a year. It is a standard you apply to every chart. Our coders follow AAPC ethical standards, OIG guidelines, and CMS coding rules because the alternative is not something our clients can afford.” Dan Nandan, CEO, Staffingly, Inc. (25+ years healthcare IT/BPO | Computerworld)
What Did We Learn?
Ethical medical coding practices are not a soft skill. They are a legal requirement backed by federal enforcement that recovered over $14.6 billion in a single takedown in 2025. The pressure to upcode is real. 18% of coders report being pressured by management. 90% say it is the profession’s top ethical dilemma.
The solution is structural. Build a compliance program based on the OIG’s seven elements. Train coders on ethics, not just code sets. Audit quarterly and follow up with education. Create anonymous reporting channels. Follow AAPC and AHIMA standards. If your in-house operation cannot maintain these standards at scale, partner with a compliant coding operation that can.
In healthcare, the right code protects the patient, the practice, and the profession.
Frequently Asked Questions
If your in-house team cannot hold these standards at scale, Staffingly’s certified coders apply them on every chart. Start with medical coding services, validate accuracy with medical coding audit services, and close the modifier 25 gap with modifier audit and compliance services.
