Prior Authorization & Eligibility Verification Services — 2026 Rules, Gold Card Tracking | RevGen Billing
Prior Authorization & Eligibility Verification · The Front End of Your Revenue Cycle · 2026 Rules Enforced

The Two Services That Prevent Denials — Before They Ever Exist

Most billing companies sell denial management — cleaning up after the front end fails. We run the front end itself: real-time eligibility for every scheduled visit, authorization in hand before every service date, the 2026 legal clocks enforced per payer, and your gold-card exemptions earned on evidence. The best denial is the one that never happens.

  • Real-time 270/271 eligibility for 100% of scheduled visits — checked at scheduling and re-verified day-of, with carve-outs routed to the right payer the first time
  • The 2026 legal clocks, enforced: payers must now decide urgent auths in 72 hours and standard auths in 7 days — we track payer turnaround against those clocks and escalate when they blow them
  • Gold card exemptions, earned: CMS requires every Medicare Advantage plan to run a gold carding program — a 90%+ approval history can exempt your providers from PA entirely, and we build that evidence trail by payer and service category
  • Authorization before service, always: 100% of auth-required services with approval in hand before the date of service — retro-auth is a salvage operation, never a strategy
  • Four front-end KPIs with formulas — verification rate, auth-before-service rate, first-time approval rate, front-end denial share — reported weekly, verifiable in your system
  • Free audit first: your CO-27/CO-197 denial mix, first-time approval rate by payer, and unclaimed gold-card eligibility — in writing, yours to keep
Request a Free Audit See the 2026 Rule Changes
✔ EHR-agnostic, 40+ platforms · ✔ Peer-to-peer handled · ✔ Appeals on unjustified PA denials · ✔ No long-term contracts
72 hrsMax urgent PA decision, by law, since Jan 1, 2026
90%Approval rate that earns gold-card exemption
13 hrsPer physician per week on PA — AMA survey
7.7%Avg MA PA denial rate — first CMS public data, Mar 2026

Why the Front End Decides Your Whole Denial Rate

Eligibility failures (CO-27) and missing authorizations (CO-197) are the two most preventable denial families in healthcare — and the two most common. No amount of brilliant back-end denial management fixes a claim that was doomed before the patient arrived.

These are also the failures that never feel urgent: the visit happens, the care is delivered, and the denial arrives weeks later with a clock already running. Front-end work is the only part of the revenue cycle where the money is protected with zero recovery effort — the claim simply goes out clean. That’s why we run eligibility and prior authorization as one service: the eligibility check is what finds the authorization requirement — the same 270/271 response that confirms coverage also flags the approvals needed and the payer that needs them.

🩺

What physicians are carrying (AMA survey)

93% say prior authorization delays access to necessary care · more than 1 in 4 report it has led to a serious adverse event — hospitalization, permanent impairment, or death · physicians and staff average 13 hours per week on PA for a single physician, ~40 requests weekly · 82% report patients abandoning treatment over authorization hurdles. This is the workload we take off your clinical team — every hour of it.

📊

What the payers’ own data now shows (Mar 2026)

The first CMS-required public metrics put the average Medicare Advantage PA denial rate at 7.7% — and showed only 11.5% of denied requests were ever appealed. Practices that did appeal won 80.7% of the time. The pattern matches the OIG’s findings exactly: the system works for those who work it. We treat an unjustified PA denial as the beginning of a process, not the end of one.

Prevention vs. cleanup — the honest economics

A prevented CO-27 or CO-197 denial costs a real-time transaction and a tracked task. The same failure worked downstream costs staff time to discover, correct, resubmit, and possibly appeal — or it ages past timely filing and becomes a write-off. Front-end prevention is the cheapest revenue protection in the entire cycle, which is why it’s a service in its own right and not a task wedged into someone’s day.

Eligibility Verification — Everything a 270/271 Can Tell You, Used Properly

“Insurance verified” on a scheduler’s screen usually means one thing: coverage active. A real eligibility operation extracts everything the transaction carries — because every field prevents a specific denial.

What we verifyThe denial it prevents
Coverage active + plan type — including traditional Medicare vs. Medicare Advantage, a distinction that changes the entire authorization strategyCO-27 — coverage terminated or not in effect
Benefit detail for the planned service — is this specific service covered under this specific plan?Service-exclusion denials discovered post-visit
Copay, deductible, coinsurance status — collected accurately at check-in, not chased after the EOBPatient-balance surprises and write-offs
Network status of the rendering provider — in-network for that plan specifically, not “the practice takes that payer”OON denials and single-case agreement chaos
Coordination of benefits order — primary/secondary sequencing, MSP questionnaire triggers for Medicare patientsCO-22 / PR-22 — “care may be covered by another payer”
Referral requirements — needed or not, on file or notReferral-based denials on specialist visits
Carve-out routing — behavioral health and other benefits delegated to a separate payer (Magellan, LiveOn, Optum, Carelon, state PIHPs…) get claims sent to the right place the first timeWrong-payer rejections and refiled claims
Authorization flags — which services for this plan need prior approval, feeding the PA workflow immediatelyCO-197 — precertification absent

🕒 When it runs

At scheduling, and again on the day of service — coverage isn’t static, and a week-old check can be stale by the visit. High-dollar procedures get same-day re-verification as standard.

🧒 The Medicaid churn reality

Medicaid eligibility moves: redeterminations, income shifts, plan changes. Children now hold 12-month continuous eligibility nationwide (a 2024 federal requirement), but renewal-month churn still breaks coverage — and 90-day reconsideration windows can restore it retroactively. We watch the cycle so a rescheduled visit doesn’t become an uncovered one.

📄 Self-pay done right

Uninsured and self-pay patients get a Good Faith Estimate under the No Surprises Act — accurate, documented, and delivered on time. It’s compliance, and it’s also the difference between collecting and writing off patient balances.

Prior Authorization — Run as a System, Not a Scramble

Most practices discover an authorization requirement when the denial arrives. The reactive model — find out, fax, wait, appeal — is what the AMA’s 13-hour number is made of. Here’s the operational version:

🗺️

The requirements grid

Payer × CPT/HCPCS authorization requirements maintained as a living grid for your practice — which services need approval, from which payer, with what documentation, in what timeframe. When a payer changes policy, the grid changes with it; when you add a service line, the grid grows first.

📦

Documentation-first packets

Every request submitted against the payer’s published criteria — which, since the 2026 reforms, must be public before you ever file. Complete clinical documentation, correct codes, medical necessity mapped to their language. First-time approval is a packaging discipline, not luck.

⏱️

Clock enforcement

Urgent decisions legally due in 72 hours, standard in 7 calendar days (Medicare Advantage, Medicaid, CHIP). We track payer turnaround per request against the legal clock — and a blown clock becomes documented leverage on escalation and appeal.

🗣️

Peer-to-peer, handled

When a payer-to-provider conversation is the fastest path, it’s scheduled, prepared with the criteria in hand, and documented. Your physicians don’t spend clinical time rehearsing a payer’s checklist — we arm the conversation or have it for you.

🚫

Denials fought

An unjustified PA denial gets appealed — 80.7% of appealed MA PA decisions in the first public data were overturned. The 2026 specific-reason requirement means every denial now tells us exactly what to rebut. We appeal on the payer’s own stated logic.

🔁

Continuity protected

Under the 2026 reforms, ongoing treatments can’t be interrupted mid-review across plan transitions. We invoke those protections when patients switch plans mid-course — treatment continues while the paperwork catches up, because the rules now say it must.

Specialty walls, cleared regularly

Interventional and specialty services carry the heaviest authorization load: TMS courses and Spravato REMS programs (psychiatry), injection series and radiofrequency ablations (pain management), advanced imaging, surgical episodes, specialty drugs and J-codes, and DME. The payer-specific rules for all eight of our specialty systems live on their pages — the authorization logic is built into each one.

Since 2026 — mandatory
Gold Carding — The Best PA Is the One You Never Submit

The 2026 CMS reform package requires every Medicare Advantage plan to maintain a gold carding program: providers with a consistently high approval rate — typically 90%+ over a 6–12 month look-back — can be exempted from prior authorization requirements for the service categories they consistently get approved, per provider NPI.

🏅 What an exemption is worth

No submission, no waiting, no peer-to-peer, no 13-hour-week paperwork for those services — the order goes in, the plan covers it. Eligible procedures typically represent 10–30% of a practice’s PA volume: the stable, routinely-approved services where the PA process was pure administrative tax.

📋 Why most practices never claim it

Qualification is evidence-based: someone must track first-time approval rates per provider, per payer, per service category; maintain the volume minimums; and request the exemption under each plan’s published policy. Practices without that tracking infrastructure simply never file. The exemption exists and nobody collects it.

How RevGen earns your gold cards

  • Approval-rate tracking by payer × provider × service category — the exact dataset qualification requires, built automatically from our PA workflow
  • First-time approval discipline — documentation-first packets that keep the approval rate above the 90% threshold instead of eroding it with sloppy denials
  • Exemption requests filed under each plan’s published gold-carding policy — including the state-law programs in Texas (strengthened Sept 2026: full-year look-back), Louisiana, Michigan, Vermont, and West Virginia, and voluntary payer programs like UnitedHealthcare’s national gold card
  • Exemptions defended — approval rates monitored so a rescission notice never arrives as a surprise

The 2026–2027 Rule Timeline — Dated, Tracked Per Client

Jan 1, 2026

The clocks went live. Medicare Advantage, Medicaid, and CHIP payers must decide urgent prior auths within 72 hours and standard auths within 7 calendar days, with a specific reason for every denial — and MA plans must publish PA criteria, maintain gold carding programs, and protect treatment continuity across plan transitions.

Mar 31, 2026

The first public PA metrics landed — payer denial rates, timeliness, and appeal outcomes, published for everyone to see (avg MA PA denial rate: 7.7%). Your payer’s own published numbers are now escalation leverage, and we use them.

Sep 1, 2026

Texas HB 3812 took effect — the pioneer state’s gold-card program now evaluates a full year of PA history (≥5 requests per service, 90%+ approval). State gold-carding laws now active in TX, LA, MI, VT, WV — and expanding.

Jan 1, 2027

The electronic layer goes live: four FHIR-based APIs including the standard Prior Authorization API — EHR-integrated submission and response tracking replacing fax-and-portal workflows — and MIPS-eligible clinicians begin electronic PA attestation. Practices with FHIR-fluent billing partners gain speed; practices still faxing hit a wall.

How the Typical Setup Does It — And How We Do It

The differences aren’t philosophy — they’re operating decisions, each checkable in one conversation with your current biller.

Operating decisionTypical billing setupRevGen
When eligibility runsAt scheduling — or “when someone gets to it”; often a batch file, sometimes a phone callReal-time 270/271 at scheduling and day-of, for 100% of scheduled visits
What the check covers“Active or inactive”Plan type, service-level benefits, cost-share status, network status, referrals, COB order, carve-out routing, auth flags
When auth startsAfter scheduling — frequently after the first denialThe moment the eligibility response flags the requirement — before the service date, always
Submission methodPayer portals and fax machinesPortal and electronic submission now, FHIR rails as payers light them up in 2027
Clock trackingNone — “we call and check”Turnaround tracked per request against the legal 72-hour/7-day clocks, with documented escalation
Gold cardingUntracked — exemptions exist and nobody claims themApproval rates tracked by payer × provider × service; exemptions requested and defended
PA denialsAccepted, or the service is rescheduledAppealed — on the payer’s now-mandatory specific stated reason, with their own public metrics cited
Metrics“Auth is handled” — no numbersFour KPIs with formulas, reported weekly

🧮 KPI 1

Eligibility verification rate
Visits with a real-time 270/271 on file ÷ scheduled visits
Target: 100%

🧮 KPI 2

Auth-before-service rate
Auth-required services with approval before the service date ÷ auth-required services
Target: 100%

🧮 KPI 3

First-time approval rate
Requests approved without resubmission ÷ requests submitted
Target: ≥95%

🧮 KPI 4

Front-end denial share
CO-27 + CO-197 denials ÷ total denials
Target: trending to 0

Onboarding — The Front End Rebuilt in Two to Three Weeks

Week 1

Free audit + baseline. Your front-end denial mix (CO-27/CO-197 share), first-time approval rate by payer, unclaimed gold-card eligibility, and the recoverable dollars behind auth-driven denials.

Week 1–2

Grid build. The authorization requirements matrix for your actual payer mix and service lines; eligibility workflow configured inside your EHR (any of 40+ platforms).

Week 2

Parallel run. New workflow runs alongside the old one on live visits — verification rates and auth packets QA’d before cutover.

Weeks 2–3

Go-live. The front end is ours: every scheduled visit verified, every auth requirement worked before its service date, clocks and gold-card evidence tracking from day one.

Where This Fits in the System

The front end protects revenue; the rest of the cycle earns it — the connected pages:

Frequently Asked Questions

The questions practices ask about the front end of the revenue cycle — with codes, clocks, and formulas instead of reassurance. (This FAQ also ships with structured schema markup for search visibility.)

What is prior authorization in medical billing?
Prior authorization is a payer’s requirement that a service be approved before it is performed — without the approval, the claim denies regardless of medical necessity. Requirements vary by payer, plan, CPT or HCPCS code, and sometimes site of service, which is why a static checklist always fails: the rules move. Managed as a system, prior authorization means knowing which services need approval for which payer before scheduling, building the documentation packet the payer’s criteria ask for, and tracking every request against its decision clock.
What changed for prior authorization in 2026?
CMS’s reform package took effect for the 2026 plan year, built on the Interoperability and Prior Authorization Final Rule (CMS-0057-F). Covered payers — Medicare Advantage, Medicaid, and CHIP — must now decide urgent requests within 72 hours and standard requests within 7 calendar days, state a specific reason for every denial, publish their prior authorization criteria publicly, protect ongoing treatments from interruption during plan transitions, and maintain a gold carding program that exempts high-approval providers from PA requirements. Payers also posted their first public prior authorization metrics in March 2026.
What is eligibility verification in medical billing?
Confirming a patient’s coverage before care is delivered — ideally twice: once at scheduling and again on the day of service. Done properly it is a real-time electronic 270/271 transaction, not a phone call, and it checks more than active or inactive: plan type, benefit details, copay, deductible, and coinsurance status, network status of the provider, referral requirements, coordination-of-benefits order, and the correct plan to bill when behavioral health or other benefits are carved out to a separate payer.
How often should eligibility be verified?
At scheduling and again on the day of service. Coverage is not static: patients change jobs and plans mid-treatment, Medicaid eligibility shifts at redetermination, and Medicare Advantage enrollment changes during enrollment periods. A check run a week before the visit can be stale by the visit — which is how a claim for a properly rendered service dies as a CO-27 denial. Our standard is a real-time 270/271 for 100% of scheduled visits, with same-day re-verification for high-dollar procedures.
Do traditional Medicare patients need prior authorization?
Rarely — traditional Medicare requires prior authorization for only a short list of specific services. Medicare Advantage is the opposite: MA plans apply prior authorization broadly across services traditional Medicare would pay without a question — one of the core differences between the two systems, and a top reason eligibility verification has to identify the plan type, not just confirm coverage is active.
What is gold carding and how does a practice qualify?
Gold carding exempts a provider from prior authorization requirements for specific services based on approval history — typically a 90% or higher approval rate over a 6-to-12-month look-back, tracked per provider NPI and per service category. CMS requires every Medicare Advantage plan to maintain a gold carding program as of 2026, several states have their own laws (Texas, Louisiana, Michigan, Vermont, West Virginia), and some national payers run voluntary programs. Qualification is evidence-based: someone has to track your approval rate by payer and service category, maintain the volume minimums, and request the exemption. That tracking is built into our prior authorization service.
What is the average Medicare Advantage prior authorization denial rate?
The first CMS-required public data, released in March 2026, put the average MA prior authorization denial rate at 7.7% — and showed that only 11.5% of denied requests were ever appealed, while appeals that were filed won 80.7% of the time. The pattern matches the OIG’s findings on payment denials: the appeals system works, and almost nobody uses it. A prior authorization operation should treat an unjustified denial as the beginning of a process, not the end of one.
Can prior authorization be obtained retroactively?
Sometimes — some payers allow retroactive authorization within a defined window when the request was urgent or the failure was theirs, and some state laws mandate retro-approval pathways. But retro-auth is a salvage operation, never a strategy: approval windows are short, documentation requirements are stricter, and the default outcome is a denied claim and an appeal. Our standard is simpler: 100% of auth-required services have authorization in hand before the service date, which makes the retro question academic.
How do you handle prior auth for interventional and specialty services?
Documentation-first, criteria-mapped, and specialty-specific: TMS courses and Spravato REMS programs in psychiatry, injection series and ablation procedures in pain management, imaging, surgeries, specialty drugs and J-codes, and DME — each with its own payer walls and medical-necessity criteria. We build the packet the payer’s published criteria ask for, handle peer-to-peer reviews when they’re the fastest path, and track approval rates by service category — which is also how gold card exemptions get earned.
What KPIs do you report for eligibility and prior authorization?
Four, each with its formula: eligibility verification rate (visits with a real-time 270/271 on file ÷ scheduled visits — target 100%); auth-before-service rate (auth-required services with approval in hand before the service date ÷ auth-required services — target 100%); first-time auth approval rate (requests approved without resubmission ÷ requests submitted — target 95% or better); and front-end denial share (CO-27 plus CO-197 denials ÷ total denials — trending toward zero, because that entire family is preventable).
What happens with prior authorization on January 1, 2027?
The electronic layer goes live: four FHIR-based APIs, including a standard Prior Authorization API that replaces fax-and-portal workflows with EHR-integrated submission and response tracking — and MIPS-eligible clinicians begin electronic prior authorization attestation, a new reporting avenue. Practices whose billing partners are FHIR-fluent will feel this as a speed increase; practices still faxing will feel it as a wall. We’ve been building on the same data rails since USCDI v3 became the certification baseline.
Why are eligibility and prior authorization one service instead of two?
Because the eligibility check is what finds the authorization requirement. The 270/271 response carries plan details, benefit carve-outs, and referral and authorization flags — the same transaction that confirms coverage also tells you what approvals are needed and which payer needs them. Split the two services and you get exactly the failure mode most practices have: coverage verified in one place, auth requirements discovered after the visit, denials worked by a third team. We run them as one workflow with one accountable owner.

Find Out What Your Front End Is Leaking — Free

The free audit maps your CO-27/CO-197 denial mix, measures your first-time approval rate by payer, and checks whether you already qualify for gold-card exemptions you’re not claiming. About 20 minutes of your time, findings in 24–48 hours, yours to keep.

Request Your Free Audit →

✔ Your current biller is never contacted · ✔ No obligation · ✔ Front-end findings priced in dollars, not adjectives

RevGen Billing
Prior Authorization & Eligibility Verification Services
revgenbilling.com
Regulatory references reflect CMS-0057-F (Interoperability and Prior Authorization Final Rule) provisions effective January 1, 2026 — decision timeframes (72 hours expedited / 7 calendar days standard), specific denial reasons, public metrics (first posted March 31, 2026), mandatory Medicare Advantage gold carding, and continuity-of-care protections — plus the January 1, 2027 FHIR API deadlines; the AMA’s 2025 prior authorization survey; and the first CMS-required public MA prior authorization metrics (March 2026). State gold-carding statutes vary; payer-specific gold-card thresholds and service categories are set in each plan’s published policy. All current as of September 2026 and subject to change. This page is informational and not legal advice.