In America, your doctor doesn’t always make the final decision about your treatment. Sometimes, your insurance company does. Because before the procedure, your doctor says: You need this treatment. The doctor sends a request to the insurance company. The insurance company reviews it and decides whether to pay or not.
A single missed authorization can trigger full claim denials, revenue loss for many practices, and delays in patient care. This in-depth guide draws directly from official CMS sources, AMA insights, and industry standards to detail each type, processes, differences, and the latest reforms.
What Authorization Means in Medical Billing
Authorization in medical billing is the formal approval from a payer (insurer, Medicare, Medicaid) confirming that a proposed service, item, or medication meets coverage criteria, including medical necessity, before (or sometimes after) delivery. It protects the Medicare Trust Fund in Fee-for-Service (FFS) programs and manages utilization in Medicaid and private plans.
CMS defines prior authorization as a pre-service requirement for select items to reduce improper payments.
In Medicare Advantage (MA), authorizations are more widespread than in Original Medicare, often covering specialist visits, imaging, and hospital stays. Medicaid varies by state and managed care model.
Main Types of Authorization in US Medical Billing
US billing features distinct authorization categories based on timing relative to service delivery. Core types include
- Prior (pre-service)
- Concurrent (during treatment)
- Retrospective (post-service)
- Referral-based
- Specialized variants like pre-claim review
Prior Authorization (Pre-Authorization / Preapproval)
Prior authorization requires payer approval before rendering non-emergent services. Providers submit clinical documentation proving medical necessity per National Coverage Determinations (NCDs), Local Coverage Determinations (LCDs), or payer policies.
In Medicare FFS, CMS applies it to high-risk DMEPOS (e.g., power wheelchairs, orthoses like L0651, L1844), certain hospital outpatient department (OPD) services (facet joints, hyperbaric oxygen), and now expanded via pilots.
For MA plans, prior auth covers a broader scope, including advanced imaging, specialty drugs, and inpatient admissions.
The CMS Interoperability and Prior Authorization Final Rule (CMS-0057-F, effective phases 2026-2027) mandates:
- Standard decisions within 7 calendar days (effective Jan 1, 2026, for many impacted payers).
- Expedited/urgent decisions within 72 hours.
- Specific denial reasons provided.
- FHIR-based Prior Authorization APIs for electronic submissions (full compliance by 2027).
These changes aim to cut delays that AMA surveys link to adverse patient events.
Prior auth differs from simpler verifications by requiring detailed clinical justification, making it the most burdensome and litigated type.
Pre-Certification (Often Used Interchangeably with Prior Auth)
Pre-certification verifies coverage and medical necessity before elective inpatient admissions, major surgeries, or facility-based procedures. It focuses on policy terms (e.g., length of stay, covered alternatives) rather than broad necessity reviews.
In practice, many payers and providers treat pre-certification as synonymous with prior authorization for inpatient/OPD care. CMS sometimes distinguishes it in DMEPOS contexts, but overlap is common.
Key difference:
Pre-certification often ties to hospital/facility settings and may not require as extensive clinical documentation as full prior auth for drugs or DME. Non-compliance typically reduces payment rather than fully denying claims in some plans.
Concurrent Authorization (Concurrent Review)
Concurrent authorization occurs during active treatment to approve continued care beyond initial limits. Providers submit progress notes or updates for ongoing hospital stays, rehab, home health, or long-term therapy.
- This type prevents abrupt coverage cutoffs while ensuring evolving necessity.
- In Medicaid managed care, concurrent reviews monitor utilization dynamically.
- CMS integrates it into MA utilization management, requiring a denial rationale.
Concurrent authority supports “ongoing service authorization” in extended-care scenarios, reducing retrospective disputes.
Retrospective Authorization (Retro Authorization / Post-Service Review)
Retrospective authorization seeks approval after service delivery, usually for emergencies, urgent care, or administrative oversights where pre-service approval was impossible. Payers review post-service documentation against criteria, potentially approving partial or full coverage. It’s riskier due to higher denial rates and appeals needs.
CMS prefers proactive prior auth in FFS to avoid improper payments, but allows retro in limited cases. Private payers may use it for post-discharge reviews or audits. This aligns with “post-treatment billing authorization” when pre-approval wasn’t feasible.
Referral Authorization
Referral authorization requires primary care provider (PCP) coordination for specialist or out-of-network services, common in HMO-style plans. The PCP issues a referral; some plans require separate payer approval (combining referral with prior auth elements). In PPO plans, referrals are informational, not mandatory for coverage.
CMS notes MA plans often bundle referrals with prior auth for out-of-network care. This supports “specialist referral coordination in medical billing,” ensuring network compliance.
Pre-Claim Review
Pre-claim review lets providers deliver services before review, but requires submission and affirmation before claim filing. CMS uses it for home health in demonstration states and certain DMEPOS.
Unlike strict prior auth (services cannot begin without approval), pre-claim allows provisional delivery with affirmation risk. Under the WISeR Model (launched Jan 1, 2026, in Arizona, New Jersey, Ohio, Oklahoma, Texas, Washington), pre-claim/prior auth targets wasteful services like skin substitutes, orthopedic pain management (e.g., epidural injections, cervical fusions), electrical stimulators, incontinence devices, and impotence treatments.
WISeR uses AI/ML with human review for faster processing (72-hour turnaround in many cases) over six years (to 2031). It aims to curb low-value care while protecting beneficiaries.
Additional Variants
- Step Therapy Authorization: Requires trying lower-cost alternatives before higher-cost drugs.
- Medication Authorization: Specific to specialty pharmaceuticals, often prior auth subsets.
2026 CMS Reforms and Implementation Timeline
The CMS Interoperability and Prior Authorization Final Rule (CMS-0057-F) drives major shifts:
- Jan 1, 2026: Faster decisions (7 days standard, 72 hours expedited); annual public reporting of approval/denial metrics; some API implementations.
- 2027: Full FHIR-based Prior Authorization, Provider Access, and Patient Access APIs.
- WISeR Model (Jan 2026 start): Prior auth for select services in 6 states; uses tech for expedited reviews; exemptions possible.
- DMEPOS expansions: Additional codes (e.g., orthoses) require nationwide prior auth from April 13, 2026.
- ASC demonstration: Phased prior auth for certain ambulatory services in select states (requests from Jan/Feb 2026).
These promote electronic prior authorization (ePA), reduce burden, and increase transparency.
Best Practices to Master Authorizations in 2026
- Verify eligibility and requirements early via payer portals or APIs.
- Submit complete documentation upfront to meet NCD/LCD standards.
- Track timelines rigorously, use automated tools for 7-day/72-hour rules.
- Train teams on distinctions (e.g., prior auth vs. referral vs. concurrent).
- Leverage FHIR APIs where available for electronic submissions.
- Monitor WISeR-affected states/services; prepare for AI-assisted reviews.
- Appeal denials promptly with strong clinical evidence.
Conclusion
In conclusion, authorizations in US medical billing span prior (pre-service necessity checks), pre-certification (often inpatient-focused), concurrent (ongoing care validation), retrospective (post-service emergency approvals), referral (coordination-based), and pre-claim review (pre-billing affirmation) types.
2026 brings transformative CMS updates like accelerated decisions, electronic interoperability via FHIR APIs, public transparency metrics, and the WISeR Model’s targeted expansions in six states to curb wasteful spending while preserving access. Mastering these ensures compliance, faster reimbursements, and better patient outcomes in an evolving landscape.
If you want to streamline your authorization workflows and minimize denials under the latest 2026 rules, contact Connecticut Medical Billing today for expert revenue cycle support tailored to your practice.
Frequently Asked Questions
Does Adderall require prior authorization?
For patients 22 years of age and older, prior authorization and review are required for both diagnosis and quantity requested.
What are three common services that require pre-authorization?
It varies by insurance plan, some of the most common services that require prior authorization include:
- Advanced Imaging: MRI, CT scans, and PET scans.
- Surgeries: Both outpatient and inpatient procedures.
- Specialist Referrals: Certain visits to out-of-network or high-cost specialists.
What is a prior authorization list?
A prior authorization list is a catalog from a health insurer detailing specific medical services, procedures, durable equipment, or prescription drugs that require the insurer’s advance approval before they will cover the cost.
What is another name for preauthorization?
Prior authorization, sometimes called preauthorization or precertification, is a health plan cost-control process by which physicians and other health care providers must obtain advance approval from a health plan before a specific service is delivered to the patient to qualify for payment coverage.