The Medical Bill Dispute Playbook

Chapter 1
How hospital billing actually works

Before you can fight a medical bill, you need to understand how it was created. Most patients don't. That's exactly what the system counts on.

The three bills you've never seen

Every hospital visit generates at least three different billing documents — but you've probably only seen one. That's by design. Here's the full set:

• The chargemaster rate. The hospital's internal "list price" for every service. It is deliberately inflated — often 3–10× the real cost — because it's the starting point for insurance negotiations and the default charge for uninsured patients. The chargemaster price is the one that shows up on the scary-looking bill.
• The insurance-negotiated rate. What your insurer actually pays. Usually 20–40% of the chargemaster. You typically see this on your Explanation of Benefits (EOB), not the bill itself.
• The cash / self-pay rate. What the hospital will accept from an uninsured patient who pays in one go. Usually 30–60% of the chargemaster. The Hospital Price Transparency Rule (45 CFR § 180) requires hospitals to publish this — but most bury it.

When you get billed, you're looking at the chargemaster rate minus whatever insurance already paid. The gap between what you're being asked to pay and what the service actually costs is the negotiating room.

CPT codes, HCPCS codes, and DRGs — the billing language

Every line on a bill references a code. Understanding these codes is the single highest-leverage skill in bill disputes because billing errors are coding errors.

• CPT codes — 5-digit numbers for physician services (office visits, procedures, surgeries). Maintained by the AMA. Example: `99285` is "ER visit, high complexity."
• HCPCS codes — supplies, drugs, durable medical equipment. Example: `A4352` is a urinary catheter.
• ICD-10 codes — diagnosis codes. `S93.401A` is a sprained ankle, initial encounter.
• DRGs — Diagnosis Related Groups. Used for inpatient stays. A DRG bundles everything from an admission under one code.
• Modifiers — two-character add-ons that change how a code is paid. A missing modifier can double or halve the payment.

Pro tip: The first thing an experienced bill auditor does is ask for the CPT/HCPCS codes. No codes, no fight. You can't dispute what you can't verify.

Who gets paid and when

When you sit in an emergency room, you're not getting one bill. You're getting at least:

• A facility bill from the hospital for use of the room, equipment, and supplies (UB-04 form)
• A physician bill from each doctor who saw you — often via a separate billing company (CMS-1500 form)
• A radiology bill if imaging was involved
• A pathology bill if labs or tissue samples were processed
• A specialist bill if a consultant was called in
• An anesthesia bill if you had anesthesia
• An ambulance bill if you were transported

Each of these can be in-network or out-of-network independently. This is how you end up with an "in-network ER visit" that includes a $4,000 out-of-network anesthesiologist bill. That's exactly the problem the No Surprises Act was designed to solve — and it's Chapter 6.

Chapter 2
The 7 most common billing errors

According to CMS internal audits, 80% of hospital bills contain at least one error. Most of them fall into these seven buckets. You need to know how to spot each.

1. Duplicate charges

The same CPT/HCPCS code billed twice for the same date of service. Usually happens when a charge entry system glitches or a manual entry is duplicated. It's the easiest to spot and the easiest to fight — just highlight the identical lines.

2. Unbundling

Many procedures have "component" codes that should be billed together as a single bundled code. When a biller separates the components to charge more, it's called unbundling. Example: venipuncture (CPT `36415`) is supposed to be bundled into any blood-draw panel — billing it separately for $30–40 is unbundling.

To catch unbundling, the National Correct Coding Initiative (NCCI) publishes "edits" — code pairs that should never be billed together. The list is public at cms.gov.

3. Upcoding

Billing a more complex (and more expensive) code than what was actually performed. Example: billing an ER visit as a Level 5 (`99285`, the highest complexity) when the medical documentation only supports Level 3 (`99283`). The insurer usually catches this in pre-payment review; when they don't, it becomes your patient-responsibility problem.

4. Wrong date of service

A charge shows up with a date you weren't at the hospital, or a procedure dated differently from the actual encounter. Often a data-entry artifact, but if that date puts the charge outside your insurance's coverage window you're on the hook.

5. Balance billing / surprise billing

You get an ER visit at an in-network hospital, but the anesthesiologist or radiologist was out-of-network. They bill you the full out-of-network rate. The No Surprises Act prohibits this in most cases — Chapter 6 covers the fight.

6. Services never rendered

A charge for something that didn't happen. Medications never administered, equipment never used, consultations that never occurred. Rare but devastating when it happens. You need your medical record to fight this one.

7. Wrong insurance processing

The hospital has your primary insurance on file but billed secondary first, or missed a coordination-of-benefits step, or used stale eligibility data. Result: claim denied, full balance billed to you, when actually insurance would have covered most of it.

Chapter 3
Step 1 — Request an itemized bill (HIPAA § 164.524)

You cannot dispute a bill you can't read line by line. Most hospitals send a "summary" bill that shows grand totals — that's not enough to spot errors. The first action in every dispute is to force the hospital to give you the itemized version.

Your legal right

Under the HIPAA Right of Access (45 CFR § 164.524), you have the right to request your medical and billing records in a form and format of your choice. The hospital must respond within 30 days. They can charge a reasonable, cost-based fee for copies but cannot refuse the request.

What to request

Send a written request that explicitly asks for:

1. A fully itemized statement showing every line-item charge, including CPT/HCPCS code, description, date of service, units billed, rendering-provider NPI, and billed amount
2. A copy of the UB-04 (facility) and/or CMS-1500 (professional) as submitted to your insurance carrier
3. Any Explanation of Benefits or denial correspondence
4. The hospital's current posted standard charges per 45 CFR § 180 (the Hospital Price Transparency Rule)

Send it certified mail, return receipt requested. The certified receipt is your proof the 30-day clock started. If they miss the deadline, that's actionable — and the letter tool generates a follow-up letter citing the violation.

Chapter 4
Step 2 — Read the bill line by line

Once the itemized bill arrives, your job is to convert it from a wall of codes into a dispute plan. Here's the system.

The three-pass read

Pass 1 — Match everything to something you remember. Walk through each line and ask "did this actually happen to me?" You're looking for services never rendered (Chapter 2, error #6). Circle anything that doesn't ring a bell.

Pass 2 — Decode every CPT and HCPCS code. Use a free lookup like CodingIntel or the AMA CPT search. Write what each code actually means in plain English in the margin. This is slow but it's the foundation. If you skip this step, you're disputing shadows.

Pass 3 — Spot the error patterns. Now that you know what each line means, scan for:

• Duplicates (same code twice on same date)
• Unbundling (component codes that should be bundled — use the CMS NCCI edit tool)
• E/M level mismatches (Level 4 or 5 when the visit was clearly brief)
• Wrong dates
• Out-of-network charges at an in-network facility

Mark each suspected error with a number. These become the numbered items in your dispute letter.

Tools that help

• CodingIntel.com — free CPT code lookup
• CMS NCCI Tools — cms.gov/medicare/coding-billing/national-correct-coding-initiative-ncci-edits — the official list of which codes can't be billed together
• FairHealthConsumer.org — shows typical in-network and out-of-network prices for common services in your ZIP, useful for negotiation
• hospital chargemaster files — most hospitals now publish these as required by law; Google "[hospital name] standard charges"

Chapter 5
Step 3 — Check insurance processing

Before attacking individual line items, make sure the bill's core insurance processing is correct. Often, the entire bill becomes moot if you can force a re-adjudication.

The EOB audit

Pull your Explanation of Benefits (available on your insurer's portal) and check:

1. Was the right insurance billed first? If you have primary and secondary coverage, primary must be billed first.
2. Was the claim submitted with accurate diagnosis codes? Wrong ICD-10 codes can trigger denials that are trivially reversible.
3. Did the insurer apply in-network discounts? If you went to an in-network provider, the EOB should show the contractual adjustment. If it doesn't, the bill was processed as out-of-network in error.
4. Is the claim denied for a reason that doesn't apply? Most denials cite specific reason codes (CARC codes). Look them up.

The appeal path

If the insurer denied or under-paid, you have a right to appeal under ERISA (for employer-sponsored plans) or under state insurance law. You generally have 180 days from the EOB to file an internal appeal, then another 60 days after denial to file an external appeal.

The $29 Letter tool generates a first-level appeal letter; the $49 Full Kit includes the ERISA-specific escalation.

Chapter 6
Step 4 — The No Surprises Act path

The No Surprises Act (42 U.S.C. § 300gg-111), effective January 2022, is the most powerful federal tool in your disputing arsenal — if your situation fits. It prohibits balance billing in three specific scenarios.

When the NSA applies

You are protected from balance billing if:

1. Emergency services at ANY hospital (in or out-of-network). Full stop.
2. Non-emergency services at an in-network facility where an out-of-network provider (anesthesia, radiology, pathology, hospitalist, assistant surgeon) participated, AND you did not sign a valid notice-and-consent waiver.
3. Air ambulance services.

Note: ground ambulance is NOT covered by the NSA — that's a significant gap. Many states have their own ground-ambulance rules, but federal law doesn't help here.

What the NSA requires

If you're protected, the provider may only bill you the in-network cost-sharing amount — same deductible, copay, and coinsurance as if the provider had been in-network. Any balance they bill you beyond that is an illegal balance bill.

Penalties: providers who balance-bill in violation of the Act can be fined up to $10,000 per violation by CMS (45 CFR § 150.441). That's why a well-cited NSA letter usually works — the provider's billing department doesn't want to explain that to their compliance officer.

The consent waiver trap

The one exception: if you were given a valid notice-and-consent form (45 CFR § 149.420) at least 72 hours in advance of service, you can waive NSA protection. The waiver must:

• Specify the provider's name
• Include a good-faith estimate
• Be signed by you voluntarily
• Be given in an appropriate language

If any of these are missing, the waiver is invalid and NSA protections still apply. Read whatever you signed carefully — many hospitals use defective waivers.

Chapter 7
Step 5 — The charity care path (501(r))

If you're low-income and the hospital is a nonprofit, you probably qualify for charity care — which can reduce or eliminate the bill entirely. This is one of the most underused paths in the playbook.

The legal basis

Under IRS 501(r), nonprofit hospitals (which are about 60% of all US hospitals) must publish a Financial Assistance Policy (FAP) and apply it fairly. The regulations (26 CFR § 1.501(r)-4, -5, -6) require:

• A plain-language summary of the FAP available on request
• No extraordinary collection actions (ECA) until eligibility is determined
• Refunds of amounts paid above "amounts generally billed" (AGB) if the patient later qualifies
• Retroactive application for up to 240 days after the first post-discharge bill

Eligibility

Most nonprofit hospitals set their FAP thresholds at:

• ≤ 200% Federal Poverty Level (FPL) — typically free care
• 201–400% FPL — typically discounted care on a sliding scale
• > 400% FPL — generally ineligible, but some hospitals go higher

For 2026, the single-person FPL is $15,060 so 400% is $60,240. Family of four: 400% is $124,800.

The 240-day window

This is the sleeper clause. Even if you already paid the bill, you can apply for charity care retroactively up to 240 days after the first post-discharge bill. If you qualify, you get a refund of anything you paid above AGB.

Chapter 8
Step 6 — The prompt-pay discount path

If you have the cash to settle today and you're not going the NSA or charity care route, the prompt-pay discount is the simplest win. Hospitals would rather take 40 cents on the dollar today than fight for 100 cents for six months.

The anchor

The Hospital Price Transparency Rule (45 CFR § 180) requires hospitals to publish their cash / self-pay prices. The cash price is almost always 30–60% of the chargemaster rate. That's your anchor. You can't be charged more than the cash price the hospital already advertises publicly.

Your opening offer

A reasonable opening offer is 40–50% of the billed balance, settled in full today in exchange for a paid-in-full statement. Many hospitals will accept 50% without negotiation. If they counter, go to 60%. Rarely do you need to go above 70% unless the bill is already small.

Get it in writing

Never pay until you have written acceptance of the settlement. Specifically, the letter must say: "[Amount] is accepted as payment in full. No balance will be reported to any credit bureau or collection agency." Without that, a collection agent can come after the difference later.

Chapter 9
Negotiation scripts — 15 phone-call openers that work

Most disputes go through at least one phone call. Here's what to say, organized by scenario.

1. Opening a general dispute

2. When they say "the bill is correct, please pay"

3. Disputing a specific duplicate charge

4. Invoking the No Surprises Act

5. Opening a charity care request

6. Negotiating a prompt-pay discount (uninsured)

7. When a collection agent calls

8–15: Quick openers

• Asking for supervisor: "I appreciate you trying to help. This is a specific legal question about [NSA / 501(r) / FDCPA] — can you transfer me to someone with the authority to resolve it?"
• When they offer a payment plan instead: "I'm happy to discuss payment plans, but first I need to confirm the total amount is correct. Can we resolve the dispute first, then talk about payment?"
• When they cite policy: "Can you send me that policy in writing? I'd like to review it before responding."
• When they threaten credit reporting: "Please note I'm disputing this debt. Under the FDCPA and FCRA, you may not report a disputed debt to credit bureaus without marking it as disputed. I'm going to document this call."
• When they ignore your letter: "I sent a written dispute on [date] via certified mail. Can you confirm receipt and tell me who's handling it? The statutory response window is running."
• When you need to escalate above billing: "Please transfer me to the patient advocate or the compliance officer. This is no longer a billing-department matter."
• Asking for AGB calculation: "Can you send me how you calculated the amount generally billed (AGB) for my services, per your published methodology under 26 CFR § 1.501(r)-5?"
• Closing a successful negotiation: "Great. Can you send me the paid-in-full statement by email in the next five minutes, before I submit payment? I need that confirmation first."

Chapter 10
Escalation toolkit — when the hospital says no

Most bills settle at steps 1–6. When they don't, you have real regulatory levers.

CMS No Surprises Help Desk

For any NSA-related dispute: 1-800-985-3059 or cms.gov/nosurprises. CMS will intervene with the provider. This is particularly effective — providers are required to cooperate with CMS inquiries and resolve violations quickly.

State Insurance Commissioner

For insurance-side disputes (denials, underpayments, bad-faith handling), your state insurance commissioner can intervene. The complaint creates an official record and often triggers a regulatory review that loosens the insurer's position. Response times are typically 30 days.

State Attorney General Consumer Protection

For hospital-side disputes that involve pattern-of-practice issues (e.g., systematic balance billing, charity care violations, predatory collections), the state AG's consumer protection division is the right escalation. They don't usually fight individual cases but they track complaints and bring class-action or regulatory actions when patterns emerge.

IRS Form 13909 (for nonprofit hospitals only)

If a nonprofit hospital fails to apply its FAP or engages in extraordinary collection actions before determining eligibility — that's a 501(r) violation. File IRS Form 13909 to report it. The IRS can revoke nonprofit status for repeated violations. This is rarely necessary but it's a nuclear option that hospitals want to avoid.

State hospital licensing board

Every state has a hospital licensing board that handles complaints about billing practices, misleading advertising, and patient-rights violations. Look up "[your state] department of health hospital complaints."

Small claims court

If the disputed amount is under your state's small-claims jurisdictional limit (usually $5,000–$25,000), small claims is fast and inexpensive. Hospitals rarely show up; many bills settle between filing and hearing date. Filing fees are $30–$75.

Chapter 11
Collections defense — what to do if they threaten collections

If the bill gets sent to collections, the rules change. You now have the Fair Debt Collection Practices Act (FDCPA) on your side.

Your FDCPA rights

• Within 5 days of first contact, the collector must send you a validation notice with the amount owed, creditor name, and your right to dispute.
• You have 30 days from the validation notice to dispute the debt in writing.
• Once disputed in writing, the collector must stop all collection activity until they've validated the debt.
• Collectors cannot call before 8 AM or after 9 PM, cannot contact you at work after you've told them not to, cannot discuss the debt with third parties, and cannot threaten action they can't legally take.

The dispute letter

Send a dispute letter via certified mail within 30 days. Keep it simple:

Credit reporting

Medical debt has different credit reporting rules than other debt:

• Paid medical collections under $500 cannot be reported at all (as of 2023)
• Medical collections must be reported as "in dispute" if you've disputed them in writing
• The Fair Credit Reporting Act (FCRA) lets you dispute inaccurate reporting directly with the credit bureaus — each bureau has a free online dispute form

Chapter 12
Timeline & cadence — the 90-day playbook

A successful dispute follows a rhythm. Here's the one I'd run:

Day 0 — The bill arrives

• Do not pay. Do not agree to anything on the phone.
• File the bill. Note the date received.
• Check if it's your first post-discharge bill — if the provider is a nonprofit hospital, the 240-day charity care clock starts now.

Day 1–3 — Request the itemized bill

• Send the HIPAA § 164.524 request via certified mail.
• Keep the green return-receipt card.

Day 7–30 — Wait

• Hospital has 30 days to respond. Don't nag.
• If collection calls come in, send the FDCPA dispute letter.

Day 30 — Itemized bill arrives (or doesn't)

• If it arrives: do the three-pass read (Chapter 4). Mark errors.
• If it doesn't: send a second letter citing the 30-day violation and your intent to escalate.

Day 31–45 — Send the dispute letter

• Decide your path: NSA, charity care, unbundling, prompt-pay, or combined.
• Generate the letter (the $29 Letter tool does this automatically with your details, statute, and CC list).
• Send certified mail.
• Give 30 days for response.

Day 60–75 — First response

• Most responses arrive within 30 days.
• If they adjust the bill: verify the new amount is acceptable. Get the adjustment in writing.
• If they deny: time to escalate.

Day 75–90 — Escalate if needed

• File with CMS (for NSA), state insurance commissioner (for insurance issues), state AG (for pattern-of-practice), or IRS Form 13909 (for 501(r) violations).
• These agencies typically force a response within 30 days.

Day 90+ — Final resolution

• Most bills are resolved by Day 90–120.
• If not, consider small-claims court for disputes under your state's limit.

— End of Playbook —

Generate your actual letter — $29 →