A 68-year-old established patient books an "annual physical." Your front desk verifies the card, rooms her, and the visit runs 40 minutes. Five weeks later she opens a statement for $287 and calls, upset, asking why Medicare denied a physical she has had every year of her adult life.

That call is not a coding problem. It is a workflow problem that started at check-in and traveled through your clearinghouse, your statement vendor, and your payment processor before it reached her mailbox. This guide walks administrators and billing staff through the operational mechanics around the 99397 CPT code — eligibility verification, payer rules, documentation expectations, and the appeals traffic it generates — and then makes explicit what each step means for your records handling and your vendor list.

What the 99397 CPT Code Sits Inside

CPT organizes preventive medicine services into two parallel series: new patients (99381–99387) and established patients (99391–99397). Within each series, the codes step up by patient age. The 99397 CPT code occupies the top age band of the established-patient series — patients 65 and older — and describes a comprehensive periodic preventive medicine reevaluation, including age- and gender-appropriate history, examination, counseling, risk factor reduction interventions, and ordering of appropriate laboratory and diagnostic procedures.

Note what that descriptor does not include: it is not selected by time, and it is not selected by medical decision making. Preventive medicine codes are chosen by patient age and by new-versus-established status. Your coders do not level these visits the way they level office E/M.

The Three-Year Rule Your Scheduler Is Actually Applying

A patient is established if they received a face-to-face professional service from a physician or qualified health professional of the same specialty and subspecialty in the same group practice within the prior three years. Your scheduling and registration staff make that determination dozens of times a day, usually without realizing they are making a coding decision.

Build the check into registration rather than leaving it to the biller. Have your practice management system flag last date of service by rendering provider specialty and surface it on the encounter. When a patient transfers from a retired partner to a new hire in the same specialty and same TIN, the status usually does not reset — and a claim that says otherwise invites a recoupment.

Is 99397 Covered by Medicare? The Short Answer

No. Medicare Part B does not pay for routine annual physical examinations. The exclusion is statutory, not a coverage-policy judgment call, and it applies regardless of documentation quality. What Medicare does cover is a different set of services: the Initial Preventive Physical Examination (the "Welcome to Medicare" visit, G0402) available within the first 12 months of Part B enrollment, and the Annual Wellness Visit (G0438 initial, G0439 subsequent), which is a health-risk-assessment and personalized-prevention-plan service rather than a head-to-toe examination.

Practices commonly handle this in one of three ways: bill the AWV alone and skip the comprehensive physical, perform both and collect the physical portion from the patient, or bill 99397 with modifier GY to generate a denial that moves liability to the patient or a secondary plan. Which path your practice takes is a policy decision your compliance lead and billing manager should document in writing — not an improvised choice made per encounter. CMS publishes the underlying coverage rules in the Medicare Benefit Policy Manual, available through the CMS Internet-Only Manuals.

Commercial plans behave differently. Non-grandfathered group and individual plans generally cover in-network preventive services without cost sharing, which is exactly why a preventive visit that gets recoded, or that carries a problem-oriented diagnosis, produces an unexpected patient balance and a phone call.

The Front-Desk Script That Prevents the Angry Statement Call

Your defense against the $287 surprise is a 90-second conversation before the patient is roomed. Standardize it:

  • Verify eligibility electronically the day before, not at the counter. Capture whether the patient has already used an AWV in the current benefit period and, for newer beneficiaries, whether the IPPE window is still open.
  • Name the service the patient is receiving. "Wellness visit" and "physical" are not interchangeable, and patients use them interchangeably.
  • Explain non-covered portions before the exam, not after. For statutorily excluded services, an ABN is voluntary, but a signed voluntary notice documents that the patient understood the financial exposure.
  • Log the conversation in a consistent field so the biller and the appeals staffer can find it in ten seconds.

Assign one person to own this script. In most practices under 15 providers, that is the practice manager, and the training refresh belongs in your annual HIPAA and revenue-cycle training block.

When a Preventive Visit Turns Into a Problem Visit

A patient scheduled for a preventive visit raises a new complaint, or a chronic condition needs real management that day. CPT permits reporting a separate problem-oriented office visit alongside the preventive service when a significant, separately identifiable service is performed, with modifier 25 appended to the problem visit code.

This is where practices get audited. The operational controls that hold up:

  1. The clinician's note distinguishes the preventive work from the problem-oriented work — separate documentation of the problem's history, findings, and plan.
  2. The problem visit carries its own diagnosis, distinct from the routine-exam diagnosis on the preventive line.
  3. Your billing team runs a monthly report on modifier 25 frequency by provider and reviews outliers before a payer does.
  4. Patient financial counseling covers the possibility of a copay or deductible on the problem-visit line, because the preventive line may be $0 while the other is not.

Nothing above is a clinical judgment. Whether the additional work was significant and separately identifiable is the treating clinician's determination, documented in the record. Your job is to make sure the documentation, the diagnosis linkage, and the patient conversation all exist before the claim leaves the building.

Every 99397 Claim Touches at Least Four Business Associates

Map the path of a single preventive claim. The eligibility check (270/271) runs through an eligibility vendor or clearinghouse. The claim (837P) goes to the clearinghouse and on to the payer. The remittance (835) comes back through the same pipe. The patient balance moves to a statement print-and-mail vendor, then to a payment processor, and possibly to a collections agency. If you outsource coding or the full revenue cycle, add that firm — and its offshore subcontractors.

Every one of those entities creates, receives, maintains, or transmits PHI on your behalf. Every one of them needs a business associate agreement, and every one of them needs written assurance that its own subcontractors are bound by equivalent terms. HHS publishes sample business associate agreement provisions that establish the floor, not the ceiling.

The gaps I see most often in revenue-cycle vendor lists: the statement vendor that was onboarded by the office manager in 2019 and never papered, the payment processor whose "terms of service" were assumed to cover it, and the coding contractor who works as a 1099 individual and therefore never got a contract at all. If you find one of those in your own audit this quarter, you can generate a signature-ready business associate agreement through a six-step wizard and export it as PDF or DOCX — a one-time purchase, no subscription, which is usually faster than routing a redline through counsel for a $400-a-month print vendor.

Minimum Necessary Applies to Your Billing Data, Too

Payment is a permitted use, but permitted is not unlimited. Two habits to audit this quarter:

Attachments. When a payer requests records to support a preventive claim, send the encounter note for the date of service — not the full chart, not the last four years of visits. Assign a single staff member to assemble payer record requests and give them a written standard for scope.

Eligibility responses. A 271 response can include coverage details your scheduling note does not need. Do not paste raw payer responses into free-text scheduling comments where every user with scheduling access can read them.

Also check who in your system can change a code after the encounter is closed. Post-service code changes should be traceable to a named user with a reason, and your practice management system's audit log should be capable of showing it. If you cannot produce that log on demand, that is a finding for your next risk analysis — the kind of gap a structured HIPAA risk analysis and policy set is designed to surface.

When the Billing Dispute Becomes a Records Request

Here is the part billing teams underestimate. A patient who disputes a preventive-visit charge frequently escalates to "send me everything you have." That request triggers the right of access, and the designated record set includes billing records — claims, remittances, and the signed financial notice you filed in a drawer.

You have 30 days to act, with one 30-day extension available if you notify the patient in writing of the reason and the new date. Fees must be limited to a reasonable, cost-based amount. Access complaints remain one of the most common categories OCR resolves, and the HHS right of access guidance is the document to hand your records staff.

Two adjacent obligations to rehearse:

  • Amendment requests. A patient may ask you to amend a diagnosis code they believe is wrong. You have 60 days to respond, with a 30-day extension available. Correcting a claim is a billing action; amending the record is a Privacy Rule action with its own written process. Do not conflate them.
  • Misdirected statements. A statement batch merged to the wrong addresses is an impermissible disclosure. Run the four-factor risk assessment and document it, whether or not you conclude notification is required, per the HHS breach notification rule.

A 30-Day Cleanup for Preventive Visit Billing

Week 1 — Scope. Pull 12 months of preventive medicine claims by code and payer. Identify how many 99397 CPT code claims were submitted to Medicare, what happened to them, and how much landed on patients.

Week 2 — Policy. Write down your practice's standing approach to AWV-versus-physical, in one page, signed by the clinical lead and the administrator. Ambiguity here costs more than any single denial.

Week 3 — Scripts and forms. Update the front-desk script, the voluntary financial notice, and the location where those conversations are logged. Train registration and check-out together.

Week 4 — Vendors. List every entity that touched a claim in step one. Confirm an executed BAA and a current contact for each. Close the gaps before the next incident makes you find them under pressure.

The 99397 CPT code is a small line item that reveals whether your registration, documentation, and vendor controls actually connect. If week four turns up a vendor without paperwork, build the agreement and send it for signature the same day — then move on to the next name on the list.