Pull your last remittance batch and search it for CPT 99441. If anything comes back, it came back as a denial — that code was deleted from the CPT code set effective January 1, 2025, along with 99442 and 99443 and the parallel non-physician telephone assessment codes. It has now been invalid for more than a year, and it is still showing up on claims because it is still buried in fee schedules, EHR quick-pick lists, paper superbills, and the muscle memory of whoever covers the phones on Fridays.

This guide is for the administrator, billing lead, or privacy officer who has to clean that up. It covers where the code is still hiding, who owns each fix, what your coders need from an audio-only encounter, and the vendor and records-handling obligations that nobody assigned when phone visits became routine.

What Happened to CPT 99441 — The Short Answer

CPT 99441 described a telephone evaluation and management service provided by a physician or other qualified health professional to an established patient, involving 5–10 minutes of medical discussion, when the call did not originate from a related E/M service within the previous seven days and did not lead to an E/M service within 24 hours or the soonest available appointment. CPT 99442 and 99443 covered longer discussion times on the same structure.

The 2025 CPT cycle deleted that family and replaced it with a new set of telemedicine E/M codes in the 98000-series, split by modality (audio-video versus audio-only) and by new versus established patient, plus a separate short virtual check-in code. Practices that mapped old telephone codes one-for-one into the new range without reading the descriptors are producing rework for themselves — the time thresholds and patient-status requirements are defined in the descriptors, not inherited from 99441.

So: CPT 99441 is not a payable code in 2026 and should not appear on any claim, template, or fee schedule your practice maintains.

Why claims may still be denying even after you switch codes

Coverage of the new telemedicine E/M codes is a payer-by-payer question, and Medicare did not adopt the new CPT family the way commercial payers did. CMS has continued to handle telehealth through its own list of covered services, place-of-service reporting, and modifiers, and has treated parts of the new telemedicine E/M family differently from CPT's intent. Meanwhile the statutory Medicare telehealth flexibilities — geographic and originating-site rules in particular — have depended on short-term congressional extensions that have lapsed and been restored more than once. Confirm the current status against the CMS Medicare telehealth pages and your MAC's most recent bulletin before you rewrite a billing policy.

Nothing here tells you which code fits a given encounter. Code selection belongs to your credentialed coders and the rendering clinician, working from the current CPT descriptors, the payer's published policy, and the documentation in the record.

The Five Places CPT 99441 Is Still Hiding

Deleting a code from the code set does not delete it from your systems. Work these five in order.

  1. The practice management fee schedule. Deleted codes usually stay in the master file with a termination date. If your build ignores termination dates, the code stays selectable. Ask your PM vendor to show you the validation, not to describe it.
  2. EHR encounter templates and favorites lists. Every clinician who ever billed a phone visit has a personal favorites list. Those do not get cleaned by a system-level update. Pull the list per provider.
  3. Paper and PDF superbills. Front desk and after-hours coverage still use them in a lot of practices. Search your shared drive for anything with "telephone" or "99441" in it and version-stamp the replacement.
  4. Charge-capture rules and scrubber edits. A scrubber configured in 2023 may still be silently mapping or auto-appending modifiers to the retired family.
  5. Standing orders, patient-facing fee estimates, and financial policy documents. If your good-faith estimate template quotes a code that no longer exists, that is a patient-communication problem as well as a billing one.

Who Owns Each Piece of the Cleanup

Assign these in writing. Unassigned cleanup does not happen.

  • Billing manager: fee schedule termination dates, scrubber edits, denial review for the retired family, a written crosswalk memo dated and filed.
  • Clinical informatics or EHR super-user: template retirement, per-provider favorites audit, note-template prompts for time and modality.
  • Front desk supervisor: scheduling call types, superbill replacement, script for what staff tell patients about phone visit charges.
  • Privacy officer: the vendor inventory and consent workflow described below.
  • Practice administrator: payer policy verification, a calendar reminder each fourth quarter to re-check descriptors before January 1.

What Your Coders Need in the Note From an Audio-Only Visit

The retired telephone codes were time-based and status-based, and the replacement family is built the same way. Documentation that was adequate for a face-to-face visit is often not adequate for an audio-only one. Build the prompts into the template so nobody has to remember.

  • Modality, stated plainly. "Audio-only telephone" or "synchronous audio-video." Not "telehealth" alone — that word no longer identifies a code family.
  • Time of medical discussion, distinct from documentation time and distinct from hold or callback time.
  • Patient status — new or established — because the new family splits on it.
  • Patient location and provider location at the time of service, which payers use for place-of-service and, for Medicare, for originating-site rules.
  • Who was on the line. A parent, an adult child, an interpreter, a caregiver. This is a coding fact and a disclosure fact.
  • Consent to the audio-only modality, and whether the patient was offered a video or in-person alternative.
  • Relationship to adjacent visits — whether the call arose from a recent encounter or led to one — because the retired codes excluded those situations and payer policies still test for them.

Run a ten-chart internal audit against that list before you argue with a payer about a denial. Half the time the problem is the note, not the code.

The Half Nobody Assigned: Audio-Only Telehealth Is Still a HIPAA Workflow

When phone visits exploded, HHS Office for Civil Rights ran a notification of enforcement discretion covering telehealth technologies. That discretion ended with the public health emergency in May 2023, and the 90-day transition period behind it closed in August 2023. Since then, audio-only telehealth has been governed by ordinary Privacy, Security, and Breach Notification Rule obligations. Many practices never re-examined the workflow they built under discretion.

OCR's guidance on remote communication technologies for audio-only telehealth draws the line that matters operationally: a traditional landline call is not an electronic transmission of PHI for these purposes, so the phone carrier is not acting as a business associate. Almost nothing in a modern practice is a traditional landline.

Your phone system is probably a business associate

If your practice calls patients through VoIP, a cloud phone platform, a softphone in the browser, a texting or call-routing app, an answering service, or a virtual receptionist, that vendor is creating, receiving, maintaining, or transmitting PHI on your behalf. It needs a business associate agreement. Voicemail-to-email transcription, call recording for quality review, and hosted call logs all deepen the exposure, because they leave a retrievable copy of the encounter with the vendor.

Go pull the actual signed agreements. Not the vendor's marketing page that says "HIPAA compliant." Not an email from a sales rep. The executed document, with the subcontractor flow-down language and the breach notification timeline in it. If your phone vendor, answering service, or interpretation line is missing one, you can generate a signature-ready business associate agreement through a six-step wizard and have it out for signature the same afternoon — one-time purchase, PDF and DOCX export, no subscription to manage. HHS also publishes sample business associate agreement provisions if you want to compare required elements clause by clause.

Recording, transcription, and ambient documentation

If any part of the call is recorded or machine-transcribed, three separate obligations stack up. First, the vendor needs a BAA. Second, the recording and the transcript are PHI, which means they fall under your retention schedule, your access controls, and your breach analysis — a transcript sitting in an unmonitored cloud bucket is a finding waiting to happen. Third, recording consent is state law, not HIPAA, and two-party consent states will require an explicit disclosure at the top of the call. Get counsel to confirm your state's rule and put the script in writing for staff.

Identity verification on inbound calls

Audio-only means you cannot see who you are talking to. Write down the verification standard your staff use — typically two or three identifiers — and train to it. Also write down what happens when a spouse, adult child, or employer calls asking about a visit. The most common phone-visit privacy incident in a small practice is not a hack; it is a well-meaning staff member confirming an appointment or a result to the wrong household member.

Records Requests Cover Phone Visits Too

A patient who had a telephone visit has the same right of access to that record as any other patient, and the same clock applies: 30 days from the request, with one 30-day extension available if you notify the patient in writing of the reason and the new date.

Operationally, that means your release-of-information staff need to know where phone-visit documentation lives. If the note is in the EHR but the recording is in the phone vendor's portal and the transcript is in a separate documentation tool, the designated record set is fragmented across three systems and your ROI clerk will miss two of them. Map it now, in a single page, and keep the map with your access procedure.

Same logic applies to accounting of disclosures, litigation holds, and breach investigations. If you cannot say within an hour where every artifact of a phone encounter lives, you cannot answer a records request or a breach question on schedule.

A 30-Day Cleanup Plan

Week 1. Run a claims report for the retired telephone family across the last 18 months. Quantify denials and any recouped payments. Terminate the codes in the fee schedule. Notify billing staff in writing that the codes are retired.

Week 2. Audit EHR templates and per-provider favorites. Retire the old telephone template and replace it with one that prompts for modality, discussion time, patient status, patient location, and who was on the line. Update superbills and version-stamp them.

Week 3. Verify current coverage policy for audio-only services with your top five payers and with your MAC. File the confirmations. Write a one-page internal billing policy for audio-only encounters and date it.

Week 4. Privacy work. Inventory every vendor that touches a patient phone call. Confirm an executed BAA for each. Locate all recordings and transcripts, apply your retention schedule, and add phone-visit artifacts to your records-request map and your risk analysis. If your risk analysis has not been refreshed since audio-only visits became routine, that is a gap worth closing with a current risk analysis and updated policy set.

Then put a recurring fourth-quarter task on the calendar: read the new CPT descriptors before January 1, and check whether any code your practice bills regularly has been retired. CPT 99441 caught a lot of practices flat-footed precisely because nobody owned that review.

Start With the Vendor Gap

The billing fix is finite — a fee schedule edit, a template rebuild, a policy memo. The vendor gap is the one that generates a breach notification. If your phone platform, answering service, transcription tool, or interpretation line is operating without a signed agreement, build the business associate agreement and send it out this week. It is a one-time purchase, it exports to PDF and DOCX, and it closes the exposure that survived the end of telehealth enforcement discretion in most practices.