Credit Balances and Overpayment Refunds: The 60-Day Rule Independent Practices Miss
A practice that identifies a $40,000 payer overpayment has 60 days to report and return it before that balance stops being an accounting problem and becomes a False Claims Act obligation carrying treble damages plus per-claim penalties. The clock does not start when the payer sends a recoupment letter. It starts when the practice knew, or was reckless in not knowing, that the money was not owed -- which for most independent practices means the day a credit balance shows up on an aging report and nobody works it.
This article provides general operational guidance on medical billing practices. It is not legal, compliance, or financial advice. Consult qualified healthcare billing counsel or a certified professional coder for your specific situation.
Medicare audit rules and Local Coverage Determinations (LCDs) vary by MAC jurisdiction and change frequently. Verify current requirements with your MAC before acting on any guidance in this article.
Credentialing and enrollment requirements vary by payer and change frequently. Verify current requirements directly with each payer.
The Short Answer
Federal law requires Medicare and Medicaid overpayments to be reported and returned within 60 days of identification, with a 6-year lookback. Commercial payer overpayments follow contract terms instead, and patient credit balances follow state refund and unclaimed property law. A practice needs three separate workflows, not one, because the deadline, the recipient, and the legal exposure differ in each case.
What Counts as an Overpayment, and When the Clock Starts
Section 6402(a) of the Affordable Care Act (2010), codified at 42 U.S.C. 1320a-7k(d), created the reporting obligation: an overpayment retained after the deadline becomes an "obligation" under the False Claims Act. That is the mechanism that turns a bookkeeping item into fraud exposure. The practice does not have to have billed fraudulently in the first place. Keeping money it later learned it was not entitled to is the violation.
The deadline is the later of 60 days after the overpayment is identified, or the date a corresponding cost report is due. For a physician practice with no cost report, it is 60 days.
Identification is the trigger, not the refund request
Practices routinely assume the obligation begins when a payer demands money back. It does not. Identification is a practice-side event. A credit balance sitting on the patient ledger, a duplicate remittance, a payment posted after a secondary payer already paid in full -- each of those is an identified overpayment once someone at the practice has enough information to know it. Waiting for the payer to notice is the single most common way small practices blow the deadline, because the payer may never notice at all.
The 2024 rule changed what "identified" means
CMS's February 2016 final rule (81 FR 7654) tied identification to "reasonable diligence," and described roughly 6 months as a timely investigation window before the 60-day clock began. CMS revised that standard in final rule CMS-4205-F, published April 2024 and applicable January 1, 2025. The reasonable-diligence formulation was removed and replaced with the False Claims Act knowledge standard: actual knowledge, deliberate ignorance, or reckless disregard. The rule also allows the 60-day deadline to be suspended for up to 180 days while a provider conducts a good-faith investigation of a related overpayment.
The practical effect for an independent practice is narrower than it sounds. Deliberately not looking at credit balances is deliberate ignorance. A practice that has never reconciled its credit balance report cannot argue it did not know.
| Overpayment Source | Who Gets Repaid | Deadline After Identification | Which Vendor Category Owns the Fix |
|---|---|---|---|
| Medicare Part B duplicate or incorrect payment | Your MAC | 60 days | Billing / RCM vendor or in-house biller |
| Medicaid or Medicaid MCO overpayment | State Medicaid agency or the MCO | 60 days federal floor; some states impose shorter windows | Billing / RCM vendor |
| Commercial payer recoupment demand | Payer, per contract | Contract terms; appeal windows commonly 30-90 days | Practice leadership plus billing vendor |
| Patient overpayment on copay or deductible | The patient | State refund statute; escheats to the state if unreachable | Front office and practice management system owner |
| Claims paid under the wrong TIN or NPI after an enrollment change | Payer | 60 days for government payers | Credentialing / enrollment service |
Ranges above are typical patterns, not quotes, and state Medicaid timelines in particular vary. Confirm your own state's rule before setting a policy deadline.
Patient Credit Balances Follow Different Rules
Patient credit balances are the larger operational problem at most independent practices and carry none of the False Claims Act exposure -- which is exactly why they get ignored until they become an unclaimed property liability.
A patient credit balance arises when the patient pays an estimated responsibility at the time of service and the payer later adjudicates the claim at a lower patient responsibility. High-deductible plans made this routine. A practice collecting point-of-service payments against estimates will generate credit balances continuously as a structural byproduct of its own collection policy, not as an error.
Two obligations attach. First, state law generally requires refunding an identified patient credit within a defined window, and several states set that window explicitly for health care providers. Second, if the patient cannot be located, the balance does not become practice revenue. It escheats to the state under unclaimed property law after a dormancy period that commonly runs 1 to 5 years depending on the state. Writing an unrefundable patient credit to income is the error auditors find fastest, because it shows up as a recurring adjustment code in the practice management system.
The distinction that matters operationally: government payer credits are a compliance deadline, patient credits are a liability that never expires in the practice's favor.
How to Build a Credit Balance Workflow
Most independent practices do not need software for this. They need a named owner and a monthly cadence.
- Run the credit balance report monthly, not quarterly: every practice management system produces one. Monthly cadence keeps any single balance well inside a 60-day window even if identification is dated to the report run.
- Split the report into three buckets at the point of review: government payer, commercial payer, patient. The buckets have different deadlines and different recipients, and a single undifferentiated worklist causes the government items to be worked last.
- Date-stamp identification: record the date each credit was first flagged. Without a defensible identification date, the practice cannot demonstrate it met the deadline, and the burden is on the provider.
- Refund government payer overpayments through the payer's own process: MACs publish voluntary refund and self-reported overpayment procedures. Do not simply take the money back by adjusting a future claim unless the payer's process directs it.
- Escalate anything that looks systemic: a single duplicate payment is a clerical fix. The same overpayment pattern across many claims suggests a coding or enrollment root cause, and that is the fact pattern where the 180-day investigation suspension and counsel involvement both matter. If the root cause traces to an enrollment or TIN change, work it alongside your provider credentialing process rather than as a pure billing fix.
- Set a write-off rule that is not "write it off": define, in writing, what happens to a patient credit that cannot be refunded, including the state dormancy period and the escheat filing. A policy that ends in an adjustment code is a finding waiting to happen.
There is no published benchmark for how large a normal credit balance pool should be, and any figure quoted as one is invented. Calculate the practice's own instead: total credits on the current report divided by average monthly collections. Track that ratio month over month. A stable ratio means the collection policy is generating credits at a steady structural rate, which is expected. A ratio that climbs means credits are being created faster than they are worked, and that is the only number that signals a problem.
What Goes Wrong
- Treating the credit balance report as a billing vendor problem: the reporting obligation runs to the provider, not the vendor. An outsourced billing contract that is silent on credit balance work leaves the obligation with the practice and the visibility with the vendor.
- Assuming CMS-838 applies: the quarterly Credit Balance Report is a Medicare Part A institutional requirement. Physician practices billing Part B generally do not file it, and practices that assume a quarterly form covers them have no workflow at all.
- Netting overpayments against underpayments: an underpayment on one claim does not offset an overpayment on another. Each is adjudicated separately, and self-help netting is what converts a refund into an alleged concealment.
- Writing patient credits to revenue after 12 months: the balance is a liability until refunded or escheated. An internal aging policy does not extinguish a state law obligation.
- No identification date: practices that work credits diligently but never record when each was found cannot prove timeliness, which is the only fact that matters if the deadline is ever questioned.
What Should You Do?
Pull the credit balance report this month and split it three ways. If the government payer bucket contains anything older than 60 days from the date it first appeared, that is the item to work first and the one worth a call to healthcare counsel before refunding, because the fact pattern -- not the dollar amount -- determines whether a voluntary refund or a self-disclosure is the right route. The patient bucket is lower risk but larger, and it is the one that quietly becomes a state unclaimed property filing. Neither bucket gets smaller by waiting, and the 6-year lookback means old balances do not age out. Practices tracking this alongside their other revenue cycle indicators can fold it into a standing practice financial health dashboard rather than running it as a separate exercise. Vendor categories that touch this workflow -- billing and RCM services, credentialing services, practice management systems -- are compared by specialty and contract type on GetPracticeHelp.
Get the full practice management guide at GetPracticeHelp -- with billing benchmarks, credentialing checklists, and revenue cycle best practices.
Frequently Asked Questions
- Does the 60-day rule apply to commercial insurance overpayments?
- No. The 60-day statutory deadline under 42 U.S.C. 1320a-7k(d) applies to Medicare and Medicaid. Commercial payer overpayments are governed by the payer contract and applicable state law, which commonly allow 30-90 day appeal windows and set their own recoupment lookback limits. The contract is the controlling document.
- When exactly is an overpayment "identified"?
- Under CMS-4205-F, applicable January 1, 2025, identification follows the False Claims Act knowledge standard: actual knowledge, deliberate ignorance, or reckless disregard. In practice, a credit balance appearing on a report the practice runs is identified at that point. The rule permits suspending the 60-day deadline for up to 180 days while conducting a good-faith investigation into a related overpayment.
- Can a practice keep a patient credit balance if the patient cannot be found?
- No. Unrefundable patient credits escheat to the state under unclaimed property law after a dormancy period that commonly runs 1 to 5 years depending on the state. The balance stays a liability until it is either refunded or remitted to the state. Writing it to revenue is not an available option.
- How far back can Medicare look for overpayments?
- The lookback period established in CMS's February 2016 final rule (81 FR 7654) is 6 years from the date the overpayment was received. A practice that has never reconciled credit balances has a 6-year exposure window, not a one-year one.
- Does an outsourced billing company assume this obligation?
- Not by default. The statutory obligation runs to the provider who received the payment. A billing contract can assign the work of identifying and processing refunds, but it does not transfer the legal obligation. Confirm in writing which party runs the credit balance report, on what cadence, and who date-stamps identification.