Red Flags When Choosing a Medical Billing Company
Quick Answer
The clearest red flags in a medical billing company are pricing that cannot be explained in one page, refusal to name the team that will work your account, no SOC 2 report or hesitation about signing a BAA, contracts with auto-renewal and punitive exit terms, guarantees of specific collection percentages before seeing your data, and references that all date from the same two-year window. Any one of these deserves a hard follow-up question. Two or more means keep looking.
Most billing companies do honest work. The ones that do not tend to fail in predictable ways, and almost every failure was visible during the sales process to anyone who knew where to look. These are the warning signs revenue cycle leaders and practice managers report seeing in hindsight, grouped by where they show up: pricing, people, compliance, contract, and performance claims.
Pricing Red Flags
1. The fee cannot be explained in one page.
A percentage-of-collections rate is simple. What gets buried is everything around it: statement fees, patient call charges, clearinghouse pass-throughs, fees on capitation payments the biller did nothing to earn, and charges on money you collected yourself at the front desk. Ask for a complete fee schedule and a sample invoice from a real client. If the sample invoice takes two weeks to produce, that is the answer.
2. The rate is dramatically below market.
Billing rates vary by specialty and volume, but a bid at half the going rate is not a bargain, it is a staffing plan. Someone will work your claims for that price, just not enough someones, and not for long. Underpriced accounts get the newest staff and the slowest follow-up.
3. Fees are charged on billed amounts instead of collections.
A company paid on what it bills has no reason to care what gets collected. This structure is rare precisely because it removes the only incentive alignment the model has. Walk away from it.
People Red Flags
4. No named team before signature.
You should know who your account manager is, how many clients they handle, and where the people posting your payments and handling your denials sit before you sign. A company that will not introduce the delivery team is selling capacity it does not have.
5. Nobody on the team knows your specialty.
Billing for behavioral health, oncology infusion, or surgical practices are different jobs. Ask the operational team, not the salesperson, to talk through your top ten CPT codes and your prior authorization pain points. Blank looks during that conversation predict your denial rate a year from now.
6. Undisclosed subcontracting or offshore delivery.
Offshore billing operations can perform well. The red flag is concealment: a company that markets US-based service while quietly routing work elsewhere is already comfortable misleading you, and your BAA and security review probably do not cover the actual data path.
Compliance red flags
7. No SOC 2 report, or excuses instead of documents.
Ask for the SOC 2 Type II report, the HIPAA risk assessment summary, and proof of cyber liability insurance. A serious billing company produces these within days. Hesitation, expired documents, or a substitute marketing PDF each tell you what an auditor would find.
8. Hesitation about the BAA or your right to audit.
The business associate agreement is table stakes. So is a clause letting you audit their controls or receive their audit results annually. Pushback on either means their compliance posture is a brochure.
9. Coding advice that maximizes revenue a little too eagerly.
A biller who volunteers ways to upcode, unbundle, or add modifiers that do not match documentation is offering you audit exposure, recoupments, and possible false claims liability along with the extra revenue. Compliance risk transfers to the provider, not the biller. Treat aggressive coding pitches as disqualifying.
Contract Red Flags
10. Auto-renewal plus a punitive exit.
Watch for multi-year auto-renewal with a narrow cancellation window, termination fees, and vague language about returning your data. You want termination for convenience at 60 to 90 days and your full billing records back in a usable format at no charge. A company that fights those terms is planning to keep you by force rather than performance.
11. Return of data.
If the billing runs in the vendor's own system rather than yours, ask exactly what you get back at exit: claim histories, payment records, credentialing files, fee schedules, and in what format. Companies have leverage at termination in direct proportion to how vague this clause is. Contractually, your BBA and MSA should specify all terms of termination.
Performance-claim red flags
12. Guaranteed collection percentages before seeing your data.
Nobody can promise a 98 percent collection rate without knowing your payor mix, your documentation quality, or your front-end processes. A guarantee issued before diligence is a sales tactic that either evaporates in the contract fine print or gets financed by hidden fees. The honest version is a benchmarked target set after they have reviewed your data, with reporting that lets you verify it monthly.
What the absence of red flags looks like
The strong candidates share a pattern: they show you a full fee schedule and a sample invoice without being chased, they introduce the actual delivery team, they hand over compliance documents like it is routine, their contract reads like they expect to keep you through performance, and their references span old clients and new ones. Build your shortlist from companies that clear that bar first, then compare on price. Directories that organize billing companies by specialty and client size, such as RCR|HUB's medical billing and coding categories, make it easier to start with structural fit rather than whoever advertises hardest.
Frequently Asked Questions
-
Typical contingency rates run from roughly 4 to 9 percent of collections depending on specialty, claim volume, and average claim value. High-volume, low-dollar specialties sit at the top of the range. A quote far below market usually signals understaffing rather than efficiency.
-
Request their SOC 2 Type II report, confirm they will sign a business associate agreement, check references across different time periods and specialties, verify their physical operations and any offshore delivery, and search for regulatory actions or breach reports involving the company name.
-
Only if the contract says so. Before signing, require language that all claim histories, payment records, and reports be returned to you in a standard, usable format at no cost within a defined window after termination. Without that clause, data return becomes a negotiation at the worst possible moment.
-
Offshore delivery, when properly secured with security controls, BAA coverage, and access auditing, is a legitimate model used by many established firms. Concealed offshore delivery is a red flag because it means your compliance review did not cover the actual data path.