A manufacturing company with 400 employees received its annual post-pay audit results and learned it had overpaid $340,000 in medical claims over the prior plan year. The TPA recovered $47,000. The rest was gone.
One reason was simple. The TPA's claims system lacked the sophisticated pre-payment detection capabilities needed to identify certain billing errors before funds were released.
What a Post-Pay Audit Actually Does (and Doesn't Do)
A post-pay audit reviews claims after the TPA has already processed and paid them, which means every dollar of error it finds has already been spent. Most employers understand post-pay audits as a quality-control tool.
TPAs process millions of transactions per year. A post-pay audit typically samples 100% of claims above a dollar threshold or a statistical sample of all claims, then flags anomalies for potential recovery. The auditor sends a demand letter to the provider, the provider disputes it, negotiations begin, and the employer eventually recovers a fraction of the original error amount.
Industry data from the Healthcare Financial Management Association suggests that self-funded plans overpay between 3% and 10% of total medical claims spend annually due to processing errors, billing fraud, and repricing failures. On a $5 million annual claims spend, that is $150,000 to $500,000 in potential overpayments. The post-pay audit catches some of it. It permanently loses most of it.
Why Post-Pay Audits Are Structured to Underperform
The fundamental flaw is not execution. It is timing. Post-pay audits were designed for a world where employers primarily wanted to satisfy an annual compliance checkbox. They were never engineered to maximize claims integrity or fiduciary protection.
Several structural problems compound the timing issue:
The Real Cost to Plan Sponsors
The financial exposure from inadequate claims oversight is larger than most HR leaders and CFOs realize, and it compounds year over year. A single plan year of 5% overpayments on a $10 million claims spend equals $500,000. Over five years, with no corrective action, that is $2.5 million in preventable losses.
The cost extends beyond the dollar amount recovered or not recovered. ERISA Section 404(a)(1) requires plan fiduciaries to discharge their duties with the care, skill, prudence, and diligence that a prudent person acting in a like capacity would use.
The Department of Labor has made clear through its audit and enforcement activity that reliance on a TPA does not absolve plan sponsors of fiduciary responsibility. A plan that conducts only an annual post-pay audit and recovers 15 cents on the dollar is not meeting that standard.
The Kaiser Family Foundation's 2023 Employer Health Benefits Survey found that the average annual family premium for employer-sponsored coverage exceeded $23,000. Self-funded plans bear 100% of claims cost directly. Every dollar of claims error flows straight to the plan's bottom line, and ultimately to employee cost-sharing and benefit design decisions.
What's Actually Happening Behind the Scenes
Why Current Approaches Aren't Enough
Annual post-pay auditing has become an industry default, not an industry best practice. The comparison below shows the practical difference between a post-pay approach and a concurrent or pre-pay model.
How to Fix It: A Practical Path for Plan Sponsors
Red Flags That Signal This Problem Applies to Your Plan
The ROI of Getting Claims Oversight Right
The return on investment from upgrading claims audit infrastructure is measurable and consistent across employer sizes. Independent studies and vendor case data suggest the following benchmarks:
Pre-pay and concurrent audit programs typically generate $3 to $8 in recovered or avoided overpayments for every $1 spent on the program. On a plan spending $8 million annually in medical claims, capturing even half of a conservative 3% error rate produces $120,000 in savings. A concurrent audit program for a plan that size typically costs $30,000 to $60,000 annually. The math is straightforward.
Dependent eligibility audits cost $15 to $40 per employee audited and routinely return 10 to 20 times that amount in annual premium savings from removing ineligible dependents. For a plan with 500 employees, the audit cost might be $20,000. If 4% of 900 covered dependents are removed and each carried an average monthly cost of $400, the annual savings exceeds $86,000.
The fiduciary protection value is harder to quantify but significant. DOL investigations of self-funded plans that result in findings of inadequate claims oversight can require the plan to reimburse participants for losses plus interest. Documented, proactive audit programs are a primary defense against that exposure.
Conclusion: Stop Auditing Yesterday's Mistakes
Post-pay audits have a place in a comprehensive claims oversight program, but they cannot be the entire program. Self-funded employers who rely on an annual post-pay review as their primary quality control tool are systematically overpaying their claims, underperforming on their ERISA fiduciary obligations, and leaving recoverable money on the table every month.
The good news is that better tools exist and are accessible to plans well below the Fortune 500 threshold. Concurrent audit programs, dependent eligibility verification, and clinical review of high-cost claims can be layered into most TPA relationships with modest contract adjustments and reasonable vendor investment. The ROI is well-documented. The fiduciary argument is clear.
Start by requesting your full claims data file from your TPA and scheduling an independent review. If your TPA resists providing the data, that resistance is itself a finding.
Frequently Asked Questions
What is a post-pay claims audit?
A post-pay claims audit is a review of health plan claims that have already been processed and paid by the third-party administrator. The auditor identifies errors such as duplicate payments, incorrect repricing, or unbundled procedure codes after the funds have transferred to providers.
How much do self-funded employers typically overpay on medical claims?
Industry estimates from the Healthcare Financial Management Association and independent payment integrity consultants place the overpayment rate for self-funded plans at 3% to 10% of total annual claims spend.
What is the difference between a post-pay audit and a concurrent audit?
A post-pay audit reviews claims after payment has been made. A concurrent audit integrates with the claims payment process in real time and flags suspected errors before the TPA releases payment to the provider. Concurrent audits prevent overpayment rather than attempting to recover it, which produces materially higher net savings for the plan.
Does ERISA require self-funded employers to audit their claims?
ERISA does not mandate a specific audit frequency or methodology, but Section 404 requires plan fiduciaries to act with the care, prudence, and diligence of a knowledgeable person managing plan assets.
Can a TPA conduct its own claims audit?
A TPA can conduct internal quality reviews, and most do. However, relying solely on the TPA to audit its own claims processing creates a conflict of interest. An independent third-party auditor with access to raw claims data provides a more objective assessment and typically identifies a different, often larger, set of errors than the TPA's internal team.
What should a self-funded employer look for in a claims audit vendor?
Look for a vendor that reviews 100% of claims rather than a statistical sample, has direct integration with your TPA's claims system, provides itemized error reporting with CPT code-level detail, covers dependent eligibility as part of the audit scope, and offers a clear fee structure that is not contingency-only (which can create incentives to flag borderline items). Ask for client references from plans of similar size and industry.
How long should self-funded employers retain claims audit records?
ERISA Section 107 requires plan records to be retained for at least six years from the filing date of the annual Form 5500 to which they relate. Claims audit documentation, including methodology, findings, and corrective actions, should be treated as plan records subject to this retention requirement.
What percentage of identified overpayments does a post-pay audit typically recover?
Recovery rates vary widely, but most independent claims auditors and benefits consultants report effective post-pay recovery of 15% to 35% of identified overpayments. Provider disputes, expired lookback windows, and practical collection limitations account for the gap. Pre-pay and concurrent models avoid this problem because the money never leaves the plan's account.

.png)


