Fiduciary Intelligence
June 15, 2026

Why Post-Pay Audits Fail Self-Funded Employers

Abhishek Ghosh

TABLE OF CONTENTS

A manufacturing company with 400 employees received its annual post-pay audit results and learned it had overpaid $340,000 in medical claims over the prior plan year. The TPA recovered $47,000. The rest was gone.

One reason was simple. The TPA's claims system lacked the sophisticated pre-payment detection capabilities needed to identify certain billing errors before funds were released.

Key Takeaways
Post-pay audits review claims after payment, which often limits how much of an overpayment can ultimately be recovered.
Common sources of claims leakage include duplicate payments, network repricing errors, unbundled procedure codes and ineligible dependents.
ERISA Section 404 requires plan sponsors to act as prudent fiduciaries when managing plan assets, including the oversight of claims payments.
Concurrent and pre-pay audit models identify errors before funds leave the plan, resulting in significantly higher recovery and prevention rates than post-pay audits alone.
Most self-funded employers cannot quantify the financial impact of claims errors because they lack independent measurement of TPA performance and accuracy.
The most effective claims oversight programs focus on preventing payment errors before money leaves the plan, rather than relying solely on recovery efforts after the fact. Earlier detection improves financial outcomes and strengthens fiduciary protection.

What a Post-Pay Audit Actually Does (and Doesn't Do)

A post-pay audit reviews claims after the TPA has already processed and paid them, which means every dollar of error it finds has already been spent. Most employers understand post-pay audits as a quality-control tool.

TPAs process millions of transactions per year. A post-pay audit typically samples 100% of claims above a dollar threshold or a statistical sample of all claims, then flags anomalies for potential recovery. The auditor sends a demand letter to the provider, the provider disputes it, negotiations begin, and the employer eventually recovers a fraction of the original error amount.

Industry data from the Healthcare Financial Management Association suggests that self-funded plans overpay between 3% and 10% of total medical claims spend annually due to processing errors, billing fraud, and repricing failures. On a $5 million annual claims spend, that is $150,000 to $500,000 in potential overpayments. The post-pay audit catches some of it. It permanently loses most of it.

Why Post-Pay Audits Are Structured to Underperform

The fundamental flaw is not execution. It is timing. Post-pay audits were designed for a world where employers primarily wanted to satisfy an annual compliance checkbox. They were never engineered to maximize claims integrity or fiduciary protection.

Several structural problems compound the timing issue:

1
Contractual Lookback Limits
Most TPA contracts limit recovery opportunities to a defined window, often 12 to 18 months. Provider repayment rights may narrow even faster under prompt-pay rules, making late recovery efforts difficult or impossible.
2
Statistical Sampling Gaps
Sampling-based audits review only a fraction of claims. Large portions of the claims population remain untouched, allowing recurring billing and payment errors to persist undetected.
3
Provider Dispute Rates
Once payment has been made, recovering funds becomes substantially harder. Providers frequently challenge repayment requests, reducing recovery success and extending resolution timelines.
4
TPA Incentive Misalignment
Many TPA contracts reward administrative activity rather than payment accuracy. Performance guarantees may focus on audit volume or processing speed instead of actual error recovery.
Together, these structural barriers make post-pay recovery increasingly difficult as time passes. The longer an error remains undetected, the lower the likelihood of recovering the full amount.

The Real Cost to Plan Sponsors

The financial exposure from inadequate claims oversight is larger than most HR leaders and CFOs realize, and it compounds year over year. A single plan year of 5% overpayments on a $10 million claims spend equals $500,000. Over five years, with no corrective action, that is $2.5 million in preventable losses.

The cost extends beyond the dollar amount recovered or not recovered. ERISA Section 404(a)(1) requires plan fiduciaries to discharge their duties with the care, skill, prudence, and diligence that a prudent person acting in a like capacity would use.

The Department of Labor has made clear through its audit and enforcement activity that reliance on a TPA does not absolve plan sponsors of fiduciary responsibility. A plan that conducts only an annual post-pay audit and recovers 15 cents on the dollar is not meeting that standard.

The Kaiser Family Foundation's 2023 Employer Health Benefits Survey found that the average annual family premium for employer-sponsored coverage exceeded $23,000. Self-funded plans bear 100% of claims cost directly. Every dollar of claims error flows straight to the plan's bottom line, and ultimately to employee cost-sharing and benefit design decisions.

What's Actually Happening Behind the Scenes

Duplicate Payment Errors
Providers and billing clearinghouses routinely resubmit denied or rejected claims. Without a pre-payment duplicate detection process, the same claim can be paid more than once before the error is identified.
Network Repricing Failures
Claims processed using the wrong fee schedule can result in substantial overpayments. Detecting these errors often requires matching claims against network contracts that are not always readily available or easy to audit.
Unbundling and Upcoding
Billing practices can increase reimbursement by separating procedures that should be billed together or assigning higher-complexity codes than warranted. These errors frequently require clinical review to identify.
Ineligible Dependent Coverage
Changes in eligibility status are not always captured promptly. Plans may continue paying claims for dependents who no longer qualify for coverage, creating avoidable costs over time.
Coordination of Benefits Failures
When members are covered by multiple health plans, payment responsibilities must be coordinated correctly. Failures in this process are a frequent source of overpayments and are often difficult to detect after payment occurs.
These errors rarely occur in isolation. Most plans experience multiple leakage sources simultaneously, making independent claims oversight essential for identifying patterns that routine post-pay reviews often miss.

Why Current Approaches Aren't Enough

Annual post-pay auditing has become an industry default, not an industry best practice. The comparison below shows the practical difference between a post-pay approach and a concurrent or pre-pay model.

Factor Post-Pay Audit Concurrent / Pre-Pay Audit
When Errors Are Detected After payment, often 30 to 180 days later Before or at the moment of payment
Recovery Rate Typically 10% to 30% of identified errors 80% to 100% of identified errors
Provider Dispute Friction High (money already paid) Low (claim pended for correction)
Claims Reviewed Statistical sample or threshold-based 100% of claims in real time
Dependent Eligibility Verification Periodic, not continuous Continuous, integrated with enrollment data
Fiduciary Documentation Minimal Comprehensive audit trail per claim
Cost to Employer Lower upfront, higher net loss potential Higher upfront, positive ROI in most plans over 200 lives

How to Fix It: A Practical Path for Plan Sponsors

1
Review Your TPA Contract First
Examine your ASO agreement for audit rights, data access provisions and recovery limitations. Many contracts restrict access to claims data or impose fees that weaken oversight efforts.
2
Demand Complete Claims Data
Obtain full claims files in a standardized format such as HIPAA 835 or 837. Independent auditors need raw transaction data, not summarized reporting, to perform a comprehensive review.
3
Implement a Pre-Pay Audit Layer
Integrate an independent payment integrity vendor into the claims workflow to identify errors before payment is released rather than attempting recovery after the fact.
4
Conduct a Dependent Eligibility Audit
Verify dependent eligibility and establish an ongoing re-verification process. Ineligible dependents can represent a significant source of avoidable plan expense.
5
Add Clinical Review for High-Cost Claims
Establish nurse or clinical review for claims above a defined threshold to evaluate medical necessity, level of care and billing accuracy before payment.
6
Maintain Fiduciary Documentation
Keep records of policies, audits, findings, vendor agreements and corrective actions. A documented process is often as important as the audit itself from a fiduciary perspective.
The strongest payment integrity programs prevent errors before money leaves the plan. Combining contractual protections, independent auditing and documented oversight creates a more defensible and financially efficient health plan.

Red Flags That Signal This Problem Applies to Your Plan

Your TPA's annual audit report shows a recovery rate below 50% of identified errors.
You have not reviewed your TPA's performance guarantees in the past 24 months.
Your plan has not conducted a dependent eligibility audit in the past three years.
Your stop-loss carrier has never asked to review your claims data or audit processes.
Your benefits broker cannot tell you what your TPA's aggregate claims error rate is.
You are relying solely on your TPA's internal quality control team to catch its own errors.
Your plan documents do not include a written claims audit policy or schedule.
You have changed TPAs in the past three years without auditing claims processed during the transition period.
If three or more of these statements apply to your plan, there is a strong possibility that payment errors are going undetected or unrecovered. Independent auditing, stronger governance and ongoing claims oversight can help close those gaps before they become larger financial and fiduciary issues.

The ROI of Getting Claims Oversight Right

The return on investment from upgrading claims audit infrastructure is measurable and consistent across employer sizes. Independent studies and vendor case data suggest the following benchmarks:

Pre-pay and concurrent audit programs typically generate $3 to $8 in recovered or avoided overpayments for every $1 spent on the program. On a plan spending $8 million annually in medical claims, capturing even half of a conservative 3% error rate produces $120,000 in savings. A concurrent audit program for a plan that size typically costs $30,000 to $60,000 annually. The math is straightforward.

Dependent eligibility audits cost $15 to $40 per employee audited and routinely return 10 to 20 times that amount in annual premium savings from removing ineligible dependents. For a plan with 500 employees, the audit cost might be $20,000. If 4% of 900 covered dependents are removed and each carried an average monthly cost of $400, the annual savings exceeds $86,000.

The fiduciary protection value is harder to quantify but significant. DOL investigations of self-funded plans that result in findings of inadequate claims oversight can require the plan to reimburse participants for losses plus interest. Documented, proactive audit programs are a primary defense against that exposure.

Conclusion: Stop Auditing Yesterday's Mistakes

Post-pay audits have a place in a comprehensive claims oversight program, but they cannot be the entire program. Self-funded employers who rely on an annual post-pay review as their primary quality control tool are systematically overpaying their claims, underperforming on their ERISA fiduciary obligations, and leaving recoverable money on the table every month.

The good news is that better tools exist and are accessible to plans well below the Fortune 500 threshold. Concurrent audit programs, dependent eligibility verification, and clinical review of high-cost claims can be layered into most TPA relationships with modest contract adjustments and reasonable vendor investment. The ROI is well-documented. The fiduciary argument is clear.

Start by requesting your full claims data file from your TPA and scheduling an independent review. If your TPA resists providing the data, that resistance is itself a finding.

Frequently Asked Questions

What is a post-pay claims audit?

A post-pay claims audit is a review of health plan claims that have already been processed and paid by the third-party administrator. The auditor identifies errors such as duplicate payments, incorrect repricing, or unbundled procedure codes after the funds have transferred to providers.

How much do self-funded employers typically overpay on medical claims?

Industry estimates from the Healthcare Financial Management Association and independent payment integrity consultants place the overpayment rate for self-funded plans at 3% to 10% of total annual claims spend.

What is the difference between a post-pay audit and a concurrent audit?

A post-pay audit reviews claims after payment has been made. A concurrent audit integrates with the claims payment process in real time and flags suspected errors before the TPA releases payment to the provider. Concurrent audits prevent overpayment rather than attempting to recover it, which produces materially higher net savings for the plan.

Does ERISA require self-funded employers to audit their claims?

ERISA does not mandate a specific audit frequency or methodology, but Section 404 requires plan fiduciaries to act with the care, prudence, and diligence of a knowledgeable person managing plan assets.

Can a TPA conduct its own claims audit?

A TPA can conduct internal quality reviews, and most do. However, relying solely on the TPA to audit its own claims processing creates a conflict of interest. An independent third-party auditor with access to raw claims data provides a more objective assessment and typically identifies a different, often larger, set of errors than the TPA's internal team.

What should a self-funded employer look for in a claims audit vendor?

Look for a vendor that reviews 100% of claims rather than a statistical sample, has direct integration with your TPA's claims system, provides itemized error reporting with CPT code-level detail, covers dependent eligibility as part of the audit scope, and offers a clear fee structure that is not contingency-only (which can create incentives to flag borderline items). Ask for client references from plans of similar size and industry.

How long should self-funded employers retain claims audit records?

ERISA Section 107 requires plan records to be retained for at least six years from the filing date of the annual Form 5500 to which they relate. Claims audit documentation, including methodology, findings, and corrective actions, should be treated as plan records subject to this retention requirement.

What percentage of identified overpayments does a post-pay audit typically recover?

Recovery rates vary widely, but most independent claims auditors and benefits consultants report effective post-pay recovery of 15% to 35% of identified overpayments. Provider disputes, expired lookback windows, and practical collection limitations account for the gap. Pre-pay and concurrent models avoid this problem because the money never leaves the plan's account.