A referral denial and an authorization denial look almost identical on a remittance, and they come from two different failures. A referral is the health plan’s requirement that a primary care physician direct the patient to a specialist, and it lives in the member’s benefit design. A prior authorization is the payer’s advance approval of one specific service, and it turns on medical necessity. Practices lose money on both for the same underlying reason: the front desk confirms that the patient is eligible and active, then stops, without confirming which of the two requirements this particular plan attaches to this particular visit.
That single gap is worth more than most practices realize, because these denials arrive after the service is already delivered. The staff time is spent, the room is used, and the payer holds the record of what was approved and when.
What is the difference between a referral and a prior authorization?
A referral moves the patient. A prior authorization approves the service.
A referral is issued by the patient’s primary care physician and names a specialist the patient may see. It is common on HMO and point of service plans and largely absent from PPO plans. It usually carries a visit count and an expiration date.
A prior authorization is issued by the payer, not the physician. It approves a named procedure, often at a named place of service, for a named date range. A patient can hold a valid referral and still be denied for missing authorization, and the reverse happens just as often.
The five codes and what each one is telling you
| Code | Standard text | What actually went wrong |
|---|---|---|
| CARC 288 | Referral absent | No referral was on file, or the referral was not attached to the claim |
| CARC 38 | Services not provided or authorized by designated (network or primary care) providers | The patient was seen outside the plan’s designated network or without the designated PCP directing the visit |
| CARC 197 | Precertification, authorization, notification or pretreatment absent | The service required advance approval and none was obtained |
| CARC 15 | The authorization number is missing, invalid, or does not apply to the billed services or provider | An authorization exists but does not match what was billed |
| CARC 183 | The referring provider is not eligible to refer the service billed | The referring provider failed an eligibility or enrollment test |
CARC 15 is the one most practices misread. The authorization was obtained, so the claim looks defensible, and staff appeal it as a payer error. The real cause is usually a mismatch: a different CPT code was performed than the one approved, the place of service changed, an additional unit or level was added, or the rendering provider on the claim is not the provider named on the authorization.
The group code matters as much as the reason code. When a required authorization was never obtained by the practice, the adjustment normally comes back as CO, meaning contractual obligation. That balance cannot be transferred to the patient. Practices that route these to patient statements create a refund problem on top of the original denial.
Why Medicare works differently
Traditional Medicare does not require referrals for specialist visits. Medicare Advantage plans frequently do, and HMO style Advantage plans are where practices get caught, because staff carry over a habit formed under traditional Medicare.
Medicare does impose a separate requirement that produces referral shaped denials. CMS requires the ordering or certifying provider to hold an individual NPI, be enrolled in Medicare in an approved or opt out status, and be of an eligible specialty type. Organizational NPIs do not qualify. This applies to durable medical equipment, prosthetics, orthotics and supplies, clinical laboratory services, imaging services, and home health services.
When the ordering provider fails any of those three tests, the claim is denied even though the service was medically appropriate and the patient was eligible. This is the most common source of CARC 183 on Medicare claims, and it is invisible to eligibility verification, because the problem sits with the referring physician’s enrollment record rather than the patient’s coverage.
Where the referral data actually lives on the claim
On the CMS 1500 claim form, box 17 carries the name of the referring provider or other source, box 17a carries a secondary identifier, and box 17b carries the NPI. On the 837P electronic claim, the referring provider appears in loop 2310A at the claim level and loop 2420F at the line level.
Two failures recur here. The first is a blank box 17b on a service that requires an ordering or referring provider. The second is a populated box 17b carrying the NPI of a physician who is no longer enrolled, has retired, or was never of an eligible specialty type. The claim passes a format check and fails at adjudication.
A triage tree for a referral or authorization denial
Work the denial in this order. Each step either resolves the claim or hands it to the next step.
- Read the group code before the reason code. CO means the practice owns the balance. PR means it may be patient responsibility, which is rare on these denials and worth verifying before billing anyone.
- Establish which requirement was actually in force on the date of service. Pull the plan document or the payer portal record, not the staff member’s recollection. Benefit designs change at renewal, and a plan that required no referral last year may require one now.
- If a referral or authorization exists, compare it line by line against the claim. Check the CPT code, the units or levels, the place of service, the rendering provider NPI, and the date range. CARC 15 denials almost always resolve here.
- If nothing exists, determine whether retroactive authorization is available. Many payers allow a retro request inside a defined window, often measured in days from the date of service. This window is the single most time sensitive item in the whole process.
- If retroactive authorization is unavailable, appeal on medical necessity with the clinical record attached, and document the outcome so the same gap does not repeat next month.
Preventing the denial instead of working it
Verification has to answer three questions, not one. Is the patient eligible. Does this plan require a referral for this specialty. Does this specific service require prior authorization.
Referrals expire and they carry visit counts, so a referral obtained in March for six visits will not cover a seventh visit in July. Tracking the remaining count against the schedule catches this before the patient is roomed.
For anything ordered rather than performed, verify the referring physician’s Medicare enrollment status before the claim goes out. This takes seconds and prevents a denial that is difficult to overturn after the fact.
Frequently asked questions
What does denial code 288 mean?
CARC 288 means the referral was absent. The payer required a referral for the service and either none was on file or none was submitted with the claim. Fixing it means locating a valid referral covering the date of service and the specialty, then resubmitting or appealing with that referral attached.
What is the difference between CO 197 and CARC 288?
CARC 288 says a referral was missing. CO 197 says a precertification or prior authorization was missing. A referral comes from the patient’s primary care physician and directs the patient to a specialist. An authorization comes from the payer and approves a specific service in advance. A claim can fail one requirement while satisfying the other.
Can a patient be billed for a service denied for no authorization?
Usually no. When the adjustment carries the CO group code, the balance is a contractual obligation of the practice and cannot be transferred to the patient. Billing the patient in that situation creates a refund liability.
Does traditional Medicare require a referral to see a specialist?
No. Traditional Medicare does not require referrals for specialist visits. Medicare Advantage plans often do, particularly HMO style plans. Medicare does separately require that ordering and certifying providers hold an individual NPI, be enrolled in an approved or opt out status, and be of an eligible specialty type.
Why was my claim denied when I had an authorization?
This is normally CARC 15, which means the authorization exists but does not match the claim. Compare the approved CPT code, units, place of service, rendering provider and date range against what was billed. One mismatched field is enough to trigger the denial.
How long do I have to request a retroactive authorization?
The window is set by each payer and is typically counted in days from the date of service. It is short, and it is the first thing to check on a CO 197 denial, because the option disappears while the claim sits in a work queue.
How WeBill Health defends this
Referral and authorization failures are built into the workflow that produces them, so they repeat every month until that workflow changes.
WeBill Health maintains internal payer rule libraries organized by specialty and by carrier, spanning more than 500 payer rulesets, built and updated by people who work these claims every day. Every claim receives human pre submission review against them before it goes out. There is no black box and no algorithm we ask you to take on faith.
EHR certified Clinical VMAs handle prior authorizations and real time eligibility verification on the front end, tracking validity windows, remaining visit counts and referring provider status so an approval is never expired at the moment of service. Denial Defense 2.0 then works the root cause instead of resubmitting one claim at a time.
Book a Revenue Defense Audit and we will show you exactly how much of your accounts receivable is sitting in referral and authorization denials right now.
