Case Study Summary: During a post-pay analysis, Penstock reviewed a high-volume Medicaid personal care service category and identified paid claims that appeared inconsistent with authorization limits and visit validation controls. While the plan had processes in place to manage payment accuracy, the paid claims data suggested some claims may have continued through payment despite indicators that should have prompted additional review, correction or denial. Penstock surfaced an overpayment concept and helped the plan see where existing controls may not have been working as expected.

‍

Background

A health plan had controls in place for a high-volume Medicaid service category billed in small, time-based units. The process included authorization requirements, visit validation indicators and claim-level controls intended to confirm whether services aligned with what had been approved and delivered.

On paper, the guardrails were there. But Penstock’s post-pay analysis asked a more important question: did the paid claims prove those controls were actually working?

‍

What We Did

• Penstock analyzed paid claims data and identified one market with unusual volume compared to similar claim activity.

• Because the services were billed in small time-based units, even modest discrepancies had the potential to add up across a large claims population. Penstock dug deeper into the paid claims and found activity that appeared misaligned with the controls that were supposed to govern payment.

• The analysis raised questions around whether paid units were aligned with authorization limits, whether visit validation indicators were consistently influencing payment outcomes and whether claims requiring additional review were still moving through payment.

The issue was not that no control existed. The issue was that paid claims suggested the control wasn’t working the way the plan expected.  

The Result

Penstock surfaced a claim overpayment concept for client review and helped the plan identify where existing payment controls may need closer evaluation. The finding gave the plan more than a recovery opportunity. It created a clearer view into how authorization, validation and payment logic were performing in the real claims environment.

The Takeaway: Pre-pay controls matter, but they can’t be treated as self-validating. Sometimes the most important question is not, “Do we have a rule for that?” It’s: Why did the claim pay anyway?

‍

For a deeper look at why post-pay uncovers what pre-pay can't, read: When the Claim Paid Anyway: What Post-Pay Reveals That Pre-Pay Can't

‍