Medicare Administrative Contractors and Unified Program Integrity Contractors have made behavioral telehealth billing a standing audit target, and the coverage flexibilities Congress just extended do not narrow that scrutiny. The Consolidated Appropriations Act, 2026 carried most Medicare telehealth waivers, including audio-only behavioral health visits, through December 31, 2027, and pushed the in-person visit requirement for behavioral telehealth out to January 2028. Neither extension touches the documentation a psychotherapy claim has to carry. For providers billing CPT 90832, 90834, and 90837 for individual therapy, and CPT 90853 for group sessions, the next audit cycle is testing session time, modality, and group attendance records that many telehealth practices have never tightened.

Documenting Session Time and Modality

CPT 90832 covers 16 to 37 minutes of psychotherapy, CPT 90834 covers 38 to 52 minutes, and CPT 90837 covers 53 minutes or more. Medicare Administrative Contractors treat 90837 as the code most likely to conceal a shorter session, and the note has to carry the weight: a recorded start time, a recorded stop time, and a clinical reason the session ran long enough to earn the higher code. A 90837 note that reads identically to a 90834 note is an upcoding flag before a reviewer reads anything else in the chart. Modality carries its own paper trail. A synchronous audio-video session takes modifier 95. Audio-only sessions take modifier 93 instead, available for behavioral health when the patient cannot or will not use video. The place-of-service code has to match, POS 10 when the patient is at home and POS 02 when the patient is elsewhere. A mismatched modifier or place-of-service code is one of the more common reasons a behavioral telehealth claim gets flagged, often before a reviewer reaches the clinical content of the note.

Group Therapy Under CPT 90853 Draws Extra Scrutiny

CPT 90853 does not carry the time thresholds that individual psychotherapy codes do, but it carries a heavier documentation burden. Reviewers expect the note to show each patient's individual participation and clinical response, not one group summary copied across every attendee. The facilitator's name, license, and qualification to provide psychotherapy in the state where the session occurred belongs in the record. On telehealth specifically, reviewers also expect attendance verification for each participant, the platform used, and confirmation that every patient consented to a group session delivered remotely. A group note that could be copied word for word into five different patients' charts is the finding that most often turns a routine records request into a broader post-payment review.

The documentation that survives a Medicare telehealth audit is written the same day as the session. It is not reconstructed after the records request arrives.

The Extension Buys Coverage, Not Cover

The two-year extension through December 31, 2027, and the delayed in-person visit requirement, settle whether behavioral telehealth stays covered. They say nothing about whether any specific claim survives review. Federal fraud-enforcement priorities announced in 2026 have specifically named high-growth telehealth and behavioral health billing for closer prepayment and post-payment attention, and UPICs apply statistical extrapolation to sampled claims the way they do in any Medicare audit: a documentation gap in a handful of sampled sessions becomes a recoupment demand across the full claims universe once the sample error rate is extrapolated. The same scrutiny is showing up across the broader telehealth billing space, from the originating-site and modifier rules governing standard telehealth visits to the day-count documentation that remote patient monitoring claims require.

Why Early Legal Counsel Is Critical

It is critical that telehealth behavioral health providers promptly retain experienced healthcare defense counsel upon receiving a subpoena, audit notice, records request, or other government inquiry. Early legal intervention can protect the provider's rights, ensure appropriate responses to government requests, avoid inadvertent admissions, preserve relevant defenses, and allow counsel to communicate with the Medicare Administrative Contractor or Unified Program Integrity Contractor on the provider's behalf. Delaying legal representation can significantly affect the outcome of a matter and expose the provider to recoupment risk a timely response could have avoided.

How Health Law Alliance Can Help

Health Law Alliance defends telehealth providers against Medicare and Medicaid audits of behavioral health billing, from the initial records request through extrapolated overpayment demands and any Anti-Kickback Statute or False Claims Act exposure a documentation gap can invite. If your practice bills CPT 90832, 90834, 90837, or 90853 for telehealth sessions and has received an audit notice, contact us today for a free consultation.