Copy-and-Paste EHR Fraud: When Reused Notes Support Services That Did Not Occur

EHR copy paste fraud uses reused clinical text to support a knowingly false bill for care the provider never gave or overstated in the record. A clinician sees an examination described again. A coder sees documentation supporting a higher service level. The connection between those views is where a whistleblower’s knowledge matters: what happened during the encounter, what the note says happened, and what the provider billed Medicare.

Copy-forward can give an old passage the appearance of a fresh account. In its January 2014 report, the HHS Office of Inspector General described how copying without updating or checking accuracy could put inaccurate information into a patient’s record and lead to inappropriate charges.

What Are the Risks of EHR Cut and Paste?

EHR cut and paste can carry inaccurate information into a new record and give a payer false support for a charge. The HHS Office of Inspector General calls the copying function cloning: information moves from a source to another location. Copy-forward uses a past note as the starting point for the current one. The clinical work is in checking that the reused account still describes this patient and this encounter.

When someone presents a prior examination as newly performed, the copied text claims work the provider did not do at this visit. The useful comparison connects the original passage, the new note and the care actually furnished.

That difference can disappear in a polished final note. The words may be readable, detailed and internally consistent while describing an encounter inaccurately. For an insider, the knowledge is specific: the documentation says work occurred, and you know why that account is wrong.

The Inspector General also described overdocumentation, in which false or irrelevant text creates apparent support for a higher-level service. It identified templates that fill fields automatically and systems that generate extensive text from a checkbox. Copying existing text and generating findings from a template reach the same billing problem when the resulting account overstates the work.

The clinical consequences matter alongside the bill. Repeated text can obscure the useful account of care.

Why the Clinical Note Became a Billing Document

The clinical note feeds the charge, and the record module and billing module are commonly sold together. The Centers for Medicare & Medicaid Services describes a human handoff too: a billing specialist may review the documentation and help select codes before the claim goes out. The software, the clinician and the billing reviewer each participate in turning an encounter into a request for payment.

The payment incentives behind that workflow have a history. The 1995 documentation guidelines made claims review and payment an express purpose of the medical record. The 1997 guidelines connected examination levels to the performance and documentation of specified elements across body areas or organ systems. A detailed examination could support a higher level, and the guidelines specified what the documentation should contain.

That made completeness valuable to the business as well as to the clinician. Templates, checkboxes and copy-forward offered ways to produce the required text quickly. The billing value of the text helped shape the tools used to write it.

A 2022 Vassar College senior thesis, A Panacea or a Problem? Electronic Health Records and the Complicated Politics of Its Stakeholder Network, examines that tension. It describes records accumulating additions with few deletions and connects the resulting bulk to payment incentives:

The thesis argues that billing priorities can overwhelm the record’s clinical purpose. For a clinician or coder, that explains a familiar tension: a record can grow longer while becoming less useful. We see the absurdity in a system that makes producing the account of care easier than understanding it. More text. Less clarity.

What Does CMS Say About Copy and Paste?

For the billing question, the Centers for Medicare & Medicaid Services’ May 2026 guidance gives a direct answer: the volume of documentation does not determine the service level to bill. Its evaluation and management guidance says that most visit families use medical decision-making or time to select the level. A copied paragraph matters when its content misrepresents the work supporting the charge.

The change for office and outpatient visits took effect on January 1, 2021. History and examination ceased to determine the code level under the replacement framework. Medical decision-making or the reporting practitioner’s total time on the day of the visit became the basis for selecting levels within that framework.

The Centers for Medicare & Medicaid Services extended that approach to most other evaluation and management visit families on January 1, 2023. Its guidance still calls for an appropriate history and examination. Those parts of the record serve the encounter, while the decision-making or time determines the level for the affected services.

This is why the date and kind of visit belong beside the copied note in a billing review. Documentation habits developed under the earlier counting rules persisted after the rules changed. We connect the text to the service and payment rule that applied to that encounter. The question becomes concrete: which work does the note claim, and how did that claimed work support the code?

What Constitutes Falsifying Medical Records?

Falsifying medical records here means passing off copied text as care given at this visit, knowing that account is false. The Inspector General’s descriptions of inaccurate copying and overdocumentation focus on how false text can support payment. A whistleblower case connects that account to the bill and to the people who understood the discrepancy.

A copied history and a copied account of work call for different comparisons. With history, we examine whether the information remained accurate and was reviewed for the current encounter. With work, we examine whether the examination, assessment or other service described actually occurred.

What Are Some Examples of Upcoding?

Under the earlier examination-counting rules, copying a prior visit’s examination into a new note could make the new visit appear to qualify for a higher level, even though the provider had not repeated that work. A checkbox that fills the record with findings the provider never made creates the same false support for a higher charge. We line up the note, the coding rule and the claim to show the overcharge.

The clinician may understand the care. The coder may understand the code selected. Someone who configures the EHR may understand how the passage entered the note. We work across those perspectives to connect the account of the visit to the request for payment.

What Is an EHR Audit Log?

An EHR audit log records system activity that can help explain how a medical record was made. Audit information can help authenticate the record supporting the claim and connect the account to activity inside the system.

For copied text, the useful questions concern the source, authorship and sequence of changes. Which passage supplied the new text? Who entered it, and on whose behalf? What changed before the documentation supported the bill? The earlier note, encounter information and available audit data answer different parts of that history.

In its December 2013 safeguard review, the HHS Office of Inspector General examined recommendations to track whether an update came from copying, direct entry or import. It also examined tracking the original author’s identity when someone entered information on another person’s behalf. Those are separate questions: who operated the system and whose work the entry represents.

For an insider who sees the final note, that history can explain a discrepancy the text conceals. We examine what the particular system recorded and how it relates to the clinical and billing documents. That is especially useful when the person named in the note, the person entering it and the person selecting the charge played different roles.

What the OIG Reviews Found About Copy-Paste Controls

The HHS Office of Inspector General’s December 2013 review found that only about one quarter of the hospitals surveyed had policies governing copy-paste. The review concerned hospitals that had received Medicare EHR incentive payments as of March 2012.

The Inspector General also found that providers could disable or bypass technology features intended to prevent fraud. Its comparison with the certification criteria and meaningful-use objectives then in place found that they did not specifically address tracking whether an update was copied, imported or entered directly.

The January 2014 companion report exposed a second gap: only three of the 18 Medicare contractors reported using audit-log data in reviews or investigations. The tools could help authenticate the record supporting a claim. They did little good unread.

These findings point to questions about actual operations. How did the organization control copying? What did the software record? What did the reviewer see? We connect those answers to the specific encounter and charge. The information behind the note can explain how the account presented for payment came to exist.

How Copied Notes Support a False Claims Act Case

The False Claims Act reaches knowingly submitting, or causing someone else to submit, a false claim for payment. For copied clinical notes, we examine the inaccurate account, the government claim it supported and who knew what.

Your knowledge may connect parts of that account that sit in different systems or departments. We work with you to understand the documentation, the care and the billing decisions, then bring in whistleblower lawyers who know health care billing fraud. The point is to build the case around the false payment claim and the decisions that produced it.

A whistleblower case under the False Claims Act can pay 15% to 30% of what the government recovers.

When You Know How the Note Was Made

If you work with clinical notes, coding or EHR configuration and recognize false accounts being used to support bills, speak with our whistleblower experts about the encounters behind those notes. We work with you to build your strongest EHR billing fraud whistleblower case, bring in whistleblower lawyers who know these documentation and payment systems, and stay beside you through the process.