A PBM audit notice showing up in your fax queue or inbox is one of the more stress-inducing pieces of mail a pharmacy can receive. Unlike a state board inspection, a PBM audit is a contractual review tied to your provider agreement — and the financial exposure (clawbacks on paid claims, network termination) can be significant even when nothing fraudulent happened. Knowing what’s typically requested and how to keep records audit-ready reduces both the stress and the risk.
Desk audits vs on-site audits
PBMs generally use two audit formats, and which one you get shapes how much lead time you have.
Desk audits are the more common type. The PBM requests copies of specific prescription records, hard copies, and supporting documentation for a sample of claims, usually by mail or through a provider portal, with a response deadline of 7-14 days. No auditor visits the pharmacy.
On-site audits involve an auditor physically visiting the pharmacy to review original hard-copy prescriptions, inventory records, and sometimes interview staff. These are more common for higher-dollar claims, controlled substances, compounded prescriptions, or pharmacies with prior audit findings.
Some PBMs also run automated claims analysis continuously in the background, flagging billing patterns (unusual day-supply calculations, refill-too-soon patterns, high-cost drug utilization) that can trigger a targeted audit without any prior notice.
What triggers a PBM audit
Audits aren’t random, though volume-based random sampling does happen. Common triggers include:
- Billing patterns that deviate from peer pharmacies (unusually high dispensing of specific high-reimbursement drugs)
- Compound claims, since compounds draw disproportionate audit attention industry-wide
- High-dollar specialty drug claims
- Prior audit findings or a pattern of claim reversals and resubmissions
- Complaints from plan members or prescribers
- Claims for drugs frequently associated with diversion or billing schemes
Documentation PBMs typically request
Most audit requests fall into a predictable set of categories:
Original hard-copy prescriptions — the physical or electronic record for each audited claim, including any transfers, refill authorizations, and prescriber verification.
Signature logs — proof of delivery or pickup, since many PBM contracts require documented proof the patient (or authorized representative) received the medication.
Wholesaler invoices — used to verify the pharmacy actually purchased enough of a given NDC to support the quantities billed. This is one of the most common sources of “invoice discrepancy” findings, especially when a pharmacy switches wholesalers or NDCs mid-period.
Prescriber verification — documentation confirming a prescription was authorized by the prescriber, particularly for claims flagged as unusual.
Day-supply and quantity calculations — supporting documentation showing how a day-supply figure was calculated, especially for topicals, inhalers, insulin, and other products where day-supply math isn’t a simple divide.
Compounding records — ingredient lot numbers, formulas, and compounding logs for any compounded claims included in the sample.
Reducing audit risk before a notice arrives
Because desk audit response windows are short, the preparation that matters happens well before a notice shows up:
- Keep wholesaler invoices organized and reconcilable against dispensing records by NDC, not just by total drug spend
- Retain signature logs and proof-of-delivery records for the full period required by your provider agreement, which is often longer than your state’s general recordkeeping minimum
- Standardize day-supply calculation methods across staff and document the methodology used, particularly for products with non-obvious day-supply math
- Review compounding documentation practices against PBM and payer requirements, not just USP compounding standards
- Track claim reversal and resubmission patterns internally, since PBMs track them too
If an audit finds discrepancies
Most PBM contracts include an appeal process with defined deadlines, and missing that deadline typically forfeits the right to contest findings. If a PBM audit turns up recoupment demands you believe are wrong, or if a pattern of audits starts to look like it’s heading toward network termination, that’s a point where involving a healthcare attorney experienced in PBM contract disputes is worth the cost. Our guide to the pharmacy audit appeal process covers appeal mechanics in more detail, and our overview of PBM state regulations covers how some states now regulate PBM audit practices directly.
Audit terms, appeal windows, and documentation requirements vary by PBM and by state (a growing number of states have passed PBM audit regulation laws limiting recoupment practices), so confirm the specifics against your actual provider agreement and applicable state law, and involve qualified counsel for any audit with significant financial exposure.
Stay ahead of the compliance requirements that shape audit risk
RxByState tracks state-level PBM regulations, controlled substance recordkeeping requirements, and compliance alerts across all 50 states — helping pharmacies keep the underlying documentation habits that reduce audit exposure. Start your free trial →