CO-15 Denial Code: Prior Authorization Denials and How to Fix Them

CO-15 is the prior authorization denial: "Payment adjusted because the submitted authorization number is missing, invalid, or does not apply to the billed services or provider." It shows up on orthopedic surgeries, imaging orders, outpatient procedures, and specialty consults that require pre-approval. Because the claims tend to be large, a CO-15 left unworked is one of the more expensive write-offs a practice can absorb. The hard part is that CO-15 covers two very different situations, and the fix for each is nothing like the other.

What CO-15 means

• CO stands for Contractual Obligation. The adjusted amount is governed by your payer contract and cannot be billed to the patient.
• 15 is the reason code: the authorization number attached to the claim was missing, invalid, or does not apply to the specific procedure, provider, or date of service billed.
• Read the accompanying RARC. Many payers include a remark code (often MA130 or N115) that specifies which element was wrong, which tells you immediately whether the fix is administrative or requires a retroactive approval request.

CO-15 is a hard denial in the sense that a corrected claim with better documentation usually does not help. The payer is not disputing the medical record. It is disputing whether you had permission to deliver the service and bill for it. The recovery path starts with that question: did you have authorization or not?

The two causes of CO-15

Cause 1: Authorization was obtained but not transmitted correctly

This is the more recoverable situation. The auth was approved and is on file, but the claim went out with the wrong authorization number, no number at all, or a number that refers to a different service date, procedure code, or billing provider than what was billed. Examples:

• The auth number was entered in the wrong field or omitted from the electronic claim.
• The auth on file covers CPT 27447 (total knee arthroplasty) but the claim also includes add-on codes or a different laterality than the authorization specified.
• The authorization is attached to a group NPI but the claim bills under the rendering provider's individual NPI, or vice versa.
• The service was delivered three days after the auth expired.

In most of these cases the fix is a corrected claim: add the correct authorization number, verify the procedure codes and provider identifiers match what the auth covers, and resubmit. Submit through the payer's corrected-claim channel rather than as a formal reconsideration, and keep the auth documentation attached in case the payer's system does not retain it from the prior submission.

Cause 2: Authorization was never obtained

The harder situation. The service was scheduled and delivered without prior approval. Recovery depends entirely on the payer and the clinical scenario. A few paths exist, none of them reliable:

• Retroactive authorization request. Some payers will grant a retroactive auth when the service was genuinely emergent or urgent, or when the practice can document that an authorization request was initiated but processing was delayed through no fault of the practice. Most payers treat retroactive approval as an exception rather than a standard process, and approval rates vary widely by carrier.
• Good-faith exception. If the denial resulted from confusing eligibility information (a patient presented with a card that did not correctly reflect their current plan requirements), some payers have a good-faith exception process. This requires documentation of what the practice relied on at the time of scheduling.
• Peer-to-peer review. For services where medical necessity is strong and authorization was simply not pursued in time, requesting a peer-to-peer review between the treating physician and the payer's medical director is sometimes effective. Success depends on payer willingness and the strength of the clinical case.

CO-15 compared to CO-50

Both CO-15 and CO-50 are frequently described as "medical necessity denials," but they are not the same problem. CO-50 means the payer reviewed the service and judged it not medically necessary; the fix requires a clinical appeal with documentation supporting the necessity of the care. CO-15 means the payer never reviewed necessity at all, because the required administrative step (authorization) did not happen or did not apply correctly. The distinction matters because the appeal paths diverge: CO-50 needs a clinical argument, CO-15 needs an administrative correction or a retroactive approval.

Which claims are most exposed

Not every procedure requires prior authorization, and the list varies by payer and plan. The specialties with the highest prior-auth burden include orthopedics, radiology, outpatient surgery, physical therapy (for extended episodes), and certain cardiology procedures. Practices in these specialties should maintain a payer-specific authorization requirement matrix and update it whenever a contract renews, because carriers modify prior-auth requirements regularly.

• High-dollar procedures: joint replacements, spinal surgeries, complex imaging (MRI, PET). One CO-15 on a $15,000 claim is a meaningful event.
• Extended PT or chiropractic episodes: auth is often required per visit block (10 to 20 visits) and must be renewed before expiration or the whole next block is at risk.
• DME and infusion: often require auth per supply order or infusion series, not per patient, so volume is high and tracking is complex.

Prevention is the only reliable strategy

CO-15 is one of the denial codes where upstream prevention dramatically outperforms downstream recovery. A retroactive authorization request takes hours of staff time and succeeds inconsistently. A pre-service authorization workflow is a one-time setup that eliminates the exposure.

• Verify auth requirements at scheduling. The moment an appointment is booked, eligibility verification should confirm whether prior auth is required for the planned procedure and that plan. Capture auth requirements, not just eligibility status.
• Submit the auth request early. Most commercial payers require a decision within a defined window (often three to five business days for standard requests), but that window only opens once you submit. Waiting until the day before the procedure leaves no margin for questions or additional documentation requests.
• Confirm the auth number matches the claim before billing. Check that the procedure codes on the auth match the CPT codes you plan to bill, the rendering provider's NPI matches what the auth specifies, and the service date falls within the auth's effective date range.
• Track auth expiration for ongoing episodes. For patients with multi-visit authorizations (PT, chiropractic, home health), flag the auth expiration at least two weeks before it runs out so a renewal request is in process before the next set of visits.

CO-15 denials that stem from the "wrong number on the claim" category are candidates for systematic detection: once you identify them by RARC code, a corrected-claim workflow can route them into a review queue with the auth number pulled from the practice management system, reducing the per-claim work to a verification step rather than a research step.

The bottom line

CO-15 splits cleanly into two situations with very different economics. When auth was on file and simply not transmitted correctly, a corrected claim fixes it and the loss is time, not revenue. When auth was never obtained, the recovery options are uncertain and labor-intensive. The most practical use of a CO-15 denial is as a signal: audit where in the scheduling and billing workflow the gap opened, close it, and prevent the next 20 copies of the same error. For a broader view of which denial codes compound into the largest revenue losses, the revenue leakage guide covers the pattern.