A pharmacy benefit manager (PBM) audit is not a random act of bad luck. Most audits are selected by analytics: software at the PBM compares your claims against peer pharmacies and flags outliers. A smaller share are truly random. Either way, the pharmacies that handle audits calmly are the ones that already keep the records an auditor will ask for.
Below are the patterns most likely to put your claims under review, and the practical steps that make you audit-ready before any letter arrives.
The most common PBM audit triggers
- High-dollar claims. Expensive brand and specialty medications carry more reimbursement risk, so they are reviewed more often. A spike in high-cost claims relative to your baseline can flag your pharmacy.
- High-volume or unusual NDC usage. A sudden increase in a particular National Drug Code, or billing an NDC that differs from what your purchase records show, is a classic outlier. This is where undetected NDC swaps quietly create audit exposure.
- Refill-too-soon and quantity patterns. Early refills, day-supply mismatches, and quantities that do not reconcile with package sizes are routine flags.
- Dispense-as-written (DAW) codes. Frequent or inconsistent DAW usage draws scrutiny because it affects generic substitution and reimbursement.
- Deviation from peer pharmacies. PBMs benchmark you against similar pharmacies. Being a statistical outlier on cost, mix, or volume is itself a trigger.
- Random selection. Some audits are simply part of routine contractual sampling. You cannot prevent these - but you can be ready for them.
Where the risk hides
The single most preventable audit exposure is the NDC swap: you bill one manufacturer's NDC while your wholesaler shipped a different manufacturer's version of the same drug. On paper it looks like a discrepancy. Caught early in reconciliation, it is a non-event. Caught by an auditor first, it becomes a finding.
What auditors actually ask for
When the audit letter arrives, the request is almost always for evidence tying each flagged claim to a real, properly documented dispensing event. Commonly requested records include:
- Original prescription records and signature logs
- Purchase invoices showing you acquired the drug you billed (including the actual NDC)
- Proof of the quantity and day supply dispensed
- Documentation supporting any DAW code used
- Reimbursement records by PBM and BIN
The pharmacies that struggle are the ones reconstructing this from scratch under a 14 or 30 day deadline. The pharmacies that breeze through already keep it as a byproduct of routine reconciliation.
How to be audit-ready before the letter
- Reconcile every cycle. Match billing against purchasing and reimbursement at the claim level so discrepancies surface immediately, not at audit time.
- Detect NDC swaps automatically. Map NDC families across manufacturers so a swap is flagged the moment it happens, not flagged by an auditor months later.
- Keep an exportable trail. Maintain time-stamped reports by PBM and BIN that you can hand to counsel or the PBM without a scramble.
- Organize source documents. Prescriptions, invoices, and logs should be retrievable by claim, not buried in a filing cabinet.
Software is the data layer of audit defense; a law firm is the legal layer. Reconciliation software like RxDelta does not represent you in a dispute - but it gives you and your counsel the claim-level evidence that turns an audit from a threat into a formality.