Got a PBM Audit Notice? Here’s What Actually Matters in Week One

Mark Boesen, PharmD, JD, is a licensed pharmacist and attorney and a founding partner of Boesen & Snow Law, with over three decades of experience in pharmacy operations, healthcare law, and public policy.

Mark K. Ziegler, Pharm.D., M.B.A., is Director of Payor Compliance & Credentialing at Boesen & Snow Law and a former PBM Audit Team Leader.

When a pharmacy gets an audit notice, it usually reads like an administrative task with a due date attached. Unfortunately, if you treat it that way, it stops being simple fast. For example, a pharmacy called us recently with five business days left before their deadline. Nothing pulled. Nothing organized. This happens more than you’d think, and it’s the single most common way a manageable audit turns into an unmanageable one, creating a snowballing workload that can lead to serious consequences for the pharmacy.

This is the first piece in a series that walks through the PBM audit process stage by stage, with the goal of helping demystify the process. For this article, we’re starting at the very beginning: the notice and the first submission that follows it.

The Letter Doesn’t Have to Say “Audit” for It to Be One

Every audit starts with some version of the same letter, email, or even a fax letting you know an audit is coming. It does not matter if it is a desktop review, an on-site visit, or, depending on the PBM, something they’d rather call an “investigation.” One of the major PBMs is notorious for insisting its version isn’t technically an audit at all. It functions like one. Same stakes, same clock. Whatever the letterhead says, treat it with the same urgency.

The letter will name the audit period, spell out what’s due up front, and set a deadline, usually 30 to 60 days out. Your first job: figure out exactly which type you’re facing. A desktop review, an on-site visit, and a full investigation move at different paces and ask for different things.

Get One Person Handling It, and Get the Clock on the Calendar

Two things need to happen immediately. Neither is complicated. Both are easy to let slide.

First, one person needs to own this from start to finish. Not a rotating cast of whoever’s on shift that day. In most pharmacies we work with, that ends up being the pharmacist in charge, or sometimes the owner steps in and takes it over personally.

During an onsite audit, auditors love to walk into a pharmacy and just start asking questions to whoever happens to be standing near the counter. Most of the time that’s a tech who doesn’t have the full picture but answers anyway, trying to be helpful; but they can inadvertently make things worse. Get everyone on staff pointed at one designated person for any question an auditor asks, and that risk goes away. Skip it, and you’re leaving the answer up to whoever happens to be at the register.

Secondly, get the deadline onto an actual calendar the day the letter shows up, and build a real plan against it, not just a reminder that pops up a week before it’s due. A date sitting in an inbox isn’t a plan. Block out specific chunks of time to pull records, read the request line by line, and review everything before it goes out the door. That’s a plan. It’s usually the difference between a manageable few weeks and a scramble at the end.

What Most Pharmacies Never Think to Ask

Here’s something almost no audit letter spells out, but most PBMs will actually grant if you ask early enough: more time. The window is usually around two weeks before the original due date, and it closes fast once you’re past it.

The same flexibility often exists for onsite visits. In some states, the auditor has to confirm the date with you before showing up, and you can request a reasonable reschedule for a real reason, such as the pharmacist in charge being out of town.

This is where it gets uncomfortable. Knowing your rights isn’t just about reading your PBM contract or the provider manual closely; it also depends on your state’s own audit laws, and those vary. A pharmacy in one state might have real leverage to push back on a timeline that a pharmacy two states over simply doesn’t have. Most pharmacies never check either source, which means most pharmacies are negotiating from a position they don’t actually understand.

Where the First Submission Actually Gets Pharmacies in Trouble

Once you know what kind of audit you’re facing and when it’s due, the real work starts: pulling together exactly what the letter asked for.

This sounds simple. It rarely is. The letter tells you what to send. The provider manual (the document almost nobody reads front to back) tells you what actually counts as complete. Those two things frequently don’t line up.

Calling the PBM’s help desk generally does not close that gap. That line exists for claim rejections and day-to-day processing issues, not audit questions. Push hard enough, and the answer you get is some version of “check the manual.” You’re back where you started, except now you’ve burned a day. This is one of the more frustrating parts of the process, and it’s a big part of why pharmacies end up calling us. We track these requirements constantly, across every major PBM, so we already know where a claim like this is likely to trip up before a pharmacy has to go dig for it.

Here’s one example worth sitting with, because it shows exactly how a claim that looks handled can still fail. Say a manufacturer coupon knocked a fifty-dollar copay down to five dollars, and the pharmacy hands over a receipt showing the patient paid five dollars. That receipt is completely accurate. It is also not enough. The PBM’s own system shows a fifty-dollar copay on file for that claim. Your receipt shows five. Nothing in that receipt explains the $45 gap between what the system expected and what was actually collected. From the PBM’s side, an unexplained gap looks exactly like an uncollected copay: a real finding with a real dollar amount attached. What the manual actually requires, buried in language that’s easy to miss, is proof of how you got from fifty to five: typically a billing screenshot showing the coupon applied at the point of sale, submitted alongside the receipt. Leave that piece out and a claim you handled correctly on the pharmacy counter can still come back as a discrepancy on paper, sometimes months later, after the coupon is long gone and nobody at the pharmacy remembers the details of that specific fill.

That is one documentation gap, on one type of claim. Multiply that kind of gap across every claim on the initial list, and you start to see why the manual, not the letter, is the actual rulebook here.

Where This Leaves You

Nearly every costly finding we see traces back to the same root cause: someone read the letter and stopped there, instead of reading the manual sitting behind it. That gap between what’s asked and what’s actually required is where a routine audit starts to get expensive. Whatever gets flagged at this stage doesn’t just get requested again later; it comes back demanding more proof, in more forms, than it would have taken to get right the first time.

We’ve handled hundreds of these audits across every major PBM and saved pharmacies across all stages of the audit process money that never had to be paid back in the first place. The pattern is consistent: the earlier we get involved, the smaller that number tends to be, and the fewer surprises show up later in the process.

If a PBM audit notice just landed on your desk, bring us in before your first submission goes out the door, not after the discrepancies start piling up.

Next in this series: what happens once the PBM sends back its first list of discrepancies, and why the paperwork at that stage grows faster than most pharmacies expect.

Attorney Advertising. This article is provided for general informational and educational purposes only and does not constitute legal advice. Contacting Boesen & Snow Law through this article does not create an attorney-client relationship. This content may constitute attorney advertising under the laws of your state. Prior results described or referenced herein do not guarantee a similar outcome.

Boesen & Snow Law is based in Scottsdale, Arizona. We work with independent, specialty, and multi-location pharmacies nationwide on PBM audit, network, and compliance matters. Our ability to formally represent a pharmacy in a particular matter, including litigation, arbitration, or before a state board, depends on that jurisdiction’s licensure and admission requirements, which may include pro hac vice admission or association with local counsel. Contact us to confirm we can assist with your pharmacy’s specific state and matter.