IOP and PHP Billing 2026

The 3-Hour and 20-Hour Thresholds, the Codes, and Why Behavioral Health's Two Step-Down Programs Keep Getting Audited

By Yagnesh Dave  ·  October 11, 2026  ·  11 min read

Intensive Outpatient Program and Partial Hospitalization Program billing fail Medicare review for the same reason almost every time: the hours on the claim don't match the hours in the chart. IOP needs 3 documented hours on a treatment day. PHP needs 20 documented hours across the billing week. Both thresholds sound simple until a program runs short-staffed one afternoon, a patient leaves two hours early, or a biller rounds a 2-hour-45-minute group day up to the per diem unit anyway. That gap between the plan of care and what actually happened in the room is where OIG and CMS claims edits meet behavioral health billing.

These are two different Medicare benefits with two different histories. PHP has existed for decades, is payable only in hospital outpatient departments and community mental health centers, and runs on a physician-certification cycle. IOP is new, created by the Consolidated Appropriations Act of 2023 and live since January 1, 2024, with a broader set of eligible settings and a lighter per-day threshold. Treating them as interchangeable, or billing one when the documentation actually supports the other, is the single most common compliance problem in this corner of behavioral health.

Here's how both programs' billing mechanics actually work, and where CMS and OIG are looking.

IOP Billing 2026: The 3-Hour Day

Medicare's Intensive Outpatient Program benefit covers services in hospital outpatient departments, critical access hospitals, community mental health centers, rural health clinics and federally qualified health centers, for services furnished on or after January 1, 2024. IOP is billed with HCPCS H0015, per diem, one unit for each treatment day that meets the minimum of 3 hours of qualifying services. Hospital and CMHC Medicare claims append condition code 92 to identify the claim as an IOP claim.

CY2024's OPPS final rule set up four separate ambulatory payment classifications for IOP based on setting and daily service volume: 5851 and 5852 for CMHCs billing up to three or four-or-more services a day, and 5861 and 5862 for the hospital-based equivalent. Which APC a claim lands in depends on how many distinct services were furnished that day, not just whether the 3-hour threshold was technically met, so a day with exactly 3 hours of a single group session pays differently than a day with multiple distinct service types across the same 3 hours.

PHP Billing 2026: The 20-Hour Week and the Recertification Clock

Partial Hospitalization Program is the older, more intensive step-down benefit, and it's payable only in hospital outpatient departments and community mental health centers. A freestanding clinic that's neither one cannot bill Medicare PHP, full stop, regardless of how the program is licensed at the state level. The plan of care has to call for a minimum of 20 hours per week of therapeutic services, and CMS built edits into the Integrated Outpatient Code Editor specifically to enforce that threshold on a weekly billing basis rather than day by day.

PHP also carries a physician certification and recertification cycle that IOP doesn't have. At admission, a physician must certify that the patient would otherwise require inpatient psychiatric care. The first recertification is due by the 18th calendar day following admission, and every recertification after that has to happen no less frequently than every 30 days, documenting the patient's response to therapeutic interventions and current psychiatric symptoms.

On a program running 15 PHP patients a week at a blended per diem, falling short of the 20-hour weekly threshold on even two patients can mean thousands of dollars in claims the IOCE edit will flag before they're ever paid, forcing a rebill cycle that delays cash on services already delivered.

OIG and Audit Context: Why Step-Down Behavioral Health Keeps Getting Reviewed

Both programs sit in a category OIG has pursued for years: outpatient behavioral health services billed for therapy that wasn't medically necessary, or programs that treat an episodic, step-down benefit as an indefinite one. OIG's enforcement action against Palomar Health, for example, targeted exactly this pattern: intensive outpatient behavioral health therapy billed to Medicare that the medical necessity standard didn't support.

The structural compliance problem auditors keep finding is the same across both IOP and PHP: these are designed as episodic, step-down levels of care between inpatient and standard outpatient treatment, not a permanent program a patient stays in indefinitely. A clinic that enrolls a patient and never moves toward discharge or a lower level of care, long after the acute crisis that justified admission has resolved, is the pattern that draws both payer and OIG attention, independent of whether each individual day technically met the hour threshold.

Frequently Asked Questions About IOP and PHP Billing

What is the minimum number of hours for Medicare IOP billing?

Medicare's Intensive Outpatient Program benefit requires a minimum of 3 hours of qualifying services on a treatment day to bill H0015 for that day. H0015 is billed per diem, one unit per qualifying day, with revenue code 0905 and condition code 92 on hospital and CMHC claims. This is a lower weekly intensity than Partial Hospitalization Program, which requires a minimum of 20 hours of therapeutic services per week.

What is the minimum number of hours for Medicare PHP billing?

Medicare's Partial Hospitalization Program requires a plan of care with a minimum of 20 hours per week of therapeutic services. CMS built edits into the Integrated Outpatient Code Editor specifically to enforce this threshold on a weekly billing basis, so claims that don't document the full 20 hours across the billing week are vulnerable to denial even if individual days looked compliant.

Where can Medicare PHP services be billed, compared to IOP?

Medicare PHP is payable only in hospital outpatient departments and community mental health centers; a freestanding clinic that is neither cannot bill PHP to Medicare. IOP has a broader set of eligible settings established by the Consolidated Appropriations Act of 2023, including hospital outpatient departments, critical access hospitals, community mental health centers, rural health clinics and federally qualified health centers.

Does Medicare PHP require physician recertification?

Yes. A physician must certify at admission that the patient would otherwise require inpatient psychiatric care. The first recertification is due by the 18th calendar day following admission, and subsequent recertifications must occur no less frequently than every 30 days, documenting the patient's response to therapeutic interventions and current psychiatric symptoms. A missed or late recertification is one of the most common reasons a PHP stay loses Medicare coverage retroactively.