PBM Audits in Community Pharmacy: The High-Risk Categories
If your pharmacy has been audited recently, there’s a good chance diabetic testing supplies were on the list. Blood glucose test strips, lancets, and meters consistently rank as the most audited category in community pharmacy. Diabetic supplies are dispensed constantly, often as 90-day fills, often auto-refilled, and often for patients juggling multiple prescribers. The volume alone makes the category statistically likely to produce entry errors. Moreover, large volume gives auditors a large sample to utilize in an audit. If a pharmacy files a claim for an NDC number that doesn’t have a corresponding purchase history, the pharmacy is instantly under both PBM and licensure scrutiny.
PBMs are also concentrating audit activity on specialty medications, GLP-1 products, high-reimbursement drugs, controlled substances, and compounded products. Here’s why each category draws scrutiny, and how a pharmacy can get ahead of an audit instead of just reacting to one.
Why these categories draw scrutiny
Start with the diabetic category. Days’ supply math is easy to get wrong — and easy to audit. A patient testing three times a day needs roughly 90 strips a month, not a 100-count box dispensed as a “30-day supply” when it actually covers more, and auditors compare the quantity billed against the directions on file. Several major PBMs now require pharmacies to purchase diabetic test supplies exclusively from wholesalers or distributors authorized by the original device manufacturer, so a purchase from a secondary or gray-market source, even a legitimate, authentic product, can be flagged as an “invoice shortage.” That finding has become the single biggest source of diabetic supply recoupments industry-wide, and it can also trigger network termination.
GLP-1s sit at the intersection of high cost, high demand, and heavy utilization management. The volume of prior authorization requests, plus frequent dose changes and product switches, creates a lot of opportunity for billing mismatches, and simply filling a large volume of legitimately prescribed GLP-1s places a pharmacy under the microscope. Compounded GLP-1 products add another layer of risk: they aren’t FDA-approved, and claims involving compounded semaglutide or tirzepatide draw extra scrutiny.
The rest of the list follows the same logic. Any drug with a high per-claim reimbursement becomes a more attractive audit target simply because the dollar exposure per error is larger. Specialty drugs often involve limited-distribution networks or third-party coordination, and PBMs reason that because the pharmacy received payment and dispensed the drug, it bears responsibility for proving the record supports the claim, even when a prior authorization was handled by an outside vendor or the prescriber’s office. Controlled substance claims carry the added layer of DEA compliance on top of PBM billing rules, and findings can trigger Board of Pharmacy referrals in addition to PBM recoupment. Compounds are audited heavily because they don’t have a standard NDC tied to a single manufactured product, which makes ingredient sourcing, formula documentation, and component invoicing central to whether a claim holds up.
The findings are rarely exotic
Most recoupments aren’t caught at the counter; they’re caught later, when a PBM pulls a claims sample. And none of the common findings are exotic: they’re sourcing verification, days’ supply accuracy, correct data entry, NDC precision, prior authorization documentation, and paperwork discipline. Auditors look for reasons a pharmacy may be engaged in fraud, waste, or abuse, and proper documentation is the tool that overcomes allegations of wrongdoing.
Timing matters as much as the paperwork itself. Every early refill, quantity override, or dispense-as-written change should have a written explanation in the patient record at the time of dispensing, not reconstructed after the fact, because auditors discount explanations that appear to have been added retroactively. The stakes reach past the recoupment, too: auditors will communicate audit findings to various regulatory oversight agencies if irregularities are not satisfied, so responses must be thorough and with foresight of downstream impacts.
Getting ahead of the notice
The pharmacies that fare best treat audit-readiness as a daily habit rather than something to scramble for after a notice arrives. Periodically pull a sample of claims and check them the way a PBM auditor would: invoice support, medical necessity, days’ supply math, NDC accuracy, and delivery documentation. Catching a pattern internally is far cheaper than catching it during a PBM audit.
It also pays to know your state’s pharmacy audit protections. Many states have fair-audit laws that limit how far back a PBM can review claims, restrict extrapolation (applying an error rate found in a small sample to a much larger universe of claims), and require detailed findings before recoupment, and it’s worth understanding what protections apply before you’re mid-audit, not during it. A pharmacy compliance attorney can review your procedures against current PBM contract terms and flag shortcomings before it becomes a finding.
What to do now
If a PBM audit is a question of when and not if, the time to settle your sourcing, documentation, and self-audit habits is before the notice arrives.
RxLaw Group helps community pharmacies, compounders, and healthcare providers get their audit footing right and respond when a PBM comes calling. The practice is led by Matt Gibbs, who spent more than eleven years inside Tennessee’s healthcare regulatory system. Schedule a free call to talk through an audit-readiness review.