CO-15 Denial Code: Missing or Invalid Authorization Number

What Does CO-15 Mean?

CO-15 means the payer could not match your claim to a valid prior authorization: the authorization number is missing from the claim, was entered incorrectly, or the auth on file doesn't cover what you billed. The maddening part: many CO-15 denials happen on services that WERE authorized — the approval exists, but the claim and the auth don't line up on some detail the payer's system checks.

Code group: CO (Contractual Obligation) · Appealable: Yes — highly winnable when a valid authorization exists. This is a matching problem more often than a coverage problem.

Why CO-15 Happens

The auth number was left off the claim entirely (charge entry never received it)
Typo in the authorization number — one transposed character fails the match
The auth covers different CPT codes than what was billed (procedure changed during the encounter)
Date of service falls outside the authorization window
The auth was issued for a different provider, NPI, or facility than the one on the claim
Units exceeded what the authorization approved

How to Fix a CO-15 Denial

Step 1: Pull the original authorization: number, approved CPT codes, date range, units, and the provider/facility it was issued to.
Step 2: Compare each field against the claim. Find the mismatch — there almost always is exactly one.
Step 3: If it's a data error on the claim (missing/wrong auth number), correct and resubmit as a corrected claim.
Step 4: If the procedure changed intraoperatively, contact the payer — many allow retro-amendment of the auth within a set window (often 24–72 hours).
Step 5: If the date slipped past the auth window, request a retro-extension citing the reason for the reschedule.
Step 6: Appeal with the auth approval letter attached — a valid, matching authorization is the strongest appeal evidence there is.

How to Prevent CO-15

Make the auth number a REQUIRED field in charge entry for auth-required CPTs — the claim can't leave without it
Verify auth details (codes, dates, units, provider) at scheduling, not after the encounter
Build a re-auth trigger for rescheduled procedures — date changes are the silent auth-killer
When surgeons change the plan intraoperatively, notify billing the same day for auth amendment

CO-15 Appeal Letter Template

“We are appealing the CO-15 denial for claim [number]. A valid prior authorization ([auth number]) was issued on [date] approving CPT [codes] for dates of service [range]. The attached approval letter confirms authorization was in place at the time of service. We request reprocessing and payment per the authorization on file.”

Frequently Asked Questions

We had a valid auth — why did the claim deny CO-15?

Because the payer's system matches claims to auths field-by-field: auth number, CPT, NPI, date range, units. Any single mismatch fails the match even though approval exists. Compare the claim to the auth letter line by line and you'll usually find one wrong field.

Is CO-15 the same as CO-197?

No. CO-197 means no authorization was obtained at all — prevention is the only real cure. CO-15 means an authorization reference failed validation, which is usually fixable and appealable because approval typically exists.

Can we get a retroactive authorization?

Many payers allow retro-auths in limited circumstances: urgent/emergent services, intraoperative changes, or within a short window after service. Policies vary — check the payer's provider manual and act fast; retro windows are short.

Who should track authorizations in a practice?

One owned workflow, not scattered responsibility: an auth log listing every auth-required service, its number, window, codes, and units — checked at scheduling AND at charge entry. Practices that centralize this see CO-15 almost disappear.