IOP and PHP Billing 2026: H0015, H0035, S0201 Decoded

Intensive outpatient programs (IOP) and partial hospitalization programs (PHP) sit at the most complex intersection of behavioral health billing. The codes are HCPCS Level II rather than CPT, the billing units are per-diem rather than per-session, payer rules vary dramatically by state and line of business, and the documentation requirements wrap clinical level-of-care criteria around the billing event in a way that no other behavioral health service requires. Substance use disorder IOP and PHP programs add CFR 42 Part 2 confidentiality requirements on top of the standard HIPAA framework. Mental health IOP and PHP programs face concurrent review on a weekly basis with most commercial payers. State Medicaid programs add a third layer of state-specific level of care criteria that often diverge from commercial payer rules. The result is that IOP and PHP programs that bill the same way they bill outpatient psychotherapy face denial rates of 25 to 35 percent on initial submission. Programs that build IOP-specific and PHP-specific billing workflows hit 6 to 8 percent. The revenue at stake is enormous. A 30-patient IOP program billing 5 days per week for 4 weeks per patient at $300 per day generates approximately $180,000 per month gross. At a 30 percent denial rate with 50 percent recovery, the leakage is $27,000 per month. At a 7 percent denial rate, the leakage is $6,300. The annual gap is roughly $250,000. This guide covers what the high-performing IOP and PHP programs do that the others do not.

H0015 means alcohol and or drug services intensive outpatient (treatment program that operates at least 3 hours per day and at least 3 days per week, based on an individualized treatment plan). H0015 is the substance use disorder IOP code. The unit definition is per-diem (one unit equals one full IOP day regardless of total hours within the day above the 3-hour minimum). Medicare does not cover H0015 directly. Medicaid coverage varies by state, with most states covering H0015 at rates between $150 and $350 per diem. Commercial coverage runs $200 to $450 per diem. H0035 means mental health partial hospitalization program treatment, less than 24 hours. H0035 is the mental health PHP code. The unit definition is also per-diem. PHP requires a minimum of 4 hours of structured therapeutic services per day, 5 days per week. Medicare covers PHP under specific conditions through the hospital outpatient setting (POS 22) and certified community mental health centers (POS 53). Medicaid coverage varies. Commercial rates run $300 to $700 per diem. S0201 means partial hospitalization services, less than 24 hours, per diem. S0201 is the commercial PHP code, used primarily by behavioral health managed care organizations including the Aetna behavioral health network, Optum behavioral health, Magellan, and most BCBS plans. S0201 is paid per-diem with rates running $350 to $750. The same clinical service can be billed as H0035 to one payer and S0201 to another. The choice depends on the payer's accepted code set, not on clinical content. The three codes do not cover IOP for mental health (as opposed to substance use). Mental health IOP is typically billed as a combination of CPT codes (90832 or 90834 for individual sessions, 90853 for group, 90846 or 90847 for family) on a fee-for-service basis rather than per-diem. Some commercial payers offer a separate mental health IOP per-diem code in their proprietary fee schedules. Verify by payer.

The American Society of Addiction Medicine (ASAM) Levels of Care framework defines six levels of substance use disorder treatment intensity, from Level 0.5 (early intervention) through Level 4 (medically managed intensive inpatient). IOP corresponds to ASAM Level 2.1 (intensive outpatient services). PHP for substance use disorder corresponds to ASAM Level 2.5 (partial hospitalization). Most state Medicaid programs and commercial payers require ASAM-based level of care documentation as a condition of payment for H0015 and H0035 substance use disorder services. The ASAM documentation must address six dimensions: acute intoxication or withdrawal potential, biomedical conditions, emotional behavioral or cognitive conditions, readiness to change, relapse continued use or continued problem potential, and recovery environment. Each dimension is rated on a severity scale, and the overall level of care recommendation is derived from the dimension ratings. Programs that submit IOP claims without ASAM documentation see denials with CARC 50 (medical necessity not established) at high rates. Mental health IOP and PHP programs face an analogous severity-based criteria framework, though it is not formally ASAM. Aetna uses Mental Health Severity Index criteria. UHC Optum uses Optum Behavioral Health Level of Care Guidelines. Magellan uses its own clinical criteria. Most state Medicaid programs use either ASAM (for SUD) or LOCUS (Level of Care Utilization System) for adult mental health. The documentation burden is similar across frameworks: rate severity across multiple dimensions, justify the level of care recommendation, and update at clinical milestones (typically weekly in IOP, every 3 to 5 days in PHP). Programs that build the level of care framework into their EHR template and require it as a documentation step before each per-diem charge is captured eliminate the medical necessity denial pattern entirely.

The fundamental billing question for IOP and PHP is whether to bill the per-diem code (H0015, H0035, S0201) or to unbundle the day into individual fee-for-service codes (90834 for individual therapy, 90853 for group, 90846 or 90847 for family). The answer depends on the payer's accepted billing pattern, not on clinical content. Commercial payers generally require per-diem billing for IOP and PHP. Submitting fee-for-service codes for services that occurred within a per-diem program will be denied with CARC 97 (procedure or service unbundled). State Medicaid programs vary. Some require per-diem (most Medicaid managed care plans). Some require fee-for-service unbundled. Some allow either. Verify by state and by managed care plan. Within a per-diem day, certain services may be billed separately (pass-through services) without violating the per-diem bundling. Common pass-throughs include medication management visits with the prescribing provider (90792 or E/M codes), psychiatric evaluations performed at admission (90791 or 90792), and certain laboratory services (drug screens, metabolic panels). Each payer has its own pass-through list. Bill the per-diem and the pass-through together with appropriate modifiers when applicable. The most common billing error in IOP and PHP is double-billing the per-diem and the individual session codes, which produces immediate CO-97 denials. The second most common is billing the per-diem at zero units or one unit when the patient attended a partial day. Per-diem codes are all-or-nothing. If the patient attended at least the minimum required hours (3 for IOP, 4 for PHP), bill one full per-diem unit. If the patient attended less, document why and decide whether to bill (most programs do not bill for sub-minimum attendance days). Programs that track per-diem eligibility on a per-day basis with attendance verification before charge capture have the cleanest claims. Programs that batch-bill at the end of the week without daily attendance verification leak revenue and trigger payer audits.

All commercial payers require prior authorization for IOP and PHP. The auth request must include the patient's diagnosis (with severity ratings or DSM-5 criteria), the level of care recommendation (with ASAM dimensions for SUD or analogous criteria for mental health), the proposed treatment plan (modalities, frequency, duration), and the credentialing of the supervising provider. Auth approvals are typically issued for 1 to 4 weeks initially, with concurrent review required for continuation. Concurrent review submissions are typically due 24 to 72 hours before the current authorization expires. Late concurrent review submissions create a coverage gap where the program is providing services without active authorization, and any claims for those days will be denied. Most commercial payers conduct concurrent review by phone with a clinical care manager, typically a nurse or licensed clinician. The clinical conversation reviews the patient's progress against the treatment plan, current symptom severity, response to treatment, discharge criteria, and proposed continued course. Programs that prepare for concurrent review with structured clinical summaries and current ASAM or LOCUS ratings get continued authorizations. Programs that try to do concurrent review on the fly without preparation get denials and patients discharged prematurely. Aetna, UHC Optum, and Magellan all require concurrent review for IOP and PHP. Most BCBS plans require it. Cigna requires it. Humana requires it for Medicare Advantage members. State Medicaid managed care plans require it. Even Medicare fee for service PHP requires concurrent review for continued coverage beyond initial certification periods. Build concurrent review into the IOP and PHP clinical workflow as a recurring task, not a reactive process triggered by an auth expiration alert.

Denial pattern one. CARC 50 (medical necessity not established). Most common when ASAM, LOCUS, or payer-specific severity criteria are not documented at admission and at concurrent review intervals. Fix: build level of care documentation into EHR templates with required fields blocking chart sign-off until completed. Denial pattern two. CARC 197 (precertification absent). Common when concurrent review is missed and the auth expires. Fix: 72-hour pre-expiration alerts in the auth tracking system with assigned ownership for concurrent review submission. Denial pattern three. CARC 97 (bundling). Common when fee-for-service codes are billed alongside per-diem codes for the same date of service. Fix: enforce per-diem versus fee-for-service rules at charge capture by payer. Denial pattern four. CARC 16 (claim lacks information). Common when the supervising provider's NPI, the rendering practitioner's NPI, or the program's facility NPI does not match payer enrollment. Fix: re-verify program and provider enrollment quarterly and update when staff turnover occurs. Denial pattern five. CARC 109 (claim not covered). Common when the payer's benefit category for the specific IOP or PHP service does not match what was billed. SUD IOP billed under mental health benefits, PHP billed when only IOP is covered, or commercial code (S0201) billed to a payer requiring HCPCS (H0035) all produce CARC 109. Fix: verify benefit and code acceptance at the payer level before establishing the billing pattern. Denial pattern six. CARC 151 (frequency limit exceeded). Common when total program days in a calendar year exceed the payer's annual maximum. Most commercial plans cap IOP and PHP combined at 60 to 90 days per year. Medicare covers PHP up to 730 hours per benefit period. Fix: track cumulative IOP and PHP days per patient per year and trigger discharge planning before the cap is hit. For broader denial recovery support see our [denial management service](/denial-management-services) and [reducing denial rate guide](/blog/reducing-denial-rate-below-5-percent-90-days).

The CY 2025 final rule established permanent telehealth coverage for behavioral health IOP and PHP services for Medicare beneficiaries. Commercial payer coverage of telehealth IOP and PHP is highly variable in 2026. Aetna, UHC Optum, and Cigna allow telehealth IOP for some plans with specific authorization requirements. Magellan allows telehealth IOP on a case by case basis. BCBS plans vary by state. State Medicaid coverage varies, with some states permanently covering telehealth IOP and PHP (California, New York, Massachusetts) and others reverting to in-person-only requirements (Texas, Florida, Tennessee). The telehealth IOP and PHP service must meet the same minimum-hours requirement as in-person services (3 hours per day for IOP, 4 hours per day for PHP). The video must be synchronous interactive audio-video for the entire required duration. Audio-only IOP and PHP is generally not covered. The POS code for telehealth IOP and PHP is POS 10 (patient home) when the patient participates from home or POS 02 (patient not at home) when the patient is at a non-home telehealth location. Modifier 95 is appended for synchronous video. The payment differential between telehealth and in-person IOP and PHP varies by payer. Some pay at parity. Some pay at 90 to 95 percent of in-person rates. Some require separate auth for telehealth versus in-person services. Hybrid IOP programs (some telehealth days, some in-person days) are common in 2026 and require careful documentation to identify the modality of each day's service. Programs running hybrid models should track telehealth versus in-person days separately for both billing and clinical outcome reporting. Our [telehealth billing 2026 guide](/blog/telehealth-billing-guide-2026) covers cross-specialty telehealth rules in detail.

Programs that scale beyond 50 patients per day need billing operations that go beyond manual claim submission. The operational components that high-performing programs build. Daily attendance verification with electronic sign-in and sign-out tracking, generating per-diem charge capture only for days that meet minimum hour requirements. Level of care documentation enforcement at the EHR level, blocking chart sign-off and charge capture when ASAM or LOCUS ratings are not current. Authorization tracking dashboards with concurrent review alerts at 72 hours pre-expiration, with assigned ownership. Pre-bill scrubbing rules that catch per-diem versus fee-for-service mismatches, modifier-POS pairing errors, and pass-through versus bundled service decisions before claim submission. Denial pattern tracking by CARC, by payer, and by program location with monthly review meetings. Concurrent review preparation workflows that produce a clinical summary and current ASAM rating 24 hours before each concurrent review call. Discharge planning triggered automatically at 75 percent of authorized days, ensuring smooth transitions to outpatient and avoiding the 90-day frequency cap denial pattern. Internal audit cycles that pull a sample of charts each month for documentation review, level of care criteria, and billing accuracy verification. Programs that build all eight components hit 6 to 8 percent denial rates and 95-plus percent net collection. Programs that build only the first two or three hit 25-plus percent denial rates and 70 to 80 percent net collection. The difference is operational discipline, not clinical capability. Our managed billing operation supports IOP and PHP programs nationwide with these workflows built in. Reach our team at 888-701-6090 or via [our contact page](/contact-us) to discuss your program.