Medical coding cheat sheet: CPT, ICD-10, HCPCS, and E/M codes

Key takeaways

A medical coding cheat sheet keeps CPT, ICD-10-CM, HCPCS, modifier, and billing definitions on one page you can scan in seconds.

CPT codes are five-digit procedure codes from the American Medical Association, updated every January 1 across surgery, radiology, laboratory, and E/M categories.

Office visit codes run 99202 to 99205 for new patients and 99211 to 99215 for established patients.

Code selection rests on medical decision-making or total time on the date of the visit, whichever the note supports.

Practice management software like Pabau keeps documentation, coding, and claim checks in one system, so fewer errors reach the payer.

A medical coding cheat sheet is a one-page reference for the code sets you touch every day. This one covers CPT procedures, ICD-10-CM diagnoses, HCPCS supplies, modifiers, and evaluation and management levels.

Coding accuracy decides how much of your work gets paid and how well it holds up on review. Documentation rules sit right next to it. That is why HIPAA compliance and coding training usually land on the same desk.

Whether you’re studying for a CPC exam or comparing EMR software, treat the sections below as a lookup rather than a read-through.

What is a medical coding cheat sheet?

A medical coding cheat sheet collects the codes, terminology, and billing rules you reach for most into one page. Full code manuals are built for completeness, and a cheat sheet is built for speed.

That means scannable definitions, grouped code ranges, and short examples you can match against the chart in front of you. Five areas do most of the work: procedure codes, diagnosis codes, supply codes, modifiers, and the evaluation and management framework.

CPT codes: Key categories and ranges

Current Procedural Terminology (CPT) codes are the procedure codes used for billing in the United States. The American Medical Association updates the set every January 1, adding codes, deleting others, and revising descriptions to match current practice.

Practice management reporting depends on accurate CPT assignment. Pick the wrong code and the claim either rejects or pays less than the work was worth.

Add-on codes deserve their own check, because the unit count does the work. 17003 bills for each lesion after the first, so a miscount changes the payment.

ICD-10-CM diagnosis code structure

ICD-10-CM codes record the patient’s diagnosis, condition, or the reason for the encounter. The main update lands every October 1, with a smaller set of additions in April in some years.

Every code is alphanumeric. The first character is a letter, followed by two digits, a decimal point, and up to four more characters. F41.1 covers generalized anxiety disorder, and M25.50 covers pain in an unspecified joint.

Add detail and the code narrows. M25.561 reports pain in the right knee, while M25.569 reports knee pain with no side documented. Behavioral health teams hit the same pattern with F-codes, which is why a mental health EMR usually keeps the common ones on the note.

Picking the right code means documenting the diagnosis with specificity. A generic code such as R10.9 for abdominal pain signals a thin note and invites review. The more specific R10.13 for epigastric pain supports medical necessity and defends the claim.

Transplant codes show how far that detail runs. T86.41 names both the organ and the complication in a single code.

E/M code selection for office visits

Evaluation and management (E/M) coding carries the most revenue in most practices, and the most audit attention. The office visit rules changed on January 1, 2021.

Code selection moved to medical decision-making (MDM) or total time, replacing the old history and exam scoring. The same approach reached the other E/M categories in 2023.

The 2025 CPT update left that framework alone. It added telehealth codes 98000 to 98015, and Medicare’s G2211 add-on still applies to visits that anchor a patient’s ongoing care.

Office visit codes split into new patients, 99202 to 99205, and established patients, 99211 to 99215. Choose the level with either MDM complexity or total time. Medical software with built-in E/M templates captures both on the note as you write it.

• 99202 (new patient, straightforward MDM): 15-29 minutes of total time
• 99203 (new patient, low MDM): 30-44 minutes; multiple problems, limited workup
• 99204 (new patient, moderate MDM): 45-59 minutes; chronic illness or prescription management
• 99205 (new patient, high MDM): 60-74 minutes; severe illness or a threat to function
• 99211 (established patient, no MDM requirement): nurse visit, refills, routine follow-up
• 99212 (established patient, straightforward MDM): 10-19 minutes; one self-limited problem
• 99213 (established patient, low MDM): 20-29 minutes; stable chronic problems
• 99214 (established patient, moderate MDM): 30-39 minutes; chronic disease management
• 99215 (established patient, high MDM): 40-54 minutes; unstable illness, complex management

When time drives the choice, count total time on the date of the visit, including chart review and documentation. When MDM drives it, the note has to meet two of three elements. Those elements are problems addressed, data reviewed, and risk of management.

Office visits carry most of the revenue in primary care, so primary care software tends to track time and MDM on the note itself. That leaves the coder reading evidence rather than reconstructing the visit.

HCPCS codes, modifiers, and place of service

HCPCS Level II codes cover supplies, drugs, orthotics, and services that CPT does not describe. Each one is a single letter followed by four digits. CMS maintains the set and publishes updates quarterly.

The letter tells you the category. J-codes are drugs, E-codes are durable medical equipment, and A-codes are supplies. A commode chair bills as E0165, and a urinary ostomy pouch as A4433.

Modifiers are two-character codes appended to a CPT or HCPCS code to explain circumstances that change payment. Modifier 25 flags a separate E/M service on the same day as a procedure. Modifier 59 flags a distinct procedural service, and modifier 50 flags a bilateral procedure.

Two more come up constantly. Modifier 76 reports a repeat procedure by the same physician, and modifier 91 reports a repeat clinical lab test. A missing modifier is one of the fastest routes to a denial.

Place of service (POS) codes say where the care happened. Office is 11, patient home is 12, telehealth is 02 or 10, hospital inpatient is 21, and an ambulatory surgery center is 24. The POS code drives facility versus non-facility payment rates.

Medical billing terminology and key definitions

Shared language saves time when a claim goes wrong. These are the terms every coder and biller needs on hand:

• EOB (explanation of benefits): Payer document showing what was billed, the allowed amount, patient responsibility, and the reason for any adjustment.
• NPI (national provider identifier): The 10-digit identifier CMS assigns to every healthcare provider and facility.
• Prior authorization: Payer approval required before a service is delivered. A missing authorization is a top denial cause.
• Superbill: The clinical document listing the day’s services and diagnoses, used by coders to abstract charges.
• Bundling: A payer combining two billable services into one payment because they are clinically inseparable.
• Unbundling: Billing component codes separately when they belong together. This is a compliance risk, not a shortcut.
• Remittance advice: The electronic payer report detailing payment, denials, and adjustments, used for reconciliation.
• Medical necessity: The payer’s determination that a service suits the patient’s diagnosis and clinical condition.

Common medical coding errors to avoid

Coding accuracy shows up directly in the revenue cycle and in audit risk. The most frequent errors are all preventable:

• Upcoding E/M levels: Billing 99215 when the documentation supports only 99214. Auditors look for providers who always code high.
• Missing or incorrect modifiers: Billing a bilateral procedure without modifier 50, or reporting a distinct procedural service without modifier 59.
• Using retired or invalid codes: ICD-10 codes change every October 1, and an expired code means an outright rejection.
• Incomplete diagnosis documentation: “Pain” instead of “right knee pain” loses the specificity that supports the claim.
• Incorrect place of service: Billing a telehealth visit as an office visit changes the payment rate and the claim routing.
• Duplicate claims: Submitting the same claim twice in one billing cycle triggers overpayment and a recovery demand.
• Unbundling services: Splitting a bundled combination into component codes. Practice management software with claim validation flags those combinations before submission.

Claim denial codes and quick response strategies

A denied claim comes back with a group code and a reason code on the remittance advice. The group code tells your team who owns the balance:

Claims management software tracks denial codes and surfaces patterns, so your team fixes the cause instead of the individual claim. Working denials weekly beats working them in a quarterly panic.

How to use the sheet in daily workflows

The sheet earns its keep when it sits where the work happens. Keep a printed copy at the front desk for place of service lookups, and hand the PDF to every new biller during onboarding.

Specificity starts before the visit does. Structured intake forms put history and symptom detail on the chart in the patient’s own words, which gives the coder something to work from.

Pair the sheet with training on your payers’ rules and your own documentation standards. Then check the denial code section whenever a rejection lands, before anyone re-keys the claim.

How Pabau keeps coding and documentation in step

Most coding errors start in the chart rather than the code book. The note is thin, the diagnosis is vague, and the coder picks a level the documentation cannot defend. Six weeks later the claim comes back.

Practice management software like Pabau holds the documentation and the billing in one system. Treatment notes, patient records, consent forms, and photos attach to the appointment, so coders read what happened instead of chasing the clinician for detail.

Invoicing and claims sit in the same record, so a coded visit turns into a claim without anyone re-typing it. Denial codes land back in the same place, which makes a repeat mistake obvious across the whole team.

Code from the note, not from memory

Pabau keeps treatment notes, patient records, and claims in one system. Coders work from complete documentation, so fewer claims come back with a denial code attached.

Book a demo

Conclusion

Coding accuracy is mostly a documentation habit. The code sets shift once or twice a year, and the codes you actually use fit on a single page.

Print the sheet and keep it where claims get built. Then watch the two things behind most denials, which are the modifier nobody added and the level the note cannot support.

Book a demo to see how Pabau ties treatment notes, coding, and claims together, so your team spends less time reworking rejections.

Continue your research

Coding a full-thickness graft? 15260 shows why most denials trace back to the note rather than the code.

Billing behavioral services in 15-minute units? H2019 walks through unit math and state Medicaid rules.

No CPT code fits the procedure? 20999 explains what the special report has to contain before a payer will price it.

Billing a device used in retina repair? C1784 covers the hospital outpatient rules for device codes.

Documenting an SSRI adverse effect? T43.225A covers initial encounter coding and the seventh character.

Frequently asked questions