Hire a Remote Medical Biller and Coder
Last reviewed October 2026
A medical biller and coder turns clinical visits into coded claims, submits them to payers and follows up on payment and denials. This guide helps small US practices compare in-house, outsourced and remote options, with HIPAA, offshore and certification checks.
Salary Range
$2,400 – $11,310USD/year
Source: RemoteStaffingWiki country guide salary tables (Philippines and India bookkeeper/accountant rows, a proxy for medical billing and coding) · as of Oct 2026 (India row); Philippines row 2026
Required Skills
Best Countries to Hire
Hiring Process
- 1
Decide what stays in the practice
List the tasks you want done (coding, claim submission, payment posting, denials, A/R follow-up) and which you will keep. Note your payers, specialties and software.
- 2
Settle HIPAA terms first
Ask any provider or contractor to sign a business associate agreement, name its subcontractors and explain where PHI is accessed and stored. Have a healthcare lawyer review the terms, especially for offshore work.
- 3
Check credentials with the issuer
Ask for the CPC, CPB, CCS or other credential, the issuing body and the date, and confirm it with the issuer.
- 4
Test on your own specialty
Give a paid sample of de-identified charts and claims for your specialty and payers. Review code choices, denial analysis and how the candidate asks about unclear documentation.
- 5
Grant minimum-necessary access
Set individual logins, multi-factor authentication and role-based access to only the systems the work needs. Agree a rule against storing PHI on personal devices.
- 6
Start with a trial and agreed KPIs
Begin with lower-risk work, audit a sample of coded claims, and agree how days in A/R, clean-claim rate and denial rate are defined and reported.
Interview Questions
- Walk me through how you take a visit note from documentation to a paid claim.
- Which credential do you hold, who issued it, and which specialties and payers have you worked with?
- A clinician’s note does not support the level of service billed. What do you do?
- How do you work a denied claim from the denial reason to resubmission or appeal?
- How do you decide whether a claim is clean before you submit it?
- How do you keep up with annual code updates and payer policy changes?
- What access do you need to do this job, and what would you ask us not to give you?
- Describe a security or privacy mistake you saw or made, and how it was handled.
What medical billers and medical coders do
Medical billing and medical coding are two linked jobs in the revenue cycle of a healthcare practice. A medical coder reads the clinical documentation for a visit and translates it into standard codes for the diagnoses, procedures, services and supplies. A medical biller takes those coded services, builds the claim, submits it to the payer, posts the payment that comes back, and follows up on anything that is rejected or denied. Small practices often give both jobs to one person, which is why job titles such as medical biller and coder, billing specialist and revenue cycle specialist overlap.
The two credential bodies describe the split in similar terms. AAPC says its Certified Professional Coder (CPC) credential covers applying ICD-10-CM, CPT and HCPCS Level II codes, evaluation and management coding and the use of modifiers, while its Certified Professional Biller (CPB) credential covers claim submission, payment posting, payer guidelines and the management of denials and appeals. AHIMA describes its Certified Coding Specialist (CCS) credential as being for people skilled in classifying medical data from medical records.
For a small US practice the practical question is which tasks to keep inside the practice, which to give an outside team, and how to keep patient information protected either way.
Typical tasks
- Charge entry: turning the encounter record and charge sheet into billable lines.
- Coding: assigning diagnosis and procedure codes that the clinical note supports, and querying the clinician when the note is unclear.
- Claim submission: building and sending claims to payers and fixing front-end rejections.
- Payment posting: recording payer payments and adjustments and patient balances.
- Denial and appeal work: finding why a claim was denied, correcting it and resubmitting or appealing.
- Accounts receivable follow-up: working unpaid claims by age and chasing the payer.
The code sets, and who maintains them
A coder works from published code sets, and each has a different owner. Knowing who maintains them tells you what a candidate or provider must keep current and what they may need a licence for.
- CMS says ICD-10 applies to all parties covered by HIPAA, not only providers who bill Medicare or Medicaid, and that the diagnosis code update files for 1 October 2026 are available for encounters from 1 October 2026 to 30 September 2027. The same page records that the CDC announces new ICD-10-CM diagnosis codes and CMS announces new ICD-10-PCS procedure codes. Code files change each year, so ask any candidate or provider which edition they work from and how they track updates.
- The American Medical Association (AMA) says the CPT code set is developed and maintained through a process led by its CPT Editorial Panel, and that HHS designated it under HIPAA as a national code set for physician and other health care professional services and procedures. Ask your lawyer or the AMA what licence your coders need to use CPT content.
- CMS describes HCPCS Level I as the Current Procedural Terminology (CPT) coding system maintained by the AMA. CMS describes HCPCS Level II as a separate standardised system used primarily to identify products, supplies and services not included in the CPT codes, such as ambulance services and durable medical equipment.
In-house, outsourced billing company or remote hire
A small practice has three broad ways to get billing and coding done. None is correct for every practice, and the right answer depends on claim volume, how many payers you deal with, how much management time you have and how much control you want over patient data.
| Question | In-house employee | Outsourced billing company | Remote hire or contractor |
|---|---|---|---|
| Who manages the person day to day | You or your office manager | The company, against the agreement you sign | You, with the same oversight as an in-house hire |
| Who supplies software and training | You | Check who supplies software and training, and confirm it in writing | Check who supplies software and training, and agree it in writing |
| Cover for leave and turnover | You must arrange it | Ask how the company covers absence | You must arrange it, and one person is a single point of failure |
| HIPAA position | Workforce member of the practice | Business associate, with a BAA, and any subcontractors also covered | A remote hire handling PHI will typically need to be covered by your HIPAA policies and may be a business associate depending on the arrangement; confirm with counsel |
| Control over how work is done | Direct, but you carry the management load | Set by the agreement and reporting you negotiate | Set by your instructions and access controls |
| What to put in writing | Employment terms and confidentiality | Scope, reporting, fee basis, data return and exit | Scope, confidentiality, BAA where required, equipment and data rules |
Billing services price in different ways; ask whether the fee is a share of collections, per claim or a monthly amount. We have no sourced fee benchmark, so compare quotes on the same assumptions: the same claim volume, the same payer mix and the same list of included tasks.
For the wider decision framework see our comparison of in-house versus outsourcing and our explainer on business process outsourcing (BPO). For a view of which healthcare tasks practices commonly delegate, read outsourcing for healthcare.
HIPAA, business associates and offshore work
Billing and coding cannot be done without protected health information (PHI), so HIPAA decides how you may organise it.
HHS guidance on business associates says a business associate is generally a person, other than a member of the covered entity’s workforce, who performs functions for the covered entity that involve creating, receiving, maintaining or transmitting PHI. The same page lists claims processing or administration, data analysis, billing and practice management as example activities, and names a CPA firm and an independent medical transcriptionist as examples of business associates. An outside billing company that handles your claims will usually fall within that definition.
HHS says a covered entity may disclose PHI to a business associate if it obtains satisfactory assurances, in the form of a written contract or other arrangement called a business associate agreement (BAA), that the business associate will appropriately safeguard the information. The BAA must describe the permitted and required uses and disclosures of PHI, provide that the business associate will not use or further disclose the PHI other than as permitted or required by the BAA or by law, and meet the other elements listed in 45 CFR 164.504(e). If you know of a pattern of activity that is a material breach by the business associate, HHS says you must take reasonable steps to cure the breach or end the violation, and terminate the agreement if feasible.
Subcontractors matter. HHS says a business associate must have a BAA with its own subcontractor before disclosing PHI to it, and that a covered entity is not required to have a BAA directly with its business associate’s subcontractor. In practice, ask any billing company who its subcontractors are, including any offshore team, and ask to see how the BAA chain is set up. HHS also explains in its business associate fact sheet that business associates are directly liable for certain violations, including failure to comply with the Security Rule and impermissible uses and disclosures of PHI.
What HHS says about work outside the United States
HHS has no separate offshore rule for billing. In its guidance on HIPAA and cloud computing, OCR says the HIPAA Rules do not include requirements specific to the protection of electronic PHI processed or stored by a cloud provider or any other business associate outside of the United States. It then adds that the risks to that information may vary greatly depending on geographic location, that outsourcing services for ePHI overseas may increase the risks and vulnerabilities, and that it may raise special considerations about enforceability of privacy and security protections over the data. HHS says covered entities and business associates should take those risks into account in the risk analysis and risk management the Security Rule requires. Its example is a country with documented increased attempts at hacking or other malware attacks, where reasonable and appropriate technical safeguards must address those threats.
The practical reading is that HIPAA does not ban offshore billing or coding, and it does not relax anything either. The same BAA, safeguards and risk analysis apply, and you should document how you weighed the extra risks of the location. Payer contracts, Medicare and Medicaid program rules and state law may add their own limits on offshore billing, so check those too. That is a question for your lawyer and your security adviser, not a checklist we can supply.
Minimum necessary and access
HHS says the Privacy Rule generally requires covered entities to take reasonable steps to limit the use or disclosure of, and requests for, PHI to the minimum necessary to accomplish the intended purpose. For billing and coding, this is a reason to give a remote worker access to the billing system, not the whole record system, and to give each person only the screens and reports their job needs. The HHS guidance on risk analysis describes the risk analysis that the Security Rule requires; ask your adviser how a remote or offshore billing arrangement changes yours.
Questions to put to any provider or hire
- Will you sign a BAA, and who are your subcontractors for this work?
- Where will PHI be accessed from and stored, and on whose devices?
- How do you limit each person to the minimum necessary, log access and remove it when someone leaves?
- What is your process if you suspect a breach, and how fast will you tell us?
- What happens to our data and records if the agreement ends?
Certifications and how to check them
Certification is not a licence to practise, and it is not a guarantee of accuracy, but it gives you something to verify. AAPC describes the CPC as covering outpatient and physician services, and says the exam can be taken online at home with a live remote proctor or at a testing center. The CPB covers claim submission, payment posting and revenue cycle workflows. AHIMA states that the CCS is aimed at people experienced in coding inpatient and outpatient records, lists several routes to eligibility based on coursework and coding experience or an existing credential, and requires recertification over a two-year period through continuing education units. See the issuer pages for CPC, CPB and CCS.
Ask for the credential, the issuing body and the date, then confirm it with the issuer rather than relying on a certificate image. A credential also does not show how a person handles your specialty, your payers or your software, so test those directly.
KPIs for billing and coding
The right measures show whether claims are going out clean and cash is coming in. We give definitions, not target numbers, because we have no sourced benchmark for a small practice. Set targets from your own baseline over the last six to twelve months, and agree how each measure is calculated before work starts.
| Measure | What it tells you | How to define it in the agreement |
|---|---|---|
| Days in accounts receivable (A/R) | How long, on average, it takes to turn billed charges into cash | The calculation method, the period, and whether patient balances are included |
| Clean-claim rate | The share of claims that pass payer edits and are accepted without correction | Count claims accepted on first submission against all claims submitted in the period |
| Denial rate | The share of submitted claims that a payer denies | Count by claim or by dollar value, and report the top denial reasons |
| First-pass resolution | The share of claims paid correctly the first time they are processed | State whether partial payments and patient-responsibility amounts count |
| Coding accuracy | Whether the codes assigned are supported by the documentation | A regular sample audit by a second qualified person, with a stated sample size |
| Charge lag | The time from the visit to the charge being entered | Measure from the date of service to the date the claim is ready |
Pair these with the general scorecard in our guide to remote team KPIs. Ask for a regular written report, and spot-check a sample of claims yourself.
Access, security and trial work
Before anyone sees live patient data, agree the rules in writing and set up the technical controls. A short paid trial on lower-risk work such as practice-management reports, payer follow-up on aged claims, or de-identified examples shows how a person works before real PHI is involved. Check with your adviser what counts as de-identified first.
- Give individual logins, never shared ones, so that each action can be traced to a person.
- Use multi-factor authentication and restrict access to the systems the work needs.
- Decide whether work happens on equipment you control, and ban storing PHI on personal devices.
- Keep an access log and review it, and write an offboarding checklist that removes access on the last day.
Our guides to data security when outsourcing and remote staffing vendor due diligence cover the wider checks, and outsourcing exit plans explain how to plan for the end of an agreement.
Pay and cost
The salary box on this page shows an offshore annual range from two country-guide rows, and a US reference. Neither is a fee quote. The offshore range uses the bookkeeper and accountant rows in our Philippines and India guides as a proxy, because those guides have no medical billing row. Treat it as a rough guide to local pay for finance-type office roles, not as the cost of a medical biller or coder.
For the US reference, the Bureau of Labor Statistics May 2025 occupational employment and wage estimates for SOC 29-2072, medical records specialists, list a national median of $51,140 a year ($24.59 an hour), with the 10th percentile at $37,000 and the 90th at $81,150, and 194,720 people employed. This occupation is the closest published BLS grouping we could use, so it is a proxy for medical billers and coders rather than an exact match.
Wages are one part of cost. Software, training, management time, payer enrolment and data-security controls add to it, and an outsourced company will price in its own overheads. Model your case with the salary benchmark tool and the remote hiring cost calculator.
Choosing a country
Our healthcare outsourcing countries guide lists India and the Philippines among the markets it covers, with pros and cons for each. For context on English, the EF English Proficiency Index 2025 gives the Philippines a score of 569 and India a score of 484, against a global average of 488. English matters most where staff speak to patients or payers on the phone, and less for written claim work.
Time zones deserve a plan. Serving US business hours from Asia generally means overnight local shifts, and a handover window with your front desk can make or break follow-up. Use the time-zone overlap tool and read our explainer on time-zone overlap. If your practice also needs front-desk or patient-call support, see the guides to a virtual receptionist and a customer support agent. For payroll-side bookkeeping, see remote accountant or bookkeeper.
Sources
- HHS OCR, Business Associates FAQs
- HHS OCR, Direct liability of business associates (fact sheet)
- HHS, Minimum necessary requirement
- HHS OCR, Guidance on HIPAA and cloud computing
- HHS OCR, Guidance on risk analysis
- CMS, ICD-10 codes
- CMS, Healthcare Common Procedure Coding System
- AMA, CPT code set overview
- AAPC, Certified Professional Coder and Certified Professional Biller
- AHIMA, Certified Coding Specialist
- BLS, Occupational Employment and Wage Statistics, May 2025 national file (SOC 29-2072; national file download)
- EF English Proficiency Index 2025, Philippines and India
- Offshore pay proxies: JobStreet Philippines bookkeeper salary page (2026) and AmbitionBox salaries (2025), as cited in our country guides
References checked on 31 October 2026. This guide is general information, not legal advice. HIPAA obligations, offshore handling of protected health information and the terms of any business associate agreement depend on your facts, so ask a qualified healthcare lawyer before you act.