Every benefits leader I talk to has the same pile on their desk: a compliance audit from legal, a renewal from their broker, and a preventive care report showing that 8% of employees completed their recommended preventive care. They think that pile is benefits management. None of those documents touches the cost problem.
After twenty years inside health plans, TPAs, and self-funded employers, I've watched the same loop repeat: employers check ERISA, HIPAA, and ACA boxes, pat themselves on the back, and then watch premiums rise 5-7% year after year. They never audit for the thing that matters: structural misalignment.
An estimated 20-25% of every healthcare dollar is waste. A 2019 JAMA analysis put the total at roughly 25% of US health spending, $760 billion to $935 billion a year, driven by billing errors, misaligned incentives, opaque PBMs (pharmacy benefit managers), and systems that reward sickness over prevention. A traditional compliance audit misses every one of those dollars.
The audit below finds them.
Why Your Current Audit Is Dangerous
The standard checklist asks:
- Are SPDs current? ✅
- Is Form 5500 filed? ✅
- Are COBRA notices sent? ✅
- Is the wellness program HIPAA-compliant? ✅
Those answers tell you whether you'll avoid a DOL fine. They say nothing about whether you're bleeding cash on misaligned incentives. A real audit asks a different question: Where in this system is the default designed to reward the wrong behavior?
The Five Hidden Levers Most Employers Ignore
1. The Prevention-to-Claims Gap
Most employers track wellness participation, from biometric screenings to step challenges. I don't care about participation. I care about preventive care utilization before a claims event.
How to audit: Pull claims data for the last 24 months. Count how many employees had a preventive visit (annual physical, cancer screening, etc.) in the six months before their first major medical claim, such as an inpatient stay, surgery, or specialty drug.
The waste: If most employees hit a major claim without a preventive visit in the prior year, your plan is operating as sick-care, paying for the crash instead of the maintenance.
Why it matters: Prevention isn't an automatic money-saver. Trust for America's Health found that a $10-per-person annual investment in proven community prevention returned about $5.60 per dollar within five years, and a New England Journal of Medicine analysis cautions that some preventive measures cost more than they save. If fewer than 40% of high-claim employees had a preventive visit in the prior year, your plan is catching costs late instead of early.
2. PBM Spread Pricing
PBMs like to lead with a discount off AWP, the average wholesale list price. That's a distraction. Audit the spread: the difference between what the PBM charges the employer and what it pays the pharmacy.
How to audit: Request an "ingredient cost vs. reimbursement" report for the top 50 drugs by spend. Calculate the average markup above NADAC (National Average Drug Acquisition Cost).
The waste: Spread pricing is common in traditional PBM contracts. The PBM reimburses the pharmacy one price and bills the plan a higher one, keeping the difference. Some self-funded plans reimburse generics far above NADAC while the PBM reports a deep discount off the AWP list price. Those two numbers measure different things.
Why it matters: At a 15% spread, a $2 million pharmacy spend carries $300,000 in hidden margin.
3. The Medicare-Eligible Inertia Trap
Most employers never look at how many over-65 employees are still on the active plan, or how many retirees still get coverage. They assume people will self-enroll in Medicare when eligible. Many don't.
How to audit: Run your census against Medicare eligibility and split the 65+ population into active workers and retirees. The payer order matters. Under Medicare Secondary Payer rules, the employer plan pays primary for active workers 65 and older at employers with 20 or more employees, while Medicare pays primary for retirees and for workers at smaller firms.
The waste: When Medicare should be primary but the plan hasn't coordinated benefits, the plan pays more than its share and the member carries two coverages at once. A 67-year-old retiree with both your group plan and Medicare is often double-covered, and the employer funds the overlap.
Why it matters: Once Medicare pays first, your plan covers the gap instead of the full claim, and the member's coverage gets clearer. Running the census shows which members belong in which payer slot before a renewal locks the cost in for another year.
4. The FSA/HSA Exhaustion Cycle
Employees underuse preventive care, then hit the plan with a $5,000 deductible claim, then drain their HSA or FSA on copays and coinsurance. The account becomes a siloed cost bucket that absorbs out-of-pocket spending instead of funding prevention.
How to audit: Look at FSA/HSA utilization patterns. What percentage of account balances are used for preventive items (OTC, dental, vision) versus reactive medical cost-sharing?
The waste: Most employers design HSA contribution policy in isolation from preventive care strategy. The result is employees spend HSA dollars on high-deductible out-of-pocket costs instead of the preventive actions that would reduce those costs. An HSA rolls over and can be invested, while an FSA is generally use-it-or-lose-it, so the two accounts signal different things.
Why it matters: An HSA is a wealth-building tool when used for prevention and long-term savings. If the account is drained on deductibles, the plan is subsidizing its own waste.
5. The Behavioral Incentive Mismatch
Many employers offer wellness rewards (gift cards, premium reductions) for completing a risk assessment. That's a completion reward. A behavior change reward is a different design, tied to a repeated, verifiable action.
How to audit: Map every incentive dollar to a specific, measurable, repeatable health action, such as completing a lab test, refilling a maintenance medication, or receiving a preventive vaccine. If your incentive is "$50 for a health screening," you have a single data point rather than a behavior.
The waste: You're paying for surveys instead of outcomes. Employees complete the form, get the card, and go back to their usual patterns.
Why it matters: Behavioral economics shows that small, immediate, tangible rewards, such as a $10 spendable credit for a scan, drive sustained habit change better than lump-sum annual gifts. An audit should reveal whether your incentives build habits or fill checkboxes.
How to Run This Audit (Without a Consultant's Budget)
You don't need a six-figure benefits consultant. You need three data sets and one afternoon:
- Claims data (last 24 months, de-identified, by service type and CPT code)
- Pharmacy data (by NDC, reimbursement amount, and AWP/NADAC reference)
- Census data (employee age, eligibility, Medicare status, plan selection)
Then ask the five questions above. If you find gaps, and you will, you have a roadmap.
If Your Plan Is Fully Insured, Start With the Contract
The five audits above assume you can pull claims, pharmacy, and census data on demand. Self-funded employers and their TPAs usually can. Fully insured employers often can't, because the carrier holds the claims data and the PBM contract sits inside the premium. When your carrier or broker declines to produce de-identified claims or ingredient-cost data, treat that refusal as a finding of its own. Opacity is a leak. Ask in writing for the three data sets. If the answer is no, ask what access the carrier will offer at renewal, and price that access against the premium you already pay. The waste this audit finds won't show up on a carrier-generated report.
What Most Benefits Auditors Miss
Many compliance auditors are agents of the status quo. They don't flag PBM spread because they lack pharmacy data. They miss the over-65 leak because it isn't an IRS violation. The FSA silo never appears because it isn't a fiduciary breach.
But as a fiduciary, you have a duty beyond compliance: you have a duty to design a system that works. The best audit is a system-level diagnostic that asks: Are our incentives aligned, for every dollar flowing through this plan, with better health, lower cost, and long-term wealth?
If the answer is no, redesign rather than renew.
The Bigger Picture
Employer health benefit costs reached $17,496 per employee in 2025, and Mercer projects they'll top $18,500 in 2026. One in five Americans aged 50 and older have no retirement savings, according to a 2024 AARP survey, and Deloitte estimates the US retirement savings shortfall at $3.68 trillion. The systems most employers rely on are built on incentives that make both problems worse. That list includes the BUCA carriers (Blue Cross, United, Cigna, Aetna), PBMs, and traditional wellness vendors.
This audit is about the structural levers that, when pulled, move the needle on health and wealth simultaneously. Shaving 5% off a TPA fee doesn't do that.
Start with this checklist. The compliance work is table stakes. The real value is in the waste you can see only when you look past the forms. WellthCare™, the first Health-to-Wealth™ Benefit System, gives you a concrete way to act on that insight, rewarding verified preventive actions with Store dollars and retirement contributions that compound health and wealth together.
About the author: Two decades in health plan design, self-funded benefits, and employee wellness. Former TPA partner, PBM skeptic, and believer that the best audit is the one that makes your broker uncomfortable.