I think you're right that this could be a potential audit risk since your provider could show up as outliers, but if your documentation supports the services billed, the risk of negative consequences is low. There aren't any CMS regulations for this beyond the generic 'medical necessity' guideline and providers have a lot of latitude to make decisions as to how they choose to practice. I think to take any action against a provider for doing this would have to involve an investigation with peer review by other providers and would only be likely if there was a really serious allegation and/or a lot of money at stake. However, for pain management, you might want to have them consider that some of those services have frequency limits in the LCDs or payer policies, and bringing the patients in more often than necessary could negatively impact or limit the treatments that are available to them. You could also discuss with them that while this practice might benefit them in the short term, it could actually hurt them in the long run. Payers will catch on that these providers are costing more for the same care and that could impact their contract rates. And as shared savings and capitated programs grow, having a higher cost of care could also put your providers at a competitive disadvantage.
As a coder, I've been in this situation myself and as much as this bothers me too from an ethical perspective, my experience had taught me to steer away from addressing this kind of thing too directly with providers because I've found that going there can easily be taken the wrong way only makes a working relationship with them more difficult. I'll sometimes bring up that being outside of their peer group can bring scrutiny to the practice and try to leave it at that. But ultimately, deciding what is medically necessary and being able to defend their treatment decisions is the provider's professional responsibility and it's up to them to choose how they practice.