Behavioral health credentialing in 2026: what changed and how to stay ahead

The credentialing process has not been redesigned. But several specific changes in 2026 have raised the cost of a missed step, in denied claims, lost revenue, and network participation gaps that can take 60 to 180 days to recover from.

Most of what makes credentialing hard has not changed. The CAQH cycle, the payer queues, the re-credentialing windows that arrive faster than expected. What has changed in 2026 is the consequence of letting any of it slip. Payers are faster to remove providers, denials are harder to reverse, and several new requirements have added rejection risk that most behavioral health practices have not built into their process yet.

This year specifically brought changes that go beyond routine maintenance. Medicare enforcement tightened on January 1 with retroactive revocation authority, a shortened adverse action reporting window, and new deactivation rules for inactive providers. Telehealth credentialing has quietly diverged from in-person enrollment across multiple payers. And the Carelon exit from Providence Health Plan on July 1 is creating a credentialing gap that does not transfer automatically.

This blog covers exactly what changed, why it matters to your revenue, and how a behavioral health revenue cycle solution handles all of it as part of a single workflow rather than a separate operational headache.

The changes this year fall into three categories: payer-specific network requirements that are already active, telehealth credentialing rules that have quietly diverged from in-person enrollment, and document and attestation mandates that are triggering rejections most practices are not expecting. Each one is addressable, but only if you know it is there. Here is what is happening and where the exposure sits.

Your Optum network status may already be at risk

Since April 1, 2026, CAQH has been flagging locations that appear in Optum’s directory but are missing from your CAQH profile^[1]. Each one needs an explicit response. No response is treated as a rejection and triggers removal from the Optum network.

From May 1, all Optum provider updates go exclusively through CAQH. No direct submissions, no alternative channels.

For a multi-provider behavioral health practice with Optum contracts, this is an active network participation risk right now. If your CAQH profiles haven’t been reviewed against Optum’s directory reconciliation prompts, that review needs to happen immediately.

One more thing on CAQH maintenance

The 90-day re-attestation cycle is no longer enough. Taxonomy codes, malpractice details, practice locations, work history dates, and hospital affiliations drift quietly and cause silent rejections before anyone notices. Regular reconciliation against NPPES and payer directories is now part of the job.

For the finance lead

A removal from the Optum network means a disruption to every UHC claim your practice submits. Depending on UHC’s share of your payer mix, a mid-cycle removal can represent a significant portion of monthly revenue — with a 60 to 90 day recovery window to get back in network.

How this should be handled

CAQH ProView requires re-attestation every 90 days. That cycle alone is no longer sufficient, because taxonomy codes, malpractice details, practice locations, work history dates, and hospital affiliations drift quietly between attestation windows and cause silent rejections. Continuous reconciliation against NPPES and payer directories is now a baseline requirement.

Medicare enrollment enforcement tightened January 1, 2026: three changes every behavioral health practice needs to act on

Three significant changes to Medicare provider enrollment took effect January 1, 2026 under the CY 2026 HHA PPS Final Rule (CMS-1828-F)^[2]. Despite the rule’s name, these changes apply to all Medicare providers and suppliers, including behavioral health practices.

Retroactive revocation is now possible

Under prior rules, a Medicare revocation took effect 30 days after CMS issued notice, giving practices a window to wind down billing. That has changed. If CMS determines a provider, including a behavioral health provider, submitted false or misleading information on their enrollment application, the revocation is now effective on the date the application was originally signed. If a provider failed to report a change of information on time, such as a practice location, an ownership change, or an adverse legal action, the revocation is effective the day after it was supposed to be reported.

This means inaccurate enrollment data is no longer just a correction issue. It is a retroactive financial liability. Every claim billed since the date of non-compliance is subject to recoupment.

Adverse legal action reporting window cut from 90 days to 30 days

All providers and suppliers, including behavioral health practices and their owners, managing employees, and corporate officers, must now report adverse legal actions within 30 calendar days. Previously only certain provider types faced the 30-day window. Missing this deadline now creates direct revocation exposure for any practice, behavioral health included.

Part-time and consulting providers face deactivation after 12 months of inactivity

CMS is expanding deactivation authority to providers, including behavioral health providers enrolled via Form CMS-855O, who have not been listed as the ordering, certifying, or referring individual on any Medicare claim in the previous 12 consecutive months. If deactivated, the provider must reactivate before billing can resume, creating the same revenue gap as a new enrollment.

For the finance lead

Any of these three scenarios, a retroactive revocation, a missed adverse action report, or an unnoticed deactivation, can suspend Medicare billing without warning. For a behavioral health practice with multiple providers across Medicare and Medicaid, A single revocation may also trigger Medicaid termination under existing ACA cross-program rules, depending on the basis for revocation and your state Medicaid agency’s procedures. The financial exposure is not a future risk. It is active from the date of non-compliance, not the date CMS issues notice.

How this should be handled

Audit your Medicare enrollment records now. Every behavioral health provider’s PECOS data needs to match their NPPES registration, their IRS-registered address, and their CAQH profile exactly. Part-time and consulting providers need to be tracked against the 12-month activity threshold before deactivation happens rather than after. Any adverse legal actions reported beyond 30 days from the incident date need to be reviewed immediately with your compliance team.

Telehealth credentialing in 2026 is a different problem than it was two years ago

Most practices that expanded telehealth services during and after the pandemic assumed their existing credentialing covered it. For many payers in 2023 and 2024, that was largely true. In 2026, it increasingly isn’t.

In-person enrollment and telehealth billing eligibility are no longer the same thing

Several payers now require separate credentialing tracks for telemedicine services. This means a provider can be fully enrolled for in-person behavioral health services and still have claims denied for the same services delivered via telehealth, not because of a billing error, but because telehealth wasn’t explicitly covered in their enrollment.

The way to find out which payers require this is straightforward: check the provider portal before submitting applications, not after claims come back denied. An RCM team with current payer intelligence knows this by practice. A practice admin managing credentialing alongside twelve other responsibilities is likely to find out the hard way.

Multi-state telehealth means multi-state credentialing

If providers in your practice see patients across state lines via telehealth, each state is a separate credentialing track. Separate license verification, separate background check, separate enrollment in some cases. The complexity scales with your provider count and geographic footprint and that footprint is larger than most practices realize.

Telehealth coverage laws now exist in 44 states, D.C., and two U.S. territories, meaning a credentialing gap carries real financial consequences in more places than ever. That said, coverage mandates and payment parity are different things. Check parity status state by state^[3].

For the finance lead

Telehealth is likely your fastest-growing revenue line. But a provider delivering telehealth sessions without explicit payer enrollment for telehealth has every one of those claims exposed to denial. At 15 sessions a week and the 2026 Medicare non-facility rate of $167 for a standard 60-minute session (CPT 90837), a single payer’s denied telehealth claims over 12 weeks is roughly $30,000^[4]. Commercial payers typically reimburse above that. Across multiple providers and multiple payers, that compounds fast^[5].

How this should be handled

Telehealth credentialing status needs to be tracked separately from in-person enrollment: for every provider, every payer, and every state where patients are seen remotely. That distinction should be built into the credentialing workflow from the start, not pieced together after a denial.

Payer changes in 2026 your credentialing calendar needs to reflect

Carelon is exiting providence health plan on July 1

Carelon is handing off Providence Health Plan behavioral health and ABA management on July 1, 2026. Credentialing does not transfer automatically. If your providers are credentialed through Carelon and serve Providence commercial or Medicare members, you need to contact Providence directly now and initiate credentialing under their own process. Waiting until after July 1 means a 60 to 90 day gap in network participation.

Medicare Advantage: 20 patient minimum for listed providers

Medicare Advantage plans are now required to verify annually that PAs, nurse practitioners, and clinical nurse specialists listed as behavioral health providers in their HSD tables have delivered services to at least 20 patients in the past 12 months. Providers falling below the threshold can be removed from the directory. If your practice includes mid-level providers in part-time or consulting roles, their patient volume needs to be tracked against this threshold before the annual verification cycle.

For the finance lead

The Carelon exit is the most immediate risk. A 60 to 90 day gap in providence network participation means every claim submitted during that window gets paid at out-of-network rates — or not at all. For practices where Providence represents a meaningful share of the payer mix, this is a contracted rate risk that needs to be addressed before July 1.

How this should be handled

Payer-level changes (network exits, new attestation requirements, mid-cycle mandate updates) need to be tracked and built into active credentialing workflows before they create gaps, not discovered after the fact. The practices that absorb these changes without disruption are the ones where someone is monitoring payer communications continuously and updating credentialing timelines accordingly.

Credentialing is slow by nature. Most payer approvals take 60 to 120 days in 2026 depending on payer type and state. For a practice adding one provider across six payers, that is six separate waiting periods before a single claim is billed.

The revenue loss during that wait is permanent. The 2026 Medicare non-facility rate for CPT 90837 starts at $167 nationally, with commercial payers typically paying well above that. Ninety days of unbillable time for one full-time provider adds up to tens of thousands that never come back^[6].

In-house credentialing works at one or two providers with a stable payer mix. Beyond that, the math shifts against it. The question is not whether it is possible. It is whether your process can absorb the cost of getting it wrong.