A provider who is not credentialed cannot bill insurance. It is that simple. No network participation means no reimbursement — and in 2026, the rules governing how providers get credentialed and stay credentialed have undergone the most significant changes in decades.
New NCQA standards, stricter CMS requirements, tighter verification timelines, and the expansion of telehealth have collectively transformed credentialing from a periodic administrative task into a continuous, compliance-driven function that directly impacts your practice’s cash flow.
If your practice is adding a new provider, expanding into a new specialty, offering telehealth services, or simply trying to make sure your existing providers remain in good standing with payers — this guide covers everything you need to know about insurance credentialing in 2026.
What Is Insurance Credentialing and Why Does It Matter?
Insurance credentialing is the process by which insurance payers — including Medicare, Medicaid, and all commercial insurers — verify a healthcare provider’s qualifications before granting them network participation and the ability to bill for services.
Credentialing answers one fundamental question: Is this provider genuinely qualified to deliver the care they are billing for?
The verification process covers:
- Medical education and training
- State licensure and DEA registration
- Board certifications
- Work history and hospital privileges
- Malpractice insurance coverage
- Disciplinary history and OIG exclusion status
- NPI (National Provider Identifier) registration
Without completed credentialing, a provider cannot participate in any insurance network. Claims submitted under an uncredentialed provider will be automatically denied — and in many cases, those claims cannot be retroactively recovered even after credentialing is complete.
The financial impact is significant. Credentialing delays of 60 to 150 days are common, and every day a new provider sees patients without active payer enrollment is a day of revenue that may never be recovered.
What Changed in 2025–2026: The Biggest Shifts in Years
The credentialing landscape shifted dramatically beginning in 2025, with changes now fully in effect in 2026. Practices still operating under pre-2025 procedures are facing delays, compliance risks, and potential payer audits.
1. Monthly Monitoring Is Now Required
The single most impactful change in recent credentialing history: the industry has moved from periodic credential checks to continuous monthly monitoring.
Before 2025, credential verifications typically happened every six months or at recredentialing cycles every two to three years. Under the new NCQA standards effective July 1, 2025, healthcare organizations must now review every provider every 30 days without exception.
Monthly monitoring covers:
- License status — confirming no expiration, suspension, or revocation
- OIG exclusion list — verifying the provider has not been excluded from federal healthcare programs
- State medical board actions — checking for disciplinary actions, sanctions, or restrictions
- SAM.gov screening — federal debarment and suspension database
Missing a single monthly check creates compliance exposure. If a provider sees patients while their license has lapsed or an OIG exclusion has been issued — and your practice missed the monthly check that would have caught it — the consequences include claim denials, repayment demands, and potential loss of Medicare and Medicaid participation.
Manual tracking of monthly verifications for even a small provider group is no longer feasible. Practices need either a credentialing software solution that automates these checks or a credentialing services partner who handles them on their behalf.
2. Credentialing Windows Have Been Shortened
At the same time that monitoring requirements increased, NCQA reduced the allowable time to complete the credentialing process:
- For NCQA-accredited organizations: credentialing window shortened from 180 days to 120 days
- For NCQA-certified organizations: credentialing window shortened from 120 days to 90 days
This is a 33% reduction in available processing time, while the verification requirements within that window have become more rigorous. More work, less time. Practices that relied on the longer windows to manage backlogged applications or chase missing documents no longer have that buffer.
3. Primary Source Verification Is Now Strictly Enforced
In 2026, insurance companies have stopped accepting information from aggregator databases for initial credentialing verification. Payers now require direct primary source confirmation — meaning verification goes straight to the original issuing institution.
Primary source verification must now be obtained directly from:
- The provider’s medical school (confirming graduation and degree)
- Residency and fellowship programs (confirming completion)
- State licensing boards (confirming active, unrestricted license)
- Board certification organizations (confirming specialty certification)
- Previous employers (confirming work history)
- National Practitioner Data Bank (NPDB) (confirming no disciplinary history)
This change significantly increases the documentation burden upfront. Any gap in primary source documentation causes the entire application to stall.
4. State-Specific Changes Worth Knowing
Several major states have updated their credentialing processes for 2026:
- California — implemented real-time primary source verification for all new enrollments
- Texas — shortened processing timeline expectations but added stricter documentation requirements, meaning applications must be more complete at the time of submission
- New York — now requires telehealth-specific credentials for any provider offering virtual care to Medicaid beneficiaries
If your practice operates across multiple states or offers telehealth to patients in different states, each state’s specific requirements must be verified individually.
The Step-by-Step Credentialing Process in 2026
Step 1: Gather the Complete Documentation Package
This is where most credentialing delays originate — missing or expired documents discovered mid-process. Collect everything before submitting a single application:
Standard provider credentialing document checklist:
- [ ] Medical school diploma and transcripts
- [ ] Residency and fellowship completion certificates
- [ ] Current state medical license(s) — must be active and unrestricted
- [ ] DEA registration certificate (if applicable)
- [ ] Board certification certificates
- [ ] Current malpractice insurance certificate with coverage amounts and dates
- [ ] Curriculum vitae (CV) — complete, with no unexplained gaps exceeding 30 days
- [ ] NPI Type 1 (individual provider) confirmation
- [ ] Government-issued photo ID
- [ ] CAQH profile — complete and attested (see Step 2)
- [ ] Work history for the past 10 years
- [ ] Hospital privileges documentation (if applicable)
- [ ] References — typically 3 peer references who can speak to clinical competency
Step 2: Set Up and Maintain Your CAQH Profile
CAQH ProView is the centralized credentialing data repository used by the majority of commercial payers in the United States. It is not optional — if a provider does not have an active, complete, and regularly attested CAQH profile, most major payers will not begin the credentialing process.
Critical CAQH requirements:
- All sections must be 100% complete — incomplete profiles are rejected without review
- The provider must re-attest their CAQH profile every 120 days — if attestation lapses, payers lose access to the profile and credentialing can be suspended
- All documents uploaded to CAQH must be current — expired licenses, lapsed malpractice certificates, or outdated CV information will halt the process
Most common CAQH mistake: providers attest the profile once and forget about it. The 120-day re-attestation requirement is one of the most frequently missed steps in credentialing management, and a lapsed CAQH profile can silently disrupt billing mid-cycle without any obvious warning.
Step 3: Submit Applications to Each Payer
Each insurance company has its own credentialing application and process. While most major payers now accept CAQH-based applications, some still require individual submissions through their own portals.
Payer-specific application submission in 2026 is exclusively digital — paper-based applications are no longer accepted by most major insurers. Every application must be:
- Submitted through the payer’s designated online portal or CAQH
- Complete and accurate at the time of submission — even minor errors in NPI numbers or practice addresses trigger rejection
- Accompanied by all required supporting documentation
Payer processing timelines in 2026 vary significantly:
- Fast payers (well-adapted to new standards): 60 to 75 days
- Slower payers (managing increased verification workload): 120 to 150 days
- UnitedHealthcare offers a 45-day expedited track for primary care providers in counties with physician shortages
Strategy: identify which payers are fastest for your specialty and geography, and submit to them first so the provider can begin billing sooner while longer-processing payers are still working through the application.
Step 4: Primary Source Verification
Once submitted, the payer or credentialing committee initiates direct verification with every original source listed in the application. This is the step that cannot be rushed — payers contact medical schools, licensing boards, training programs, and previous employers independently.
Timeline for this step alone: typically 4 to 8 weeks.
What causes delays here:
- Medical schools or training programs that are slow to respond
- Licensing boards with backlogs
- Gaps in work history that require explanation
- Discrepancies between the application and what primary sources report
Proactively contact medical schools and training programs before submitting and confirm they will respond promptly to verification requests. This alone can shave 2 to 3 weeks off the process.
Step 5: Credentialing Committee Review
After primary source verification is complete, the payer’s credentialing committee reviews the full application file. This committee — composed of medical and administrative professionals — evaluates:
- Educational and training background
- Quality metrics and peer references
- Malpractice history
- Any prior disciplinary actions or board sanctions
- Hospital privileges and clinical activity
Timeline: 1 to 4 weeks depending on the payer and committee meeting schedule.
Step 6: Contract Execution and Network Activation
Once approved, the payer issues a contract outlining reimbursement rates, administrative requirements, and participation conditions. The provider reviews and signs the contract, and network activation follows.
Important: network activation — the point at which the provider can begin billing — does not happen automatically at approval. There is typically an additional processing period of 1 to 2 weeks before the provider appears in the payer’s system as active. Claims submitted before system activation, even for services rendered after contract signing, may be denied.
Always confirm the effective date of participation before submitting the first claim.
Recredentialing: Staying Compliant After Initial Approval
Credentialing does not end at approval. Recredentialing is required at minimum every two years by The Joint Commission, CMS, and most commercial payers. Letting recredentialing lapse is one of the most common — and most avoidable — causes of sudden billing disruptions.
What triggers a recredentialing cycle:
- The two-year recredentialing deadline approaching
- A change in the provider’s license status
- A change in malpractice insurance carrier or coverage amounts
- A change in practice address or group affiliation
- A state medical board action
Best practice: Build a credentialing calendar that tracks every provider’s recredentialing deadline, license expiration, DEA renewal, board certification renewal, and CAQH re-attestation date. Start recredentialing at least 120 days before the deadline — not 30 days before.
Telehealth Credentialing: A Growing Complexity
For practices offering telehealth services, credentialing complexity has increased substantially.
Key telehealth credentialing rules in 2026:
- If a provider sees telehealth patients across multiple states, a separate license verification and background check is required for each state — five states means five separate state-level verifications
- CMS now covers audio-only Medicare telehealth services when patients cannot or prefer not to use video — but audio-only services require specific coding and documentation distinct from audio-visual visits
- New York Medicaid requires telehealth-specific credentials for any provider offering virtual care to Medicaid beneficiaries in the state
- The Interstate Medical Licensure Compact (IMLCC), which streamlines multi-state licensing, now includes 42 member states — if your telehealth providers are eligible, IMLCC membership significantly reduces the burden of multi-state licensing
The Most Common Credentialing Mistakes That Cost Practices Money
After years of managing credentialing for practices across multiple specialties, here are the mistakes we see most consistently:
1. Starting too late. Credentialing a new provider is not a two-week process. In 2026, total timeline from document collection to active participation is typically 90 to 150 days. Practices that hire a provider and begin credentialing on their start date lose months of revenue.
2. Letting CAQH attest lapse. A provider’s CAQH profile must be re-attested every 120 days. When it lapses, payers lose access to the profile and recredentialing can stall silently. Many practices do not discover the lapse until a claim is denied.
3. Submitting incomplete applications. In 2026, incomplete applications are not held for correction — they are returned, and the clock resets. Every required field and every required document must be in place before submission.
4. Not tracking effective dates. Submitting claims before the payer’s system reflects the provider as active results in automatic denial. Always confirm the effective date before billing.
5. Ignoring monthly monitoring. Under the new NCQA standards, missing a monthly credential check is a compliance violation. Practices that have not built a monthly monitoring workflow into their operations are at ongoing regulatory risk.
6. Treating recredentialing as optional. Payers can and do terminate provider network participation for missed recredentialing deadlines. Once terminated, the practice must restart the full credentialing process — losing months of in-network billing in the process.
What Your Practice Should Do Right Now
If you are credentialing a new provider:
- Begin the process the moment you extend an offer — not on the start date
- Collect the complete documentation package before submitting any application
- Set up CAQH immediately and ensure it is complete before any payer applications go out
- Submit to the fastest-processing payers first
- Confirm effective date before submitting the first claim
If you are managing existing credentialed providers:
- Audit every provider’s recredentialing deadline and license expiration dates today
- Confirm CAQH re-attestation dates for every provider — flag any that are within 30 days of lapsing
- Build a monthly monitoring workflow covering license status, OIG exclusions, medical board actions, and SAM.gov
- If you are in Texas, California, or New York, review the state-specific updates that may affect your workflows
Final Thoughts
Credentialing has always been the foundation of a practice’s ability to bill. In 2026, it has also become one of its most complex compliance obligations. Monthly monitoring, tighter windows, stricter verification, and telehealth-specific requirements have collectively raised the bar for what it means to manage credentialing correctly.
Practices that treat credentialing as a strategic function — starting early, monitoring continuously, and staying ahead of renewals and deadlines — protect their revenue and avoid the billing disruptions that catch others off guard.
At ClaimsXperts, credentialing is a core part of what we do. We manage the full credentialing and re-credentialing cycle for our client practices — from initial document collection through payer enrollment, monthly monitoring, and renewal tracking — so that your providers are always active, always billable, and always compliant.
Contact us today to learn how ClaimsXperts can take credentialing off your plate entirely.
ClaimsXperts is a Revenue Cycle Management company based in Frisco, TX, serving medical practices across the United States. We specialize in medical billing, coding, and insurance credentialing for solo practitioners, group practices, and specialty clinics.
