Medical Credentialing: The Complete Process Guide for 2026

Credentialing is the process of verifying a provider's qualifications and enrolling them with insurance payers so they can bill and collect for services. It sounds simple. In practice, it involves assembling 40-plus pages of documentation per payer application, navigating different submission formats for every carrier, and following up relentlessly because applications do not move on their own. The core verification components include medical education and residency training confirmation through the National Practitioner Data Bank (NPDB), board certification validation through the relevant specialty board (ABMS for physicians, ANCC for nurse practitioners), active state license verification, DEA registration, malpractice insurance certificate with coverage dates and limits, work history covering the past 10 years with no gaps exceeding 30 days, hospital privilege verification for facility-based providers, NPI validation (Type 1 for individual, Type 2 for organizational), and CAQH ProView profile completion. For a new provider joining an established practice, the credentialing packet typically requires 15 to 20 distinct documents, and each payer may request additional items beyond the standard set. A single missing document or expired certification can delay the entire application by 30 to 60 days.

CAQH ProView is the universal credentialing database that over 1.4 million providers use and most commercial payers reference during enrollment. Your first step is creating and completing a CAQH profile with every required documentation item uploaded. The profile must be re-attested every 120 days to remain active — CAQH sends reminders at 90 and 105 days, but many providers miss them. A lapsed CAQH profile delays or blocks applications across multiple payers simultaneously because Aetna, BCBS, Cigna, UHC, and Humana all pull data from CAQH during their credentialing review. When the profile is expired, the payer receives an error and places the application on hold until attestation is current. Common CAQH mistakes that delay credentialing: incomplete practice location information (every practice address where the provider sees patients must be listed with suite number, phone, and fax), missing malpractice certificate uploads (upload the current certificate of insurance, not just the declarations page), leaving hospital privileges blank when the provider has active privileges, not listing all taxonomy codes for providers who practice in multiple specialties, and failing to authorize each payer individually to access the CAQH profile. Set a recurring calendar reminder at 100 days after each attestation to ensure you never lapse.

Medicare enrollment is handled through the Provider Enrollment, Chain, and Ownership System (PECOS) at pecos.cms.hhs.gov. Processing times vary by Medicare Administrative Contractor (MAC) region — Novitas Solutions, Palmetto GBA, CGS Administrators, NGS, and WPS each have different backlogs — but typically take 60 to 90 days from complete application receipt. For 2026, the CMS enrollment application fee is $750 for institutional providers (hospitals, ASCs, group practices filing CMS-855A or 855B). Individual practitioners filing CMS-855I are exempt from the application fee. Key steps: obtain an NPPES-registered NPI if the provider does not already have one, complete the appropriate CMS-855 application (855I for individual enrollment, 855B for group enrollment, 855R for reassignment of benefits from an individual to a group), pay the enrollment fee via pay.gov, and pass Medicare validation checks including NPDB query and license verification. For group practices adding a new provider, the 855R reassignment form is the critical document — it links the provider's individual enrollment to the group's billing NPI, allowing the group to bill under its Tax ID for services the provider renders. Missing the 855R is one of the most common Medicare enrollment errors and results in claims denied under CARC CO-16 until the reassignment is processed. Common PECOS mistakes: submitting an 855I when an 855R is needed (or vice versa), incorrect NPI type (individual vs organizational), not updating PECOS within 90 days when a provider changes practice location, and failing to revalidate when CMS requests it (missed revalidation results in deactivation).

Each commercial payer has its own enrollment process, application format, documentation requirements, and processing timeline. There is no universal commercial enrollment form. Aetna: references CAQH ProView and requires a separate Aetna provider participation request. Processing takes 60 to 90 days. Aetna is known for requesting additional documentation 30 to 45 days into the process, restarting the clock. BCBS: varies significantly by state plan — BCBS of Texas, BCBS of Florida, and Anthem BCBS each have entirely different enrollment systems and timelines. Some BCBS plans accept CAQH only; others require their own application in addition to CAQH. Processing ranges from 45 to 120 days. UnitedHealthcare: uses its own online provider portal (UHC Link) for enrollment applications. Processing takes 60 to 120 days and requires CAQH authorization. UHC frequently requests credentialing committee review for specialists, adding 30 days. Cigna: accepts CAQH-based enrollment for most markets. Processing takes 60 to 90 days. Cigna is relatively straightforward but requires separate enrollment for each product line (commercial, Medicare Advantage, Medicaid managed care). Humana: uses CAQH and processes in 45 to 90 days. The key to faster processing across all commercial payers: submit complete applications with every supporting document on the first submission. Incomplete applications go to the back of the queue, and some payers (particularly Aetna and UHC) will close an incomplete application after 60 days, requiring you to start over.

Medicaid enrollment varies dramatically by state because each state administers its own Medicaid program under federal guidelines. Some states use managed care exclusively — you enroll with each Medicaid managed care organization (MCO) separately (Molina, Centene, Anthem Medicaid, AmeriHealth Caritas), and each MCO has its own application and timeline. Other states use fee-for-service Medicaid with a single state enrollment application. Most states use a hybrid model combining both. Processing timelines range from 30 days in well-staffed state programs to 180 days in states with backlogs. States with notoriously long Medicaid enrollment timelines include California (Medi-Cal), New York, Texas, and Florida. This is where state-specific knowledge is essential. Each state has its own application portal, its own documentation requirements (some require site visits for new practice locations), its own revalidation cycle, and its own rules about retroactive billing. Some states allow retroactive billing to the application submission date; others only pay from the effective enrollment date. The difference can represent tens of thousands of dollars in lost revenue during the enrollment period. For multi-state practices or telehealth providers serving patients across state lines, Medicaid enrollment must be completed in every state where patients are located — not just the state where the provider is physically based.

Initial credentialing gets all the attention, but re-credentialing is where established practices lose revenue. Most payers require re-credentialing every 36 months (three years). NCQA-accredited health plans must complete provider re-credentialing within 36 months of initial credentialing or the previous re-credentialing date. If re-credentialing lapses, the provider's participation status may be terminated — meaning claims submitted after the lapse date are denied as out-of-network. The provider does not receive advance warning from most payers; they simply stop paying claims. Re-credentialing requires an updated CAQH profile (current attestation), current malpractice certificate, current state license, current DEA certificate, updated work history, and any new board certifications or hospital privileges. The re-credentialing application must be submitted 90 to 120 days before the expiration date to allow processing time. Track every payer's re-credentialing date for every provider in a centralized calendar or credentialing management system. A practice with five providers and 10 payer enrollments each has 50 re-credentialing deadlines to manage over every three-year cycle.

After managing credentialing for hundreds of providers, these are the mistakes we see most frequently. First: not starting credentialing before the provider's first day. Every day without active enrollment is permanently lost revenue — you cannot bill retroactively for most commercial payers. Start credentialing 90 to 120 days before the provider's first scheduled patient. Second: letting CAQH attestation lapse, which silently blocks every commercial payer application simultaneously. Third: not tracking re-credentialing deadlines, leading to surprise terminations and weeks of denied claims. Fourth: submitting incomplete applications that get placed in pending status for 30 to 60 days before a request for additional information is even sent. Fifth: not following up. Applications do not move without persistent calling — every 7 to 10 business days, call the payer's credentialing department to check status. Document every call: date, time, representative name, and what they told you. Sixth: failing to update all payer enrollments when a provider changes practice location, adds a new specialty, or changes their name. Go Medical Billing manages credentialing for all clients as part of our 2.49% service. We track every deadline, follow up with every payer on a defined cadence, and ensure no provider ever loses enrollment due to an administrative oversight.