Why CAQH Maintenance Is a Revenue Problem, Not Just an Admin Problem

At Revenant Care Group, we manage credentialing and billing across roughly 50 behavioral health practices at any given time, ranging from solo outpatient therapists billing CPT 90837 to multi-site IOP programs running CPT 90853 group codes alongside H0015 and H2036 SUD bundles. The pattern we see consistently is this: CAQH profile lapses are not a credentialing department problem. They are a cash flow problem that shows up 60 to 120 days later as a cluster of eligibility-related denials and retro-authorization failures that nobody can explain at the front end of the revenue cycle.

A single provider whose CAQH attestation expires during an active payer re-credentialing cycle can trigger a payer-side roster removal. When that happens, claims for CPT 90791 (psychiatric diagnostic evaluations), CPT 90837 (53-minute individual therapy), and CPT 90847 (family psychotherapy with patient) all route to denial under CO-4 or CO-97, depending on the payer edit logic. For a mid-size group practice billing 800 to 1,200 units per month per clinician, a single lapsed provider can represent $18,000 to $34,000 in suspended or denied revenue per 30-day window before the roster is restored. We have tracked this impact across practices of different sizes, and the number is consistent enough that we build it into every credentialing risk conversation we have with new clients.

What the Quarterly CAQH Attestation Window Actually Requires

CAQH ProView requires re-attestation every 120 days. Most credentialing coordinators know this in theory. In practice, the 120-day clock often gets missed because the alert goes to an email address that belonged to a former staff member, or the practice has multiple NPIs under one login and only re-attests for the providers currently in active credentialing. Here is what a complete quarterly CAQH maintenance cycle must include for behavioral health providers:

• Personal and professional data verification: Confirm current mailing address, personal NPI, and DEA registration if the clinician is a prescriber. For psychiatric NPs and MDs billing CPT 99213 to 99215 with a psychotherapy add-on (CPT 90833, 90836, or 90838), an expired DEA record in CAQH will surface as a payer credentialing hold even when the DEA certificate itself is valid.
• Work history and gaps: Any employment gap of 30 days or more that has occurred since the last attestation must be documented. This is the field most coordinators skip because it feels administrative. Payers use this field during re-credentialing audits.
• Malpractice insurance documentation: Upload the current certificate of insurance showing per-occurrence and aggregate limits. Many commercial payers require $1,000,000 / $3,000,000 minimums for behavioral health providers. BCBS, Aetna, and Cigna all verify this during roster reviews.
• Hospital privileges or affiliation status: Even if your providers have no hospital affiliation, the field must reflect “none” accurately. A blank field in CAQH is treated differently than a declared “not applicable” by some payer credentialing systems.
• License verification upload: State behavioral health licenses, NCC certifications, and LCSW or LPC credentials must be current in CAQH with expiration dates populated. Do not leave the expiration field blank even if the license is currently active.
• Authorize data sharing for all relevant payers: CAQH data sharing authorization must be explicitly granted per payer. We see this missed constantly when a practice adds a new payer contract. The new payer cannot pull the CAQH profile until the provider has authorized sharing, which adds 2 to 6 weeks to an already slow contracting timeline.

The Quarterly Checklist Your Credentialing Team Should Run on the First Business Day of Each Quarter

We recommend a structured pull on the first business day of January, April, July, and October. Your credentialing coordinator should generate a full roster export from your practice management system, cross-reference every NPI against the CAQH ProView dashboard, and flag any profile showing an attestation date older than 90 days. Do not wait for the 120-day expiration notice. By day 90, you should already have the updated documents collected and the attestation submitted.

For practices using a hybrid billing model that includes Place of Service 11 (office), POS 02 (telehealth, patient not at home), and POS 10 (telehealth, patient at home), verify that each provider’s CAQH service location data matches the actual POS codes your billing team is submitting. A mismatch between the service location registered in CAQH and the POS on the claim is a known trigger for post-payment audits at Medicaid managed care organizations in states with aggressive provider integrity programs.

Where CAQH Failures Connect to Downstream Denial Patterns

The most expensive CAQH-related denial pattern we see is not the immediate CO-97 or CO-4 denial. It is the retro-termination scenario, where a payer discovers during a quarterly roster audit that a provider’s CAQH attestation lapsed six months prior and retroactively removes the provider from the panel back to the lapse date. Every claim paid during that window becomes subject to recoupment. For a practice billing 60 to 80 units per week per provider at an average allowed amount of $125 to $165 per CPT 90837 unit, a three-month retro-termination represents $29,000 to $52,000 in recoupment exposure per affected provider.

This is also the point where parity compliance intersects with credentialing integrity. If a payer is already applying non-quantitative treatment limitations inconsistently to behavioral health claims, a credentialing lapse gives them a procedurally clean reason to deny or recoup without triggering a parity analysis. If your practice has been fighting utilization management denials, we recommend reviewing our breakdown of how MHPAEA parity appeals work and where behavioral health practices are leaving money on the table. Credentialing hygiene and parity strategy are not separate tracks; they are both conditions of a defensible claim.

Group Practice Credentialing: The Roster Management Layer Most Practices Ignore

For group practices with 10 or more clinical FTEs, CAQH maintenance is not just a per-provider task. It is a roster management function that requires a tracking system, not a spreadsheet updated once a year before Joint Commission. The pattern we see at practices in the 10 to 25 provider range is that credentialing is handled reactively: a denial comes in, someone calls the payer, the payer says the provider is not on the roster, and then the scramble begins.

A credentialing tracking system should capture, at minimum: CAQH profile ID, last attestation date, next required attestation date, license expiration dates per state, malpractice policy renewal date, DEA expiration (for prescribers), and payer-specific re-credentialing cycle dates. Cigna re-credentials every two years. Aetna and BCBS cycles vary by state. Medicare does not use CAQH directly, but PECOS data must stay synchronized with what is in CAQH for commercial payers that cross-reference both. If your CAQH address does not match your PECOS enrollment address, expect additional verification requests from payers that audit both systems.

SUD Practices Have Additional CAQH Considerations

For SUD-focused practices billing CPT H0004, H0005, H0015, H2036, or T1006, CAQH maintenance carries an additional layer: program-level certification data must align with the provider-level CAQH record. State substance use disorder program certifications, SAMHSA waiver documentation for buprenorphine prescribers, and staff credential types (CADC, LADC, LCADC) all factor into payer credentialing decisions that do not apply to general outpatient behavioral health. If your billing team is already navigating the complexity of drug screen coding under G0480 through G0483, you understand how layered SUD compliance already is. For more on that revenue recovery opportunity, see our guide on why most SUD practices are under-coding drug screens and leaving significant revenue on the table. Credentialing lapses in an SUD setting compound faster because the payer contracts are often narrower and re-credentialing timelines are longer.

Start Your CAQH Maintenance Cycle Before You Need To

The practices that manage credentialing well do not treat it as a quarterly fire drill. They treat it as a revenue protection function with the same priority as claims submission. Build the quarterly checklist into your RCM calendar, assign ownership to a specific coordinator with backup coverage, and create an escalation path when a provider misses a document deadline. If you want to see where your current credentialing gaps are intersecting with your denial rate, we offer a free 30-day denial audit that maps denial codes back to credentialing, coding, and authorization root causes. Book a time directly with our team here: schedule your free 30-day denial audit.