To get credentialed with insurance companies, finish your own file first: NPIs, taxonomy, state license, DEA registration if you prescribe, and malpractice coverage. Put it all in a CAQH profile, attest to it, then apply to Medicare through PECOS, your state Medicaid program and its managed care plans, and each commercial payer. You are in network once each payer has given you an effective date in writing, the contract is loaded and EFT and ERA are set up, not when the first approval letter arrives.
The order saves weeks, because each step feeds the next. Here is the sequence we work in, and what goes wrong at each step.
Insurance credentialing steps, in order
- Get your NPIs: a Type 1 for each provider, a Type 2 for the group.
- Pick the right taxonomy code for each NPI.
- Hold an active license in each state where you see patients.
- Register with the DEA if you prescribe controlled substances.
- Carry malpractice coverage and keep the certificate current.
- Build your CAQH profile, attest to it and authorize your payers.
- Choose your payers and check which panels are open.
- Enroll in Medicare through PECOS.
- Enroll in Medicaid with your state, then its managed care plans.
- Apply to commercial payers: request, credentialing, contract.
- Confirm effective dates, the contract load, and EFT and ERA.
- Keep it current: CAQH, revalidation and recredentialing.
Steps 1 to 6 come before a payer sees anything; steps 8 to 10 can then run side by side. Across a normal payer mix, plan on 90 to 120 days from a complete file to usable effective dates. The payer-by-payer numbers are in our guide to how long credentialing takes.
Before you apply: NPI, license, DEA, malpractice
NPI: Type 1 and Type 2
Each provider gets one individual NPI, called Entity Type 1, and groups and other organizations get an Entity Type 2. A sole proprietor has only the Type 1, but a provider who practices through their own corporation or LLC may need both, as CMS explains. The number does not change, even when your name, address or taxonomy does.
The usual mistakes are a new group that applies without a Type 2, and an NPPES record with an old address or name. State Medicaid agencies check NPPES when they screen you, so fix it first.
Taxonomy
A taxonomy code is a 10-character code for your provider type and specialty, taken from the National Uniform Claim Committee list. You can list several, but CMS requires one to be marked primary. Make it match the license and specialty you bill under, and use that same specialty on every application.
License, DEA and malpractice
Your license must be active in each state where you see patients, and payers verify it during credentialing. If you prescribe controlled substances you need a DEA registration, plus a state controlled substance registration where your state issues one. Federal rules require a separate DEA registration for each principal place of practice where you handle controlled substances; the practitioner exemption covers only an extra office in the same state where you prescribe but do not dispense, administer or store them. A practice in a second state means a second registration.
Keep the current malpractice certificate (the face sheet with your name, policy dates and limits) and upload each renewal when it arrives. Your CV needs months and years with no unexplained gaps; attach a short written explanation for any gap, settlement or board action up front.

Set up CAQH and choose your payers
Your CAQH profile
More than 1,000 health plans and other organizations ask their network providers to use CAQH for credentialing. Aetna, for example, pulls your application from CAQH ProView and asks you to authorize Aetna so it can see it. CAQH now operates as DataSpring and calls the product the CAQH Provider Data Portal; the login is still proview.caqh.org, and payers such as Aetna still call it ProView.
The profile is free. You register, complete it, upload your documents, attest that everything is true and complete, and authorize each plan. Then you re-attest every 120 days (every 180 days in Illinois), or the profile’s status changes to Expired.
Four things stall a commercial file: a complete profile that is not attested, a payer missing from the authorization list, an expired license or malpractice certificate still uploaded, and a missing practice location. Check all four before you file.
Choose your payers
List the plans your patients carry, ranked by volume, then check that each panel is open for your specialty and area before you apply. Commercial payers weigh network need in your area before they contract, and some Medicaid managed care plans ask for an expression of interest first in case the network is closed. A quick “no” costs less than an application that sits for months.
Medicare and Medicaid enrollment
Medicare through PECOS
You enroll in PECOS once you have an NPI and an Identity & Access Management (I&A) account, as CMS sets out in its Medicare provider enrollment guide. The form depends on who is enrolling:
- CMS-855I for individual physicians and non-physician practitioners, including nurse practitioners, psychologists, clinical social workers, marriage and family therapists, mental health counselors, and physical and occupational therapists in private practice.
- CMS-855B for clinics, group practices and therapy groups in private practice.
- Reassignment to a group also goes on the CMS-855I. CMS merged the old CMS-855R into it, so a checklist that asks for an 855R is out of date.
Physicians, non-physician practitioners and their groups pay no application fee. EFT is mandatory, set up in PECOS with a voided check or a bank letter.
Two things derail Medicare files: a request from your Medicare Administrative Contractor (MAC) left unanswered past 30 days, which can get the application rejected, and a site visit the inspector cannot complete, which can lead to a denial. Use your legal name exactly as Social Security has it.
File before the provider starts. Under 42 CFR 424.520(d), the effective date for physicians, non-physician practitioners, their groups and therapists is the later of the date you filed an application that was later approved and the date you began seeing patients at that location. A fast approval cannot move it earlier. Put in your own dates to see how many weeks of visits fall in the gap.
Plan a new provider’s start
13weeks of visits could fall before an effective date
With a start in 1 month, Medicare could be effective in 30 to 90 days and commercial plans in 60 to 120.
Typical ranges with a complete application; commercial plans can need 2 to 6 more weeks to load the contract. Each payer sets its own pace, so we track every application to an effective date in writing.
Start credentialingMedicaid, one state at a time
Each state runs its own enrollment: an application, a review, screening by risk level and a signed provider agreement, as MACPAC’s June 2026 report to Congress describes. Physicians are limited risk, which means license and database checks; moderate risk adds a site visit, and high risk adds fingerprints and a criminal background check. Miss the state’s deadline for corrections and the application is denied, so you start over.
Then you have to be credentialed for each Medicaid managed care plan, and states organize that three ways. Ohio uses one centralized application for every plan, Oregon requires one standardized form, and Pennsylvania lets each plan run its own process. A plan may sign you while state enrollment is pending, but if the state has not enrolled you within 120 days, the plan has to end the contract.
How to get paneled with commercial insurance
Getting on a commercial panel has three parts, and payers order them differently.
- Request to join. File the payer’s participation request or a letter of interest. In Aetna’s process, Aetna then weighs its network need in your area and decides whether contracting, credentialing or both apply.
- Credentialing. The payer verifies your license, education, sanctions history and prior malpractice cases, and a credentialing committee approves you for the network.
- Contracting. You receive an agreement with a fee schedule, and both sides sign it. Aetna finalizes the contract once credentialing is complete.
Before you sign, check the products it covers, the fee schedule, the Tax ID and every NPI, each location, and the effective date.
Credentialing vs contracting
| Credentialing | Contracting | |
|---|---|---|
| Question it answers | Are you qualified? | What will they pay you? |
| Who runs it | Credentialing staff and committee | Network or contracting team |
| What you get | An approval | A signed agreement and fee schedule |
| On its own | No rates, no network status | Usually waits on credentialing |
In short: an approval letter means the payer accepts your qualifications. You are in network when a contract with your name, NPI and Tax ID is signed by both sides and loaded.
What a closed panel means
A closed panel means the payer has decided its network already has enough providers of your type in your area. It says nothing about your qualifications, and calling more often will not reopen it.
Ask which products and areas are closed, whether the closure applies to providers joining a group that already holds a contract, and when you can reapply. If you offer something the network lacks (a language, a subspecialty, evening hours, an office where providers are scarce), say so in writing.
After approval: effective dates, payments and upkeep
Confirm the effective date and the contract load
Get the effective date in writing from every payer, for every provider and location. For Medicare you also have 90 days from the approval letter to decide whether to participate by filing the CMS-460. Participating providers take Medicare’s allowed amount as payment in full on every claim; non-participating providers are paid 5 percent less and cannot bill patients above the limiting charge.
A signed commercial contract still has to be loaded into the payer’s claims system, and we plan on 2 to 6 weeks for that. Get written confirmation of the load, and check your directory listing, before you release held claims.
Set up EFT and ERA
EFT sends the money; ERA sends the remittance that explains it. Medicare builds EFT into enrollment, but every provider must also sign an ERA enrollment form with the MAC before it sends electronic remittances, even through a clearinghouse. Set up both with each commercial payer too, or your team ends up posting payments by hand from paper and portals.
Keep it all current
- CAQH: re-attest every 120 days.
- Changes: tell Medicare within 30 days about an ownership change, a practice location or a final adverse legal action, and within 90 days about anything else.
- Revalidation: Medicare every five years, after a MAC notice 90 to 120 days ahead; file late and payments can be held or billing privileges deactivated. States revalidate Medicaid providers at least every five years, and some more often.
- Recredentialing: NCQA requires it every three years, so expect each commercial plan back about 36 months after approval.

How the steps differ for therapists, NPs and PTs
Therapists and mental health providers
Clinical psychologists, clinical social workers, marriage and family therapists and mental health counselors all enroll in Medicare on the CMS-855I. Check where each commercial plan takes behavioral health requests; Aetna uses one request form for medical and behavioral health. Telehealth across state lines adds work: Medicaid programs generally require out-of-state providers to enroll, and Oregon requires certain out-of-state telehealth and behavioral health providers to hold an Oregon license. More in mental health credentialing.
Nurse practitioners
Nurse practitioners enroll on the same CMS-855I as physicians, under the same effective-date rule. Keep three more documents current: your national certification, your state license with prescriptive authority, and your collaborative practice agreement if your state requires one. If you bill through a group, make sure your Type 1 and the group’s Type 2 match on every application. More in nurse practitioner credentialing.
Physical therapists
Medicare enrolls a physical therapist in private practice on the CMS-855I and a therapy group in private practice on the CMS-855B, and a therapist employed by a group reassigns benefits to it on the CMS-855I. Therapists are named in the same effective-date rule as physicians, so file before the first visit. More in physical therapy credentialing.
How Reliable Care handles credentialing
We check your NPIs, licenses, DEA, malpractice and work history for anything that will slow a payer down, build or clean up CAQH, confirm which panels are open, and file Medicare, Medicaid and commercial applications in priority order. Every payer gets weekly follow-up with a live status tracker you can see. We confirm effective dates in writing, set up EFT and ERA, and put revalidation and recredentialing dates on a calendar we watch.
Credentialing costs $189 per payer application, or $150 per payer for up to 7 payers and $120 per payer for up to 20, with no setup fees. See provider enrollment and credentialing for what each application includes, and pair it with medical billing so held claims and effective dates sit in one place.
Frequently asked questions
Get your NPIs and taxonomy right in NPPES, keep your state license, DEA registration and malpractice certificate current, then build, attest and authorize your CAQH profile. Next, choose your payers and check which panels are open. Enroll in Medicare through PECOS, enroll with your state Medicaid program and its managed care plans, and apply to each commercial payer. Finish by confirming effective dates, the contract load, and EFT and ERA with every payer.
Every individual provider needs a Type 1 NPI. A group practice, clinic or other organization needs a Type 2 NPI for the business. A sole proprietor has only the Type 1. A provider who practices through their own professional corporation or LLC may need both: the Type 1 for themselves and a Type 2 for the company. Your NPI stays the same when you move, change your name or change your taxonomy.
No. Medicare enrollment runs through PECOS, or the paper CMS-855 forms, and your supporting documents go there. You still need a CAQH profile for commercial payers, since more than 1,000 health plans and other organizations ask their network providers to use it, and for any Medicaid managed care plan that credentials through it. Keep it attested every 120 days so those payers can use it.
A closed panel means the payer has decided its network already has enough providers of your type in your area, so it is not adding more. It is a decision about network need, not about your qualifications, and follow-up calls will not change it. Ask which products and areas are closed, whether the closure applies to providers joining a group that already holds a contract, and when you can reapply.
No. Credentialing is the payer confirming you are qualified: license, education, sanctions and malpractice history. You are in network only when a contract with a fee schedule is signed by both sides, loaded into the payer’s claims system, and tied to an effective date in writing. Claims sent after an approval letter but before the contract loads can deny or pay as out of network.
There are four clocks. Re-attest your CAQH profile every 120 days, or every 180 days in Illinois. Revalidate Medicare enrollment every five years, when your Medicare contractor asks. Revalidate with each state Medicaid program at least every five years, and some states ask sooner. Expect each commercial payer to recredential you every three years, the cycle NCQA standards require. Put all four on one calendar.
Sources
- NPI: What You Need to Know, CMS
- Find Your Taxonomy Code, CMS
- 21 CFR 1301.12 Separate registrations for separate locations, eCFR
- Resources: FAQs (CAQH Provider Data Portal), DataSpring (formerly CAQH)
- MLN9658742: Medicare Provider Enrollment, CMS
- 42 CFR 424.520 Effective date of Medicare billing privileges, eCFR
- Chapter 7: Provider Enrollment and Credentialing in Medicaid (Report to Congress, June 2026), MACPAC
- Health Care Providers: Join the Aetna Network, Aetna
- NCQA's Credentialing Standards Help Ensure Safety and Integrity of Practitioner Networks, NCQA
- Medicare Claims Processing Manual, Chapter 24: General EDI and EDI Support Requirements, CMS
Rules, payer policies and figures change. This article explains them in general terms as of October 21, 2026; it is not legal advice.







