ABA Medicaid Revalidation: New Requirements That Could Put Your Clinic's Payments at Risk

Q: How often is ABA Medicaid revalidation required?

Federal rules require Medicaid provider revalidation at least every five years, but many ABA clinics now face shorter cycles. New York moved ABA providers to a high-risk category with a three-year cycle, while Illinois introduced a two-year off-cycle revalidation requirement. Your state's revalidation notice sets your exact deadline.

Q: What happens if my clinic misses its ABA Medicaid revalidation deadline?

Your state Medicaid agency can disenroll your clinic, causing claims for services provided after disenrollment to be denied. In Illinois, reactivation is not retroactive, so claims from the enrollment gap may remain unpaid. In New York, providers who submit their revalidation on time and respond to all information requests can avoid termination.

Q: Does an ABA Medicaid revalidation notice mean my clinic is under investigation?

No. Medicaid revalidation is a routine provider enrollment requirement and does not automatically indicate an investigation. New York's provider enrollment bureau confirms that revalidation does not single out individual providers. ABA providers may face shorter deadlines because CMS has directed states to prioritize higher-risk provider categories.

Anne Scholfield

3 hours ago

5 min read

A revalidation notice is now the one email your ABA clinic can't afford to miss. On April 23, 2026, CMS asked every state Medicaid agency for a two-year plan to recheck enrolled providers, high-risk providers first. New York, Illinois and Alabama have already named ABA in their plans.

ABA Medicaid revalidation is how your state confirms your clinic and providers still qualify to bill Medicaid. Miss the deadline and the state can disenroll you. In Illinois, a lapse can't be fixed backward, so sessions delivered during the gap may never be paid.

Below: what changed, where clinics slip and what to fix before your notice lands.

What is ABA Medicaid revalidation?

ABA Medicaid revalidation is a required recheck of your Medicaid enrollment file. The state confirms your licenses, NPI, ownership, service locations and screening results are still correct. Under federal rule 42 CFR 455.414, every provider must revalidate at least once every five years. Pass, and billing continues. Miss it and payments stop.

Think of it like renewing a driver's license. You passed the test once, and now the state wants proof nothing changed. In 2026, it's asking sooner than most clinics planned.

Revalidation is an enrollment task, separate from commercial payer credentialing. When teams treat them as one job, Medicaid deadlines get buried. Here's a plain breakdown of credentialing vs. enrollment for ABA providers.

What changed in ABA Medicaid revalidation for 2026?

Three things changed: timing, risk level and screening. CMS asked states to revalidate high-risk providers off-cycle, faster than the five-year minimum, starting with anyone not screened in the past 12 months. It also expects every state plan to cover providers without an NPI. Each state then decided where ABA falls.

State	What changed for ABA clinics	Notice date
New York	ABA moved to high risk: site visits, fingerprints for owners with 5% or more, revalidation every 3 years and a required NPI. New ABA enrollments, reinstatements and ownership changes frozen from July 27, 2026 for at least 6 months.	Oct 1, 2026
Illinois	ABA providers revalidate within a new two-year cycle, not the usual five. Late filing means disenrollment, with no retroactive reactivation. Clinics that revalidated or enrolled April 30, 2025 to April 30, 2026 are excluded.	Oct 5, 2026
Alabama	ABA therapy is on the "swift" high-risk track. Notices go out in phases and a late response can affect enrollment.	June 30, 2026

High-risk status is the big one, because it adds a site visit and owner fingerprinting. Adding a partner or investor? Our guide to ABA payer enrollment from application to approval covers the ownership disclosures now getting a closer look.

Every state got the same CMS letter, so check your Medicaid bulletins monthly.

How ABA Medicaid revalidation gaps freeze your payments

Most clinics don't fail revalidation on purpose. They fail on small admin gaps nobody owned. The 2026 state notices point to five:

The notice went to a dead inbox. Illinois emails notices 90 and 30 days before the deadline, only to the address on your enrollment file. If a manager who left owned that inbox, nobody sees it.
One location revalidated, the other didn't. Illinois treats every service location as a separate revalidation.
An expired license hid the deadline. In Illinois, a license that lapses before notices go out means you won't be notified at all.
The owner never signed. In New York, staff can fill out the form, but only the owner or an authorized person on file can e-sign it.
A partner deal hit the freeze. New York's ABA moratorium blocks ownership changes, so a mid-year buyout can stall your file.

The money side moves fast. Once enrollment lapses, claims for those service dates come back as provider not eligible. CMS also wants provider data matched across fee-for-service and managed care, so your MCO contracts can feel it too. That's how one missed email becomes a stack of ABA claim denials your billing team has to rework.

ABA Medicaid revalidation checklist: fix these before your notice arrives

Do this now, while no clock is running.

Point every Medicaid file to a shared credentialing inbox. New York now lets you add a secondary email to each provider file.
Confirm an NPI for every provider and location and check that the NPPES taxonomy matches the ABA services you bill.
Match licenses and BACB certifications to the state's records. Renew anything expiring within 6 months.
Update ownership and managing-employee disclosures. High-risk states fingerprint owners with 5% or more.
Get each location ready for a site visit: posted hours, visible signage and staff on site.
Book the owner's signing time early. The authorized signer, not your office manager, has to submit.
Look up your window. New York lists revalidation dates in its Provider Services Portal and gives you 123 days from the first notice.
Keep one credentialing status tracker with a row per provider and location, plus a reminder 30 days before each due date.

Save every submission receipt. In New York, a clinic that filed on time and answered each follow-up request isn't terminated just because the state is slow.

When to hand off ABA Medicaid revalidation

A single-location clinic with a long-time office manager can usually handle revalidation in-house. It gets risky when files multiply.

Keep it in-house if	Hand it off if
One location in one state	Two or more locations or states
The same person has run enrollment for years	Staff turnover in the past 12 months
No ownership changes planned	A partner, investor or sale is in the works
Licenses, NPIs and emails are already clean	An enrollment-related denial this year

Pacemave's ABA credentialing services team tracks Medicaid revalidation dates alongside commercial recredentialing and CAQH, so every deadline lives on one calendar, not one person's inbox.

ABA Medicaid revalidation FAQs

How often is ABA Medicaid revalidation required?

Federal rules require it at least every five years, but many ABA clinics now face shorter cycles. New York moved ABA to high risk with a three-year cycle and Illinois put ABA providers on a two-year off-cycle revalidation. Your state's notice sets your exact due date.

What happens if my clinic misses its ABA Medicaid revalidation deadline?

Your state can disenroll the clinic and claims for later services will deny. In Illinois, reactivation is not retroactive, so that gap may never be paid. In New York, you won't be terminated if you filed on time and answered every information request.

Does an ABA Medicaid revalidation notice mean my clinic is under investigation?

No. New York's provider enrollment bureau says revalidation is routine and doesn't single out any provider. ABA is on faster lists because CMS asked states to move first on higher-risk service types. Treat the deadline as urgent, not as an accusation.