Telehealth Credentialing Across State Lines: Licenses, Payers and 2026 Rules

Telehealth credentialing across state lines starts with one rule: the clinician needs legal authority to practice in the state where the patient is located during the visit. That authority can be a full license, a compact license or privilege, or a state telehealth registration. Then every payer you bill has to credential or enroll the clinician, usually state by state, before claims will pay.

Where does a telehealth clinician need to be licensed?

In the state where the patient is physically located at the time of the visit, not where the clinician lives. The Federation of State Medical Boards' telemedicine policy, adopted in April 2022, says the practice of medicine occurs where the patient is located, so the physician must be licensed or otherwise authorized by that state's board. Treat that as the default for every profession on your roster until a board rule or a compact says otherwise.

The exceptions FSMB describes are narrow: physician-to-physician consultations, screening for complex referrals, follow-up for established patients who are temporarily away or who traveled for specialty treatment, and clinical trials. A new condition calls for a local referral or a license in that state. FSMB's policy is guidance for state boards, not law, so confirm the exception in the patient's state before anyone relies on it.

Florida, for one, offers a registration instead of a full license. Its out-of-state telehealth provider registration lets a practitioner with an active, unencumbered license from another state treat Florida patients by telehealth, provided the practitioner names a registered agent in Florida, carries liability coverage or financial responsibility at Florida's required level, and does not open a Florida office or see Florida patients in person.

Which interstate licensure compacts are issuing licenses or privileges in 2026?

Three compacts work for telehealth today: the Interstate Medical Licensure Compact for physicians, the Nurse Licensure Compact for RNs and LPN/VNs, and PSYPACT for psychologists. The Counseling Compact is live in only nine states, and the Social Work and PA compacts have not issued anything yet. Because each interstate licensure compact covers one profession, telemedicine licensing across states still needs a plan per discipline; the table shows each compact's status in September 2026, from its own site.

The IMLC is a faster road to ordinary state licenses, not a license of its own: per the IMLCC FAQ, a physician files one application and receives a separate license from each state selected, each renewed separately. Alaska, the 44th member state as of June 2026, is still implementing along with Arkansas, New Mexico and Rhode Island; our IMLC guide covers eligibility and timing.

The Nurse Licensure Compact pertains to RN and LPN/VN licenses only. Nurse practitioners and other APRNs need an individual APRN license in each state where they practice, so budget NP licensure state by state even when your RNs are covered. The NLC overview explains how the multistate license works.

PSYPACT has accepted applications since July 1, 2020, and psychologists use its Authority to Practice Interjurisdictional Telepsychology (APIT) for remote care. Alaska and Iowa passed the compact in mid-2026 but are not yet on its legislation page, so confirm a new state is in effect before you schedule patients there; PSYPACT explained walks through the application.

The Counseling Compact is going live in stages. Only counselors licensed in and living in Arkansas, Arizona, Georgia, Indiana, Louisiana, Minnesota, Ohio, Tennessee or Wyoming can get privileges so far, and only for those same states; our behavioral health credentialing guide covers the rest of a counseling group's file.

The Social Work Licensure Compact estimates its data system for spring 2027, and AAPA reports that PAs cannot yet apply for privileges under the PA Licensure Compact, with the commission expecting that by early to mid-2027. Until then, social workers and PAs need a license in every patient state.

Health plans are adjusting too. NCQA clarified in November 2025 that a plan may accept compact licensure when the license was primary source verified in the practitioner's home state, and a March 2026 policy change tells accredited plans to monitor license sanctions and limitations in every state where a practitioner practices, even outside the plan's service area. A discipline issue in your smallest state will reach every plan; our NCQA 2025 changes guide covers the monitoring rules.

Do you need to enroll with payers in every state?

For Medicaid, yes. Federal rules at 42 CFR 455.410 require each state Medicaid agency to enroll the physicians and other professionals who order, refer or provide services under its plan. A state may rely on screening already done by Medicare contractors or another state's Medicaid program, but you still enroll in each state whose Medicaid patients you treat.

Medicaid managed care does not get you around this. Under 42 CFR 438.602(b), the state must screen and enroll every network provider of its managed care plans. A plan can sign you while enrollment is pending for up to 120 days, then must terminate you if the state has not enrolled you. Our Medicaid enrollment guide explains why each state's process differs.

Commercial plans credential against every state where you practice. UnitedHealthcare's credentialing plan for 2025 to 2027, for example, verifies a current license without material restrictions in all states where the applicant practices and a DEA or CDS certificate in each state where the applicant intends to practice. It also lists telemedicine practitioners with an independent relationship among those who must be credentialed.

Blue plans work differently because of the BlueCard program. Blue Cross of Idaho's claims filing policy, revised in March 2026, sends telehealth claims to the provider's local Blue plan and gives an example: an Idaho patient seen by a provider who lives in Texas is billed to the Texas plan. Under that rule the Blue contract that matters is the one where the clinician sits, while the license still has to match the patient's state. Confirm the rule with each Blue plan you bill before you hire in a new state.

What changed for Medicare telehealth in 2026?

The Consolidated Appropriations Act, 2026, signed February 3, 2026, extended Medicare's telehealth flexibilities through December 31, 2027. CMS's telehealth FAQ, updated February 26, 2026, confirms that until then beneficiaries can receive telehealth anywhere in the United States, and audio-only visits in the home remain covered.

Starting January 1, 2028, the old limits return for most services. Outside behavioral health, patients will generally need to be in a rural area and in a medical facility, and physical therapists, occupational therapists, speech-language pathologists and audiologists can no longer furnish Medicare telehealth services.

Behavioral health keeps home-based telehealth, but an in-person rule starts after December 31, 2027. A patient who begins after that date needs an in-person, non-telehealth visit within 6 months before the first mental health telehealth service, then one within 12 months of each telehealth service, with limited exceptions. CMS says patients who began earlier count as established and need one in-person visit every 12 months, which a same-specialty colleague in the same group can provide if the treating clinician is unavailable.

The home address question is settled for now. The same FAQ says a clinician who works from home but has a physical practice location does not report the home address, and bills from the practice location as if the visit were in person. A virtual-only clinician whose only location is home must enroll that address, and can mark it "Home office for administrative/telehealth use only" so the street address stays off Care Compare.

Can clinicians prescribe controlled substances by telemedicine after 2026?

Through December 31, 2026, yes; after that the answer is not settled. DEA and HHS issued a fourth temporary extension, effective January 1 through December 31, 2026, that lets DEA-registered practitioners prescribe Schedule II through V controlled substances by audio-video telemedicine without a prior in-person evaluation. Schedule III through V narcotic medications for opioid use disorder can also be prescribed through audio-only visits.

The permanent rule is still pending. DEA proposed a special registration for telemedicine in January 2025, and its regulatory agenda entry lists final action for November 2026, but no final rule had been published as of late September 2026. Two narrower final rules, one for buprenorphine treatment and one for VA patients, took effect December 31, 2025.

Registration location matters as well. DEA's telemedicine guidance says the Controlled Substances Act generally requires a DEA registration in the state where the patient is located, subject to limited exceptions. If controlled substances are part of your service line, list every prescriber's patient states and DEA registrations now, well before the December 31, 2026 end date.

How does credentialing by proxy work for hospital telemedicine?

A hospital that receives telemedicine services can let its medical staff rely on the credentialing and privileging decisions of the distant-site hospital or telemedicine entity instead of running its own full process. The Medicare Conditions of Participation allow this credentialing by proxy at 42 CFR 482.22(a)(3) and (a)(4), with governing body duties in 42 CFR 482.12(a)(8), (a)(9) and (e). Critical access hospitals have a parallel rule at 42 CFR 485.616(c).

The written agreement has to carry specific terms. A distant-site hospital must participate in Medicare, the practitioner must be privileged there with a current privilege list sent over, and the practitioner must hold a license issued or recognized by the state where the receiving hospital sits. The receiving hospital reviews the practitioner's performance and sends back, at a minimum, adverse events and complaints. A telemedicine company acting as the distant site must also run a credentialing process that meets the hospital standards in 482.12(a)(1) through (a)(7) and 482.22(a)(1) through (a)(2).

The Joint Commission mirrors these terms at MS.20.01.01 and LD.13.03.03 in its 2026 hospital manual, per its Medicare crosswalk, so check that your medical staff policies cite the current numbers. Its Telehealth Accreditation, effective July 1, 2024, is open to organizations that deliver care only by telehealth and to those serving another organization's patients under written agreements. For how the two processes differ, see credentialing vs. privileging.

Does malpractice coverage have to follow the patient's state?

Plan on it, because some states tie coverage to the license itself. Kansas is a clear example: its Health Care Stabilization Fund says nonresident providers covered by its law, physicians among them, must carry basic professional liability coverage of at least $500,000 per claim and $1,500,000 annual aggregate while they hold an active Kansas license, plus a fund surcharge based on their share of Kansas practice. A clinician who stops practicing there has to convert the license to inactive to stop owing both.

Florida's telehealth registration, described above, requires coverage or financial responsibility at Florida's level for care to Florida patients, and payers ask for proof as well; UnitedHealthcare's credentialing FAQ lists an active malpractice policy with a face sheet. Ask your carrier to confirm in writing which states the policy covers for telehealth, and add each new state before the first visit there.

What does telehealth credentialing require in each state?

Eight items, and each is tied to a specific state: some follow the patient and others follow the clinician. Use this as the per-state checklist for credentialing for telehealth providers, one row per clinician per state, and watch the middle column closely.

How do you keep a multi-state telehealth roster in compliance?

Track each clinician by state, not by license. A psychiatrist with nine state licenses, nine DEA registrations and fourteen payer contracts is one person but dozens of expiration dates, and a missed one shows up as denied claims weeks later.

• One row per clinician per state. Record the license or privilege number and expiration, any DEA registration, the Medicaid ID, each plan's effective date and the malpractice confirmation.
• Scheduling tied to that row. Do not let the scheduling system book a patient in a state until the license and that payer's enrollment are both effective, and capture the patient's location at every visit.
• Monitoring in every licensed state. Accredited plans now watch license actions in all of them, so you should see a problem before they do.
• The 2026 and 2027 deadlines on the calendar. Give December 31, 2026 (DEA) and December 31, 2027 (Medicare) named owners and a review date now.

If your team cannot keep that many rows current, get help before the next renewal cycle rather than after the first denial. CredTek is a team of credentialing specialists that follows up with providers, payers and boards on a fixed schedule and gives clients a portal to see every provider's status.