A credentialing application denied or stuck in pending usually comes down to a few fixable problems: a lapsed CAQH profile, a missing or expired document, an unexplained work gap, data that doesn't match across systems, or a payer request nobody answered. The fix is to correct the problem where the data lives, then follow up on a fixed schedule until the payer puts an effective date in writing.
Why is credentialing taking so long?
Most credentialing delays happen after submission, while a file waits on a payer or a verification. In a November 4, 2025 MGMA Stat poll with 131 responses, 65% of medical groups said their credentialing, recredentialing and reappointment files were on time, while 32% reported a backlog (23%), a CVO delay (3%) or a slip into the first quarter (6%).
Respondents blamed payer enrollment delays and slow references and board verifications first, worsened by thin staffing and slow vendor turnaround. Groups that stayed current credited enough staff, a clear checklist, some automation and written turnaround targets for their CVOs.
Outright denials are different: the payer either doesn't need more providers like yours in that area or found the file short of a written criterion. UnitedHealthcare's 2025 to 2027 credentialing plan, for example, considers applicants when it needs more practitioners or has another business need they would meet, and it can decline anyone it denied or terminated in the prior 24 months for reasons other than network need.
Why was my credentialing application denied or stalled?
Usually for one of the ten reasons below. Check them in order, because the first few take minutes to rule out.
The CAQH profile lapsed, or the payer can't see it
CAQH (now DataSpring) runs the Provider Data Portal, formerly called CAQH ProView, and its provider user guide requires re-attestation every 120 days (180 in Illinois). Until the provider attests, authorized plans can't see updates, and a missed deadline turns the profile Expired the next day. An expired malpractice or license record also blocks re-attestation until it's updated. Check the status and the Authorize tab, since an unauthorized plan can't see the profile at all, and see the 120-day attestation cycle for the routine.
A required document is missing or expired
The usual culprits are the malpractice certificate of insurance (COI), the DEA registration and board certification. UnitedHealthcare's plan, for example, can require a copy of the current certificate of coverage, primary-source verifies any claimed board certification, and wants a DEA or state controlled substance certificate in each state where the provider will practice, or, while a DEA is pending, an agreement with a participating practitioner to prescribe. The DEA's own registration guidance requires a separate registration in each state with a practice location, so keep every expiration on one calendar.
The work history has an unexplained gap
UnitedHealthcare collects five years of work history and wants any gap longer than six months explained to its committee's satisfaction. CAQH's guide is stricter, generally treating a break of three months or more as a gap and blocking attestation until each one is explained. Get a signed, dated statement with the exact dates and reason during onboarding, before any payer asks.
Names and numbers don't match across systems
The same facts live in NPPES, CAQH, the application and the W-9, and a mismatch in legal name, NPI, tax ID, address or taxonomy stops the file. CAQH flags an individual NPI whose NPPES name doesn't match, Medicare's Program Integrity Manual requires the legal business name to match exactly between NPPES and PECOS and to match the IRS CP-575, and the IRS Form W-9 requires the TIN to match the name on line 1. Fix NPPES first, since CAQH and Medicare check against it (and 45 CFR 162.410 requires updates there within 30 days of a change), then CAQH, then the application, working from one sheet of each provider's exact identifiers.
Nobody owns the follow-up, or the provider goes quiet
Payers send requests for missing items and then wait, and the MGMA respondents named provider responsiveness and missing documents among their main stall points. Give each application one owner and check every pending payer on a fixed cycle, such as every 10 business days. Send providers a single list of what's missing with a due date, and watch signature dates, since CAQH's guide rejects an authorization form signed more than 120 days earlier.
The panel is closed
A closed panel reflects the plan's view of its network needs, so fixing the application won't change the answer. Get the decision in writing, ask whether it covers one county or the whole plan, and ask what would justify an exception, such as a specialty or access gap. The guide to closed insurance panels covers appeals and reapplication.
Hospital privileges or a coverage arrangement are missing
UnitedHealthcare requires privileges at a participating hospital, or an arrangement with a participating practitioner to admit and cover the provider's patients, when it decides the practice needs them. If the provider will never admit, say so on the application. If they will, get the coverage agreement signed before you submit.
Supervision paperwork is missing for a pre-licensed clinician
Payers differ on associate-level clinicians: UnitedHealthcare's plan says credentialing is generally not required for professionals who may practice only under another practitioner's direct supervision, so ask each payer how it handles them. Programs that do recognize them want proof, and Virginia's Medicaid rules don't treat a counseling resident as a resident until the Board of Counseling has approved, in writing, the supervision for specific duties at a specific site. Keep the agreement, the supervisor's license and any board approval on file, and see behavioral health supervision tracking for the hours side.
A Medicare development request went unanswered
When a Medicare Administrative Contractor (MAC) needs more information, it sends a development request, which the Program Integrity Manual says can arrive by letter, fax, email or phone. Under 42 CFR 424.525, the provider has 30 calendar days to respond in full unless CMS extends the period because they're actively working the issue; otherwise the MAC can reject the application, with no appeal. Since the effective date follows the filing date of the approved application (42 CFR 424.520(d)), refiling pushes the first billable date later, so name a contact who reads mail daily and check status in PECOS, which CMS says works with or without logging in.
A state Medicaid step was missed
Under 42 CFR 438.602(b), states must screen and enroll every network provider of their Medicaid managed care plans, and a plan can contract with a provider pending that enrollment for up to 120 days, then must terminate them if the state hasn't enrolled them. The Texas Medicaid Provider Procedures Manual spells out the order: Texas Medicaid first, then each health plan.
States must also revalidate every provider at least every five years (42 CFR 455.414), and Texas set up a process in 2025 to backdate re-enrollment up to 365 days for providers disenrolled after missing revalidation between November 1, 2023 and December 12, 2024. Track state dates separately, since Medicaid enrollment differs by state.
How can you tell which problem is holding up the file?
Match what you're seeing to the likely cause. Each row pairs a fix for today with a habit that prevents a repeat.
| Cause | How to spot it | Fix it now | Prevent it |
|---|---|---|---|
| CAQH lapsed or not authorized | Expired status, or the plan missing from the Authorize tab | Update records, re-attest, authorize the plan | Reminders 30 days before each deadline |
| Missing or expired document | Payer request, or an expired date in CAQH | Send the current COI, DEA or board certificate | One expirables calendar |
| Work history gap | Gap question or an open CAQH gap record | Signed, dated explanation | Collect it at onboarding |
| Data mismatch | NPI name error, or legal name or TIN questions | Fix NPPES, then CAQH and the application | One source sheet per provider |
| No follow-up | Nobody knows the status | Call, log the reference number, get a date | A named owner and fixed cycle |
| Provider not responding | Requests past due | One list with a deadline, then their manager | Documents before the start date |
| Closed panel | Denial citing network need | Written reason and an exception request | Check panel status first |
| No privileges or coverage | Request for an admitting hospital | Privileges or a signed coverage agreement | Settle admitting plans at hiring |
| Supervision documents missing | Request for supervisor details | Agreement, supervisor license, any board approval | Update when supervisor or site changes |
| Medicare development request | Letter, fax, email or call from the MAC | Full response within 30 calendar days | A contact who reads mail daily |
| State Medicaid step missed | No state Medicaid ID, or a revalidation notice | Finish state enrollment or revalidation | Track state dates separately |
What should you do when insurance credentialing is still pending at 60 or 90 days?
At 60 days without a decision, call and get specifics; at 90, escalate in writing. Have the submission date, the payer's case number, the provider's NPI and CAQH ID, and earlier call notes in front of you.
At 60 days, ask direct questions. Call the plan's credentialing or network line and work through this list.
- Is the application complete? If not, get the exact missing items and where to send them.
- Can they see the CAQH profile? Confirm the plan is authorized and the attestation is current.
- Where is the file? Ask whether it's in verification, committee or contracting, and when the committee meets next.
- What effective date will the contract carry? Ask whether it can be earlier; effective dates and retro billing explains why that matters.
Log the date, the representative's name, the call reference number and the next step. For Medicare, call the MAC's enrollment line with the PECOS Web Tracking ID or the MAC's document control number, which MACs can print on their letters, and ask whether a development request went out, when and to whom.
Know the benchmarks. The Program Integrity Manual tells MACs to process 95% of PECOS initial applications that need development within 50 days and all of them within 85. New York gives plans under its Public Health Law 60 days from a complete application to say whether a professional is credentialed, Maine makes carriers that can't decide in 60 days apply for an extension, and the payer enrollment timelines article compares national plans.
At 90 days, escalate in writing. Send the credentialing manager or your provider relations representative a status request with the call log, asking for a decision date. Also ask whether anything will age out, since UnitedHealthcare's plan requires criteria verified within 120 days of the decision and a signed attestation within 180. If a state deadline has passed, cite it, then go to the state regulator if needed.
If your team can't hold that cadence across every provider and payer, CredTek's credentialing specialists follow up with providers, payers and boards on a fixed schedule. Clients see each provider's status in a portal.
Frequently asked questions
Can you reapply after a credentialing denial?
Usually, but the reason sets the timing. A network-need denial can be revisited when the plan's needs change, so ask when to reapply. UnitedHealthcare's credentialing plan lets it decline applicants it denied or terminated for reasons other than network need within the prior 24 months, so fix the underlying issue first and keep proof that it was fixed.
How long should payer credentialing take before you escalate?
Call at 60 days without a decision and escalate in writing at 90. Medicare contractors are expected to finish every PECOS initial application within 85 days, even ones needing development, so a Medicare file past that point deserves a direct call. New York and Maine both use 60 days from a complete application as a commercial benchmark.
Does an expired CAQH attestation stop credentialing?
It can. CAQH marks a profile Expired the day after the re-attestation deadline, and plans can't see updates until the provider attests again, which is due every 120 days (180 in Illinois). If an expired malpractice or license record is blocking attestation, update it first, then attest and confirm the payer is authorized.
What happens if a Medicare development request is missed?
The contractor can reject the application once 30 calendar days pass without a complete response, unless CMS extends the deadline because the provider is actively working the issue. Rejections can't be appealed, so the provider refiles, and since the effective date follows the approved application's filing date, their first billable Medicare date moves later.
See your own numbers in 60 seconds
CredTek is a team of master credentialers that plugs into your group in 48 hours and follows up with every provider, payer, and licensing board on a fixed schedule until each file is done, with your approval on every submission.
Run the ROI calculator →