Telehealth Credentialing: What Healthcare Businesses Need to Know

Telehealth credentialing has evolved from a basic add-on modifier into an entirely distinct insurance credentialing category. The pandemic-era assumption that telehealth was simply in-person care delivered through a screen and could be credentialed the same way has been definitively replaced by a dedicated regulatory and payer framework with its own requirements, timelines, and consequences for getting it wrong.

CMS made several telehealth rules permanent in January 2026. The NCQA overhauled credentialing standards for the first time in 20 years. The Joint Commission launched a dedicated telehealth accreditation program. And commercial payers including UnitedHealthcare, Anthem, Cigna, BCBS, and Aetna now require telehealth-specific enrollment forms, modality attestations, and documentation that standard in-person credentialing packets do not include.

For healthcare businesses building or scaling telehealth services, credentialing is not a process that happens after everything else is in place. It is the foundation everything else stands on because a provider can be fully licensed in every required state and still be completely unable to bill a single telehealth claim if payer enrollment is incomplete or incorrectly structured. This guide covers the complete credentialing landscape: what it is, how it differs from in-person credentialing, what the process involves in 2026, and what healthcare businesses most commonly get wrong.

What telehealth credentialing is and what it is not

Credentialing, at its most basic, is the process of verifying a provider’s qualifications education, training, licensure, and professional history before they are authorized to see patients and bill for those services. It is the process through which payers, hospitals, and health systems confirm that a provider is who they say they are, is licensed to practice where they claim, and has the clinical background the role requires.

Telehealth credentialing follows the same framework, but adds several layers that standard in-person credentialing does not require:

• Multi-state licensure verification — because care is considered to occur where the patient is physically located, a telehealth provider serving patients in multiple states must have their license verified in every operating state, not just their home state
• Telehealth modality attestation — commercial payers increasingly require documentation of which telehealth modalities (synchronous video, audio-only, asynchronous store-and-forward) the provider will use, with different billing rules applying to each
• Platform and technology verification — payers and regulators want confirmation that the provider uses HIPAA-compliant platforms. (cite index=”17-1″>E-visits using codes 99421 through 99423 now require HIPAA-compliant patient portals or secure messaging systems. Regular email, text messages, and social media do not qualify.
• Place-of-service code accuracy — (cite index=”17-1″>getting place-of-service codes wrong results in claim denials. POS 02 applies when the patient is at a healthcare facility during the telehealth visit; POS 10 applies when the patient is physically at their home. CMS reiterates this distinction in the February 2026 FAQ update.

Important distinction: (cite index=”17-1″>There are two main types of credentialing in healthcare: provider credentialing verifies individual clinical qualifications, and organizational credentialing verifies that an entity meets the standards required to operate and bill. A telehealth business needs both organizational credentialing for the entity and provider credentialing for each individual clinician. Missing either layer creates billing exposure, not just compliance gaps.

The three layers of telehealth credentialing

(cite index=”17-1″>For telemedicine credentialing, three distinct categories all matter: licensure (where patients are located), credentialing with each payer you bill, and privileging if you work through a hospital or health system. Understanding which layer applies to your business model is the starting point for building a credentialing workflow that does not have silent gaps.

Licensure the clinical authorization layer

Before any credentialing can occur, the provider must hold a valid, active license in every state where they see patients. This is the foundational layer that everything else depends on. Without state licensure, payer enrollment cannot be completed, CAQH profiles cannot be verified, and no claim can be legitimately submitted. The patient’s physical location at the time of the encounter determines which state’s license is required — and that location must be documented in the patient record for every telehealth visit.

Payer credentialing the billing authorization layer

Licensure authorizes the provider to practice. Payer credentialing authorizes the provider to bill. These are separate processes, and the timelines are entirely independent. A provider can be licensed and ready to see patients months before a single payer credentialing application is processed. For telehealth businesses that intend to bill insurance, payer credentialing must be initiated well before the practice’s launch date — not afterward.

Privileging the hospital and health system layer

Privileging is specific to providers delivering telehealth services through hospitals, health systems, or Joint Commission-accredited facilities. It is the process by which a facility grants a specific provider the right to perform specific clinical procedures within that organization. The Joint Commission’s 2026 dedicated telehealth accreditation program has formalized privileging requirements for telehealth specifically — a development that matters most for hospital-affiliated telehealth programs and health system-based virtual care initiatives.

CAQH ProView and NPI: the credentialing foundation

Two universal credentials sit at the foundation of every telehealth provider’s billing and credentialing infrastructure — the NPI and the CAQH ProView profile — and both must be correctly established before any payer enrollment can proceed.

National Provider Identifier (NPI)

Every individual provider needs a Type 1 NPI. Every billing entity — the practice, clinic, or telehealth organization — needs a Type 2 NPI. Both appear on claims: the Type 1 NPI identifies the rendering provider who delivered the service; the Type 2 NPI identifies the billing entity submitting the claim. Both must be correctly matched to active, consistent records across NPPES, CAQH, and PECOS — a mismatch between records in any of these systems creates enrollment rejections and claim denials. (cite index=”14-1″>CMS has moved to PECOS 2.0, which uses real-time federal cross-referencing databases to validate provider data as it is entered, penalizing practices that fail to sync their IRS and NPPES records character-for-character.

CAQH ProView

CAQH ProView is the centralized credentialing database used by the majority of commercial payers in the United States. Rather than submitting separate credentialing applications to each payer individually, providers complete and maintain a single CAQH ProView profile that payers pull from during the enrollment process. For telehealth providers, the CAQH profile must:

• List active licenses in every state where the provider sees patients — not just the primary state
• Accurately reflect taxonomy codes that match the provider’s actual specialty and billing scope
• Include malpractice coverage details that explicitly cover telehealth services
• Be re-attested every 120 days — an expired attestation locks payers out of the profile and stalls any ongoing enrollment or re-credentialing

(cite index=”12-1″>Monthly or automated monitoring is becoming standard for multi-state operations. Organizations expanding to 10, 20, or 50 states benefit from outsourcing licensing and credentialing to specialists. For telehealth businesses with providers practicing in multiple states, maintaining consistent and current CAQH records across all operating jurisdictions is an ongoing operational function, not a one-time setup task.

PECOS and Medicare telehealth enrollment in 2026

To bill Medicare for telehealth services, providers must be enrolled through the Provider Enrollment, Chain, and Ownership System (PECOS). (cite index=”14-1″>In 2026, virtual care is no longer governed by temporary pandemic-era waivers. Telehealth credentialing has evolved from a basic “add-on” modifier into an entirely distinct insurance credentialing category. CMS made several telehealth provisions permanent in January 2026, which means the enrollment requirements are now stable — but also fully enforced.

Key Medicare telehealth billing details for 2026:

• NPs bill Medicare Part B at 85% of the physician fee schedule for telehealth services — the same rate as in-person NP services
• Place of service codes POS 02 and POS 10 must be applied correctly on every telehealth claim — incorrect POS codes are among the most common reasons for Medicare telehealth claim denials
• The 2026 PECOS 2.0 system requires IRS and NPPES records to match exactly — any discrepancy between legal business name, tax ID, or provider name across federal databases will stall enrollment or trigger application rejection
• The CMS-855R (Reassignment of Benefits) has been fully merged into the CMS-855I individual practitioner application — (cite index=”14-1″>paper-heavy, separate reassignments have been overhauled, completely merging the old CMS-855R into the core CMS-855I process.

Medicare telehealth prescribing note: (cite index=”11-1″>As of early 2026, the DEA has issued a fourth temporary extension of COVID-era controlled substance prescribing flexibilities while it finalizes a permanent Special Registration framework. Effective March 21, 2025, DEA-registered providers can permanently prescribe certain Schedule III–V addiction treatment medications via telemedicine without a prior in-person visit, provided they review the state PDMP first. The broader Schedule II–V flexibility is temporary through December 31, 2026 — monitor final DEA rulemaking closely.

Commercial payer enrollment and telehealth-specific requirements

(cite index=”15-1″>Commercial insurers — including UnitedHealthcare, Anthem, Cigna, BCBS, Aetna, and Humana — each have their own telehealth credentialing requirements. Many now require telehealth-specific enrollment forms or attestations, documentation of which telehealth modalities the provider will use, and platform compliance verification. These requirements are in addition to standard credentialing packets — and they vary between payers.

The commercial payer credentialing timeline for telehealth is the same as in-person credentialing: typically 2–4 months per payer from application submission to approval. For a new telehealth business intending to bill commercial insurance from launch day, applications must be submitted at least 3–4 months before the first patient encounter is planned.

Critical 2026 payer credentialing points for telehealth businesses:

• (cite index=”15-1″>As of 2026, 44 states plus Washington D.C. have private payer telehealth laws in place — but coverage parity and payment parity are not the same thing. Some states require insurers to pay telehealth claims at the same rate as in-person visits; others only require coverage, not rate equivalency. Know which parity standard applies in each state your patients are located in before setting revenue projections
• Each commercial payer may require a separate payer-specific enrollment form in addition to CAQH — do not assume CAQH profile completion equals completed enrollment with any specific payer
• (cite index=”10-1″>Ensure payer directories show telehealth availability to support access and Network Adequacy Regulations. Payer directory listings must accurately reflect which providers are available for telehealth and which modalities they offer — inaccurate directories create prior authorization issues and patient access barriers
• Multi-state providers must verify that their payer enrollment covers every state where they see patients — enrollment in one state does not automatically cover other states with the same payer

State Medicaid credentialing for telehealth

Medicaid credentialing is entirely separate from Medicare PECOS enrollment and from commercial payer credentialing — each state administers its own Medicaid program with its own provider enrollment process, timeline, and telehealth-specific requirements. For telehealth businesses serving Medicaid-eligible patients in multiple states, this creates a separate enrollment workflow for every operating state.

(cite index=”10-1″>Complete Medicaid credentialing and enrollment in each state’s Medicaid program and, when applicable, separate credentialing with managed care plans. Maintain accurate NPIs, taxonomy codes, service locations including telehealth, and delegation and privileging documentation.

For telehealth-specific Medicaid considerations:

• Most states now have Medicaid telehealth parity policies that require coverage of telehealth services — but the specific covered modalities, eligible provider types, and billing codes vary by state
• Some states require separate enrollment or attestation for Medicaid managed care organizations (MCOs) beyond the base Medicaid fee-for-service enrollment
• Prior authorization requirements for telehealth services differ by state and by service type — verify current requirements in each Medicaid program before billing telehealth services to Medicaid patients

Physician oversight credentials as part of the credentialing stack

For telehealth businesses that employ NPs, PAs, or other non-physician providers, the credentialing stack includes one layer that most credentialing guides omit entirely: physician oversight documentation. This is not a payer credentialing requirement — it is a state regulatory compliance requirement that enables the NP’s or PA’s clinical scope to function lawfully.

The physician oversight credentials that belong in your telehealth credentialing infrastructure:

• Medical director agreement — a written agreement between the telehealth entity and a state-licensed physician defining the physician’s clinical governance responsibilities. The medical director must hold an active license in every state where the telehealth business operates
• Collaboration or supervision agreements — individual agreements for each NP and PA, filed with the relevant state board, defining their scope of practice, prescriptive authority, and physician oversight relationship
• Standing orders — written physician directives authorizing specific clinical tasks by non-physician providers. Without current, physician-signed standing orders, NPs and PAs may lack documented authorization for the services they perform

These physician oversight credentials intersect with payer credentialing in an important practical way: payers conducting credentialing reviews for NPs and PAs in reduced or restricted practice states often verify that collaboration documentation is in place. An NP whose payer credentialing application cannot demonstrate a current collaboration agreement in a state that requires one may be denied or delayed regardless of their clinical qualifications.

LocumTele’s medical director oversight service and provider staffing network include both the physician oversight documentation layer and the credentialed provider infrastructure — so telehealth businesses do not face the situation where providers are ready but the physician credentials needed to support their payer enrollment are missing.

Related reading from LocumTele

• Do Nurse Practitioners Have NPI Numbers? — NPI, taxonomy codes, and credentialing guide
• Do You Need a Medical Director for a Telehealth Business?
• Provider Staffing & Networks — licensed and credentialed NPs, PAs, and MDs across all 51 states

Frequently asked questions

Q.1. What is telehealth credentialing?

Telehealth credentialing is the process of verifying a provider’s qualifications education, training, licensure, and professional history and enrolling them with payers so they can legally deliver and bill for telehealth services. In 2026, it encompasses multi-state licensure verification, CAQH ProView profile maintenance, Medicare PECOS enrollment, commercial payer credentialing with telehealth-specific attestations, and Medicaid enrollment in each operating state. It has evolved into a distinct credentialing category separate from standard in-person credentialing.

Q.2. How long does telehealth credentialing take?

Medicare PECOS enrollment typically takes 1.5–3 months. Commercial payer credentialing takes 2–4 months per payer from application submission to approval. State Medicaid enrollment timelines vary by state. Multi-state licensing timelines range from 30–60 days for IMLC-participating states to 4–9 months for California. Because these timelines run in parallel, a new telehealth business should begin all credentialing processes simultaneously at least 4–6 months before the intended launch date.

Q.3. What is CAQH and does every telehealth provider need one?

CAQH ProView is the centralized credentialing database used by most commercial payers. Providers complete a single CAQH profile that payers access during enrolment eliminating the need to submit separate credentialing packets to each payer individually. Most commercial payer credentialing processes in 2026 require an active CAQH profile. The profile must be re-attested every 120 days; expired attestations block payers from accessing provider data and stall enrolment and re-credentialing.

Q.4. Can a provider see telehealth patients while credentialing is in progress?

A licensed provider can legally see patients during the credentialing process — but they cannot bill payers for those services until enrollment is complete. Some telehealth businesses operate on a self-pay or direct-pay model during the credentialing window, then switch to insurance billing once enrollment is approved. Others use a provisional or locums arrangement that allows billing under a credentialed provider’s NPI while the new provider’s enrollment is pending — verify payer policies on provisional billing carefully before using this approach.