Why Credentialing Delays Happen and How to Prevent Them
Provider credentialing is the work of proving a clinician is qualified to treat patients and bill a specific payer. When that work stalls, new providers wait, schedules stay thin, and claims can sit or come back unpaid. The delay is rarely one dramatic failure. It is usually missing paperwork, a mismatched name, or a payer process that no one is watching.
This article explains what credentialing actually is, how it differs from Medicare enrollment and from getting an NPI, why applications stall, and how a practice can keep the process moving without inventing timelines that payers never promised.
Credentialing, enrollment, and NPI are not the same thing
Credentialing is the payer or network process of verifying a provider's qualifications. NCQA describes it as establishing that licensed clinicians are qualified by assessing their background and legitimacy to provide care. NCQA Credentialing Accreditation looks at full-scope credentialing, including primary-source verification and committee review. Credentialing Certification looks at organizations that verify credentials from the primary source, a recognized source, or a contracted agent of the primary source.
Medicare enrollment is different. Physicians and other practitioners enroll in Medicare through PECOS or a paper CMS-855 application so they can bill Medicare for covered services. CMS publishes that process on its Provider Enrollment and Certification pages and in PECOS guidance.
An NPI is different again. CMS requires an active National Provider Identifier before a clinician uses Internet-based PECOS. That NPI comes from the National Plan and Provider Enumeration System, NPPES, not from a commercial payer's credentialing committee. A payer contract does not issue the NPI. Confusing those three steps is one reason practices think a provider is ready to bill when one piece is still open.
Why applications stall
CMS has documented the same delay pattern for years: incomplete files, missing documents, missing or invalid signatures, wrong contractor, and slow responses when the contractor asks for more information.
A September 2017 CMS provider-enrollment session listed common PECOS and paper-application gaps: IRS documents, the CMS-588 electronic funds transfer form, a voided check or bank letter, education documents, missing fields, wrong signatures, the application fee, and sending the file to the wrong Medicare Administrative Contractor. The same session said contractors send a development request when data is missing or the certification statement is invalid, and that the provider or supplier then has 30 days to respond completely. If that window passes, the contractor can reject the application.
Commercial payer credentialing has its own packet, but the operational lesson is the same. One missing license copy, an old address, or a name that does not match NPPES can stop the file. Busy clinicians delay document collection. If no one owns follow-up, the application sits.
Do not treat a generic commercial timeline as a fact. Payer processes vary. Some use electronic verification. Others still move files by hand. A practice that assumes every plan finishes in a fixed number of days will miss the file that did not.
What CMS has actually published about processing time
CMS publishes contractor processing standards for Medicare enrollment in the Program Integrity Manual. Those standards have changed over time and differ by application type and by whether the file needs development, a site visit, or fingerprinting. They are Medicare contractor standards for complete files, not a promise that a commercial plan will finish in a set number of days.
CMS also warns that an internet PECOS file does not move until the contractor has the signed certification statement and required documents. The effective filing date in CMS PECOS guidance is the date the contractor receives the signed certification statement tied to the internet submission.
If you cite a number in staff training, cite the current CMS document and say what it covers. Do not turn a Medicare contractor standard into a marketing claim that Matrix or any payer will finish credentialing on a fixed clock.
What NCQA has actually published
NCQA's credentialing programs exist to make verification consistent and to protect patients. On August 7, 2024, NCQA announced 2025 Credentialing Product Suite updates. Those updates include a move toward a single credentialing program, an interim survey option, and shorter verification timeframes so organizations work with more current data. NCQA said the original timeframe was built for manual primary-source work, and that technology and approved aggregated sources now make faster verification possible.
NCQA did not, in that public announcement, publish a commercial payer approval clock that a practice can use as its own SLA. Use NCQA for the principle: verify from primary sources, keep data current, and treat credentialing as an ongoing quality process. Do not invent a new day-count and attribute it to NCQA.
As of October 1, 2026, NCQA's public credentialing page also points to later 2027 Credentialing and Provider Network resources for surveys with a start date of July 1, 2027 through June 30, 2028. Standards move. Recheck the current NCQA page before you train staff on a survey year.
How delays show up in the revenue cycle
A provider can have an NPI and still be unable to bill a given plan until that plan finishes its own credentialing or enrollment steps. Claims sent before that work is done can be denied, delayed, or paid at the wrong rate, depending on the payer's rules and how the practice bills.
Many practices wait to fill the new provider's schedule until the main plans are complete. That protects patients from a visit that cannot be billed, but it also leaves appointment slots empty. Billing staff then spend time on preventable follow-up instead of working denials that actually need investigation.
None of that requires a made-up dollar figure. The operational risk is enough: unpaid visits, thin schedules, and a provider who cannot work at full capacity.
A workflow that prevents avoidable delay
Give one person ownership. That person tracks every open file, follows up with the clinician and the payer, and keeps a simple log: payer, date submitted, what is still missing, last contact, and next follow-up.
Collect documents during hiring, not on the first clinic day. Ask for the current license, DEA if needed, education, malpractice face sheet, work history, and any final adverse-action records. Check that the legal name, NPI, and practice address match NPPES and the IRS records you will send to payers.
Confirm each major payer's packet before you submit. Some accept a standard application. Some require their own form. Medicare enrollment belongs in PECOS or the correct CMS-855, sent to the correct contractor, with the signed certification statement and supporting documents.
Respond quickly when a payer or contractor asks for more information. CMS's 2017 enrollment session treated the 30-day development window as a hard stop that can end in rejection. Commercial plans may use different clocks. The habit is the same: answer completely the first time.
Do not invent a 30-day or 45-day internal buffer and present it as a payer rule. Ask the payer what it requires, then give your team enough lead time for that payer. Lead time should reflect the plan in front of you, not a number copied from a blog.
Keep credentials current after the first approval
Licenses, DEA registrations, malpractice policies, and recredentialing cycles expire on different dates. A lapse can stop claims even after the original approval. Keep a renewal calendar for each provider and each plan. Review demographic data when a provider moves, adds a location, or changes a hospital affiliation.
NCQA's 2024 update is a reminder that verification data goes stale. Shorter verification windows exist because credentials change. A practice that files the first application and then ignores renewals will recreate the same delay later.
What to do next
Audit a small set of active providers against your top plans. Confirm each provider is current, and note any upcoming expirations. Fix missing ownership, missing packets, and mismatched NPI or address data before you hire the next clinician.
If credentialing gaps are already showing up as unpaid claims or delayed new-provider starts, look at the revenue cycle around those files. Get a Free A/R & Denial Snapshot at https://snapshot.matrixbill.com.
Sources
CMS, Provider Enrollment and Certification. https://www.cms.gov/medicare/provider-enrollment-and-certification Accessed October 1, 2026.
CMS, Medicare Program Integrity Manual, Chapter 10, Medicare Enrollment, Rev. 13717, issued July 8, 2026. https://www.cms.gov/Regulations-and-Guidance/Guidance/Manuals/Downloads/pim83c10.pdf Accessed October 2, 2026.
CMS, Internet-based PECOS Getting Started, July 20, 2010. https://www.cms.gov/medicare/provider-enrollment-and-certification/medicareprovidersupenroll/downloads/gettingstarted.pdf
CMS, Avoiding Processing Delays, Steve Manning and Marian Love, September 2017. https://www.cms.gov/Medicare/Provider-Enrollment-and-Certification/MedicareProviderSupEnroll/Downloads/Avoid_Processing_Delays.pdf
NPPES National Plan and Provider Enumeration System. https://nppes.cms.hhs.gov Accessed October 1, 2026.
NCQA, Credentialing Accreditation and Certification Programs. https://www.ncqa.org/programs/health-plans/credentialing/ Accessed October 1, 2026.
NCQA, NCQA Updates 2025 Credentialing Product Suite, August 7, 2024. https://www.ncqa.org/news/ncqa-updates-2025-credentialing-product-suite/
