Medicaid revalidation and renewal cycles across states.
Getting enrolled is not the end of the work. State Medicaid programmes require periodic revalidation on a federally-bounded cycle, and every managed care plan a practice is credentialed with recredentials separately, on its own schedule. Miss either one and the risk isn't a warning — it's deactivation, and deactivation at the state level can cascade into every plan built on top of it.
Key takeaways
- State revalidation runs on a federally-bounded cycle — five years is the maximum, but states vary in exactly how they schedule and notify within that ceiling.
- MCO recredentialing is a separate clock, commonly every two to three years and set independently by each plan.
- A lapsed state enrollment can cascade. Every MCO credentialing decision was built on top of it, so losing it can jeopardise plan standing too.
- Notices are easy to miss. They arrive by mail or portal message centre, both of which assume the practice's contact details are current.
Two revalidation clocks, not one
State Medicaid revalidation is governed by a federal rule that caps the cycle at five years, meaning a state cannot go longer than that before requiring providers to revalidate — but states are free to revalidate more often within that ceiling, and some do, particularly for provider types the state has classified at a higher screening risk. The practical result is that "five years" is a useful planning assumption, not a guarantee for every provider in every state; the only way to know your actual date is to check it with the specific state agency rather than assume the federal maximum applies uniformly.
Managed care recredentialing runs on an entirely separate clock, set by each individual plan rather than by the state or by federal rule, and commonly falls somewhere in a two-to-three-year range depending on the plan — though this, too, should be confirmed per plan rather than assumed. A practice credentialed with a state and four MCOs is realistically tracking five different dates, not one, and none of them are guaranteed to land anywhere near each other.
| State revalidation | MCO recredentialing | |
|---|---|---|
| Set by | State Medicaid agency, within a federal five-year maximum cycle | The individual managed care plan, commonly every two to three years |
| Notice method | Typically mail or the state portal's message centre | Typically the plan's provider portal or a direct communication to the credentialing contact on file |
| Consequence of a miss | Deactivation of the state Medicaid ID; claims stop paying | Termination from the plan's network; claims for that plan's members deny as out-of-network |
| Reinstatement | May require a fresh application rather than simply the overdue revalidation | May require reapplying from scratch through the plan's standard credentialing process |
What a lapse actually does, and why it cascades
Missing a state revalidation deadline doesn't produce a warning claim or a reduced payment — it deactivates the state Medicaid provider ID, and claims for dates of service after deactivation reject outright rather than pending or paying at a reduced rate. That alone is disruptive. What makes it worse is that every managed care plan's credentialing decision for that provider was built on the assumption of an active, valid state enrollment underneath it; a deactivation at the state level can put standing with every one of those plans at risk simultaneously, turning one missed deadline into a multi-front problem rather than a contained one.
The reason this happens more than it should is almost always the same: notices go to an address, an email, or a portal message centre tied to whoever was the administrative contact when the practice originally enrolled, and practices change staff, change addresses, and change EHR or billing vendors without always updating that contact on every state and plan record it appears on. A revalidation notice sent correctly to an outdated contact is, from the practice's perspective, a notice that was never sent at all.
How to track it without losing track
It's also worth building the review into whatever cadence the practice already uses for credentialing generally, rather than inventing a separate process just for revalidation. A quarterly pass through every active state enrollment and every active MCO contract — checking each one's next due date against today's date — catches an approaching deadline early enough to act on it, and it doubles as a useful check on whether every provider and location is still accurately reflected in each system, which drifts over time even without a revalidation event forcing the question.
- 1Record every date at enrollment, not later. The moment a state or plan approval comes through, log the revalidation or recredentialing date rather than waiting for a reminder notice that may not arrive.
- 2Keep administrative contact information current everywhere. Update the practice's contact on file with the state and with every MCO whenever staff or address changes, not just internally.
- 3Set an internal reminder well ahead of the actual deadline. A 90-day lead gives enough runway to gather updated documents and resolve any surprise, such as a lapsed malpractice policy, before it becomes a missed deadline.
- 4Treat every provider and every plan as its own line item. A shared spreadsheet or system that tracks state and plan dates per provider avoids the situation where one provider's revalidation is remembered and another's is not.
Do and don't
- Log the revalidation date the moment enrollment is approved, not when a reminder arrives.
- Keep administrative contact details current with the state and with every MCO.
- Set an internal reminder at least 90 days ahead of every known deadline.
- Confirm each MCO's own recredentialing cycle rather than assuming it mirrors the state's.
- Don't assume a five-year cycle applies uniformly; some states and provider types revalidate more often.
- Don't rely on a mailed notice reaching an address nobody checks anymore.
- Don't treat state and MCO revalidation as the same clock — they're independent.
- Don't wait until a claim rejects to discover enrollment was deactivated; check status proactively.
Tracking revalidation dates across states and plans manually?
We centralise every state and MCO revalidation date across your whole provider roster and complete the renewal before it becomes a deactivation risk.
Frequently asked questions
How often do we have to revalidate Medicaid enrollment?
Federal rule sets a five-year maximum cycle for state Medicaid revalidation, but states vary in how they schedule and notify it within that ceiling, and a state can require revalidation more frequently for specific provider types. MCO recredentialing runs on a separate cycle set by the plan, commonly every two to three years, so a single practice can have several different revalidation dates in play across its state enrollment and its various plan contracts. Confirm the specific date for each with the state and each plan rather than assuming a uniform schedule.
What happens if we miss a revalidation deadline?
State Medicaid enrollment can be deactivated, which stops claims from paying immediately and can require a fresh application rather than simply the overdue revalidation to reinstate. Because MCO credentialing was built on top of the state enrollment, a deactivation can also jeopardize standing with managed care plans that relied on that state ID, turning a single missed deadline into a multi-front problem rather than an isolated one.
Do you track Medicaid revalidation dates for us?
Yes. We maintain revalidation and recredentialing dates centrally across every state and every MCO a practice is enrolled with, flag them well ahead of the deadline, and complete the renewal before it becomes a deactivation risk rather than reacting to a notice that arrived late.
Confirm before you rely on this. Payer contact details, portal URLs, required documents and credentialing timelines change without notice, and payers periodically rename, merge or migrate their systems. The process information on this page reflects standard industry practice as of August 2026 and is provided for general education — verify current requirements directly with the payer before submitting an application.