CMS Gave All 50 States 30 Days to Submit Medicaid Fraud Plans. Autism Therapy Was Named. \| StreamABA [ ![StreamABA](https://streamaba.com/build/assets/logo-dark-Bta4omRy.svg) ](/) [Home](https://streamaba.com) [Blog](https://streamaba.com/blog) [ Log in ](https://streamaba.com/login) [ Goto the Live Demo ](#get-started) [Home](https://streamaba.com) [Blog](https://streamaba.com/blog) [Log in](https://streamaba.com/login) [ Goto the Live Demo ](#get-started) 1. [Blog](https://streamaba.com/blog) 2. / 3. CMS Gave All 50 States 30 Days to Submit Medicaid Fraud Plans. Autism Therapy Was Named. compliance CMS Gave All 50 States 30 Days to Submit Medicaid Fraud Plans. Autism Therapy Was Named. ========================================================================================== CMS sent 50-state Medicaid provider revalidation letters April 2026 with 30-day deadline. ABA explicitly named as high-risk. States that don't comply face fraud scrutiny. What ABA providers need to do now. 9 min read April 24, 2026 StreamABA Team Share [ ](https://x.com/intent/tweet?url=https%3A%2F%2Fstreamaba.com%2Fblog%2F2026%2F04%2Fcms-50-state-medicaid-revalidation-aba&text=CMS+Gave+All+50+States+30+Days+to+Submit+Medicaid+Fraud+Plans.+Autism+Therapy+Was+Named.) [ ](https://www.linkedin.com/sharing/share-offsite/?url=https%3A%2F%2Fstreamaba.com%2Fblog%2F2026%2F04%2Fcms-50-state-medicaid-revalidation-aba) [ ](https://www.facebook.com/sharer/sharer.php?u=https%3A%2F%2Fstreamaba.com%2Fblog%2F2026%2F04%2Fcms-50-state-medicaid-revalidation-aba) compliance medicaid industry-news state-policy practice-management ![](/images/blog/2026/04/cms-50-state-medicaid-revalidation-aba.jpg) Every Governor Is Getting a Letter. ABA Is in It. ------------------------------------------------- On April 21, 2026, at a Politico health care summit, CMS Administrator Dr. Mehmet Oz announced that his agency is sending letters to the governors and Medicaid directors of all 50 states. The demand: submit a formal plan for revalidating your Medicaid provider enrollment roster, focused on “high-risk areas” of care. Oz named autism therapy — alongside hospice — as a program area where federal authorities have already acted on fraud and questionable billing activity. The announcement includes two hard deadlines: states have **10 days from receipt** to notify CMS they will comply, and **30 days from receipt** to submit a full **two-year provider revalidation strategy**. The threat for non-compliance is explicit. “Failure to commit to the revalidation plan will be considered as we evaluate the likelihood of fraud in each state moving forward,” Oz said. CMS has already demonstrated what “evaluating fraud likelihood” can look like in practice. The agency previously froze **$243 million in Medicaid payments to Minnesota** over fraud concerns — a pre-payment freeze that didn’t require an indictment, a completed audit, or a court order. It required a determination that the risk of improper payments was high enough to justify the hold. For ABA providers, this matters regardless of what state you practice in. --- This Is Different from the OIG Audits and the Congressional Probe ----------------------------------------------------------------- You need to keep three distinct pressure vectors straight, because they operate at different speeds and create different risks for providers. **HHS OIG audit series**: The Office of Inspector General has completed audits of Medicaid ABA payments in Indiana, Wisconsin, Maine, and Colorado. Every single one found improper or potentially improper payments in 100% of sampled claims. These audits are executed state by state, take over a year to complete, and produce findings that recommend federal repayment — but states can and do dispute the recommendations. **House Energy and Commerce Committee probe**: In March 2026, Republican committee leaders sent investigative letters to 10 specific states — California, Colorado, Massachusetts, Maine, Nebraska, New York, Oregon, Pennsylvania, Vermont, and Washington — demanding fraud records from 2021 to the present, with ABA named by program. This is Congressional oversight; it creates political pressure and can feed into legislation. We [covered that probe in detail](/blog/house-energy-commerce-aba-medicaid-probe-10-states). **CMS provider revalidation initiative (this announcement)**: The executive branch agency that actually runs Medicaid — not its inspector general, not Congress, but CMS itself — is now demanding all 50 state Medicaid programs produce and commit to provider fraud oversight plans. This is operational. CMS controls state Medicaid funding. When CMS says it will consider non-compliance when evaluating fraud likelihood, it is telling state Medicaid directors that their federal match could be at risk. The OIG audits find what went wrong. Congressional probes create political pressure. CMS revalidation letters command action from the agencies that pay ABA claims — and back the demand with financial leverage. --- What the CMS Letters Actually Demand ------------------------------------ “Provider revalidation” is distinct from claim auditing. It’s not a review of whether specific session notes meet documentation standards. It’s a systematic process for verifying that every enrolled Medicaid provider is: - A real entity with valid credentials and licensure - Actively providing services to real patients - Not excluded, suspended, or under sanction - Billing for care that is actually being delivered In practice, revalidation sweeps out phantom providers, providers whose licenses have lapsed, providers who are billing for patients they’ve never seen, and providers whose enrollment information is stale. CMS requires periodic revalidation under existing federal rules, but implementation has been inconsistent across states. Oz is demanding that states move aggressively on high-risk provider categories rather than running routine enrollment hygiene. He framed the issue bluntly: federal health programs “in some states have enrolled large numbers of providers who aren’t providing real care to patients, but instead profiting from fraud.” The letters ask for: 1. **A 10-day notification** confirming the state will undertake provider revalidation in high-risk areas 2. **A two-year revalidation strategy** submitted within 30 days — covering which provider types, which timelines, and what verification methodology the state will use States that respond with a credible plan are in a better position with CMS. States that respond weakly, or don’t respond, are signaling to CMS that their Medicaid programs may need closer federal oversight — which is the administrative equivalent of putting a target on your state’s payment stream. --- What Oz Said About Autism Therapy Specifically ---------------------------------------------- Oz didn’t read from the letters when he cited autism therapy. He raised it as an example of where federal anti-fraud work has already produced results, in the same breath as hospice — the other major Medicaid service category currently under aggressive federal scrutiny. His specific framing was about diagnosis authenticity, not documentation technicalities: “When children are dishonestly categorized as having autism, then the kids who really have autism can’t get the services that they need, and the funding for these programs dries up.” This is a meaningfully different fraud theory than what the OIG audits have been surfacing. The OIG series has focused primarily on **documentation failures** — session notes that don’t support the CPT code billed, missing signatures, units that exceed what records can justify. Those are compliance failures, some of which reflect billing for services that were provided but not properly recorded, others of which reflect outright fabrication. The concern Oz raised is upstream: **eligibility and diagnosis fraud**. Providers or referral networks that enable children to receive ABA diagnoses they don’t meet criteria for, in order to open a high-cost Medicaid service authorization. This is a different audit methodology — it starts with patient records and diagnostic evaluations, not session notes. That doesn’t mean practices should interpret this as “only factories of false diagnoses need to worry.” It means the revalidation sweep will be looking at both the integrity of the provider roster and the patterns in what populations providers are billing for. Practices with 50+ Medicaid clients where every patient has a high-hour authorization and documentation deficiencies are a pattern detector’s natural target — regardless of whether any individual diagnosis was fabricated. --- What This Means for ABA Providers in Every State ------------------------------------------------ The OIG audit series affects specific states sequentially. The Congressional probe covered 10 states. The CMS revalidation initiative covers all 50, simultaneously, with a 30-day submission deadline. When a state Medicaid director submits a two-year revalidation plan to CMS, they’re committing to specific enforcement activities. For ABA, the most likely revalidation mechanisms are: **Re-enrollment and credentialing sweeps.** Providers enrolled years ago whose licensing, supervision ratios, or organizational structure has changed may find their enrollment flagged or paused during a revalidation review. Any practice that has changed ownership, added locations, changed corporate structure, or lost a supervising BCBA should audit its enrollment records now. **Heightened prior authorization scrutiny.** States under federal pressure to demonstrate oversight of “high-risk” autism therapy services have a ready-made tool: more restrictive prior authorization. Expect states that aren’t already running hard pre-auth processes for high-hour ABA authorizations to tighten those standards as visible proof of compliance activity. **Post-payment review targeting.** States demonstrating active fraud oversight to CMS need to produce specific enforcement examples. Post-payment review contractors will be directed at ABA claims. The same documentation failures the OIG has been flagging — [97155 notes without protocol modification documentation, 97153 session notes with no service specificity, missing signatures](/blog/oig-audit-trail-documentation-failures-by-cpt-code) — are the documentation the state PPR contractors will be checking. **Provider enrollment freezes or moratoriums.** Indiana already implemented a provider moratorium as part of its 2026 enforcement package. States that want to show CMS they’re controlling high-risk ABA enrollment growth can point to moratoriums. This directly affects new practices seeking Medicaid enrollment and established practices adding provider locations. --- The Three-Front Federal Pressure on ABA --------------------------------------- This month, the federal government is running three simultaneous pressure campaigns on ABA Medicaid: TrackActorScopeMechanismOIG audit seriesHHS Office of Inspector General7 states (sequentially)Retrospective claim audits, federal repayment demandsHouse E&C probeHouse Energy & Commerce Committee10 states (simultaneous)Congressional records demands, political accountabilityCMS revalidation initiativeCMS AdministratorAll 50 states (simultaneous)Enrollment integrity plans, funding leverage These aren’t unrelated. The Congressional probe was informed by the OIG audits. The CMS revalidation initiative was announced at a hearing that discussed Congressional oversight of Medicaid fraud. Federal attention to ABA billing has now converged from the audit arm, the oversight arm, and the program administration arm of the federal government — simultaneously, in the same month. State Medicaid directors reading CMS’s 30-day deadline are doing so while their staff is preparing responses to Congressional probe letters and managing remediation from OIG audit findings. The political environment for being seen as soft on ABA billing oversight is near zero. Every mechanism a state Medicaid program has to tighten ABA oversight — prior authorization, credentialing requirements, documentation standards, accreditation mandates, rate reductions — is now politically rewarded at both the state and federal level. That context should shape how ABA practice owners think about their risk profile heading into Q2 and Q3 of 2026. --- What to Do This Week -------------------- **1. Verify your provider enrollment is current and accurate.** Check your NPI registry information, your Medicaid enrollment records, and your taxonomy codes. Revalidation processes start with enrollment data. Any discrepancy between your enrollment record and your current operations — ownership structure, locations, supervising BCBAs, billing NPIs — is a flag under a revalidation review. Fix it proactively. **2. Confirm your accreditation status.** Oz’s revalidation initiative is targeting providers who “aren’t providing real care.” Accreditation — from BHCOE, CARF, or equivalent — is the primary third-party verification that a practice has been reviewed for clinical legitimacy. States accelerating revalidation will reach for accreditation requirements as a fast, credible filter. [North Carolina activated accreditation monitoring on April 20](/blog/nc-medicaid-accreditation-enforcement-april-2026). Other states under CMS pressure have the same policy lever available. **3. Get documentation audit-ready.** The revalidation CMS is driving is enrollment-focused, but it will cross-reference with claims data. Practices with anomalous billing patterns — unusually high units per patient, billing profiles inconsistent with peer providers, high rates of concurrent 97153+97155 claims — will attract post-payment attention during any revalidation-adjacent audit period. Correct documentation deficiencies now, before a state contractor generates a recovery demand. **4. Watch your state’s 30-day response.** CMS’s letters are going to governors and Medicaid directors. Some states will publish their responses or announce new ABA-related policy actions as part of demonstrating compliance. Follow your state Medicaid agency’s newsroom. Whatever enforcement commitments your state makes to CMS in the next 30 days will materialize as policy and audit activity over the following 12-24 months. **5. Know what concurrent billing looks like in your state.** [Vermont’s concurrent billing ban already cut practice revenue 16-17% at affected clinics](/blog/vermont-concurrent-billing-ban-aba-medicaid). The OIG findings that drove Vermont’s policy are the same findings that are fueling the current federal scrutiny environment. If your state hasn’t said anything about concurrent billing of 97153+97155, that silence is not protection. Under an active revalidation environment, state agencies looking for visible enforcement activity may update billing policies faster than usual. --- The Bottom Line --------------- The CMS revalidation initiative isn’t the end of this pressure cycle — it’s a broadening of it. The OIG is auditing states one at a time and finding 100% deficiency rates. Congress is demanding records. And now CMS itself has told every governor in the country that autism therapy is a high-risk program area and that their enforcement plans will be evaluated. Practice owners who have been watching these developments as someone else’s problem — “we’re not in Indiana, we’re not in one of the 10 Congressional probe states” — need to update that view. The initiative announced April 21 has no state exceptions. If your state Medicaid program is in any of the 50, this applies. The practices that come out of this environment intact are the ones whose documentation already withstands scrutiny, whose enrollment records are clean, whose billing patterns look like what they actually do clinically, and whose accreditation status is current. That’s not a new compliance standard. It’s the existing compliance standard — enforced at a new level of intensity. --- *StreamABA helps ABA practices maintain audit-ready documentation and stay current on payer and regulatory changes. Questions about what the CMS revalidation initiative means for your practice? Reach out at **hello@streamaba.com**.* *Follow us on [LinkedIn](https://www.linkedin.com/company/stream-aba) and [X](https://x.com/streamaba) for more industry updates.* [ All posts ](https://streamaba.com/blog) ![]() Related posts ------------- [Browse all posts](https://streamaba.com/blog) - [ ![](/images/blog/2026/04/house-energy-commerce-aba-medicaid-probe-10-states.jpg) compliance ### Congress Is Investigating ABA Medicaid Billing in 10 States. Is Yours One of Them? On March 3, 2026, the House Energy and Commerce Committee sent letters to governors and Medicaid directors in California, Colorado, Massachusetts, Maine, Nebraska, New York, Oregon, Pennsylvania, Vermont, and Washington — demanding records on ABA fraud, waste, and abuse dating back to 2021. This is not an OIG audit. It's Congressional oversight, and the pressure it creates on state Medicaid programs is different in kind, not just degree. Apr 22, 2026 8 min read ](https://streamaba.com/blog/2026/04/house-energy-commerce-aba-medicaid-probe-10-states) - [ ![](/images/blog/2026/03/colorado-oig-audit-285-million-improper-aba-payments.jpg) compliance ### Colorado OIG Audit: $285 Million in Improper ABA Payments — The Largest Yet The fourth HHS OIG audit just dropped. Colorado's Medicaid program made at least $285.2 million in improper and potentially improper ABA payments in 2022–2023. Every single sampled record had problems. Three more states are still coming. Mar 2, 2026 5 min read ](https://streamaba.com/blog/2026/03/colorado-oig-audit-285-million-improper-aba-payments) - [ ![](/images/blog/2026/03/oig-audit-trail-documentation-failures-by-cpt-code.jpg) compliance ### The OIG Audit Trail: What 4 State Audits Mean for Your ABA Practice's Documentation The Wall Street Journal just put ABA billing under a national spotlight. Four HHS OIG audits have now found documentation failures in 100% of sampled claims across four states. Here's exactly what the auditors flagged, mapped to specific CPT codes, and what your software should be catching before claims go out the door. Mar 11, 2026 9 min read ](https://streamaba.com/blog/2026/03/oig-audit-trail-documentation-failures-by-cpt-code) - [ ![](/images/blog/2026/04/vermont-concurrent-billing-ban-aba-medicaid.jpg) billing ### Vermont Banned Concurrent ABA Billing. Revenue at Affected Clinics Dropped 17%. Your State Could Be Next. Vermont Medicaid banned concurrent billing of CPT codes 97153 and 97155 on January 1, 2026, citing an OIG audit that flagged $18.5 million in improper Wisconsin payments tied to the practice. Clinic revenue at affected providers dropped 16–17% within 60 days. CASP says the interpretation is wrong. Oregon allows it with documentation requirements. Most states have said nothing — and silence is now an audit risk. Apr 21, 2026 8 min read ](https://streamaba.com/blog/2026/04/vermont-concurrent-billing-ban-aba-medicaid) Live demo · No sales call Ready to Streamline your practice? ------------------------------------ Get instant access to a live demo of the all-in-one ABA platform built by clinicians, for clinicians. No sales call. HIPAA compliant · Signed BAA · Built for ABA Website Work email Goto the Live Demo ![](https://streamaba.com/build/assets/icon-BglRoXWC.svg) [ ![StreamABA](https://streamaba.com/build/assets/logo-dark-Bta4omRy.svg) ](/) The all-in-one practice management platform built specifically for ABA therapy providers. Website Work email Get Demo [ ](https://x.com/streamaba) [ ](https://www.linkedin.com/company/stream-aba) [ ](https://instagram.com/streamaba) [ 👍 ](https://www.facebook.com/people/Stream-ABA/61587347484176/) #### Product - [Intake](https://streamaba.com/features/intake) - [Communication](https://streamaba.com/features/communication) - [Pipeline Boards](https://streamaba.com/features/pipeline-boards) - [Tasks & Automation](https://streamaba.com/features/tasks-automation) - [Integrations](https://streamaba.com/features/integrations) - [Analyst Scorecard](https://streamaba.com/features/analyst-scorecard) - [Practice Marketing](https://streamaba.com/aba-practice-marketing) #### Resources - [Free ABA resources](https://streamaba.com/resources) - [ABA Medicaid rates](https://streamaba.com/tools/aba-medicaid-rates) - [Revenue Calculator](https://streamaba.com/tools/aba-revenue-calculator) #### Company - [Blog](https://streamaba.com/blog) #### Contact - [ Contact Support ](https://streamaba.com/support) © 2026 STREAM ABA LLC. All rights reserved. [Privacy Policy](https://streamaba.com/legal/privacy-policy) [Terms of Service](https://streamaba.com/legal/terms-of-service)