If you bill Medicaid for ABA therapy anywhere in the country, you’ve probably noticed the same story playing out in your state’s provider bulletins this year: spending is up, scrutiny is up, and the rules for staying in-network keep shifting under your feet. It isn’t just one state tightening the reins. It’s a pattern showing up from Raleigh to Albany to Lincoln, and it’s worth understanding even if your own state hasn’t made headlines yet.
This guide isn’t about any single state’s rules. It’s about what’s driving the crackdown nationally, what a handful of states have already done about it, and what new, growing, and multi-location practices need in place to stay compliant no matter where you practice.
Why Medicaid Scrutiny Is Increasing
For years, Medicaid programs treated ABA as a small, steadily growing line item. That’s no longer true. North Carolina’s Medicaid spending on ABA jumped from $122 million in 2022 to a projected $639 million in 2026. Nebraska has seen a 1,700 percent increase in recent years. Indiana’s spending has grown by roughly 2,800 percent, according to a Becker’s Behavioral Health analysis.
When any payer sees growth like that, the response is predictable: more rate reviews, more prior authorization hurdles, and a much closer look at whether claims meet medical necessity standards. That response is now working its way through statehouses and Medicaid agencies across the country, regardless of which state your clinic calls home.
How States Are Responding
Because there’s no federal ABA benefit standard, every state is solving this problem its own way, and the differences matter if you operate across state lines or are weighing where to open next.
North Carolina ultimately decided not to cut therapist rates. But House Bill 696 took effect August 1, 2026, and introduced three real operational changes: board-certified behavior analysts who live outside North Carolina can no longer practice there unless they are within about 40 miles of the client, the state’s updated policy capped remote supervision at 20 percent of therapy time, and reauthorizations for learners receiving more than 16 hours a week now happen every three months instead of every six, with reports that can run 50 pages, according to North Carolina Health News.
New York has cut reimbursement for technician-delivered CPT code 97153 three times in about a year. Two 12.5 percent cuts brought the rate from $19.26 to $14.45 per 15-minute unit, according to Acuity News. A third cut on October 1, 2026, dropped fee-for-service rates to $9.63, half the original rate, and providers expect managed care plans to follow, per Acuity News. Before the second cut, a joint provider survey found that 74 percent of Medicaid ABA providers said they’d leave the program if it went through.
Nebraska cut rates by anywhere from 28 to 79 percent depending on the service code and added a 30-hour weekly cap on services.
Different states, different levers, but the same underlying pressure. If your clinic operates in one state today and is eyeing expansion into another, assume the rules will look nothing alike.
What Federal Audits Reveal About Documentation Risk
Rate cuts are the visible part of the story. The less visible part is an eight-audit series from HHS’s Office of Inspector General reviewing ABA Medicaid billing. The four audits completed so far found substantial improper payments: $77.8 million in Colorado, $56 million in Indiana, $45.6 million in Maine, and $18.5 million in Wisconsin. In August 2026, CMS also released a state ABA toolkit that gives Medicaid agencies a checklist for provider enrollment, credentialing, utilization management, and program integrity. It doesn’t create new federal requirements, but it signals that more states will be tightening oversight.
The findings weren’t fraud rings. They were missing assessments, session notes that didn’t support the units billed, services billed under the wrong credential level, and treatment plans that were never signed. In other words, the kind of paperwork gaps that happen when a growing practice is relying on manual tracking and good intentions instead of a system that catches the gap before a claim goes out the door. This is a federal-level pattern, which means it’s relevant to every Medicaid ABA provider, not just the four states that have already been audited.
RBT Credentialing Adds Another Compliance Risk
The BACB’s updated RBT requirements took effect January 1, 2026, including a new 40-hour training aligned with the 3rd Edition RBT Test Content Outline. Anyone who trained under the old requirements and didn’t apply before January 1 must complete the full training again, and recertification is moving from an annual cycle to a two-year cycle that includes professional development units.
None of this happens in a vacuum. A lapsed RBT credential doesn’t just create a staffing headache; it makes every session that technician runs unbillable, and in some states, a compliance violation on its own. Layer that on top of a shorter reauthorization window or a supervision cap, and credentialing tracking stops being an administrative nice-to-have and becomes something your revenue depends on. We covered the mechanics of getting a BCBA or RBT credentialed in detail in our ABA credentialing guide, and it’s worth revisiting now that the timeline and requirements have shifted again.
What These Changes Mean for Your Documentation
Whether it’s a 50-page reauthorization packet in North Carolina, a new hour cap in Nebraska, or an OIG audit in Colorado, the practices that get flagged tend to share the same weak point: documentation that can’t stand on its own outside the room where the session happened.
Signed treatment plans. Session notes that are actually complete.
Reauthorization requests filed with time to spare, not the night before they’re due. Tracking authorization units so nobody bills past what’s approved. These unglamorous details decide whether a claim gets paid or flagged for recoupment two years down the line. Compliance is easiest to maintain when checks happen inside the clinical and billing workflow, rather than through a separate spreadsheet reviewed after the fact.
How to Prepare for Your State’s Next Medicaid Update
You can’t control what your state’s Medicaid agency does in its next legislative session. You can control how ready your practice is when it happens.
Start with your own state’s ABA-specific Medicaid manual and MCO provider bulletins, not just the national headlines. State licensing requirements already vary widely before you even get to Medicaid policy, something we go into more in our guide to legal and licensing requirements for new ABA clinics. Keep every BCBA and RBT credential current well before renewal, not after a payer flags a claim. Treat every treatment plan and reauthorization packet as something an auditor might read three years from now, not just something a supervisor signs off on this week.
And build a habit of reconciling session notes against billed units regularly, rather than discovering a gap during a payer audit.
Turning Compliance into a Repeatable Workflow
Staying audit-ready is less about adding another compliance checklist and more about building safeguards into the work your team already does. Credential expirations should surface before they affect scheduling. Session notes, treatment plans, and supervision records should live together. Authorization and documentation gaps should be caught before billing, not during an audit months later.
That’s the approach behind Raven: bringing session data and documentation, authorizations, scheduling, and billing into one workflow, with guided credentialing support from our team, so ABA practices can respond to changing Medicaid requirements without adding more manual tracking. If you want to see how it works, you can schedule a demo.
Staying Ready as Medicaid Rules Evolve
Medicaid funding for ABA isn’t going to stop being a hot topic in 2026 or beyond. States will keep adjusting rates, adding oversight layers, and tightening documentation requirements as spending grows. The clinics that come out ahead won’t be the ones that scramble to react to their state’s next bulletin. They’ll be the ones that built strong credentialing habits and audit-ready documentation into their operations early, so that whatever their state does next, they’re already compliant.
Sources:
https://acuity.news/regulation/new-york-medicaid-aba-reimbursement-rate-reduction-2026/
https://www.northcarolinahealthnews.org/2026/07/15/autism-aba-therapy-medicaid-new-rules/
https://oig.hhs.gov/reports/work-plan/browse-work-plan-projects/srs-a-25-029/
https://centralreach.com/blog/rbt-certification-whats-changing-in-2026/
https://acuity.news/regulation/new-york-medicaid-aba-rate-cut-cpt-97153-october-2026/
https://www.bacb.com/wp-content/uploads/2025/07/RBT-2026-Requirements_250723-a.pdf
