The most expensive thing a lapsed CAQH attestation does is not slow down your next credentialing application. It removes providers who are already enrolled from the payer directories patients use to find them, and it happens without a denial letter, a phone call, or any warning you would notice in time.
Most practices treat CAQH attestation as a credentialing chore: something you deal with when you add a provider, then forget. That framing is where the money leaks out. The attestation is a recurring deadline that runs every 120 days for the life of every provider on your roster, and when it lapses, two separate systems break at once. New applications stall, and far more quietly, existing providers start disappearing from in-network search results.
If you run billing or credentialing for a practice with more than one or two providers, this is one of the easiest ways to lose revenue you will never see on a denial report.
What CAQH attestation actually is, and the 120-day clock
CAQH attestation is you confirming, in writing and under your signature, that the information in your CAQH ProView profile is current and accurate. Completing the profile is not enough. The attestation is the legal act that tells payers the data can be trusted, and it expires on a fixed cycle.
CAQH requires re-attestation every 120 days. That is roughly every four months, three times a year, for each provider. It does not matter that nothing changed since last time. If the attestation date is older than 120 days, your profile reads as unconfirmed to every payer that pulls from it, even if every field is still correct.
This is the first thing most people get backwards. They think of CAQH as a one-time setup. It is a standing obligation with a short clock, and the clock resets the moment anything in the profile is edited, which is its own trap: updating a license expiration date in month three does not buy you another 120 days unless you also re-attest.
The part nobody warns you about: directory removal
Here is the consequence that does the real damage. Most commercial payers do not just use your CAQH profile to credential you. They use it to satisfy a federal requirement to keep their provider directories accurate, and a lapsed attestation puts you on the wrong side of that requirement.
Under the No Surprises Act, health plans must verify the provider directory information they publish at least once every 90 days, and the statute requires them to have a procedure for removing any provider whose information cannot be verified. Many plans satisfy that 90-day verification by checking whether your CAQH attestation is current. When your attestation lapses, your directory data reads as unverifiable, and the plan is not just allowed to remove you, it is under a legal obligation to.
A removed provider is still credentialed. Still contracted. Still in-network for claims. But invisible in the one place patients actually look, the plan’s online “find a doctor” directory. New patient volume quietly drops, and because the claims that do come in still pay normally, nothing on your revenue dashboard flags the cause. In our experience, this is the single most common way a provider silently falls out of a payer directory. Not a termination, not a denial, just an attestation that went stale four months ago while everyone assumed someone else was watching it.
What a lapsed attestation actually breaks
A lapse hits three things, in rough order of how fast you feel them.
Commercial credentialing in flight freezes. If you are mid-application with a new payer and your attestation lapses, their review pauses. They cannot pull verified data, so the file sits until you re-attest. Every day it waits is a day added to a timeline you were already trying to shorten. This is covered in more depth in our week-by-week credentialing timeline, where CAQH lapses are the most common cause of mid-process delay.
Existing directory listings get pulled. This is the slow, expensive one described above. It can take weeks to notice and weeks more to reverse, because restoring a directory listing runs on the plan’s verification cycle, not yours.
Recredentialing can fail outright. Payers pull your CAQH profile when your two-to-three-year recredentialing comes due. If the attestation is not current when they go looking, some plans cannot recredential you, and a few will terminate the contract rather than chase you for it. Reinstatement is a full new credentialing cycle, which is the same costly reset covered in our guide to PECOS revalidation deadlines on the Medicare side.
How to tell if your attestation has lapsed or is about to
The honest answer is that CAQH will not make this obvious. The reminder emails are easy to miss, they go to whatever address was on file when the profile was created, and they do not escalate. So you check it yourself.
Log into CAQH ProView and look at the attestation date on each provider’s profile, not the profile completeness percentage. A profile can show 100% complete and still be lapsed, because completeness and attestation are two different things. If the last attestation date is more than about 100 days ago, treat it as due now. If it is past 120, it has already lapsed and every payer pulling from it is seeing stale data today.
For a practice with several providers, the dates will not line up. Each provider attested on their own schedule, so you are tracking multiple deadlines, not one.
When did each of your providers last attest with CAQH?
If you cannot answer that for every provider in under five minutes, at least one is probably past due. We will pull every attestation date and flag what is about to lapse.
Check my attestation dates →How to recover a lapsed CAQH profile
Recovery is straightforward once you know it is needed, which is the whole problem. The steps:
- Log into CAQH ProView for the affected provider. If the login itself is locked, reset it before anything else, because a locked account is often how the lapse happened in the first place.
- Review every section for anything expired, a license, a DEA registration, a malpractice certificate, since a lapse of several months usually means something else expired in the meantime too.
- Re-upload any document with a new expiration date, and correct any field that changed.
- Complete the attestation, the signed confirmation step, and confirm the new attestation date shows on the profile.
- Re-authorize your payers to access the profile if any authorizations dropped, then confirm your directory information is set to be shared.
Re-attesting fixes the data immediately on CAQH’s side, but the payer directory does not update the same day. Plans refresh on their own verification cycle, so budget days to a couple of weeks for a directory listing to come back. The sooner you re-attest, the sooner that clock starts.
How to never let it lapse again
The fix is a system, not a reminder. One lapse is an accident; repeated lapses mean nobody owns the calendar.
Set a recurring reminder at day 100 of every cycle, not day 120, so there is slack to gather any document that also expired. Give one person ownership of attestation dates across every provider and every profile, the same single-owner principle that keeps new credentialing on track. Keep a simple sheet with each provider’s name, CAQH ID, and last attestation date, and sort it by date so the next one due is always at the top. If you are also onboarding someone new, fold their first attestation date into the same tracker the day their profile goes live, which pairs naturally with getting the enrollment itself right the first time when you add a provider to your group.
The practices that never lose a directory listing are not more diligent in the moment. They just moved the deadline off memory and onto a calendar somebody owns.
Frequently Asked Questions
Every 120 days. CAQH requires re-attestation roughly every four months for each provider, regardless of whether any information changed. If the attestation date is older than 120 days, the profile reads as unconfirmed to payers even when the data is still accurate.
A lapsed attestation freezes any in-flight commercial credentialing, can get already-enrolled providers removed from payer directories, and can cause recredentialing to fail. The directory removal is the most damaging because it reduces new patient volume without triggering any denial or alert.
Not directly. A provider with a lapsed attestation is usually still credentialed and contracted, so submitted claims generally still pay. The loss comes from reduced patient volume when the provider is removed from the plan’s online directory, which is harder to detect than a denial.
Because federal law requires it. The No Surprises Act requires health plans to verify directory information at least every 90 days and to remove providers whose information cannot be verified. Many plans use your CAQH attestation as that verification, so a lapse makes your listing unverifiable.
Log into CAQH ProView, update any expired documents or changed fields, complete the attestation, and confirm the new attestation date appears. Then re-authorize your payers and confirm directory sharing. The CAQH data updates immediately, but payer directories refresh on their own cycle, which can take up to two weeks.
CAQH attestation is not a one-time task. It is a recurring deadline that decides whether your providers stay visible to patients and whether new enrollments keep moving. Practices that treat it as set-and-forget tend to find out about a lapse only after a provider has been quiet in the directory for a month or two.
MedBillingTech handles credentialing as a flat-fee service at $150 per application, with attestation tracking, document monitoring, and payer follow-up included so no provider’s 120-day clock runs out unwatched. If you want to know where every provider stands right now, a free credentialing audit will pull each attestation date and flag what is about to lapse. Or call us at (307) 243-2190 to talk through your roster.
Pingback: Texas Medicaid Credentialing: TMHP, CVO, and MCOs