The New York Medicaid ABA high-risk revalidation winter 2026 phase places newly designated high-risk ABA providers in Phase 2. The state revalidation page says notifications begin in winter 2026 by email and mail, all revalidations use the Provider Services Portal, an NPI is required, and missed deadlines lead to termination. Existing enrolled providers remain subject to revalidation even while New York's separate ABA enrollment moratorium is in force.

Editorial approval scope: The team checked current source fidelity, scope boundaries, dates, arithmetic, reader usefulness, practical workflow, and general-information limitations.

Distinguish the ABA moratorium from revalidation

New York lists ABA among provider classes subject to a temporary enrollment moratorium. Pending applications are discontinued, while existing enrolled providers should continue to revalidate when notified. Keep initial enrollment, new location or provider application, maintenance, revalidation, and managed-care credentialing in separate queues. Do not use the moratorium as a reason to ignore an existing provider's notice.

Use the Provider Services Portal

The state ended the legacy paper process in May 2026. Confirm every organization and practitioner who must enroll has working PSP access, current email and mailing address, an authorized submitter, and a documented sign-off route. Store the portal enrollment record and NPI relationship. A managed-care-only provider can still be in scope.

Prepare for high-risk screening

The page describes three-year high-risk cycles, site visits, and fingerprint-based background checks for owners of five percent or more. Medicare screening may satisfy some enhanced screening, but it does not remove the Medicaid filing. Verify the actual notice, owners, locations, fingerprint instructions, appointments, results, and exceptions before deciding whether prior screening transfers.

Build a location-level revalidation register

List every enrolled legal entity, tax identifier, NPI when applicable, provider number, service location, provider type, owner, managing employee, contact channel, current status, ordinary revalidation date, off-cycle notice state, and assigned owner. New York's action may attach to a location or enrollment record, even when staff manage the work under one practice brand. Deduplicate the list without collapsing distinct locations or provider roles.

Treat the notice as the start of a controlled episode

The state says notices arrive through both email and physical mail. Save the notice, received date, due date, provider identifiers, requested documents, submission route, contact details, and consequence. Verify it against the current state source before following a link. A general announcement creates readiness work; the provider-specific notice controls the actual episode unless the state says otherwise.

Prepare evidence before the clock starts

For the New York file, reconcile legal name, ownership and control disclosures, addresses, licenses or certifications, NPI and taxonomy, exclusions screening, insurance when required, banking or payment details when requested, staff and group affiliations, and contact information. Record the source and checked date for each field. Correct underlying records through the permitted route instead of changing a revalidation answer to conceal a mismatch.

Separate submission from approval

Submit through PSP by the date in the notice and retain the portal receipt. Record draft, submitted, received, deficient, corrected, approved, closed-enrolled, deactivated, or terminated as distinct states. A confirmation number proves receipt only. It does not establish completed screening, continued network participation, authorization, clean-claim status, or payment.

Protect care and claims while the file is open

While the New York review is open, recheck member eligibility, provider enrollment, managed-care roster, authorization, rendering person, location, service date, and claim route. Escalate a possible interruption early and communicate the administrative state accurately to affected people and families. Clinical recommendations remain with qualified clinicians. Emergency and mandated-reporting duties follow their own routes.

Plan for nonresponse and adverse action

New York says failure to complete revalidation by the required deadline results in termination. Preserve every notice, portal state, contact attempt, deficiency response, decision, effective date, appeal or reconsideration instruction, continuity action, claim impact, and final disposition. Do not assume a late filing restores payment for the gap unless the responsible authority confirms that result in writing.

A fictional readiness cohort

Priya locks 24 enrollment-location records due for review. 18 have a verified contact channel, current ownership and address evidence, provider identifiers, document owner, portal access, notice state, due date, submission evidence, and contingency owner. Readiness is 18 of 24, or 75.0%. The remaining records stay visible by age and reason; the percentage does not predict state approval.

Use a release checklist

Verify the state source, provider-specific notice, enrollment and location identity, provider type and risk tier, owner and managing employee disclosures, NPI and taxonomy, licenses or certifications, exclusion checks, required attachments, PSP access and submitter authority, due date, submission receipt, deficiency state, approval state, network and roster effects, authorization and claim holds, continuity work, appeal route, and next recheck.

Related resources

Sources