Medicaid Managed Care BH Network Adequacy: CMS Access Rule Changes for 2026

Background: Why CMS Is Cracking Down on Medicaid BH Access

For years, Medicaid enrollees have faced a well-documented access crisis in behavioral health. On paper, Medicaid managed care organizations maintain provider directories listing thousands of mental health and substance use disorder providers. In practice, a significant share of those listed providers are not available. The HHS Office of Inspector General, state auditor reports, and investigative journalism have repeatedly found that 40% to 50% of behavioral health providers listed in Medicaid MCO directories either do not accept new Medicaid patients, have incorrect contact information, have left the network entirely, or cannot offer an appointment within a reasonable timeframe.

This is the ghost network problem. MCOs satisfy contractual network adequacy requirements by listing providers in their directories without verifying that those providers are actually accessible to enrollees. An enrollee searching for a therapist may call a dozen numbers from their plan's directory and reach disconnected lines, practices not accepting new patients, and voicemails that are never returned. The directory creates the appearance of access without the reality.

The consequences are severe. Medicaid enrollees in behavioral health crisis cannot access timely treatment. Individuals with substance use disorders who seek treatment during a narrow window of motivation find that window closed by weeks-long wait times. The downstream costs include emergency department utilization, psychiatric hospitalization, incarceration, and overdose deaths that earlier intervention could have prevented.

CMS-2439-F is the federal government's most comprehensive attempt to address this problem. The rule was finalized in 2024 after years of rulemaking and establishes, for the first time, quantitative appointment wait time standards, secret shopper enforcement mechanisms, and rigorous provider directory accuracy requirements for Medicaid managed care networks.

Appointment Wait Time Standards for Behavioral Health

The centerpiece of the CMS access rule is the establishment of federal appointment wait time standards for Medicaid managed care. Prior to this rule, CMS deferred to states on wait time requirements, resulting in a patchwork where some states had specific standards and others had vague "reasonable access" language that was functionally unenforceable.

The new federal standards for behavioral health services are:

• Routine outpatient mental health: Appointment available within 10 business days of the enrollee's request.
• Urgent behavioral health: Appointment available within 48 hours of the enrollee's request.
• SUD assessment: Assessment appointment available within 3 business days of the enrollee's request.
• Follow-up after inpatient psychiatric discharge: Follow-up outpatient appointment within 7 calendar days (aligns with the HEDIS FUH-7 measure).

These are federal floor standards. States retain the authority to set stricter requirements, and several states have already announced plans to do so. For example, some states are adopting 7-business-day standards for routine outpatient mental health, tighter than the federal 10-day standard.

For behavioral health providers, these standards have two immediate implications. First, providers in MCO networks will be measured against these wait times. If your practice consistently cannot offer appointments within the applicable standard, the MCO may face corrective action from the state, and your practice may be flagged for inadequate availability. Second, providers who can reliably meet these standards become more valuable to MCOs, because MCOs need providers who will help them pass audits, not fail them.

Secret Shopper Surveys: How They Work

The CMS access rule requires states to conduct or contract for secret shopper surveys of Medicaid MCO provider networks. These surveys are modeled on commercial insurance mystery shopper programs and on the methodology used by the HHS OIG in its provider directory accuracy audits.

Here is how secret shopper surveys work in practice:

• The call: A trained caller contacts providers listed in the MCO's behavioral health directory, posing as a Medicaid enrollee seeking an appointment. The caller uses a standardized script designed to test directory accuracy and appointment availability.
• What they test: The caller verifies whether the phone number is correct and working, whether the provider is still at the listed location, whether the provider accepts the enrollee's Medicaid managed care plan, whether the provider is accepting new patients, and when the earliest available appointment is.
• What constitutes a failure: A provider entry fails the secret shopper test if the phone number is disconnected or incorrect, the provider does not accept the enrollee's MCO plan, the provider is not accepting new Medicaid patients, the provider cannot offer an appointment within the applicable wait time standard, or the provider has left the listed practice or retired.
• Consequences: Failed secret shopper results are reported to the state Medicaid agency. MCOs with high failure rates face corrective action plans, financial penalties, and potential enrollment sanctions. States must publish aggregate secret shopper results to increase transparency.

Behavioral health providers in MCO networks should expect to receive secret shopper calls. These calls will sound like any other new patient inquiry. Your front desk staff will not know it is a secret shopper. This makes it essential that your scheduling workflow can accommodate new Medicaid patients within the required timeframes, and that your staff handles every new patient call professionally, whether it is a genuine enrollee or a secret shopper.

Provider Directory Accuracy Requirements

Alongside secret shopper surveys, the access rule imposes rigorous provider directory accuracy requirements on MCOs:

• Quarterly validation: MCOs must validate their entire provider directory at least quarterly. This includes verifying contact information, specialty, accepting-new-patients status, languages spoken, office hours, and accessibility features for each listed provider.
• Provider responsibility to update: Providers are required to notify their MCOs promptly when information changes, including address changes, departing clinicians, panel closures, and new specialty offerings. Many MCO contracts will include specific notification timeframes (typically 30 days).
• Ghost network cleanup: MCOs must remove provider listings that fail validation. If a listed behavioral health provider is not accepting new Medicaid patients, the MCO cannot count that provider toward its network adequacy requirements. This is a direct attack on the ghost network problem.
• Digital directory standards: Online provider directories must be updated within 30 days of a change and must include real-time or near-real-time information about whether a provider is accepting new patients. The days of static, outdated PDF provider directories are ending.

For behavioral health providers, the directory accuracy requirements create an administrative obligation to keep MCOs informed of changes, but they also create an opportunity. Providers who proactively maintain accurate directory information and confirm their availability will be prioritized by MCOs building compliant networks.

Network Adequacy: Time/Distance and Ratio Standards

The access rule also establishes quantitative network adequacy standards that MCOs must meet for behavioral health provider types. These standards operate on two dimensions:

Time and Distance Standards

MCOs must ensure that enrollees can reach behavioral health providers within specified time and distance parameters. The specific standards vary by geography (urban, suburban, rural) and provider type. For example:

• Urban areas: Enrollees must be able to reach a mental health provider within 15 miles or 30 minutes of travel time. For prescribers (psychiatrists, psychiatric NPs), the standard is 30 miles or 45 minutes.
• Rural areas: Recognizing workforce shortages, rural standards allow up to 60 miles or 60 minutes for mental health providers, with telehealth counting toward satisfaction of the standard under specific conditions.
• SUD providers: Separate time/distance standards apply for opioid treatment programs, SUD counselors, and MAT prescribers, reflecting the unique access challenges in SUD treatment.

Provider-to-Enrollee Ratios

In addition to geographic access, MCOs must maintain minimum ratios of behavioral health providers to enrolled members. While the specific ratios are determined at the state level within CMS parameters, the rule requires states to set and enforce ratios for:

• Psychiatrists and psychiatric prescribers
• Psychologists
• Licensed clinical social workers and counselors
• SUD treatment providers
• Child and adolescent behavioral health specialists

Crucially, providers who are not accepting new patients cannot be counted toward these ratios. This means the ghost network cleanup directly affects whether an MCO meets its ratio requirements. MCOs that have been relying on inflated directories will find themselves with ratio shortfalls that require active provider recruitment to resolve.

The Ghost Network Problem: Why This Rule Matters

The scope of the ghost network problem in Medicaid behavioral health cannot be overstated. Empirical data tells a consistent story:

• A 2022 HHS OIG report found that 40% of providers listed in Medicaid MCO directories were not available at the listed location, were not accepting new patients, or had incorrect contact information.
• A 2023 Senate Finance Committee investigation found that in some states, more than half of listed behavioral health providers could not offer an appointment to a Medicaid enrollee.
• State-level audits in California, Massachusetts, and New York have found similar rates of directory inaccuracy, with behavioral health being consistently the worst-performing specialty category.

The consequences extend beyond individual access. Ghost networks undermine the entire premise of managed care: that enrollees receive coordinated, accessible care through a defined provider network. When 40% to 50% of listed providers are phantoms, the network is not a network. It is a list.

The CMS access rule addresses this by making ghost networks measurable and enforceable. Secret shopper surveys provide objective data on directory accuracy. Wait time standards provide objective benchmarks for access. Quarterly validation requirements ensure ongoing accuracy rather than a one-time snapshot. And financial consequences for MCOs that fail create real incentives for cleanup.

Revenue and Financial Impact

The network adequacy rule creates a structural shift in the economics of Medicaid behavioral health. For the first time, MCOs face real financial consequences for inadequate behavioral health networks. This changes the supply-demand dynamic for behavioral health providers.

Rate Negotiation Leverage

MCOs that fail network adequacy standards face corrective action plans, potential enrollment freezes, and financial penalties from state Medicaid agencies. This means MCOs need behavioral health providers more than they have at any point in the managed care era. Providers who are willing to accept new Medicaid patients, can demonstrate appointment availability within wait time standards, and maintain accurate directory information have significant leverage to negotiate higher reimbursement rates.

Specific negotiation strategies:

• Document your value: Track your appointment wait times, no-show rates, and panel capacity. Present this data to MCOs during contract negotiations to demonstrate that you are an asset to their network adequacy compliance.
• Know your MCO's network gaps: Request network adequacy reports from your MCOs. Identify geographic areas and specialty types where they are short. If you serve those areas or populations, use that as a rate negotiation lever.
• Compare rates across MCOs: With multiple MCOs competing for the same behavioral health providers to meet adequacy standards, providers can compare rates and use competitive offers as leverage.
• Negotiate volume commitments: Offer to guarantee a certain number of appointment slots for new Medicaid patients per week in exchange for higher per-visit rates. MCOs need appointment availability, and guaranteed slots are valuable.

Revenue Risk: Accountability Standards

The flip side of the revenue opportunity is accountability. Providers who join MCO networks but fail to meet appointment availability standards create compliance risk for the MCO. MCOs are likely to build appointment availability requirements into provider contracts, with potential consequences for non-compliance:

• Contract termination for providers who consistently fail to meet wait time standards
• Reduced referrals or panel closure for providers who fail secret shopper tests
• Financial penalties or clawbacks tied to appointment availability metrics in some MCO contracts

Providers should review their MCO contracts carefully for any new language related to appointment availability, directory accuracy, and secret shopper cooperation.

What Your Billing Team Needs to Do

While the CMS access rule primarily affects network and scheduling operations, revenue cycle teams play a critical role in positioning the practice to benefit from the new network adequacy landscape.

1. Verify and update all MCO directory listings immediately. Contact every MCO you participate with and verify that your directory listing is accurate: correct address, phone number, fax, provider names, specialties, languages spoken, office hours, and accepting-new-patients status. Incorrect listings that fail secret shopper tests put the MCO at risk and your network participation in jeopardy. Assign a staff member to perform this verification quarterly on an ongoing basis.
2. Ensure your practice can meet appointment availability standards. Work with your clinical leadership to review scheduling templates and ensure that new Medicaid patients can be seen within the required timeframes: 10 business days for routine outpatient MH, 48 hours for urgent BH, and 3 business days for SUD assessment. If your current scheduling does not accommodate these standards, consider reserving dedicated appointment slots for new Medicaid patients.
3. Renegotiate Medicaid managed care rates using network adequacy leverage. Request network adequacy data from each MCO. Identify where they have gaps and position your practice as part of the solution. Prepare a negotiation package that includes your appointment wait time data, panel capacity, and willingness to accept new Medicaid patients. Target a 10% to 20% rate increase based on the MCO's increased need for compliant network providers.
4. Track appointment wait times and build reporting capability. Begin tracking the time between a new patient's initial contact and their first appointment, segmented by payer and urgency level. This data serves two purposes: it demonstrates compliance with wait time standards, and it provides documentation for rate negotiations. Your EHR scheduling module should be able to generate this data.
5. Train front desk staff on new patient intake for Medicaid MCO calls. Every call from a potential Medicaid patient could be a secret shopper. Train front desk staff to offer appointments within the required timeframes, verify insurance eligibility efficiently, and never turn away callers without offering an appointment or a documented referral. The scheduling workflow for new Medicaid patients should be standardized and auditable.
6. Monitor state-specific implementation timelines. The CMS access rule is implemented through state plan amendments and managed care contract updates. Timelines vary by state. Assign someone on your team to monitor your state Medicaid agency's implementation of CMS-2439-F, including any state-specific wait time standards that are stricter than the federal floor.
7. Evaluate expanding Medicaid MCO participation. If your practice currently participates with only one or two MCOs, evaluate whether expanding to additional MCOs in your service area would capture volume from MCOs that are actively recruiting to fill network gaps. The cost of credentialing with an additional MCO may be offset by the volume of patients that MCO needs to direct to compliant providers.

EHR and Technology Implications

Meeting the CMS access rule's requirements demands scheduling and reporting capabilities that many behavioral health practices have not historically needed. Your EHR and practice management system must support the following:

• Appointment availability tracking: Your system must be able to report on available appointment slots by provider, service type, and timeframe. This is essential for demonstrating compliance with wait time standards and for identifying capacity constraints before they become compliance failures. EHR platforms like AZZLY Rize and Ease provide scheduling dashboards that track available slots in real time, enabling practice managers to identify and address capacity bottlenecks before they result in wait time standard violations.
• Wait time measurement and reporting: Your EHR must be able to calculate the time between a patient's initial scheduling request and the actual appointment date, segmented by payer, urgency level, and service type. This is a new reporting requirement that many BH-specific EHRs are adding to their reporting suites. Platforms with built-in analytics capabilities, such as Ease, make it straightforward to generate these reports without manual data extraction.
• New patient intake workflow: The scheduling system should include a streamlined workflow for new Medicaid MCO patients that verifies eligibility, assigns an appointment within the applicable wait time standard, and documents the request-to-appointment interval. This workflow should be auditable for secret shopper compliance.
• Provider directory data management: Your system should maintain a single source of truth for provider information (name, credentials, specialty, location, hours, languages, panel status) that can be easily exported and shared with MCOs for directory validation. Manually maintaining this information in spreadsheets creates error risk and makes quarterly validation burdensome.
• Capacity planning tools: To proactively manage appointment availability, you need scheduling analytics that project capacity based on current booking patterns, cancellation rates, and provider schedules. This allows you to open additional slots or recruit additional clinicians before wait times exceed standards.
• Payer-specific scheduling rules: Your scheduling system should support payer-specific appointment type configurations so that Medicaid MCO patients can be routed to appropriate appointment slots that meet the applicable wait time standard for their service type and urgency level.

Impact on MCOs and State Medicaid Agencies

Understanding how the rule affects MCOs helps behavioral health providers anticipate what MCOs will need from them:

• MCO compliance pressure: MCOs face corrective action plans, financial penalties, and potential enrollment freezes from state Medicaid agencies for network adequacy failures. This creates urgent demand for behavioral health providers who can demonstrate appointment availability and directory accuracy.
• Payment rate pressure: If MCOs cannot recruit enough behavioral health providers at current rates to meet network adequacy standards, states may intervene by requiring rate increases or establishing minimum payment floors for behavioral health services. Several states have already begun this process independently of the federal rule.
• Telehealth as a gap-filler: MCOs will likely increase reliance on telehealth behavioral health providers to fill geographic access gaps, particularly in rural areas where the time/distance standards are difficult to meet with in-person providers alone. Providers offering telehealth services have additional value in this context.
• State Medicaid agency oversight: State agencies must build or contract for secret shopper survey programs, establish enforcement mechanisms for MCO non-compliance, and publish transparency reports on network adequacy. This creates a new layer of accountability that filters down to individual providers.

Frequently Asked Questions

What is the CMS Medicaid access rule (CMS-2439-F)?

CMS-2439-F is the Medicaid and CHIP Managed Care Access, Finance, and Quality final rule published in 2024 with phased implementation from 2025 through 2027. It establishes the first federal appointment wait time standards for Medicaid managed care, including behavioral health services. It requires states to conduct secret shopper surveys of provider directories and mandates quarterly directory validation. The rule is designed to eliminate ghost networks and ensure that Medicaid enrollees can actually access the providers listed in their plan's directory.

What are the new appointment wait time standards for behavioral health?

The federal standards require routine outpatient mental health appointments within 10 business days, urgent behavioral health appointments within 48 hours, and SUD assessment appointments within 3 business days. Follow-up appointments after psychiatric inpatient discharge must be available within 7 calendar days. These are federal minimums; individual states may set stricter standards. MCOs that fail to ensure their network providers meet these standards face corrective action and potential financial penalties.

What are secret shopper surveys and how do they affect BH providers?

Secret shopper surveys involve trained callers contacting providers listed in MCO directories, posing as Medicaid enrollees seeking appointments. They test whether the phone number works, the provider accepts the enrollee's MCO plan, the provider is accepting new patients, and whether an appointment is available within the required timeframe. BH providers in MCO networks should expect these calls. Consistent failures, such as not answering, refusing new patients, or offering appointments beyond the wait time standards, can result in MCO network compliance issues and potential provider flagging for directory removal.

What is the ghost network problem in Medicaid behavioral health?

Ghost networks are MCO provider directories listing behavioral health providers who are not actually available to see Medicaid patients. HHS OIG and state audits have consistently found that 40% to 50% of listed BH providers cannot take new patients due to incorrect contact information, network departures, panel closures, or retirement. The CMS access rule addresses this through quarterly directory validation, secret shopper audits, and a requirement that only providers who are genuinely available can be counted toward network adequacy standards.

How can BH providers use network adequacy rules to negotiate better Medicaid rates?

MCOs facing network adequacy failures need to recruit and retain behavioral health providers. This gives providers who are willing to accept new Medicaid patients significant leverage. Providers should document their appointment wait times, track panel capacity, request network adequacy data from MCOs, identify where MCOs have gaps, and present themselves as part of the compliance solution. Offering guaranteed appointment slots for new Medicaid patients in exchange for higher rates is an effective negotiation strategy. Comparing rates across competing MCOs provides additional leverage.

What do BH providers need to do to prepare for network adequacy audits?

Verify that all MCO directory listings are accurate, including address, phone, specialty, languages, and accepting-new-patients status. Ensure scheduling systems can accommodate new Medicaid patients within wait time standards. Train front desk staff to handle new patient calls professionally and offer appointments within standards, since any call could be a secret shopper. Track appointment wait times using your EHR scheduling data. Update MCOs promptly when provider information changes. Review MCO contracts for new appointment availability requirements. For a related analysis of state-level Medicaid rate changes affecting behavioral health, see our State Medicaid BH Rate Changes guide.

Editorial Standards

Last reviewed: February 26, 2026

Methodology

• CMS-2439-F final rule text and preamble reviewed for behavioral health network adequacy provisions
• HHS Office of Inspector General provider directory accuracy reports analyzed for ghost network prevalence data
• State Medicaid agency implementation plans reviewed for variation in wait time standards and enforcement timelines
• MCO network adequacy compliance frameworks and provider contract language analyzed for provider-level impact

Primary Sources

• CMS: Medicaid and CHIP Managed Care Access, Finance, and Quality Final Rule (CMS-2439-F)
• Federal Register: CMS-2439-F Final Rule
• HHS OIG: Provider Directory Accuracy in Medicaid Managed Care
• Medicaid.gov: Managed Care Resources
• MACPAC: Medicaid Access and Network Adequacy