The ABA Prior Authorization Process: How to Get Approved Faster and Stop Losing Sessions to Expired Auths

The offer letter is signed, your new BCBA starts Monday, and the waitlist families have already been called. Then someone in the office asks the question that stops the whole plan cold: do we have authorizations for these clients yet?

Prior authorization is the payer's advance approval for a specific set of ABA services, for a specific client, over a specific window of time, and without it, every session your clinicians deliver is work the payer will never pay for. Unlike a denied claim, there is usually no appeal that gets it back. This guide walks through the whole process: what payers require, how to get approved faster, how long it really takes, and the tracking system that keeps an approved authorization from quietly expiring underneath an active client.

What prior authorization means in ABA, and why payers require it

Before your clinic can bill for an assessment or ongoing treatment, the insurer wants to agree in writing that the services are medically necessary, and that agreement comes with hard boundaries: approved CPT codes, a set number of units, and start and end dates. The authorization is that written agreement, and every one of those boundaries is enforced at claim time.

Payers require it for ABA more aggressively than for most outpatient care because ABA is intensive, long-running, and expensive from their side of the table. A comprehensive treatment plan can mean twenty or more hours a week for years, so insurers use the authorization process to confirm the diagnosis, review the treatment plan, and cap what they have agreed to reimburse. Whether that gatekeeping is reasonable is a fair debate, but the practical reality is simpler: no active auth means no payment, regardless of how necessary or well-documented the care was.

It helps to keep authorization mentally separate from two neighbors it often gets blended with. Eligibility verification confirms the client has active coverage that includes ABA benefits, and credentialing confirms your providers are approved to bill that payer at all. Authorization sits after both, and a gap in either one upstream will stall it. A brilliant auth packet goes nowhere if the rendering BCBA is still mid-credentialing with that payer, which is a lesson many clinics learn during their first growth hire.

How to get pre-authorization from an insurer, step by step

The process varies in its details from payer to payer, but the skeleton is consistent enough that you can build one internal workflow and adapt it at the edges.

1. Verify eligibility and ABA benefits first. Confirm active coverage, confirm ABA is a covered benefit under the plan, and note any plan-specific requirements like age limits or diagnosis documentation standards. Ten minutes here prevents weeks of wasted submission work.
2. Confirm the diagnosis documentation. Nearly every payer requires a formal autism diagnosis from a qualified provider, and many specify how recent it must be and who is allowed to have made it. Get the diagnostic report in hand before anything else moves.
3. Request the assessment authorization. Initial assessments (typically CPT 97151) usually need their own authorization before the treatment auth can even be requested. Submit this the moment intake paperwork is complete, because the treatment authorization clock cannot start until the assessment is done.
4. Complete the assessment and write the treatment plan. The plan is the heart of the treatment auth request. Payers look for measurable goals, requested hours tied to clinical justification, parent involvement, and a plan for supervision. Vague goals and round-number hour requests are the two fastest routes to a request being kicked back.
5. Submit the treatment authorization request. Use the payer's required channel, whether that is a portal, a fax line, or a specific form, and include everything the payer lists the first time. Incomplete submissions do not get partially processed. They sit.
6. Track the request and respond fast. Payers frequently come back with requests for additional information, and their response deadlines are short. A request that sits in an unmonitored inbox for a week can push the whole approval back a month.
7. Log the approval details the day they arrive. Authorization number, approved codes, approved units, start date, end date, and any conditions. These details drive everything downstream, from scheduling to claims, and a mis-keyed unit count here becomes a denial later.

The documents you need before ABA services can begin

Payers differ on formatting, but the core packet is remarkably stable. Before requesting authorization, have the diagnostic evaluation confirming autism from a qualified provider, a physician referral or prescription for ABA where the plan requires one, the completed assessment and formal treatment plan with measurable goals and requested hours, demographic and insurance details for the client, and the credentialing information for the providers who will render and supervise care. Clinics that keep this packet templated per payer submit in days, while clinics that assemble it from scratch each time submit in weeks, and that difference compounds across every new client the practice takes on.

How long does insurance authorization take?

Most ABA authorization requests come back in one to four weeks, with commercial payers typically responding in five to fifteen business days and Medicaid programs often taking two to four weeks or longer depending on the state. Those ranges assume a complete submission, and they reset in practice every time a payer requests additional information, which is why a clean first packet matters more than any follow-up call.

Two timing realities deserve planning around. First, the clock starts when the payer receives a complete request, so internal delays in finishing assessments or treatment plans are invisible to the payer and come entirely out of your side of the timeline. Second, reauthorizations take just as long as initial authorizations, and treatment does not pause while you wait, so a reauth submitted three weeks before the current auth expires is already a coin flip. Sixty days out is the comfortable standard, and forty five is the floor.

The authorization tracking system every clinic needs

Getting approved is half the job. Insurance authorization tracking is the other half, and it is where clinics quietly lose the most money, because an authorization is a decaying asset: units run down with every session and the end date approaches whether anyone is watching or not.

A workable ABA authorization management system needs to answer four questions at a glance for every active client. Which authorization covers them right now, how many approved units remain, when does it expire, and who is responsible for the reauthorization and by what internal deadline. Whether that lives in your practice management platform or a rigorously maintained spreadsheet matters less than the discipline around it: units reconciled against delivered sessions weekly, reauth work triggered automatically at sixty days out, and one named owner rather than a shared assumption that someone is watching.

The failure mode this prevents is the most expensive kind of revenue loss in ABA, because sessions delivered past an expiration or beyond the approved unit count are usually gone for good. Denials tied to authorization problems show up on remittances as CARC 197, and as we covered in our breakdown of the five denial codes ABA clinics cannot afford to ignore, that code almost always points to a workflow gap rather than a payer mistake. By the time it appears, the fix is prevention for the next client, not recovery for this one.

What expired authorizations actually cost

Run the numbers on a single slip. A client receiving fifteen hours a week at a blended rate around $60 an hour represents roughly $900 in weekly billings. An authorization that lapses for three weeks while a reauth crawls through the payer's queue is $2,700 of delivered, documented, and permanently unbillable care, from one client, from one missed date. A clinic managing forty active authorizations without a real tracking system is running that risk forty times over, all the time.

If some version of this has already happened in your practice, the damage usually is not sitting in plain sight. It shows up as write-offs nobody examined closely and as balances aging quietly in the 90-plus column, which is exactly the territory we mapped in what your aging report is trying to tell you. If you want a fast estimate of what leakage like this might be costing your clinic across denials, delays, and expirations, our recovery calculator will put a number on it in about two minutes.

Authorization is a system, and systems can be handed off

Everything in this guide is doable in-house, and plenty of clinics run it well right up until growth outpaces the spreadsheet. More clients, more payers, and more clinicians multiply the tracking surface faster than admin hours scale, and authorization is precisely the kind of deadline-driven, detail-heavy work that breaks first when a team gets stretched.

Frequently asked questions about ABA prior authorization

How long does ABA prior authorization take?

Most requests come back in one to four weeks, with commercial payers typically responding in five to fifteen business days and Medicaid programs often taking two to four weeks or longer depending on the state. Those ranges assume a complete submission and reset every time the payer requests additional information, so a clean first packet does more for your timeline than any follow-up call.

What documents do you need for ABA prior authorization?

The core packet is a diagnostic evaluation confirming autism from a qualified provider, a physician referral or prescription where the plan requires one, the completed assessment and treatment plan with measurable goals and requested hours, the client's demographic and insurance details, and credentialing information for the providers who will render and supervise care.

What happens if you deliver ABA services without an active authorization?

Those sessions are generally unbillable, and unlike a denied claim there is usually no appeal that recovers them. Services delivered past an expiration date or beyond the approved unit count are the most expensive form of revenue loss in ABA precisely because the care was delivered and documented correctly.

How far in advance should you submit a reauthorization?

Sixty days before the current authorization expires is the comfortable standard and forty five days is the floor, because reauthorizations take as long as initial authorizations and treatment does not pause while you wait. A reauth submitted three weeks out is already a coin flip.

What is the difference between eligibility, credentialing, and authorization?

Eligibility verification confirms the client has active coverage that includes ABA benefits. Credentialing confirms your providers are approved to bill that payer at all. Authorization sits after both and approves specific services for a specific client over a specific window, so a gap in either one upstream will stall it.

Authorization management is built into our full-cycle revenue cycle management service, alongside eligibility, clean claim submission, denial work, and collections, so approvals are secured before care starts and reauthorizations move on a sixty-day clock without anyone in your office having to remember. If your clinic is ready to stop losing sessions to expired auths, let's talk. Your clinicians deliver the care. The system should make sure every hour of it gets paid.