A patient books an appointment. The provider sees them. The claim goes out. Then the denial lands in your inbox: “Authorization required.”
If you run a behavioral health practice, you have probably seen this exact pattern more than once. The care was clinically appropriate. The patient had active coverage. But the required authorization was either missed or did not match the service billed. So the claim will not be paid.
Coverage alone was never the finish line. The plan may still require prior approval, a participating provider, specific documentation, approved dates, or a set number of visits.
Prior authorization is one of the heaviest administrative burdens in behavioral health billing. In the AMA’s 2025 survey of 1,000 practicing physicians, doctors and their staff reported spending an average of 13 hours a week on prior auth work. The survey covered prior authorization across medical care in general. Treat the number as context, not a behavioral-health-only figure.
For teams that already juggle complex patient populations with thin admin coverage, that number is not surprising. It is just painful.
This blog walks through the main prior authorization steps, the failure points that most often lead to denials, and the controls a behavioral health practice can use to stay ahead of them.
What Prior Authorization Actually Means in Behavioral Health
Prior authorization goes by several names: pre-authorization, pre-certification, or prior approval. It is the payer’s way of requiring provider approval before certain services are delivered. Miss that step when the plan requires it, and the claim can be denied.
Exceptions exist. Retrospective-review options are available on some plans. Appeal rights depend on the plan and the situation.
An authorization is also not a promise of payment. Eligibility must be active. Coding must be correct. Network status, approved dates, approved units, and claim requirements all still have to line up.
Prior authorization shows up most often for higher levels of care. It also applies to testing, certain procedures or medications, and continued treatment. The exact requirement depends on the patient’s plan and the requested service.
What Authorization Does Not Guarantee
Prior authorization only confirms that the plan reviewed the request based on the information available at the time. It does not replace eligibility and benefits verification. It does not guarantee claim payment.
Payment can still depend on active coverage on the date of service, correct coding, the approved provider, the approved setting, medical-necessity rules, benefit limits, or timely claim submission. Keep the approval notice on file. Compare its terms with the claim before billing.
The prior authorization process typically works like this:
| Step | What Happens |
|---|---|
| 1. Service identified | Provider determines the patient needs a service that may require auth. |
| 2. Eligibility and benefits check | Billing team verifies whether auth is required under the patient’s plan. |
| 3. Authorization request submitted | Request goes to the payer via phone, fax, or portal with clinical documentation. |
| 4. Decision and documentation | The payer approves, denies, or requests more information. If approved, the auth number goes on every related claim. |
| 5. Concurrent review (if applicable) | For ongoing services like IOP or residential, the payer reviews continued medical necessity at set intervals. |
Decision time depends on the payer, plan, service, urgency, and whether the request is complete. Starting in 2026, certain CMS-regulated payers must decide non-drug requests within 72 hours for expedited requests. Standard requests get seven calendar days. Those federal timeframes do not apply to every commercial plan or to drug authorization. Confirm the rule that applies to each request.
The Minimum Authorization Record
For every request, keep one record. It should contain:
- Patient name, member ID, payer, plan, coverage dates.
- Requested service, code when known, level of care, provider, setting.
- Requested start date, duration, visits or units.
- Submission date, method, reference number, documents sent.
- Decision, approved scope, authorization number, any conditions.
- Next-review date, appeal deadline, owner, next action.
Which Behavioral Health Services Require Prior Authorization
Prior authorization requirements differ by payer and plan. The patterns below are common starting points, not billing rules. Before you schedule or deliver care, verify the requirement for the exact service, provider, setting, modality, and dates. Use the payer’s current portal or provider manual.
| Service | Common authorization pattern | What the practice must verify |
|---|---|---|
| Routine outpatient psychotherapy and group therapy | May not require authorization at the start of care. Some plans apply visit thresholds, medical-necessity review, or network rules. | CPT code, visit limit, referral requirement, telehealth rules. Whether authorization kicks in after a threshold. |
| Psychological or neuropsychological testing | Often reviewed in advance. Payers set limits on tests, time, units, or qualified providers. | Requested battery, units, clinical rationale, provider qualifications, referral rules, approved dates. |
| IOP, PHP, inpatient, and residential care | Commonly subject to initial authorization. Continued-stay or concurrent review usually applies. | Admission notification, level-of-care criteria, approved days or units, review date, step-down requirements. |
| Esketamine nasal spray (Spravato) | Coverage authorization may be required. FDA REMS requirements also apply separately from insurance approval. | Drug benefit versus medical benefit. Site and pharmacy requirements. REMS certification, patient eligibility, monitoring, billing method. |
| Applied behavior analysis | Commonly subject to assessment, treatment-plan, unit, or reauthorization requirements. These vary by payer and state program. | Covered provider type, diagnosis and assessment rules, service codes, units. Caregiver components, school coordination, renewal date. |
Why Prior Authorization Fails in Behavioral Health?
Understanding where the process breaks down is more useful than another generic best-practices list. These are the specific failure points that cause prior auth denials in behavioral health practices.
Failure Point 1: Not Checking Auth Requirements Before the Visit
This is the most common mistake. It is also the most expensive.
A provider sees a patient. The service is delivered. The claim goes out. The denial comes back: authorization required.
Before you write off the balance, review the denial and the plan’s available correction or review options. Depending on the payer and the facts, the next step may be a claim correction, a retrospective-review request, an authorization appeal, or documentation showing an emergency exception. Follow the plan’s deadline. Do not assume retrospective approval is available.
The fix is not complicated. It just needs to be consistent. Check the requirement when the service is ordered or scheduled. Start the request early enough for the payer’s stated turnaround time. Recheck before the service if coverage, provider, or schedule details have changed.
Record the source, the date, and the representative or reference number. Log the next action. A benefits quote is documentation of the check; not a guarantee of payment.
Failure Point 2: Submitting Incomplete Clinical Documentation
Payers base authorization decisions on the plan’s coverage rules, medical-necessity criteria, and the clinical information sent with the request. Send a vague or incomplete request and the outcome is predictable. You get a denial, or you get a request for more information that delays the process by days or weeks.
The payer may request some or all of the items below. Submit what is relevant. Do not send a generic packet stuffed with unnecessary patient information.
| Documentation Element | Why Payers Require It |
|---|---|
| DSM-5 diagnosis with ICD-10 code | Confirms the clinical basis for the requested service. |
| Validated assessment or level-of-care information (when relevant) | Use the tool that fits the condition, age, or requested service. Do not treat every measure as interchangeable. |
| Functional impairment description | Demonstrates how the condition affects daily functioning. |
| Current symptoms and clinical presentation | Supports the medical necessity of the requested level of care. |
| Treatment history and prior interventions | Shows what has already been tried. This matters most for step therapy. |
| Proposed treatment plan with goals | Demonstrates that the plan is structured and goal-directed. |
| Current safety or risk assessment (when clinically relevant) | Document current findings, protective factors, and response plan. Do not add risk language the clinical record does not support. |
| Justification for requested level of care | Explains why a lower level of care is not appropriate. |
Failure Point 3: Missing the Concurrent Review Window
For higher levels of care, the initial authorization is only half the battle. IOP, PHP, inpatient, and residential all count. Many plans require continued-stay or concurrent reviews. Miss one and later dates or units can fall outside the approved period. That turns into claim denials.
This is where behavioral health practices quietly lose significant revenue. The denials start stacking up before anyone notices.
The approval notice is your source of truth for the current authorization period. For every continued-stay authorization, record the approved level of care, dates, days or units, next-review deadline, required clinical update, payer contact, and contingency owner.
Set an internal reminder before the payer deadline. Base the lead time on the plan’s rules and the patient’s clinical urgency. If the payer does not state the next review date clearly, get written clarification.
Failure Point 4: Auth Number Not Included on the Claim
The authorization was obtained. The number was stored somewhere in the practice management system. It never made it onto the claim form.
If the claim is missing the required authorization information, the payer may deny it under Claim Adjustment Reason Code 197. That code means required precertification, authorization, or notification was absent. The accompanying claim adjustment group code and payer instructions can vary. Use the remittance advice and payer guidance before correcting the claim.
If the authorization was obtained and the claim simply omitted required information, the practice may be able to correct and resubmit. Confirm the payer’s correction process and the timely-filing deadline first. Catch it quickly, before the filing window closes.
Failure Point 5: Auth Obtained for the Wrong Service or Wrong Dates
An auth was obtained for outpatient individual therapy. The patient was stepped up to IOP. Or the auth covered dates through March 15 but billing continued through March 31. Either way, claims outside the scope of the authorization get denied.
Before submission, compare the claim with the approval notice. Check the member ID, rendering and billing provider, service code, place of service, approved dates, and remaining units. If care changes, confirm whether the existing authorization can be updated. If not, request a new one.
When Prior Authorization Is Denied: What to Do?
A denial does not always mean the same thing. An appeal is not always the first step.
Identify what actually happened. Did the payer deny the authorization request? Did they ask for more information? Did they deny a submitted claim? Did they call the service noncovered? Did they flag a mismatch in dates, units, provider, or code? Follow the correction, reconsideration, peer-review, or appeal path stated in the notice.
Step 1: Understand why the request was denied
Read the denial notice and the member’s plan documents. Look for the stated reason, deadline, and review rights.
Starting in 2026, certain CMS-regulated payers must provide a specific reason when they deny a non-drug prior authorization request. That requirement does not cover every payer or every drug request.
Common reasons for prior auth denials in behavioral health:
| Denial Reason | What It Usually Means |
|---|---|
| Does not meet medical necessity criteria | Documentation didn’t meet the payer’s criteria for the requested level of care. |
| Step therapy requirements not met | Required prior treatments weren’t documented. |
| Insufficient clinical information | Request submitted without adequate supporting documentation. |
| Service not covered under the plan | The requested service is excluded from the patient’s benefit plan. |
| Out-of-network provider | The rendering provider isn’t in the payer’s network for this service. |
| Duplicate request | A prior auth for the same service was already submitted or approved. |
Step 2: File a formal appeal with complete documentation
The appeal should speak directly to the stated denial reason. Include everything that was missing.
For a medical-necessity denial, have the treating clinician respond to the exact criterion cited in the notice. Connect the patient’s documented symptoms, function, risk, or treatment history to the plan’s criteria. Add peer-reviewed evidence only when it directly supports the disputed point. A general citation is not a substitute for patient-specific documentation.
Step 3: Request a peer-to-peer review
If the plan offers a clinician-to-clinician review, request it promptly. Confirm the deadline, the reviewer’s specialty, and which documents will be available. Ask whether the discussion counts as reconsideration or as part of the formal appeal.
The treating clinician should be ready to explain the requested level of care and answer the specific denial reason. Do not assume a peer discussion pauses a separate appeal deadline. It doesn’t; unless the plan says so in writing.
Step 4: Invoke parity law if applicable
The Mental Health Parity and Addiction Equity Act (MHPAEA) prohibits payers from applying more restrictive prior authorization requirements to behavioral health services than to comparable medical or surgical services.
A rule that looks more restrictive for mental health or substance use disorder care can be a warning sign. It does not, on its own, prove a parity violation.
Preserve the plan language and denial records. Request information about the plan’s comparative analysis when appropriate. For a formal parity concern, involve the patient, plan administrator, regulator, or qualified legal or compliance counsel. Consider qualified review before alleging a violation.
Need Help Managing Behavioral Health Authorizations?
Dastify Solutions supports eligibility checks, authorization tracking, continued-stay reviews, and authorization-related denial follow-up. Everything is based on each payer’s requirements.
Talk to our team about your current workflow, payer mix, and service lines. Coverage and payment remain subject to the patient’s plan and payer decision. Contact our team to learn how we can help.
Protect the patient’s care plan
Keep the patient informed about the authorization status. Explain the expected next step in plain language. Do not promise approval. Do not ask billing staff to make clinical decisions.
When a delay could seriously affect the patient’s health or ability to regain function, the treating clinician should decide whether an expedited review is appropriate. Follow emergency and safety procedures when they apply. Routine authorization work should never replace clinical judgment.
The Real Cost of Prior Authorization Failures
The administrative cost of prior authorization in healthcare is staggering. A peer-reviewed study published in 2024 described prior authorization as accounting for an estimated $35 billion in U.S. healthcare administrative spending. That figure is an estimate cited from earlier industry analyses. Present it as an estimate, not a measured annual total.
For individual behavioral health practices, the cost shows up in several ways:
| Cost Type | How It Affects the Practice |
|---|---|
| Staff time | Hours spent submitting, following up, or appealing auth requests instead of supporting clinical operations. |
| Claim denials | Revenue lost when auth wasn’t obtained or lapsed. |
| Patient delays | Treatment starts later because auth is pending. Clinical outcomes and patient satisfaction take the hit. |
In the AMA’s 2024 physician survey, 93% of respondents reported that prior authorization caused delays in access to necessary care. This is a physician-reported measure across specialties. It does not mean 93% of individual patients were delayed.
How to Build a Prior Authorization Process That Actually Works
Prior authorization failures can come from administrative errors, coverage limitations, or disagreements about medical necessity. The care is appropriate. The documentation exists. The system just isn’t set up to get the right information to the right place at the right time.
| Phase | What to Do |
|---|---|
| Pre-Visit | Verify eligibility and auth requirements for every patient before they arrive. Submit the request as soon as the service is ordered and documentation is ready. Set the target date from the payer’s turnaround time, the service date, or the patient’s clinical urgency. Use the expedited process when the request meets the plan’s criteria. |
| Auth Approval | Document the auth number, approved dates, units, or any specific conditions. Make sure this information is attached to every related claim before submission. |
| During Treatment | Track concurrent review deadlines. Submit continued-stay information within the payer’s required window. Update clinical documentation for each review. Do not copy the previous submission. |
| Post-Service | Verify the auth number appears on the claim. Confirm billed dates fall within the approved period. Confirm billed CPT codes match the authorized service type. |
| Denial Management | Track prior auth denials by payer, service type, or denial reason. Appeal every denial with clinical merit. Use patterns to fix upstream process failures. |
Prior Authorization and Telehealth Behavioral Health Services
Telehealth added another layer of complexity to prior authorization in behavioral health. Do not assume an in-person authorization automatically covers telehealth. Do not assume a telehealth authorization covers every modality.
Verify the plan’s requirements for the service code, place of service, modality (audio-video or audio-only), rendering provider location, patient location, and network status. Medicaid and commercial requirements may differ by state or plan.
| Telehealth Auth issue | Details |
|---|---|
| Separate auth for telehealth vs. in-person | Some payers issue separate authorizations for telehealth even when the same service is already authorized in-person. |
| Platform requirements | Certain payers specify HIPAA-compliant platform use. They may request documentation. |
| State-specific rules | Telehealth authorization requirements vary by state, particularly for Medicaid plans. |
| Audio-only services | Some payers require separate authorization for audio-only vs. audio-visual behavioral health visits. |
CMS outlines specific telehealth coverage policies for behavioral health under Medicare. These rules have been updated multiple times since 2020. Verify current requirements with each payer directly.
Important limitations
Prior authorization requirements change frequently and differ by payer, plan, state, service, provider, setting, or date of service. This article offers general operational guidance — not legal advice, clinical advice, or a guarantee of coverage or payment. Use the patient’s current plan documents for each request, and involve qualified clinical, coding, compliance, or legal professionals when the issue requires their judgment.
Key Takeaways
Prior authorization failures come from both administrative mismatches and disagreements about coverage or medical necessity. A reliable process will not eliminate every denial. But it can prevent avoidable errors, surface deadlines earlier, or give the clinical team a cleaner record for reconsideration or appeal.
- Know which services require auth before the patient arrives; not after the claim is denied.
- Submit complete clinical documentation the first time. Incomplete requests cause avoidable delays.
- Track concurrent review deadlines as carefully as timely filing deadlines. A lapsed auth is a denied claim.
- Appeal prior auth denials with clinical evidence, peer-to-peer requests, or parity law arguments where applicable.
- Measure your prior auth denial rate by payer or service type. The patterns will show you exactly where the process is breaking down.
Prior authorization isn’t going away. But with the right process, it stops being the revenue leak it is for most behavioral health practices.
