Federal auditors are finding billing errors in ABA claims across the country. States are cutting reimbursement rates and tightening authorized hours. The children and families you serve are caught in the middle, watching care access shrink while practices scramble to stay compliant and financially viable.
This isn’t a future threat. It’s happening now.
Medicaid spending on ABA therapy more than tripled to $2.2 billion between 2019 and 2023 [1], drawing the kind of federal attention that inevitably leads to audits, overpayment demands, and tighter state-level controls. The HHS Office of Inspector General has already completed audits in four states and found billing errors in virtually every sampled claim [2]. More states are next.
For mid-size and enterprise ABA practices, the window to get ahead of this is closing. This post breaks down what’s changing, why practices are feeling pressure from both reimbursement and audit requirements, and the seven things your software needs to handle before the next audit cycle begins.
What’s Changing Right Now
Three things are moving at the same time. Understanding all three matters.
Federal audits are expanding state by state. The HHS OIG has already audited Indiana, Wisconsin, Maine, and Colorado as part of a series targeting Medicaid-funded ABA services (SRS-A-25-029) [2]. Seven total audits have been announced. The results are significant. In Colorado alone, the Office of the Inspector General (OIG) found $77.8 million in improper payments and recommended the state refund $42.6 million to the federal government [3]. The OIG’s core finding in nearly every case: documentation that didn’t support the claims billed. In Colorado, all 100 sampled enrollee-months contained at least one improper or potentially improper claim [2].
States are restructuring reimbursement. Indiana’s governor-backed working group recommended eliminating weekly limits in favor of a proposed 4,000-hour lifetime cap on comprehensive ABA services, effective April 1, 2026 [9]. North Carolina, Nebraska, and Colorado have cut or proposed rate reductions. Nebraska cut payments for some providers by nearly 50% [4]. These changes don’t just reduce revenue per session. They change the math on every authorization you hold and, more importantly, on every child’s access to consistent care.
Industry standards are tightening alongside the audits. CPT code revisions from the ABA Coding Coalition take effect January 2027, meaning coding practices that work today may not be compliant in 18 months [8]. The Council of Autism Service Providers (CASP) has updated its billing guidelines and published a compliance response [7]. Law firms like Benesch are issuing formal provider advisories, recommending providers build “defensible clinical documentation” before the next wave of reviews arrives [6].
These aren’t separate trends. They’re converging.
The Two-Sided Squeeze
Here’s the core problem facing ABA practices right now. You’re being squeezed from both directions at once.
On one side: lower reimbursement rates and tighter authorization limits mean every approved hour matters more than it did a year ago. You can’t afford unused authorizations, unfilled appointment slots, or missed cancellation recovery. Utilization pressure is at its highest point in years.
On the other side: auditors are scrutinizing every billed hour for documentation that proves the service happened the way you said it did. The OIG found practices billing for sessions conducted during naps or while kids watched videos [4]. Those aren’t edge cases anymore. They’re the standard of proof auditors are applying to your claims.
The consequences run deeper than billing. When a practice loses revenue to denied claims or overpayment recovery, clinical capacity shrinks. Families lose hours. Kids lose continuity in therapy that depends on consistent delivery to produce results. Children who’ve waited months for ABA care are the ones who feel it most when access gets disrupted.
As audits intensify, the way your operations are supported becomes a deciding factor. Your technology either makes compliance automatic or makes it a manual burden. That difference comes down to a few critical capabilities.
7 Things Your Software Needs to Handle
1. Claims Generated Directly from Clinical Sessions
The OIG’s top finding across every audit was missing or incomplete documentation. That problem almost always traces back to the same root cause: clinical records and billing systems that don’t share data.
When staff document sessions in one system and billing teams enter claims in another, information gets lost in the handoff. A session gets billed that was never fully documented. Or documentation exists but wasn’t linked to the claim when the auditor pulled the file.
Your platform should generate claims directly from completed session records with no manual re-entry in between. If a session isn’t documented, no claim should be possible. That’s not just good compliance practice. It’s how you protect the kids you serve from having their care disrupted by clawbacks.
2. Authorization Tracking Built into Scheduling
Indiana’s proposed 4,000-hour lifetime cap [9] is the clearest example of a risk that is now structural. If your scheduling system doesn’t surface authorization limits in real time, you’ll book sessions that can’t be billed.
This isn’t just an operations problem. Families show up for appointments that turn out to be unbillable. Your team has to make difficult calls after the fact. Your practice absorbs the cost.
Authorization tracking needs to be built into the scheduling workflow itself. Not in a separate screen someone checks manually. Not in a report pulled at the end of the week. In the booking flow, before the appointment is confirmed.
3. Session Documentation That Meets Audit Standards
Auditors aren’t just checking whether a claim exists. They’re checking whether the underlying session record proves that a qualified provider delivered a medically necessary service to that specific client during that specific time window.
The Benesch advisory recommends “defensible clinical documentation” as the baseline providers should build toward now [6]. That means timestamped session notes, clear documentation of the child’s presence and participation, and records that can be matched to claims without ambiguity.
Your documentation tools should capture what auditors will ask for. If your current system leaves room for interpretation, that’s a risk you’re carrying into every audit cycle.
4. Pre-Submission Claim Validation
Wisconsin had never conducted a post-payment review of ABA claims before the OIG audit arrived [2]. Most state Medicaid programs weren’t built to catch what federal auditors are now finding.
That also means practices can’t rely on payers to flag errors before payment. By the time a problem is discovered on the state’s end, it’s an overpayment demand, not a denied claim. The recovery process is far more disruptive and costly.
Your billing platform should validate claims before they leave your system. Built-in payer-specific rules, required field checks, and coding validation catch the most common error types before submission. Catching a claim error costs seconds. Responding to an OIG audit costs months.
5. Scheduling That Maximizes Authorized Hours
Rate cuts in Colorado, Nebraska, and North Carolina mean practices are generating less revenue per session [4] [5]. The math is simple. If you’re earning less per hour, you need to deliver more authorized hours efficiently to maintain the same revenue.
That means filling gaps created by cancellations, maximizing therapist utilization across locations, and building schedules that use authorizations before they expire.
For the children you serve, this matters too. Kids who miss sessions due to scheduling gaps don’t just miss a therapy hour. They miss continuity. In ABA, consistent delivery of authorized hours is directly tied to clinical outcomes.
Your scheduling system should actively help you recover those hours, not just record what happens.
6. Practice-Wide Compliance Visibility
Multi-site practices face a challenge that single-location organizations don’t. Compliance problems at one location aren’t visible to the people who need to act on them at the practice level.
The OIG audits found patterns that, in hindsight, should have been visible across practices. Billing anomalies. Documentation gaps. Session records that didn’t align with claims. In every case, better visibility earlier would have been the difference between a proactive correction and a federal overpayment demand.
Your platform should give practice leadership a real-time view of documentation completion rates, billing anomalies, and compliance gaps across every location. Not a monthly report. Not a static dashboard. An active signal that something needs attention before it becomes an audit finding.
7. EVV Compliance with Audit-Ready Logs
Electronic Visit Verification is table stakes in a post-audit environment. GPS-stamped session logs tied to specific claims are the clearest way to prove a session happened where and when the record says it did.
But EVV data only protects you if it’s connected to your claims. If your EVV system logs sessions independently and your billing team reconciles them manually, you’ve got the same gap that creates audit exposure. The data needs to flow from visit verification into the claim record without manual intervention.
For home-based and community ABA, this is especially important. Session locations vary. Therapist schedules vary. The documentation burden is higher and the verification trail needs to be tighter.
How RethinkBH Addresses Both Sides of the Squeeze
This is where the right technology makes the difference.
Theradriver, a strategic partner with RethinkBH, is built to maximize authorized hour delivery. It fills schedule gaps, recovers cancellations, and keeps therapists operating at full capacity. When rates are lower, delivering every authorized hour isn’t optional.
BillAI by RethinkBH connects clinical documentation directly to claims. Claims are generated from completed sessions, not entered manually in a separate workflow. Built-in payer validations catch errors before submission. Real-time clearinghouse integration surfaces rejection reasons without manual follow-up. ERA auto-posting reconciles payments across claims in seconds.
AI Dashboard gives practice and operations leaders visibility across locations, surfacing documentation gaps, billing anomalies, and compliance risks before they escalate – in a single intelligent command center.
Session Note AI generates session summaries from actual session data, reducing documentation time for RBTs and BCBAs. Real-time alerts notify clinicians when session data changes after a note is completed, keeping records current and audit-ready. Notes are HIPAA-compliant, built on Azure OpenAI infrastructure, and designed to meet payer documentation standards — so the record that supports a claim holds up when auditors pull the file.
The interconnection between these solutions is what makes the difference in a post-audit environment. Scheduling, documentation, and billing share the same data. There’s no handoff where information gets lost. That’s how compliance becomes automatic—and how the right system protects both your practice and the families you serve.
See how RethinkBH handles billing, documentation, and scheduling in one platform.
References
- The Wall Street Journal, “The Boom in Autism Therapy Is Medicaid’s Fastest-Growing Jackpot”: https://www.wsj.com/health/healthcare/autism-therapy-medicaid-payments-640aa435 (paywall)
- HHS OIG Audit Series (SRS-A-25-029): https://oig.hhs.gov/reports/work-plan/browse-work-plan-projects/srs-a-25-029/
- Denver Post, “Colorado may owe federal government $42M for improper autism therapy payments”: https://www.denverpost.com/2026/03/02/autism-therapy-overpayment-colorado/ (paywall)
- NPR/KFF Health News, “Why Medicaid programs are cutting back on a popular therapy for autism”: https://www.npr.org/sections/shots-health-news/2025/12/23/nx-s1-5643014/autism-aba-therapy-medicaid-costs
- Axios, “Medicaid autism therapy boom triggers crackdown”: https://www.axios.com/2026/03/16/medicaid-autism-therapy-boom-crackdown (paywall)
- Benesch Law, “Heightened Scrutiny of Medicaid-Funded ABA Services, Key Takeaways for Providers”: https://www.beneschlaw.com/insight/heightened-scrutiny-of-medicaid-funded-aba-services-key-takeaways-for-providers/
- Portia International, “Ethical ABA Billing: How the Right Systems and Workflows Protect Providers”: https://www.portiapro.com/blog/ethical-aba-billing/
- Virginia Association for Behavior Analysis, “Upcoming Revisions to ABA CPT Codes”: https://virginiaaba.org/upcoming-revisions-to-aba-cpt-codes/
- Indiana Capital Chronicle, “State coming down on autism therapy providers that potentially abused system”: https://indianacapitalchronicle.com/2026/03/24/state-coming-down-on-aba-providers-that-potentially-abused-system/
