Prior authorization
Behavioral-health prior-authorization denials: sort them, then appeal
Missing, expired, exceeded or refused authorizations need different fixes. Here is how to tell them apart, the decision clocks payers must now meet, and when it is really a medical-necessity appeal.
By the ClaimParrot editorial team · Who we are · Reviewed · 6 min read · 8 cited sources
Quick answer
Start by sorting the denial. No authorization on file, units or days beyond the authorization, a missing or mismatched authorization number, and a request the payer refused are four different problems. The first three are often fixed with records or a corrected claim; a refused request is a medical-necessity decision you appeal on the clinical record, within the plan's deadline.
| Question | Short answer |
|---|---|
| Most common codes | CARC 197 (no authorization), 198 (authorization exceeded), 39 (denied when requested), and 16 with an authorization remark code |
| Payer decision clocks | Since 2026: 72 hours expedited and 7 calendar days standard for Medicare Advantage, Medicaid and CHIP under CMS-0057-F |
| Employer plans | Not covered by CMS-0057-F; ERISA allows 15 days for pre-service decisions (plus one extension) and 72 hours for urgent ones |
| Denial reason | Payers covered by CMS-0057-F must now give a specific reason for a prior-authorization denial |
| First move | Match the authorization record to the claim: member, provider, service, level of care, units and dates |
What kind of prior-authorization denial is it?
Read the reason code and the notice together. A claim denied for no authorization, for exceeding the authorization, or for a missing or mismatched authorization number is an administrative problem. A request the payer reviewed and refused is a clinical decision. The evidence, the deadline and the person who should respond are different for each.
| Pattern | Usual code | What it usually means | First move |
|---|---|---|---|
| No authorization on file | CARC 197 | The payer has no record of an approved request for this service and date | Find proof of the request: portal confirmation, fax receipt, call reference |
| Units or days exceeded | CARC 198 | Services ran past the approved count, for example IOP days or ABA hours | Compare units billed with units approved; request an extension or appeal the excess days |
| Number missing or mismatched | CARC 16 with remark code M62 or N54 (X12 retired CARC 15 in 2018) | The authorization exists but the claim's number, provider or service does not match it | Correct the claim if the claim is wrong; ask the payer to fix the record if the authorization is |
| Refused at request | CARC 39 | The payer reviewed the request and denied it before care | Treat as a medical-necessity appeal of the pre-service decision |
| Approved, then denied on review | CARC 50 | Authorization existed but the claim failed a later medical-necessity review | Appeal with the authorization and the record for the dates billed |
How fast must the payer decide a behavioral-health authorization request?
It depends on the plan. Since January 1, 2026, Medicare Advantage plans, Medicaid and CHIP programs and their managed care plans must decide expedited requests within 72 hours and standard requests within 7 calendar days. Employer plans follow ERISA's 15-day pre-service rule, and Marketplace plans keep their existing timeframes.
In Medicaid managed care, a service authorization decision that is not made within the required timeframe counts as a denial that the enrollee can appeal. Track the date each request was received, not just the date of the response, so a late decision is visible.
| Plan type | Standard request | Expedited request | Rule |
|---|---|---|---|
| Medicare Advantage | 7 calendar days for items under the plan's prior-authorization rules (others 14 days) | 72 hours | 42 CFR 422.568 and 422.572, as amended by CMS-0057-F |
| Medicaid managed care | 7 calendar days for rating periods starting on or after January 1, 2026 | 72 hours | 42 CFR 438.210(d) |
| Marketplace plan on HealthCare.gov | Unchanged by CMS-0057-F (15 days) | 72 hours | Existing ACA claims rules |
| Employer plan (ERISA) | 15 days, plus one 15-day extension | 72 hours | 29 CFR 2560.503-1(f) |
What should a prior-authorization denial notice say now?
Payers covered by CMS-0057-F must give a specific reason for denying a prior-authorization request, not just “criteria not met.” Employer plans must already state the specific reason, the plan provision and the guideline relied on. A vague notice is worth challenging, and it tells you what to request.
The same rule requires those payers to post prior-authorization metrics publicly, including approval and denial rates, with the first reports due by March 31, 2026. Our statistics page summarizes what the first public reports showed. Electronic prior-authorization interfaces under the rule are due from January 1, 2027.
If a notice gives no usable reason, ask in writing for the specific reason and the criteria applied. For employer plans, the criteria request letter tool drafts that request.
When is an authorization denial really a medical-necessity dispute?
When the payer actually reviewed the clinical information and said no, or approved less than requested. Then the appeal is about the record against the criteria, and it needs the treating clinician. Administrative denials, by contrast, are usually won with documents: the request, the confirmation, the authorization letter and a matching claim.
For refused requests, follow the medical-necessity guide, and for a step-down approval, the level-of-care guide. For units-exceeded denials at IOP, PHP or ABA, check whether an extension request was sent before the authorized units ran out; if it was, the appeal is usually about that request.
How do you prevent repeat authorization denials?
Treat authorization as a tracked deadline. Record what was approved by service, level of care, units and dates; set reminders before units run out; match every claim line to an authorization; and log every contact with a reference number. Most repeat denials come from units or dates drifting away from the approval.
- 01Store each authorization with its number, approved units, date span and level of care.
- 02Alert the team when 75 to 80 percent of approved units are used, or several days before the end date.
- 03Check payer routing: many plans delegate behavioral-health authorization to a separate company, listed in the payer guides.
- 04Match claim lines to the authorization before submission: code, units, rendering provider and dates.
An IOP request that sat past the clock
Northgate Recovery submits an initial IOP authorization to a Medicaid managed care plan on a Monday. The plan's contract year started on January 1, 2026, so the standard decision is due within 7 calendar days. Nothing arrives by the following Tuesday, and the patient starts IOP on Wednesday.
The plan then denies the request, citing “insufficient documentation.” Northgate's biller notes that the decision came after the deadline and that the notice gives no specific missing item. With the patient's consent, the program helps the patient file an appeal within 60 days, attaching the original submission, the portal timestamps and the clinical assessment.
The appeal states the late decision, asks the plan for the specific reason and the criteria it applied, and asks for an expedited decision because the patient is in treatment.
Names, dates, payers and amounts are invented for illustration.
What a ClaimParrot packet does here
- An appeal packet drafts the letter for the denial you report, whether authorization was missing or late or the plan made a clinical decision.
- The deadline plan names the next level if the plan upholds the denial: $29, within 3 business days, and the first packet is free (pricing).
- A person checks every packet, and no patient details are sent or accepted (Trust & security).
Every draft is reviewed and approved by your team. ClaimParrot does not make medical-necessity determinations or give legal advice.
Frequently asked questions
Does CMS-0057-F apply to commercial employer plans?
No. It covers Medicare Advantage organizations, state Medicaid and CHIP programs, Medicaid and CHIP managed care plans, and insurers selling Marketplace plans through HealthCare.gov. Employer group plans follow the ERISA claims rule, and fully insured plans may also be subject to state prior-authorization laws.
What does CARC 198 mean for an IOP or ABA claim?
It means the services billed went beyond what the authorization approved, such as more IOP days or ABA hours than authorized. Check whether an extension was requested before the approved units ran out, and appeal or request authorization for the excess.
Who should request the authorization when behavioral health is carved out?
The behavioral-health administrator named on the member's card or in the plan documents, which may differ from the medical insurer. Requests sent to the wrong company are a common cause of no-authorization denials; confirm routing before the first visit.
Can a provider appeal a pre-service denial for the patient?
Usually, as the patient's authorized representative. For urgent care under ERISA, a health care professional with knowledge of the patient's condition may act as the authorized representative. Other appeals may require a signed representative form.
Primary sources and references
- CMS Interoperability and Prior Authorization Final Rule (CMS-0057-F) fact sheet · Centers for Medicare & Medicaid Services · checked
- 42 CFR 422.568: Medicare Advantage standard organization determination timeframes · eCFR, National Archives · checked
- 42 CFR 438.210: Medicaid managed care coverage and service authorization timeframes · eCFR, National Archives · checked
- 29 CFR 2560.503-1: ERISA claims procedure (deadlines, concurrent care, full and fair review) · eCFR, National Archives · checked
- 29 CFR 2590.715-2719: internal claims, appeals and external review for group health plans · eCFR, National Archives · checked
- Claim adjustment reason codes (CARC), official list · X12 · checked
- Remittance advice remark codes (RARC), official list · X12 · checked
- 42 CFR 438.402: Medicaid managed care appeal filing timeframe · eCFR, National Archives · checked
General information, not legal or medical advice. Payer rules change; confirm deadlines and requirements in the notice and the plan documents. Read our editorial policy.
Send the denial. Get the appeal packet back.
An appeal packet gives you an appeal letter draft built on the plan's stated reason, an evidence checklist and a deadline plan, checked by a person before it reaches you: $29, within 3 business days. Your first packet is free.