The ABA three-way match handbook for multi-payer billing.
Authorization, supervision ratio, and EHR session note brought to one gate before submission. Eight CPT codes covered. Twenty Pre-Flight validator rules. BACB aligned. BHCOE channel-partner reviewed. The handbook the senior partner team hands new clients on day one.
Executive summaryFive things the three-way match fixes.
Most ABA takebacks happen because three sources of truth disagreed and no gate caught the disagreement before submission. The three-way match closes that gap. This handbook is the working reference for a billing supervisor, an RCM director, or a clinical leader who owns the discipline at one site or fifty.
ABA billing has three sources of operational truth that almost never live in the same system. The active authorization sits in the payer portal or a copy inside the practice management system. The supervision ratio is computed inside the EHR or pulled from a CSV the clinical director maintains. The session note sits in the EHR with its own timestamp, location, and rendering provider. When the three agree, the claim is clean. When they disagree, the claim either denies on the front end or takes back ninety to one hundred twenty days later. The economic damage is invisible until the takeback letters arrive.
The three-way match is a deterministic gate that compares the three sources at the moment of submission. The gate is not a clinical-decision tool. It is a billing-discipline tool. The handbook reads as a working document because it is one. Every page is sourced from the operating cadence ASP-RCM runs with ABA clients today.
The numbers behind why this matters are stark. The Behavior Analyst Certification Board now lists roughly 70,000 active BCBAs and over 150,000 active RBTs across the United States as of 2026, almost double the count five years earlier. That growth has pulled in payers, state Medicaid programs, and commercial plans who have responded with tighter authorization controls, narrower place-of-service definitions, and supervision-ratio audits that did not exist in 2019. Industry data suggests 8 to 15 percent of authorized ABA units are lost between authorization and clean payment when no pre-flight validator sits in the path. ASP-RCM clients running the three-way match hold that figure under 2 percent on a steady-state basis, which is the single largest lever an ABA practice has on cash without renegotiating contracts.
The reader of this handbook is the person who carries the operational weight: a billing supervisor who already knows which beneficiary will trigger the next takeback letter, an RCM director comparing month-over-month NCR slippage, a clinical director who keeps the supervision ratio spreadsheet on a second monitor, or the founder who signs the takeback check. The handbook does not assume a particular EHR, clearinghouse, or practice management platform. The discipline it describes works inside CentralReach, Rethink, Therapy Brands, NPAWorks, AccuPoint, or a custom build. What matters is whether the three sources of truth are reconciled before a claim leaves the building.
Reference · the eight codesThe ABA CPT family.
All eight CPT codes that the three-way match gates. The handbook breaks each code into its rendering provider, its supervision requirement, and the most common takeback root cause specific to that code. The table below is the at-a-glance reference.
Each code in the family carries its own match rule, and the gate enforces them as separate predicates rather than a single combined check. 97153 is billed in 15-minute units, which means a 2-hour session ships as 8 units, and the auth balance check has to subtract 8, not 1. 97155 has the most subtle interaction: most commercial plans allow same-day billing of 97155 alongside 97153, but several state Medicaid programs and Tricare regional contractors disallow the same clock-minute being billed under both codes by the same patient and require a documented carve-out in the session note. The gate splits that check by payer, and the rule fires only when the patient, date, payer, and overlapping minute pattern all align.
Concurrent-billing edge cases are where most senior coordinators have learned the hard way. A BCBA who runs a 30-minute 97155 protocol modification inside an RBT-delivered 97153 session needs the EHR to record both clinicians, both start times, both end times, and the overlap window. Without that record, the gate cannot tell whether the BCBA billed 30 minutes of independent work or 30 minutes of supervision-during-treatment, and the payer audit treats the silence as the latter. The 97154 and 97158 group codes carry their own ratio: most payers require a maximum of 8 clients per group for 97154, and 4 for 97158, with the supervising BCBA documented for every minute of 97158. Modifier discipline is also payer-specific. Massachusetts and Connecticut Medicaid require an HO modifier on BCBA-rendered services, Indiana and Texas Medicaid require U-modifiers that map to credential level, and Tricare requires a 95 modifier when telehealth is in scope. Each of these is a deterministic match against the payer rule library inside the gate.
Per-payer authorization unit caps drive the upstream reauth cadence. Commercial BCBS plans typically authorize 25 to 40 hours per week of 97153 with a 6-month renewal cycle. UnitedHealthcare and Optum issue 30 to 40 hour authorizations with a quarterly utilization review checkpoint, which means the practice needs to file an updated treatment plan, current 97151 reassessment, and demonstrate measurable progress against the original treatment goals. Florida Medicaid under SMMC authorizes up to 40 hours per week, while Massachusetts Medicaid typically caps at 30 hours per week with EPSDT carve-outs available for medical necessity. Texas Medicaid takes a different approach, with no formal weekly ceiling but a strict requirement that 97155 protocol modification activity occur at least monthly and be documented in the active treatment plan. The gate reads the payer rule and applies the corresponding ceiling, then routes any encounter that would exceed the cap into the hold queue for clinical review before the claim ships.
The supervision ratio is the second axis that varies by payer. BCBS plans usually require BCBA supervision of at least 10 percent of RBT-delivered 97153 hours, computed over a rolling 30-day window. Aetna pushes that to 10 to 15 percent on most lines of business. UnitedHealthcare requires 10 percent with documented overlap of the supervising BCBA and the RBT during the supervision activity. Tricare holds the floor at 10 percent. Medicaid varies more widely: Massachusetts 10 percent, Florida 5 percent, California 5 to 10 percent depending on DDS regional center contract terms, Texas no strict ratio but documentation of monthly BCBA contact. The gate evaluates the rolling ratio against the payer-specific floor at the moment of submission, and if any RBT has slipped below the floor in the prior 30 days, every claim from that RBT to that payer holds until the supervision activity is documented and posted.
The fix · the gateOne gate. Three sources. Pre-submit.
Before a claim leaves the billing system, the three sources are compared. Authorization balance, supervision ratio policy, and EHR session note for that date, time, location, and rendering provider. If any disagree, the claim holds for resolution. If all agree, it ships.
Inside the gate, three percent of claims fall into the hold queue. Those are the claims that would have denied or taken back. They get resolved inside the gate window and shipped clean. Less than one percent are blocked and escalated for clinical review. The remaining ninety-six percent ship clean on first pass, faster than the prior workflow, because the gate runs in milliseconds inside the EHR-to-clearinghouse path.
Reference · 20 Pre-Flight rulesThe deterministic validator library.
Twenty rules grouped into four categories. The auth rules check the authorization. The supervision rules check the ratio. The note rules check the session note. The provider rules check the credentialing data. Each rule has a deterministic answer at submission time.
Each of the 20 rules is a single deterministic predicate evaluated against the three sources of truth at submission time. Rules 1 through 5 cover the authorization. The auth-active-on-DOS check compares the authorization start date and end date against the encounter date, and a single-day gap on either end holds the claim. The auth balance check subtracts the billed units in real time, which means an authorization with 80 remaining units at 9:00am can drop to 0 by 4:00pm after a full day of treatment posts. The CPT-on-auth check matches the billed code against the explicit code list on the authorization, not against a broader category, because most payers issue authorizations for specific codes rather than a 97151-97158 blanket. The reauth trigger at 20 percent remaining is a operational, not a compliance, rule: it gives the clinical team enough lead time to file the reassessment and treatment plan before the auth runs out, which avoids the gap days where treatment continues but no auth covers it.
Rules 6 through 10 cover supervision. The ratio-above-payer-floor check pulls the BCBA supervision hours and the RBT direct-treatment hours over the rolling 30-day window and computes the ratio, then compares it to the payer-specific floor. The supervising-BCBA-assigned-to-RBT check confirms that the Credential OS credential file has a current supervisor assignment for the RBT on the date of service, because an RBT without a documented supervising BCBA on file cannot bill 97153 regardless of how many supervision hours exist in aggregate. The supervision-note-attached check confirms that a 97155 note exists in the billing period covering the RBT, which is the artifact most payers ask for in a post-pay audit. The rolling-week check is an early-warning version of the 30-day check, set to fire when supervision in the last 7 days falls below threshold. The group-treatment supervision check applies to 97154 and 97158 only.
Rules 11 through 16 cover the session note. Note-exists is the boot check: a 97153 claim without a closed, signed note in the EHR for the corresponding DOS holds immediately. Time-match is the highest-frequency takeback driver in the audit pool. A note that shows clock-in 9:02am and clock-out 11:00am cannot bill 8 units of 97153, which assumes a clean 2-hour session; it bills 7 units after the 2-minute round-down rule that most payers apply. The note-location-matches-POS rule catches the common error where a session was rendered in-clinic but the claim went out with POS 12 (home) because the billing template defaulted. The rendering-provider-match rule catches the case where a BCBA covered for an RBT mid-session but the claim still went out with the RBT as the rendering provider. The signed-and-closed rule prevents billing on a draft note. The group-client-list-complete rule confirms that every client ID in a 97154 or 97158 group is named in the note for cross-reference at audit time.
Rules 17 through 20 cover the provider credential. The BACB credential active on DOS check runs a monthly cross-reference against the BACB Registry at bacb.com, with an automated re-verification triggered 30 days before any provider's expiration date. A lapsed BACB credential pulls every DOS after the lapse for a re-billing decision, because the payer treats services rendered without an active credential as non-covered regardless of medical necessity. The supervising-BCBA-credential check applies the same lookup to the supervisor, since a lapsed supervisor cert invalidates the RBT's billable activity for that period. The state-licensure check matters in states that require independent ABA practitioner licensure (Massachusetts, Arizona, Virginia, Kentucky, North Carolina, Oklahoma, Tennessee, and a growing list). The payer-roster check confirms that the rendering provider is currently active on the payer's enrollment roster, which is a recurring failure point during credentialing transitions and after Optum or Aetna roster recertifications.
Dashboard viewWhat the billing lead actually sees.
A live view of every active authorization across all sites with the supervision ratio and the session note feed joined in. Green is healthy. Amber is the reauth trigger window. Red is the close window. Coordinators work the amber and red queues every morning.
KPI movement before vs current.
The first month was the change. Once the three-way gate caught two takebacks we would have shipped, the team understood it. By month four, no one wanted to bill without the gate running.
Implementation checklistStand up the gate in 90 days.
The eight steps below are the sequence ASP-RCM runs with every new ABA client. The first six are the bulk of the work. The last two lock in the discipline.
Three pitfalls show up in nearly every implementation, and naming them in advance shortens the cutover by weeks. First, the credential file is almost always the bottleneck. Teams underestimate how many BCBAs and RBTs in the active roster carry expired certifications, missing supervisor assignments, or stale state licensure dates. The Credential OS stand-up phase is allocated 14 days for a reason, and skipping the BACB Registry cross-check at this stage means every rule-17 and rule-18 failure surfaces later as a denial rather than as a clean record. Second, the supervision-ratio baseline almost always shows worse performance than the clinical director expected, because the spreadsheets that previously tracked ratio were monthly aggregates rather than rolling 30-day windows by RBT. Surfacing the gap matters more than apportioning blame: it gives the clinical lead a concrete operational target for the next quarter.
Third, the hold queue ritual is the single highest-leverage operational habit, and it is the one most likely to drift after the consultant leaves. The morning review needs a named owner, a resolution SLA by hold category (auth holds resolved same-day, supervision holds resolved within 48 hours, note holds resolved within 24 hours), and an escalation path when a hold sits past SLA. The escalation path inside ASP-RCM engagements goes: coordinator, billing supervisor, RCM director, senior partner. Anything that hits the senior partner queue gets reviewed weekly with the client CFO. The discipline is what makes the gate sustainable. The technology is the easy part.
GlossaryThe vocabulary of ABA billing.
Common questionsFrequently asked: three-way match.
What is the three-way match?
Which CPT codes does the handbook cover?
What are the 20 Pre-Flight validator rules?
How does this connect to Credential OS?
What does BHCOE alignment mean here?
Does the gate slow down submission?
What is the worked example?
Does this work for a single-site practice?
Want this handbook applied to your data?
Send 90 days of denial data, your authorization log, your supervision ratio report by RBT, and your provider roster. Inside 30 days, a written audit, recoverable revenue in dollars, and a 90-day fix plan. Yours to keep.