Payers now strictly audit the exact physical location of the patient during virtual visits. Providers are required to hold active licenses and completed provider enrollment within the specific state where the patient is located during the encounter

Under current U.S. rules, the key “telehealth location rule” is that the provider must be licensed (and typically fully enrolled/credentialed) in the state where the patient is physically located at the time of the encounter, and payers increasingly audit that exact location rather than just the patient’s home address.

What the rule actually requires

1. License where the patient is, not where the provider is

• The governing principle is: license in the patient’s state of physical presence during the visit.
• Example: A Texas‑licensed therapist sees a patient who is temporarily in Colorado via video; the therapist must hold a Colorado license for that session.
• This applies regardless of:
  • Where the patient lives permanently.
  • Where the provider’s office or home is.
  • Whether the provider is “telehealth‑only”.

2. Payers audit the patient’s exact physical location

• Commercial payers, Medicaid programs, and Medicare are tightening audits to verify:
  • The state where the patient was physically located during the encounter.
  • That the provider held an active license in that state.
  • That the provider was enrolled/credentiated with that payer in that state.
• Many auditors now require documentation in the clinical record (e.g., “Patient location at time of service: Austin, TX”) and may deny claims or initiate fraud reviews if it doesn’t match licensing/enrollment.

3. Provider enrollment/credentialing must match the patient’s state

• Beyond licensure, most payers require:
  • Provider enrollment (Medicare PECOS, Medicaid state plan, commercial network) in the patient’s state.
  • Credentialing with that payer in that state, even if the provider is already credentialed elsewhere.
• Telehealth‑only providers often must:
  • Enroll with each state’s Medicaid program where they see patients.
  • Be added to commercial payer networks for each such state.
  • List a physical practice address (not a PO box) that aligns with licensure records.

Practical implications for providers

Documentation requirements

Providers should:

• Document patient location at time of service in every telehealth note (city/state or at least state).
• Capture location via:
  • Patient self‑report at check‑in.
  • IP address / geolocation tools (if compliant with privacy laws).
  • Travel status flags for patients who may be on vacation or business trips.

Licensing strategy

Common approaches:

• Obtain full licenses in each state where patients are regularly located.
• Use interstate compacts where available (e.g., PSYPACT for psychology, Nurse Licensure Compact, IMLC for some physicians) to reduce the number of full licenses needed.
• Avoid relying on “telehealth‑only permits” or registration options unless the state explicitly allows them for your profession and service type.

Operational controls

Recommended controls:

• Build location checks into scheduling and intake: block or flag sessions if the patient is in a state where the provider is not licensed/enrolled.
• Maintain a state‑by‑state licensing and enrollment matrix for each provider.
• Train staff to verify and update patient location when patients travel, and to pause telehealth if the new state is not covered.

Bottom line

The “Telehealth Location Rule” currently means that payers strictly audit the patient’s exact physical location, and providers must hold active licenses and completed payer enrollment/credentialing in that specific state for each virtual encounter. Failure to meet this can lead to claim denials, compliance investigations, and licensure or legal risk.