Medicare Provider Revalidation: Complete Guide

TL;DR — Most enrolled providers and organizations revalidate their Medicare enrollment every 5 years; DMEPOS suppliers, home health agencies, and other high-risk types every 3. CMS mails a notice about 180 days before your deadline — to the correspondence address on file. Missing the deadline deactivates your billing privileges retroactively, with no grace period. Don’t wait for the letter: check your due date in PECOS. Medicare requires every enrolled provider and supplier to revalidate their enrollment periodically. Revalidation is not a new enrollment — it’s a confirmation that your existing enrollment information is still current and accurate. But failing to revalidate on time results in deactivation of your Medicare billing privileges.

Deactivation is retroactive to the date your billing privileges lapsed. Claims for services provided while deactivated are denied. There’s no grace period.

This is one of the most common causes of unexpected Medicare billing interruption, and almost all of it is preventable.

Revalidation cycles

CMS sets revalidation cycles based on provider risk level:

CMS tracks these cycles and sends revalidation notices to the correspondence address on file.

⚠️ The correspondence address problem. Revalidation notices go to the address in your PECOS enrollment record. If you’ve moved, changed offices, or the correspondence address is a billing company that no longer manages your account, you may never receive the notice. CMS considers non-delivery your problem, not theirs.

The revalidation notice

CMS typically sends a revalidation notice approximately 180 days before your revalidation deadline. The notice specifies:

• Your provider name and NPI
• Your revalidation deadline date
• Instructions for completing revalidation
• Whether you should use PECOS or paper

You can also check your revalidation due date without waiting for a notice:

• Log in to PECOS and check your enrollment status
• Check the PECOS revalidation lookup tool (available at pecos.cms.hhs.gov)
• Contact your MAC

How to complete revalidation

Revalidation uses the same forms as initial enrollment — you’re essentially updating and reconfirming your enrollment record.

Via PECOS (recommended for most providers)

Step 1: Log in to PECOS Use your I&A credentials. Navigate to your enrollment record.

Step 2: Initiate revalidation PECOS will show a revalidation prompt if your revalidation is due. You can also find it in your enrollment record management options.

Step 3: Review and update all sections Go through every section of your enrollment:

• Identifying information (name, NPI, SSN/EIN)
• Practice location(s) — verify addresses are current and accurate
• Correspondence address — critical; this is where future revalidation notices go
• Licensure — confirm all licenses are current; update expiration dates
• Ownership/managing control — confirm accuracy for organizations
• Adverse legal history — disclose any new adverse actions since last enrollment
• Medicare agreements (CMS-460 status, etc.)

Step 4: Update any changed information Revalidation is your opportunity to correct outdated information. Don’t just click through — actually verify.

Step 5: Sign and submit Electronic signature in PECOS. Submit.

Step 6: Track status PECOS shows the status of your revalidation application.

Via paper

Use the current version of the relevant 855 form for your provider type. Submit to your MAC. Paper processing times are longer — plan accordingly.

Revalidation timelines

CMS expects revalidation to be completed within the revalidation window (typically 60–180 days after the notice). Your MAC processes the revalidation application, which typically takes:

File well before your deadline to allow for processing and any development requests from the MAC.

What happens if you miss the revalidation deadline

If you don’t complete revalidation by the deadline:

1. CMS sends a deactivation notice
2. Your Medicare billing privileges are deactivated
3. Claims for dates of service after the deactivation date are denied
4. You stop receiving Medicare payments

Deactivation is immediate and retroactive to the deactivation date. You cannot backdate billing privileges once deactivated.

Reactivation after deactivation

If your enrollment is deactivated for missed revalidation:

Step 1: File a new enrollment application Reactivation is treated like a new enrollment — you file a full CMS-855I (or 855B, 855A, 855S as applicable). There’s no abbreviated reactivation form.

Step 2: Processing time The new enrollment is processed like any other new application — 60–90 days via PECOS, longer via paper.

Step 3: New effective date Your new billing privileges begin on the effective date of the reactivation approval — not retroactive to your deactivation date.

Step 4: Claims during the gap Claims for services provided between your deactivation date and your new effective date cannot be billed to Medicare. These are a permanent billing loss.

⚠️ The financial impact of reactivation delay. A 90-day reactivation processing period means 90 days of Medicare claims that can never be recovered. For a practice billing $100,000/month in Medicare, that’s $300,000 in unrecoverable revenue.

⚠️ Risk flags

⚠️ Correspondence address drift. This is the number-one revalidation failure mode. Update your PECOS correspondence address any time your contact information changes. Do it now if you’re unsure whether it’s current.

⚠️ Group practice revalidations are coordinated but separate. Each individual provider in a group practice must complete their own revalidation. The organization (CMS-855B) revalidates separately from each individual’s CMS-855I enrollment. Both must be current for the group to continue billing without interruption.

⚠️ Revalidation doesn’t automatically renew CMS-460 participation. Your participating provider status continues year to year regardless of revalidation. But if you discover during revalidation that your CMS-460 isn’t on file, address it during the November-January open enrollment window.

⚠️ Specialty associations don’t track CMS revalidation. Your state medical association, APTA, ASHA, or other professional association doesn’t monitor your Medicare revalidation. You’re responsible for tracking your own deadlines.

Proactive revalidation management

Best practices for practices with multiple enrolled providers:

1. Create a revalidation calendar. Record each provider’s initial enrollment date and calculate their 5-year (or 3-year) revalidation deadline. Add it to your practice management calendar.
2. Log in to PECOS quarterly. Check enrollment status and revalidation due dates for all providers.
3. Confirm correspondence addresses annually. At minimum, verify PECOS correspondence addresses every January.
4. Start revalidation 90 days early. Don’t wait for the deadline — file 90 days before it.

Related pages

• PECOS Overview
• PECOS Revalidation Step-by-Step
• CMS-855I — Individual Provider Enrollment
• Medicare Enrollment Audit

Worried about a missed revalidation? Ask Mae → A Metolius Health audit will identify any revalidation issues in your current enrollment: Free audit →