US Medical Billing
Credentialing

Medicare enrollment with PECOS

Medicare enrollment with PECOS refers to registering a provider or supplier with the Medicare program through the Provider Enrollment, Chain, and Ownership System (PECOS), the online system the Centers for Medicare & Medicaid Services (CMS) uses to collect, validate, and maintain enrollment records. A completed enrollment establishes a provider's eligibility to bill Medicare and to order, refer, or certify covered items and services. It is a distinct step from credentialing and from commercial payer contracting, each of which follows its own rules that vary by payer, plan, and jurisdiction.

Updated 8 min read

Reviewed by Anwaar Tayyab

Director of Billing Operations ·

On this page

Key takeaways

What PECOS is

PECOS is the electronic system CMS maintains for Medicare provider enrollment. It is the online counterpart to the paper CMS-855 forms: a provider or an authorized organization uses it to submit an initial enrollment, add or change practice locations, reassign benefits, revalidate, or voluntarily withdraw. Applications submitted through PECOS are routed to the appropriate Medicare Administrative Contractor (MAC), which processes them by geographic jurisdiction and provider type.

Enrollment is often confused with credentialing, but the two answer different questions. Credentialing and primary source verification confirm that a practitioner's licensure, education, and history are what they claim to be. Enrollment registers that practitioner or entity with a specific program — here, Medicare — so that claims can be adjudicated and paid. The distinction is covered in more depth in credentialing vs. enrollment.

Enrollment establishes billing privileges, not clinical judgment

What must be in place first

Before an enrollment can be filed, a few foundational records must already exist. CMS expects the legal name carried in NPPES and the name on the Medicare enrollment record to match, and incorrect data in either system can prompt unnecessary inquiries about a provider's credentials.

National Provider Identifier (NPI)
A ten-digit identifier obtained from NPPES that must be active before enrollment; it links the enrollment record to the individual or organization.
NPPES record
The National Plan and Provider Enumeration System record behind the NPI; CMS requires the legal business name and the individual provider's name to match between NPPES and the Medicare enrollment record.
Identity & Access (I&A) account
The CMS access-management registration that authenticates the individual and establishes authorized officials and delegated users who may act for an organization in PECOS.

Note that Medicare enrollment does not run on a CAQH profile. The CAQH provider data profile is attested by the clinician and shared with the health plans that clinician participates in, for credentialing and directory work rather than for Medicare fee-for-service enrollment, as described in the CAQH profile. A provider preparing to work across Medicare and health plan networks generally maintains both a PECOS enrollment and a CAQH profile, because each relies on its own system of record.

Choosing the right application

PECOS carries the same set of applications as the paper CMS-855 application family. Which one applies depends on who is enrolling and why — an individual practitioner, an organization, or an enrollment made solely to order and certify. Reassignment of the right to bill is not a separate form: CMS merged the CMS-855R into the CMS-855I, and reassignments are now added, changed, or terminated on that application or in PECOS. The choice between filing as an individual and enrolling through a group is explored in individual vs. group enrollment.

Common Medicare enrollment applications and their general purpose
Common Medicare enrollment applications and their general purpose
ApplicationTypically filed byPrimary purpose
CMS-855IAn individual physician or non-physician practitionerEnroll an individual to obtain Medicare billing privileges, and report reassignment of benefits.
CMS-855BA clinic, group practice, or certain organizational suppliersEnroll an organization that is not an institutional provider.
CMS-855AAn institutional provider such as a hospital or home health agencyEnroll an institutional provider with Medicare.
CMS-855OA physician or non-physician practitioner who orders or certifies but does not billEnroll solely to order and certify, without submitting claims.

CMS assigns and periodically updates these forms, and separate items such as the CMS-588 electronic funds transfer authorization and the CMS-460 participating agreement may accompany an enrollment. Confirm current forms and requirements with CMS, as they vary by provider type and change over time.

How enrollment moves through PECOS

The workflow is broadly consistent across application types, though the exact screens, supporting documents, and review steps differ. The sequence below describes the general path; the range of routes into Medicare and other programs is outlined in enrollment pathways.

  1. Confirm identifiers and access

    Verify that the NPI is active and the NPPES record is accurate, and confirm that the correct I&A roles are in place for whoever will submit.
  2. Select and complete the application

    Choose the application that matches the enrolling party and purpose, then enter practice locations, specialties, ownership, and managing information as prompted.
  3. Attach supporting documentation

    Provide the licenses, agreements, and any application fee or fee-waiver information the specific application requires; requirements vary by provider type.
  4. Sign and submit

    An authorized official or the individual electronically signs; some submissions also generate certification documents that must be signed and returned.
  5. MAC review and determination

    The Medicare Administrative Contractor reviews the application, may request corrections, and issues an approval or denial. Timeframes vary by MAC, workload, and application type.

Effective dates and what enrollment enables

An approved enrollment carries an effective date that governs the earliest date of service Medicare will consider for payment. CMS applies specific rules to that date, and for some provider and supplier types allows limited retrospective billing for services furnished before it. Those rules differ by application type and are periodically revised, so the current CMS guidance and the sibling article on effective dates should be treated as authoritative rather than any fixed number of days.

Enrollment scope also extends beyond billing. For certain ordered items and services — imaging, clinical laboratory services, and durable medical equipment, prosthetics, orthotics, and supplies (DMEPOS) — and for home health and hospice certifications, the ordering or certifying practitioner must be identified on the claim by legal name and NPI and must themselves be enrolled in Medicare in an approved status or have validly opted out. Otherwise the billing provider's claim is not payable, even though that provider is properly enrolled. This is why an enrollment made solely to order and certify exists as a distinct option.

Billing before an effective date is a common exposure

Keeping an enrollment current

A Medicare enrollment is a living record. CMS requires that changes be reported within its stated timeframes and that providers periodically confirm their information through revalidation. Letting a record lapse can interrupt billing privileges, so ongoing maintenance is part of the process, not an afterthought — see revalidation and recredentialing and enrollment maintenance for the broader cadence.

  • Report changes of address, ownership, managing employees, or reassignments within the window CMS specifies.
  • Respond to revalidation notices by the due date CMS assigns; cycles are set by CMS and differ for certain supplier types such as DMEPOS.
  • Keep the NPPES record and the enrollment aligned, since updating an NPI record in NPPES does not automatically update the Medicare enrollment record.
  • Track any application fee obligations, which apply to certain institutional and supplier applications and are adjusted by CMS over time.

Providers serving other public programs manage a parallel process; state Medicaid programs run their own enrollment and revalidation, described in Medicaid provider enrollment. Requirements there vary by state and should not be assumed to mirror Medicare.

Common questions

Is Medicare enrollment the same as credentialing?

No. Credentialing verifies a provider's qualifications, licensure, and history through primary source verification. Enrollment registers the provider or organization with the Medicare program so claims can be processed and paid. A provider may be credentialed by an organization yet still need a separate Medicare enrollment through PECOS.

Do providers still use paper CMS-855 forms?

PECOS is the online alternative to the paper CMS-855 applications and is generally the faster route, but paper forms exist for the same purposes. CMS determines which methods are available for a given application type, so the current CMS guidance is the authoritative source.

Is an NPI required before enrolling in PECOS?

Yes. An active National Provider Identifier from NPPES is a prerequisite, and the enrollment data should match the NPPES record. The legal business name and the individual provider's name must match between the two systems, and updating an NPI record in NPPES does not automatically update the Medicare enrollment record.

Does Medicare enrollment require a CAQH profile?

No. Medicare enrollment runs through PECOS, not CAQH. The CAQH provider data profile is attested by the clinician and shared with the health plans that clinician participates in, for credentialing and directory work. Providers who work across Medicare and health plan networks typically maintain both, because each relies on its own system of record.

How often must a Medicare enrollment be revalidated?

CMS sets revalidation cycles and notifies providers when they are due. Cycles differ by provider and supplier type, with certain suppliers such as DMEPOS on a shorter cycle. Because these schedules are defined and updated by CMS, the current CMS revalidation notice should be treated as authoritative.

Key terms in this article

Defined once, on their own pages.

Authoritative sources

Ready to improve your revenue cycle?

Tell us about your practice and we’ll tell you where we would start.