Revalidation
Revalidation is Medicare's required periodic re-verification of enrollment information: roughly every 5 years for physicians and groups, every 3 years for DMEPOS suppliers. CMS publishes each provider's due date online. Missing it triggers a billing-privilege hold or deactivation, stopping payment on all claims until it is resolved.
- Cycle
- ~5 years (3 for DMEPOS)
- Due dates
- Published at data.cms.gov / PECOS
- Miss it
- Hold, then deactivation of billing privileges
- Also exists
- Commercial recredentialing, ~every 3 years
How does Medicare revalidation work?
Every enrolled provider and supplier must periodically re-verify everything in their enrollment record: practice locations, ownership, licensure, banking, adverse-action history. The standard cycle is about every 5 years for physicians, non-physician practitioners, and groups, and every 3 years for DMEPOS suppliers, with CMS also holding authority for off-cycle revalidations when it wants a fresh look. Due dates are published on the Medicare Revalidation List and visible in PECOS.
Mechanically it is a full enrollment refresh, not a postcard: you resubmit the application data through PECOS, the MAC re-screens against licensure and databases, and development requests carry the same 30-day fuses as initial enrollment.
What actually happens when a revalidation is missed?
A sequence with sharp edges: the MAC may first hold payments, then deactivate billing privileges. Deactivation is the expensive part, because claims for services furnished during a deactivated period are generally not payable even after you reactivate; the gap does not backfill the way an initial-enrollment effective date can.
Realistic damage assessment: a three-physician group whose revalidation notice went to a suite they left two years ago gets deactivated on March 1 and discovers it via a wall of enrollment rejections in mid-April. Reactivation completes May 10. Ten weeks of Medicare volume at, say, $22,000 a month for the group is roughly $55,000, and the portion attributable to the deactivated window may be permanently lost, on top of the staff hours and the secondary effect that Medicare Advantage and supplement crossover claims jammed too. The 2026 rule cycle also expanded CMS deactivation authority, including for 12 months of billing inactivity, so the trap has more triggers than it used to.
What does a clean revalidation process look like?
- Quarterly: run every NPI in the organization against the Revalidation List; do not wait for mail.
- 90 days out: reconcile the PECOS record against reality: locations, authorized officials, banking, licensure, and fix NPPES first where they disagree.
- 60 days out: submit through PECOS with current documents; electronic filings process faster and PECOS 2.0 validation catches mismatches at the door.
- Until approval: check status weekly and answer any development request inside its deadline; an unanswered request converts a routine renewal into a rejection.
Fold commercial recredentialing into the same calendar, since the CAQH 120-day attestation cycle, three-year commercial recredentialing, and five-year Medicare revalidation interlock badly when tracked in three different heads. One tracker, one owner. The credentialing calculator helps you see the overlapping timelines for a whole roster, and if the roster has outgrown the spreadsheet, that is the point of our credentialing service.
Frequently asked questions
Check the Medicare Revalidation List at data.cms.gov (searchable by NPI) or the provider's PECOS record. Due dates show as a specific month or "TBD" if none is set yet. MACs also mail and email notices two to three months ahead, but notices go to the addresses on file, which is exactly what is stale in the practices that get burned.
The MAC can place a payment hold and then deactivate billing privileges. Deactivation stops payment on all claims with dates of service during the deactivated period, and reactivation does not always restore the gap, meaning services furnished while deactivated may simply never be payable. It is one of the most expensive purely administrative failures in billing.
You can submit once you are within the window your MAC allows (generally up to 6 or 7 months before the due date is safe practice; unsolicited applications far ahead of a due date may be returned). The right rhythm: check the due-date list quarterly, and start assembling the revalidation 90 days out.
Same concept, different systems. Commercial payers recredential roughly every 3 years (NCQA standard is at least every 36 months), driven from your CAQH profile, while Medicare revalidation runs through PECOS on its own cycle. A provider is always inside several overlapping cycles, which is why a single tracking calendar matters.
Sources & further reading
Reviewed by the ImmediCare Solutions RCM team
Certified billers and coders handling claims across 50+ specialties nationwide. This entry is reviewed against current payer policy and CMS rules. Last review: Jul 5, 2026.
Stop losing revenue to problems like this.
A free billing audit shows exactly where your practice is leaking money — no cost, no commitment.
