Medicare Revalidation: Dates and Deadlines
Revalidation is the periodic process of resubmitting and recertifying your Medicare enrollment information to maintain billing privileges. Most providers revalidate every five years; DMEPOS suppliers revalidate every three years. Missing your deadline may result in a payment hold or deactivation of billing privileges. Check your due date at the Medicare Revalidation List at data.cms.gov. CMS posts no extensions and grants no exemptions.[1]
Revalidation is one of the most consequential administrative deadlines in a provider's Medicare relationship. Unlike many compliance tasks, missing it carries immediate financial consequences with no grace period. This guide covers everything you need to know: how to track your due date, what the timing rules are, how to complete the process, and what recovery looks like if privileges are deactivated.
What Revalidation Is and Why It Exists
Revalidation means resubmitting and recertifying the accuracy of your Medicare enrollment information. CMS treats it as an anti-fraud tool: by requiring providers to periodically confirm that their practice location, ownership, banking information, and other enrollment details are still correct, CMS can identify and remove invalid or fraudulent enrollment records.[2]
The process does not require starting an enrollment from scratch. Through PECOS, you review what is already on file and update only the information that has changed. PECOS is specifically designed to present only the sections relevant to your enrollment scenario, so the effort involved is proportional to what actually needs updating in your record.
Revalidation Cycles by Provider Type
CMS also reserves the right to request off-cycle revalidations at any time, regardless of when a provider last revalidated.[1] An off-cycle request will arrive as a formal notice from the MAC and must be treated with the same urgency as a scheduled revalidation.
The Revalidation Timeline
Understanding when CMS posts due dates, when notices arrive, and when to actually submit prevents the most common revalidation mistakes.
Due dates are updated in the Medicare Revalidation List every 60 days at the start of the month. If your due date is more than seven months away, the list will show it as "TBD" rather than a specific date. The MAC's revalidation notice, sent 90 to 120 days before the due date, is the official alert, but the notice is a reminder, not the trigger. Providers are responsible for tracking their own due dates regardless of whether a notice arrives.[1]
How to Find Your Due Date
The Medicare Revalidation List is the authoritative source. Search by provider name or NPI at data.cms.gov/tools/medicare-revalidation-list. If a date appears, submit your revalidation before that date. If the result shows TBD, your due date is more than seven months away and you should not submit yet.[3]
You can also log into PECOS directly and check your enrollment record status, which will reflect the current approved status and any pending revalidation requests. Either method is valid for routine monitoring; the Revalidation List is the more accessible option for staff who do not have PECOS login credentials.
When to Submit and When to Wait
Submitting a revalidation too early is a waste of effort: unsolicited applications submitted more than seven months before the due date will be returned without processing. The timing rules are precise enough that CMS publishes explicit guidance on them.[3]
- You are within three months of your listed due date, even if you have not received a MAC notice
- You received a formal revalidation notice from your MAC at any time
- CMS has requested an off-cycle revalidation
- Your due date is more than seven months away and you have not received a notice
- No due date appears on the Revalidation List and no MAC notice has arrived
Unsolicited early submissions will be returned by your MAC.
How to Revalidate
PECOS is the most efficient way to revalidate. It allows you to review information already on file, update only what has changed, upload supporting documents, and electronically sign and submit, all without mailing anything.[1]
The revalidation does not require filling out the entire enrollment application from scratch. In PECOS, log in, locate your existing enrollment, and work through the revalidation workflow. The system will present only the sections relevant to your enrollment type. You need to update any information that has changed and confirm that everything else remains accurate.
Revalidation can also be submitted on the appropriate paper CMS-855 form if online submission is not possible. As with initial enrollment, paper submissions take longer to process and result in a PECOS record update once the MAC enters the data.
If your revalidation reveals that your practice location, authorized representatives, or other details differ from what CMS has on file, CMS generally does not take administrative action against you solely for failing to have updated the record earlier. However, CMS can take action, including recovering previous Medicare payments, when an unreported change causes your Medicare enrollment to become ineligible. Revalidation is the opportunity to correct the record; use it.[3]
What Happens If You Miss the Deadline
There are no exemptions from revalidation and CMS does not grant extensions. If a revalidation is submitted after the due date, the MAC may apply a stay of enrollment that places a hold on Medicare payments, or deactivate billing privileges entirely.[1]
If the MAC requests additional documentation during the revalidation review, respond within 30 days. Failure to provide the requested documentation within that window may also result in deactivation.
Deactivation: Consequences and Recovery
Deactivation of Medicare billing privileges is one of the more serious administrative outcomes in provider enrollment. It means the provider's PECOS enrollment record is no longer in an approved status, and Medicare will not pay claims for services rendered during the deactivation period. That gap in coverage is permanent: Medicare will not reimburse services provided while the provider was deactivated, even after privileges are restored.[1]
Recovery from deactivation requires submitting a complete new Medicare enrollment application, not just a revalidation. This is functionally equivalent to enrolling from scratch, meaning the full application, supporting documentation, EFT setup, and MAC review process all apply again.
This cannot be corrected retroactively. Claims for services provided while billing privileges were deactivated will be denied, regardless of when the provider eventually re-enrolls. The only protection is submitting the revalidation before the deadline.[1]
The Rebuttal Process
Providers and suppliers whose Medicare billing privileges have been deactivated by a MAC are permitted to file a rebuttal. The rebuttal process is governed by 42 CFR 424.546(a) and provides a formal mechanism to contest a deactivation. Contact your MAC for specific instructions on filing a rebuttal, as the process and timelines are managed at the MAC level.[2]
Large Group Coordination
For organizations with more than 200 enrolled members, the revalidation process involves additional coordination. The MAC sends the group a letter and a spreadsheet listing all providers linked to the organization who must revalidate within the next six months. Groups should use this list to coordinate submissions and confirm that only one application is submitted per provider or supplier. Duplicate submissions create processing delays.[2]
Large groups can also search the Medicare Revalidation List by organization name to download group-level revalidation information and track which members are approaching their due dates.
| Question | Answer |
|---|---|
| How often do most providers revalidate? | Every 5 years; DMEPOS suppliers every 3 years[1] |
| When does CMS post my due date? | Up to 7 months in advance; shown as TBD before that[3] |
| When does my MAC send a revalidation notice? | 90 to 120 days before the due date, by email or postal mail[1] |
| Are extensions available? | No. CMS grants no extensions and no exemptions[1] |
| Can I submit early to get it done? | Only if you received a notice or are within 3 months of the due date; earlier submissions are returned[3] |
| Do I have to redo the entire enrollment application? | No. In PECOS, you review existing data and update only what has changed[1] |
| What if my MAC asks for more documentation? | Respond within 30 days or risk deactivation[3] |
| What happens to claims during a deactivation? | Medicare will not pay for services rendered during the deactivation period, even after re-enrollment[1] |
Check a provider's current PECOS enrollment status.See whether a provider is currently enrolled in Medicare and eligible to bill.
PECOS LookupSources
This guide is based on the following official government publications. NPI Profile summarizes official documentation for convenience; the source documents remain the authoritative reference.
- Centers for Medicare & Medicaid Services, Medicare Learning Network. Medicare Provider Enrollment (MLN9658742). 2026 edition. Revalidation section covering cycles by provider type, the anti-fraud rationale, payment holds, deactivation, and no-extension policy.
- Centers for Medicare & Medicaid Services. Medicare Provider Enrollment (MLN9658742). Revalidation and Large Group Coordination sections; and rebuttal process reference to 42 CFR 424.546(a).
- Centers for Medicare & Medicaid Services. Revalidations (Renewing Your Enrollment). cms.gov, updated July 2025. Covering due date posting schedule, the 7-month TBD threshold, MAC notice timing, the do/don't submission rules, and the 30-day documentation response window.
