CMS-588 EFT Submission in 2026: PECOS Upload vs Paper Mail to the MAC

PECOS and paper are both real CMS-588 paths

The current CMS-588 instructions state that a provider or supplier may upload the form through PECOS or mail the signed paper form to its Medicare contractor. Which path the team uses should match the active enrollment transaction and the functionality presented in PECOS. Staff should not reject a valid PECOS upload workflow because an old internal SOP says every EFT form must be mailed.

Conversely, a practice should not assume that every EFT correction can be solved by attaching a file anywhere in a portal. When working on paper, follow the form’s mailing instructions for the appropriate contractor. The key control is to use a supported submission channel tied to the enrollment case and preserve the confirmation or mailing evidence.

The signer must match an authorized enrollment role

CMS-588 Part V requires certification by the same authorized representative of the provider, supplier, or other entity, or a delegated official named on the CMS-855 enrollment application on file. Treat that role match as a pre-submission validation rather than asking whoever manages banking to sign at the end.

This is where finance and enrollment responsibilities often cross. Finance may control the bank account, while enrollment controls the CMS authorized/delegated official records. Build a handoff in which finance validates the account and enrollment validates the signer. Neither team should assume that corporate job title alone proves the CMS enrollment role.

Bank documentation and legal identity must line up

The CMS-588 instructions call for banking support such as a voided check or bank letter and state that the account should bear the provider or supplier’s legal business name. That makes EFT setup part of the same identity-control discipline used elsewhere in Medicare enrollment. A mismatched account name, stale entity record, or unexplained ownership change can turn an EFT task into an enrollment investigation.

Before submitting, compare the legal business name and account information with the enrollment record being changed. If the practice recently changed TIN, legal entity, ownership, or bank relationship, resolve which enrolled entity is entitled to the account rather than treating the CMS-588 as a stand-alone treasury form.

Use the enrollment case to control version and routing

Download the current CMS-588 from CMS or use the form presented through the current PECOS workflow instead of relying on a saved desktop copy. Record the transaction type, Medicare contractor, date submitted, submission method, signer, and supporting bank document. Those fields make follow-up much easier if the contractor develops the application or asks for another EFT document.

For mailed forms, retain a complete copy and delivery evidence. For PECOS uploads, retain the submission confirmation and the version of the form or electronic certification used. The operational objective is to be able to reconstruct exactly what the contractor received without asking the signer or bank to repeat work from memory.

Coordinate EFT with enrollment approval and go-live

An EFT form is not a substitute for Medicare enrollment approval, and enrollment approval does not guarantee that the practice has completed every banking dependency. Keep enrollment status, EFT status, and EDI/claim readiness as separate fields. This is particularly useful for new practices where several workstreams finish within the same week but are owned by different people.

Before releasing a provider to a normal billing queue, confirm that the team knows where Medicare payments are expected to settle and who owns any outstanding EFT development request. That avoids a common handoff gap in which credentialing marks the payer 'done' while finance and billing still lack a confirmed payment path.

If the EFT request is being submitted with a larger enrollment transaction, tie the banking task to that same case number or internal enrollment ID. That lets staff distinguish an EFT development request from a request about ownership, locations, or other enrollment data. When the MAC asks for additional information, route the request to the correct owner instead of resending the entire enrollment packet by default.

CMS-588 mistakes that create preventable rework

The first mistake is using an obsolete 'mail only' rule when a supported PECOS upload is available. The second is allowing a signer who is not the required authorized representative or delegated official to certify the form. The third is submitting bank evidence that does not align with the enrolled entity. The fourth is failing to preserve submission evidence.

A final mistake is treating a CMS-588 rejection as proof that the underlying Medicare enrollment was denied. EFT defects can require correction without changing every other aspect of the provider’s enrollment. Read the contractor notice, identify the specific defect, correct the CMS-588 workflow, and keep the status language precise so leadership and billing do not escalate the wrong problem.

Assign one person to reconcile the CMS-588 result after submission. That owner should check for PECOS or contractor messages, confirm whether the EFT change was accepted, and tell finance and billing when the payment route is ready. Without that final handoff, a practice can have a technically correct form sitting in an enrollment case while accounts-receivable staff still use outdated banking assumptions. Close the task only when the organization has documented the accepted result or a specific development item that remains open.

Another preventable error is changing the bank account without checking whether the legal business name and enrolling entity on the Medicare record still match the account documentation. When a practice has recently reorganized, changed TIN, or moved banking relationships, pause the EFT filing long enough to confirm which enrolled entity is receiving Medicare funds. That check belongs before signature and submission, not after the contractor raises a mismatch.

Operational checklist

• Use the current CMS-588 version or active PECOS workflow.
• Choose PECOS upload or contractor mail based on the actual case.
• Validate the signer against the CMS enrollment record.
• Confirm bank documentation and legal business name alignment.
• Retain submission proof and track EFT separately from enrollment approval.

Sources reviewed