Medicare Moderate-Risk Site Visit: How to Prepare the Practice Location
Moderate-risk Medicare enrollment adds a site visit to the Limited-risk screening steps. Practice locations should be operationally ready, with signage, hours, location details, and on-site staffing consistent with the enrollment record.

A Medicare enrollment site visit is not just another document request. For provider and supplier categories placed in the Moderate screening level, the visit is an additional verification step on top of the Limited-risk checks. That makes the physical practice location part of the enrollment file in a very practical way. A location that is hard to identify, appears closed during listed hours, or does not match the information submitted in enrollment can create avoidable confusion. There is no single inspection script that applies to every provider type, so the practical focus is straightforward: make the location easy to verify, keep the enrollment record aligned with real operations, and make sure staff understand what is currently represented to Medicare.
Why Moderate risk leads to a site visit
The Medicare screening framework has three levels. Moderate risk includes the license and exclusion checks used at the Limited level and adds a site visit.
For the practice, that means readiness has both an administrative and physical component. Staff should not treat the application as complete simply because the uploaded paperwork is correct.
Before a visit, compare the PECOS enrollment address with lease, signage, suite designation, phone routing, and posted operating information. The objective is consistency, not decoration. A location that looks normal to patients but is described differently across enrollment records and building directories can create avoidable questions during verification.
Match the real location to the enrollment record
Review the practice address, listed hours, and other location details before submission and again while the case is pending. The location that a visitor sees should make sense in light of the information in the enrollment record.
If the practice has recently moved, changed hours, or reorganized space, make sure the enrollment file does not still describe the prior operating setup.
Front-desk staff should know that an enrollment site visitor may arrive and who should be contacted internally, but they should not be coached to give scripted answers they do not understand. A simple escalation path—site visitor arrives, verify identity under company policy, contact enrollment owner, provide truthful access and information—is more reliable than rehearsed language.
Make the site verifiable
Practical readiness includes visible signage or other reasonable location identification, staff awareness, and the ability to show that the practice is operating as represented. A site that looks unoccupied or where no one understands why the location is tied to Medicare enrollment can create an unnecessary problem.
This is not a call to stage the office for an inspection. The better approach is to keep ordinary operations aligned with the information already submitted.
If the office shares space, uses part-time rooms, or has recently moved, document the operational facts before submission. Shared or flexible arrangements can be legitimate, but the enrollment record still needs to describe the real practice situation accurately. Resolve suite numbers, hours, and entity identification before a visitor has to reconcile them on site.
Create a simple internal site-visit check
Before or during a Moderate-risk enrollment, have someone other than the original preparer walk through the location details. Confirm the address, hours, signage, and whether someone is normally present when the practice says it is open.
Keep the check short and factual. The goal is consistency between the application and the real operating location.
After a visit, log the date, location, visitor or contractor information available to the practice, any documents requested, and any follow-up communication. Do not mark the enrollment approved simply because the visit occurred. The site visit is one screening component; the contractor can still have unresolved application, ownership, or documentation issues.
Prepare the location as an enrollment record, not a stage set
A Moderate-risk site visit is easier to manage when the practice focuses on consistency rather than trying to make the office look artificially perfect. The operational question is whether the location the visitor sees is the location represented in the enrollment record. Review the practice address, posted name, stated operating hours, and whether staff who understand the business are available. CMS does not use one identical physical checklist for every provider type, so prepare around the enrolled facts the site visit is meant to verify rather than a made-up universal inspection list.
Walk through the location using the same information that was submitted with enrollment. If a sign, suite number, or operating schedule has changed, the issue is not cosmetic; it is a signal that the enrollment record and the real practice may no longer match. Escalate those discrepancies to the enrollment specialist before the visit instead of coaching front-desk staff to explain around them. A consistent record is more defensible than an improvised explanation.
Give the front desk a short instruction on what to do if an enrollment site visitor arrives. The person receiving the visitor should know who internally owns the Medicare enrollment file and how to contact them. Do not require front-desk staff to interpret regulations on the spot. Their role is to support access to the business location and connect the visit to the employee who can verify the enrollment information.
Run a focused pre-visit audit
The pre-visit audit should be short enough that a practice can actually repeat it. Confirm that the business can be found at the enrolled address, that the public-facing identity is not obviously inconsistent with the application, that ordinary operating hours are understood by staff, and that the office is functioning as the practice represented in the enrollment. These checks come directly from the core site-visit concerns without pretending that every MAC visit follows a scripted inspection sequence.
Keep notes on any mismatch and how it was resolved. If the practice recently moved, changed its name display, or altered its schedule, do not wait for a visitor to reveal that the enrollment file was not updated. Site-visit preparation is therefore also a useful data-quality check. Even when the visit itself is straightforward, the exercise can uncover stale enrollment information that would create problems in other payer or billing workflows.
After the visit, document that it occurred and route any follow-up request to the enrollment owner. Avoid a vague status such as 'site visit done' if the practice is still waiting for a result or additional action. The visit is one screening component within Moderate risk; it is not automatically the same thing as final enrollment approval. Keeping those statuses separate prevents scheduling or billing teams from acting too early.
Operational checklist
- Confirm the address on the enrollment record
- Confirm posted or communicated operating hours match actual operations
- Make the practice location reasonably identifiable
- Ensure staff know the location is part of a Medicare enrollment
- Recheck recent moves or schedule changes while the application is pending
Frequently asked questions
What screening level includes a Medicare site visit?
Moderate risk includes a site visit in addition to the Limited-risk checks.
What should a practice check before a site visit?
Confirm that the address, operating hours, location identification, and normal staffing are consistent with the enrollment record.
Does the rule provide a universal CMS site-visit inspection script?
No. No single inspection script applies to every provider type; preparation should focus on keeping the real location consistent with the enrollment record.
Why should recent moves be reviewed carefully?
A move can create a mismatch between the location a visitor sees and the address or operating details in the enrollment record.