Medicare Revalidation Checklist: Audit the Record Before You Click Submit
A Medicare revalidation audit that checks identity, ownership, locations, licenses, EFT, adverse actions, reassignments, signatures, and current source documents before submission.
The revalidation checklist should be an audit, not a memory test. By the time Medicare asks a provider or supplier to revalidate, years may have passed since the original enrollment. Locations opened and closed, clinicians joined and left, bank accounts changed, owners changed, licenses renewed, and old authorized officials moved on. Start with the current PECOS record and compare it field by field with authoritative source documents and current operations. Then resolve discrepancies before the application reaches the signer. The value of the checklist is not the number of boxes; it is the joins between facts—legal name to TIN, NPI to provider, owner to percentage, location to service reality, practitioner to group, and document to the period in which it is valid.
Audit legal identity, NPI, TIN, and provider type as one connected record
Revalidation requires providers to review and recertify the accuracy of their Medicare enrollment information.
PECOS lets the provider review information on file, upload supporting documents, electronically sign, and submit.
CMS does not grant routine revalidation exemptions or extensions.
Begin with the enrollment identity sheet. Confirm legal name, TIN, NPI, provider/supplier type, PECOS enrollment, PTAN where applicable, and MAC/jurisdiction. For organizations, compare the Type 2 NPI and legal business name with tax and formation records. For practitioners, compare the Type 1 NPI with current NPPES and license information. If a name or TIN changed, determine whether that was a simple update or an event that changes the enrollment structure. Do not solve an identity mismatch by typing whichever version already appears in PECOS; resolve the authoritative record first.
Reconcile ownership and managing-control information with current legal documents
Known changes should be reported according to their change-reporting requirements rather than saved for revalidation.
The revalidation file should be reconciled against current legal, ownership, location, licensing, and payment facts.
The best revalidation packet starts with a “what changed since last time?” interview, not with the PECOS login screen.
Build or refresh an ownership and managing-control chart. Record each owner, percentage or interest as required, managing employee/official roles, effective dates, and the legal document that supports the information. Compare the chart with the current PECOS record. If the practice had an ownership change, identify when it occurred and whether it was reported on the applicable timeline. Revalidation is not a safe place to conceal an old late change by making the current form look right. Escalate questionable history and document the corrective action. The reviewer should be able to reproduce the ownership answer without relying on an executive’s recollection.
Walk every practice location and mailing address against actual operations
List every current service location, telehealth location where enrollment rules require it, mailing address, correspondence address, and other provider-type-specific site. Match each location to the date it opened, current operations, and supporting evidence. Flag addresses that appear in PECOS but no longer exist and current sites missing from the record. CMS generally requires practice-location changes to be reported within 30 days, so a location discrepancy may represent a separate maintenance failure. For multi-state practices, confirm the correct MAC/jurisdiction and individual practitioner enrollment relationships rather than treating the organization as one national record.
Review licenses, banking, disclosures, and time-sensitive evidence
Treating revalidation as a duplicate of the last submission. Do not bury this under a generic “pending” label. Name the blocker, the owner, and the next action.
Recertifying stale ownership or managing-control information. A copied prior application is especially risky here because an old file can be internally consistent and still be wrong for the current facts.
Discovering expired or missing documents after the application is open. The safe response is to stop the handoff until the source evidence and submitted answer tell the same story.
Fixing one system while leaving NPPES, CAQH, or commercial payer data inconsistent. If one field changed, review the related identifiers, addresses, dates, and relationships instead of patching only the item mentioned in a portal message.
Review licenses and certifications, adverse legal actions/disclosures, banking/EFT, authorized/delegated officials, contact information, and all documents the current application requires. Check expiration dates and document legibility. Banking deserves special attention after ownership or account changes because payment records can lag operational changes. For disclosures, answer the current wording and involve compliance/legal resources if interpretation is needed; do not copy a prior “no” simply because it was accepted five years ago. Record the source and review date for each high-risk answer.
For groups, compare practitioner reassignments with the real clinical roster
Current pecos export: Store it with the transaction rather than in a personal downloads folder or one coordinator’s inbox.
Legal/ownership file: Tie the document to the specific field or decision it supports.
Location and license inventory: Record where it came from and when someone verified it.
Reassignment roster: Preserve the prior version when an effective-date sequence could matter in a later review.
Eft/bank confirmation: Keep the current version and enough history to show when it changed.
For a clinic or group, add a roster audit. Compare clinicians who currently bill through the organization with PECOS reassignment relationships. Identify expected-but-missing, present-but-ended, and date-mismatch cases. Use the current PECOS or CMS-855I reassignment workflow; do not rely on retired standalone 855R instructions. A group revalidation can be approved while individual relationships remain wrong, so keep practitioner enrollment, group enrollment, and reassignment in separate columns. Billing should receive an updated Medicare roster after the review.
Run a signer-ready final review and archive the exact revalidation submission
Before signature, have a second reviewer compare the application with the source packet when staffing allows. Check signatures/authorized official, attachments, transaction reason, and any answer changed during preparation. Save the exact signed or electronically submitted version, confirmation, submission date, and tracking reference. Set a follow-up date and monitor development requests. When the MAC finishes, save the disposition and update the maintenance calendar from current CMS information. The revalidation file should tell the full story from source audit to final contractor outcome.
Operational checklist
- Export the current PECOS record and compare it with source documents.
- Audit names, TIN, ownership/control, locations, licenses, contact information, and EFT details.
- Confirm practitioner reassignments still match actual employment.
- Resolve known discrepancies before final certification.
- Submit in the CMS revalidation window and monitor development.
- Archive the approved record as the new baseline for future maintenance.
Frequently asked questions
What is the most important revalidation check?
There is no single field. The highest-value control is reconciling linked facts—legal name/TIN/NPI, ownership, locations, practitioner relationships, and current supporting documents—against the live operation before submission.
Should a group review reassignments during revalidation?
Yes. Compare the clinicians expected to bill through the group with current Medicare relationships and fix missing or stale reassignments using the current PECOS/CMS-855I process.
Should the exact submitted revalidation be saved?
Yes. Preserve the signed payload, attachments, confirmation, development responses, and final disposition. That snapshot is essential if the MAC later questions a field or billing needs historical enrollment evidence.
Sources reviewed
Five-year / three-year revalidation cycle, due-date lookup, notices, and consequences of missed revalidation.
Current Medicare enrollment, PECOS, revalidation, DMEPOS, and program announcements.
Current CMS enrollment sequence, PECOS use, MAC coordination, and change-reporting timeframes.