What Is a PTAN? Medicare's Provider Transaction Access Number, From CMS Sources

CMS's MLN course glossary, live on cms.gov and verified 11 August 2026, defines the term: "A PTAN is a Medicare-only number issued to health care professionals or suppliers by Medicare Administrative Contractors (MACs) upon enrollment in Medicare. When a MAC approves enrollment and issues an approval letter, the letter will include the PTAN assigned to the health care professional or supplier." (CMS MLN glossary)

Every load-bearing fact about the PTAN is inside that definition. It is Medicare-only — no commercial payer, Medicaid program, or clearinghouse issues or requires it, though plenty of clearinghouse forms ask for it when configuring Medicare connections. It is issued by the MAC, not by CMS centrally and not by NPPES — which is why there is no national PTAN registry the way the NPI Registry exists for NPIs. And it is delivered in the enrollment approval letter, which is why that letter is the single most important document to scan and file the day it arrives.

Sense check on the word enrollment once more, because the SERPs blur it: a PTAN exists only on the provider side. An organization enrolls in Medicare through PECOS using CMS-855B; a practitioner enrolls in Medicare using CMS-855I; the MAC processes the application and issues the PTAN when it approves. Beneficiary enrollment — a person signing up for Medicare coverage — produces a Medicare card and an MBI, never a PTAN.

What CMS does not publish anywhere we could find as of 11 August 2026: a PTAN format specification. Billing blogs confidently state digit counts; the MLN glossary and the enrollment pages we fetched state none, and MAC numbering conventions are the MACs' own. Treat any digit-count claim as folklore, and validate a PTAN against your approval letter rather than against a pattern. If you are enrolling a new group or practitioner and want the whole NPPES-to-PTAN sequence handled — including the follow-up that actually surfaces the number — our Medicare provider enrollment service runs it end to end without ever asking for your PECOS password.

Three identifiers get called "the Medicare number" in real offices, and confusing them produces real rejections. Every row of this table traces to a CMS page we fetched on 11 August 2026.

The NPI, per the same CMS MLN glossary: "The NPI is the health care identifier used in HIPAA standard transactions to identify health care professionals or suppliers. It's a 10-digit, intelligence-free numeric identifier." NPPES assigns the NPI — CMS states it "has developed the National Plan and Provider Enumeration System (NPPES) to assign these unique identifiers" (NPPES FAQ). The NPI is public and searchable; the PTAN is neither.

The MBI is the patient-side number. CMS's New Medicare Card page states: "We removed Social Security Number (SSN)-based Health Insurance Claim Numbers (HICNs) from Medicare cards and are now using Medicare Beneficiary Identifiers (MBIs) for Medicare transactions like billing, eligibility status, and claim status," and "Every person with Medicare has been assigned an MBI" (CMS, Medicare Beneficiary Identifiers). When a patient or a front-desk form says "Medicare number," it means the MBI on the card — not your PTAN.

How the provider-side pair works together, again in CMS's words: "Together, the NPI and PTAN identify the health care professional or supplier in the Medicare Program. CMS maintains both the NPI and PTAN in PECOS, the master health care professional and supplier enrollment system." On claims you bill with the NPI; the MAC uses the PTAN behind the scenes to tie the claim to a specific enrollment record, and asks for it when you authenticate to its portals and phone lines.

There is no PTAN application. The PTAN is a byproduct of Medicare provider enrollment: the MAC processes the application and issues the PTAN in the approval letter. So the real question is which enrollment application you file, and the answer splits by who is enrolling.

• A group, clinic, or other organizational supplier — an organization enrolls in Medicare through PECOS using CMS-855B. The form itself states: "Clinics, group practices, and other suppliers must complete this application to enroll in the Medicare program and receive a Medicare billing number" (CMS-855B). Our CMS-855B guide walks the form section by section.
• A physician or non-physician practitioner — a practitioner enrolls in Medicare using CMS-855I: "All physicians, as well as all eligible professionals as defined in section 1848(k)(3)(B) of the Social Security Act must complete this application to enroll in the Medicare program and receive a Medicare billing number" (CMS-855I). The CMS-855I guide covers it, including how a practitioner reassigns benefits to the group inside the same form.

Before either application, the NPI must exist, because NPPES assigns the NPI and CMS is blunt about the sequencing: "If you apply for enrollment in Medicare, you must have an NPI and furnish it on your enrolment application. An enrolment application without an NPI will be rejected" (MLN NPI booklet, ICN 902603). Getting the NPI is Step 1 of CMS's own four-step enrollment guide; the PECOS application is Step 2.

How long until the approval letter with the PTAN arrives? The MACs publish figures, and they publish goals, not guarantees. National Government Services states (page reviewed 2 September 2025): "All MACs, including National Governments Services, have a goal to finalize an Internet-based PECOS application within 15 days and a CMS-855 paper application within 30 days, if all required information is available." Novitas publishes CMS-defined timeframes with percentiles: internet-based PECOS initial enrollments that need no site visit, development, or fingerprinting, 95% completed within 15 calendar days of receipt and 100% within 50; paper applications that do need a site visit, development, or fingerprinting, 95% within 65 calendar days and 100% within 100. Both MACs condition everything on a complete application, and development requests stop the clock — which is why the highest-leverage work happens before submission. CMS itself notes on the enrollment side that "PECOS applications tend to process faster than paper applications" (CMS PECOS enrollment page). Our provider enrollment checklist exists to make the package complete the first time.

The relationship that confuses people is one-to-many, and CMS states it plainly: "A health care professional or supplier must have 1 NPI and 1 or more PTANs related to it in the Medicare system. If a health care professional or supplier has relationships with 1 or more medical groups, or with multiple MACs, they usually have separate PTANs assigned" (CMS MLN glossary).

Concretely, the scenarios that generate additional PTANs look like this:

The reassignment rows matter most for growing groups. When a practitioner reassigns benefits to the group — reported through the CMS-855I or PECOS since CMS discontinued the separate reassignment form — the practitioner and the organization each remain distinct enrollments, which is exactly why both must be enrolled before the reassignment takes effect. The mechanics, including what replaced the CMS-855R, are covered in our Medicare reassignment guide.

What about practice locations? Here we have to be more careful than the average vendor page. CMS's fetched glossary language hangs separate PTANs on medical-group relationships and on multiple MACs — it does not state a per-practice-location PTAN rule, and we found no CMS page that does as of 11 August 2026. MAC-level numbering practices vary by jurisdiction and enrollment type. So the honest operational rule is: read each approval letter, record every PTAN it assigns alongside the enrollment and practice location it belongs to, and never assume a number carries over from one enrollment relationship to another. A billing setup that maps claims to the wrong PTAN-enrollment pairing is a quiet way to generate rejections months later.

There is no public PTAN lookup — no PTAN equivalent of the NPI Registry. In practice, the PTAN functions as an authenticator — the number that proves the caller on a MAC's line is entitled to discuss an enrollment. Recovery therefore runs through three doors, in this order of convenience.

1. The enrollment approval letter. CMS's definition says the letter "will include the PTAN assigned." For any enrollment your practice completed, the PTAN exists on paper (or PDF) somewhere in your records. Groups that have been through several enrollments should keep a one-page register of every approval letter: enrollment, MAC, effective date, PTAN.

2. The PECOS enrollment record. CMS states it "maintains both the NPI and PTAN in PECOS, the master health care professional and supplier enrollment system." Whoever holds legitimate PECOS access for the enrollment — the Authorized Official (AO), staff the AO has set up, or a surrogate — can review the enrollment record there. Access runs through the Identity & Access (I&A) Management System: the PECOS login instructs, "Please use your I&A (Identity & Access Management System) user ID and password to log in." One warning while you are in recovery mode: do not solve a lost-PTAN problem by passing around a login. CMS's I&A terms state, "Sharing of login information is strictly prohibited!" — the compliant route for a billing company or consultant is a surrogate connection, where the surrogate works on the provider's behalf through the Identity & Access (I&A) Management System under its own credentials. Our PECOS enrollment guide covers account and access setup.

3. Your MAC. MACs issue PTANs, and MAC provider-enrollment help lines and self-service tools handle PTAN questions for enrollments in their jurisdiction. We deliberately do not print per-MAC menus or portal click-paths here: they are jurisdiction-specific and change without notice, and a guide that hardcodes them goes stale silently. Identify your MAC first — CMS's MAC pages list jurisdictions; for example, CMS's Jurisdiction K page names National Government Services, Inc. as the contractor processing Part A and Part B claims for New York and the rest of JK — then use that MAC's published provider-enrollment contact channels. Expect an authentication conversation: the MAC will verify you against the enrollment record before disclosing anything, which is precisely the behavior you want from the entity holding your billing identity.

The gap between seeing patients and holding a PTAN is where new practices lose money, so it is worth stating what the regulation actually allows. You cannot submit Medicare claims until the MAC approves the enrollment — the PTAN arrives with the approval, not before. But approval does not mean the covered period starts on approval day.

Federal regulation at 42 CFR 424.521 permits retrospective billing for specified provider types — the list begins "(i) Physicians. (ii) Non-physician practitioners. (iii) Physician organizations. (iv) Non-physician practitioner organizations" — when program requirements were met and services were provided at the enrolled practice location, for up to "Thirty days prior to their effective date if circumstances precluded enrollment in advance of providing services to Medicare beneficiaries," or ninety days prior when a Presidentially-declared disaster under the Stafford Act precluded enrolling in advance.

Operationally, that means three things for a launching group or an onboarding physician:

• Track the effective date the MAC assigns, not just the approval date. The effective date defines the window; the 30-day retrospective allowance runs backward from it, and only under the regulation's conditions.
• Hold claims, do not discard encounters. Services furnished in the eligible window can be billed once the PTAN exists. A practice that writes off pre-approval encounters may be donating revenue the regulation lets it keep.
• The window is narrow and conditional. Thirty days is the general ceiling for physicians, non-physician practitioners, and their organizations — scheduling a provider months before submitting the enrollment creates a gap no retro rule closes. Sequencing the NPPES, I&A, PECOS, and CMS-588 steps so the application is complete before the start date is the actual fix, and it is the core of what our enrollment service does; CMS-588 authorizes electronic funds transfer, so payment can flow as soon as claims do.

Date-stamp caveat, in the spirit of every number on this page: the 30/90-day text quoted above is the eCFR's current text as of 11 August 2026. Regulations move — 424.521 has been amended repeatedly — so re-verify before building policy on it.

A PTAN is not permanent. The deactivation regulation, 42 CFR 424.540, which we fetched in full on 11 August 2026, gives CMS a list of reasons to deactivate Medicare billing privileges. The ones that catch ordinary practices:

• Six months of silence. "The provider or supplier does not submit any Medicare claims for 6 consecutive calendar months." The regulation even defines the clock: it begins the first day of the first month without a claims submission. Low-Medicare-volume providers — common in behavioral health and in newly launched telehealth groups — trip this without noticing.
• Ignoring a records request. Deactivation may follow if the provider "does not furnish complete and accurate information and all supporting documentation within 90 calendar days of receipt of notification from CMS to submit an enrollment application and supporting documentation."
• Unreported changes. Not reporting "a change to the information supplied on the enrollment application within the applicable time period" is itself a deactivation reason — and under 424.540(d), deactivations for non-compliance can be backdated to the date the non-compliance began.
• A practice location that stops being real. A location that is "non-operational or otherwise invalid" is a listed reason — relevant to virtual-first groups that gave up an office lease after enrolling.

The consequence is unambiguous: "A provider or supplier may not receive payment for services or items furnished while deactivated under this section." Reactivation requires recertifying the enrollment information — and "CMS may, for any reason, require a deactivated provider or supplier to, as a prerequisite for reactivating its billing privileges, submit a complete Form CMS-855 application." The reactivation effective date is the date the contractor received the reactivation submission it processed to approval, so every deactivated day is an unpaid day. One small mercy in the text: deactivation "does not have any effect on a provider's or supplier's participation agreement or any conditions of participation."

The other standing obligation is revalidation. A provider revalidates enrollment on CMS's cycle — "In general, providers and suppliers revalidate every five years but DMEPOS suppliers revalidate every three years," with off-cycle revalidations reserved to CMS — and "Failing to revalidate on time could result in a hold on your Medicare reimbursement or deactivation of your Medicare billing privileges" (CMS revalidation page). Due dates are posted seven months in advance on the Medicare Revalidation List, and there are no exemptions and no extensions. The full operational playbook — finding the date, the PECOS steps, what to do if you miss it — is in our Medicare revalidation guide. Keeping the PTAN you worked for is cheaper than reactivating the one you lost.